《每日强化挑战》隐私政策

更新日期：2026 年 11 月 8 日（第三次更新：TapTap 版广告改用 TapADN）

本政策适用于游戏《每日强化挑战》（英文名 Forge Simulator: Epic Gear，以下称“本游戏”）的以下渠道：微信小游戏、TapTap 安卓版、Google Play 安卓版（这两个安卓版的包名均为 com.xueyue.qianghua），以及在 itch.io 发布的安卓版（包名 com.xueyue.qianghua.itch）与浏览器版（HTML5；同一浏览器版也可在 https://yue-witness.github.io/forge/play/ 游玩，以下统称“浏览器版”）。本游戏由独立游戏工作室“血月的工作室”（Blood Moon Studio，以下称“我们”）开发运营。本政策说明本游戏处理哪些信息、为什么处理、保存在哪里，以及接入的第三方 SDK 与平台能力。

Google Play 版、TapTap 版、itch.io 安卓版与浏览器版包含激励视频广告，只在你主动点击“观看视频”领取额外的每日材料时播放；微信小游戏没有广告。本游戏没有付费功能。除 itch.io 版需要你自取一个用户名外，本游戏不要求你填写姓名、手机号或邮箱；除 TapTap 版在排行榜显示你的 TapTap 昵称外，也不获取你的平台昵称，并且不获取头像、精确位置、通讯录或好友关系。

一、同意在先

首次点击“开始”时，本游戏会先弹出隐私政策同意框。在你点击“同意”之前，本游戏不会登录，不会初始化任何第三方 SDK（TapTap 版不初始化 TapSDK 的任何组件，包括其数据分析模块与 ThemisLite；Google Play 版不初始化 Play 游戏服务，也不会自动登录；Google Play 版与 itch.io 安卓版不初始化任何广告 SDK，包括 Google 移动广告 SDK、UMP 与 Unity Ads；TapTap 版不初始化 TapADN 广告 SDK），不会调用微信登录，也不会向我们的服务器发送任何账号或游戏数据。不同意则无法开始游戏。

浏览器版同样遵循以上顺序：Google 广告脚本（见第五部分第 6 项）在你同意本政策后才会加载，广告只在你点击“观看视频”时播放。

二、登录与我们服务器保存的信息

本游戏的强化结果、排行榜与每日资源由我们的服务器计算和保存。登录方式按渠道不同：

• 微信小游戏：调用微信 wx.login 取得一次性登录凭证，服务器向微信换取你在本游戏下的 openid。微信同时返回的会话密钥等信息不保存。
• TapTap 版：通过 TapTap 登录 SDK 授权，服务器用授权令牌向 TapTap 查询你在本游戏下的 openid 与 TapTap 昵称。昵称作为你的显示名保存，每次登录时同步（在 TapTap 改名后，下次登录排行榜随之更新）；TapTap 同时返回的头像与 unionid 不保存。
• Google Play 版：通过 Play 游戏服务取得一次性服务器授权码，服务器向 Google 换取你的 Play 游戏玩家 ID（playerId）。Google 同时返回的游戏昵称、头像等不保存，访问令牌只在本次登录中使用，不保存。
• itch.io 版（安卓版与浏览器版）：没有平台账号。首次启动时，游戏随机生成一个设备标识保存在本机（安卓版在应用私有存储中，浏览器版在浏览器本地存储中），并请你输入一个 2～16 个字符的用户名（可使用文字、数字、空格及 _ - .），该用户名会显示在排行榜上。之后游戏以该标识登录。该标识由游戏随机生成，不是设备的硬件标识或广告标识。卸载本游戏、清除应用数据或浏览器存储后会生成新的标识并成为新账号，原账号无法找回。
• 测试期间，若某个渠道的登录尚未开通，本游戏可能改用测试登录：在本机随机生成一个测试标识并以它登录。该标识由游戏随机生成，不是设备的硬件标识。正式上线前会关闭测试登录。

我们的服务器保存以下信息：

• 账号：上述平台账号标识（openid、playerId 或 itch.io 版的随机设备标识，测试期为随机测试标识）、系统分配的内部玩家编号、显示名（系统随机生成的匿名显示名，如“某名字#1234”；TapTap 版为你的 TapTap 昵称；itch.io 版为你填写的用户名）、首次登录渠道（微信 / TapTap / Google Play / itch.io / 测试）与创建时间。
• 游戏记录：每日资源的领取记录（来源与数量）、资源余额与消耗流水；每次强化的部位、等级变化、成败结果、消耗、服务器生成的随机数与时间；各部位当前等级与分数、每日最终分数与名次、历史最佳成绩。
• 请求记录：每次领取与强化请求的编号和服务器响应，用于防止网络重试导致重复领取或重复强化。
• 服务器日志：访问日志可能包含你的 IP 地址、请求时间、请求地址与客户端标识（User-Agent）；应用日志可能包含内部玩家编号与强化结果。日志只用于排查故障与防止滥用。服务器还会在内存中短暂使用 IP 地址限制请求频率。

三、排行榜与分享

排行榜向其他玩家公开显示你的显示名（匿名显示名；TapTap 版为你的 TapTap 昵称；itch.io 版为你填写的用户名）、名次、分数与渠道（微信 / TapTap / Google Play / itch.io）。排行榜分为两个独立的服：微信小游戏与 TapTap 版共用中国大陆服，Google Play 版与 itch.io 版使用海外服。

游戏提供“分享今日成绩”等分享功能：安卓版调用系统分享面板，微信小游戏调用微信分享面板。分享内容由游戏生成，分享给谁由你在系统或微信中选择，本游戏不获取分享对象，也不读取你的通讯录或好友关系。

四、保存在你设备上的信息

本游戏在本机存储中保存：设置（总音量、音乐与音效开关及音量、快速模式、语言）、隐私政策同意状态、已查看过的每日结算与当日结束提示、掉级提示“本日内不再提示”的勾选日期、itch.io 版的随机设备标识，以及测试期可能生成的随机测试标识。登录后取得的游戏令牌只保存在运行内存中。TapTap SDK 与 Play 游戏服务会按各自机制在本机保存其登录状态；广告 SDK 与 UMP 会按各自机制在本机保存你的广告同意选择等信息；浏览器版中，Google 及其合作伙伴可能在你的浏览器中设置或读取 Cookie 用于投放广告（见第五部分第 6 项）。安卓版关闭了系统备份，这些数据不会随系统备份上传。

你可以在系统设置中清除本游戏的存储或卸载本游戏（微信小游戏可在微信中删除本小游戏，itch.io 浏览器版可清除浏览器中该网站的数据）来删除这些数据。

安卓版声明以下三项普通权限，安装时自动授予、不会弹窗申请：网络访问（INTERNET）、读取网络连接状态（ACCESS_NETWORK_STATE，用于判断是否联网）、震动（VIBRATE，用于按键与强化反馈）。Google Play 版与 itch.io 安卓版另含广告 SDK 及其依赖库声明的普通权限，同样安装时自动授予、不会弹窗：广告标识（com.google.android.gms.permission.AD_ID）、Android 广告服务（ACCESS_ADSERVICES_AD_ID、ACCESS_ADSERVICES_ATTRIBUTION、ACCESS_ADSERVICES_TOPICS）、WAKE_LOCK 与 FOREGROUND_SERVICE。本游戏不申请定位、通讯录、相机、麦克风、电话、照片或文件等权限。

五、接入的第三方 SDK 与平台能力

以下 SDK 与平台能力由各提供方按其自身隐私政策处理信息。SDK 自行采集的设备与网络信息直接发送给提供方，我们收不到。

1. TapSDK（TapTap 登录）

• SDK 名称与版本：TapSDK 4.11.0，模块 com.taptap.sdk:tap-core 与 com.taptap.sdk:tap-login；随核心库附带其依赖模块 tap-common、tap-db（数据分析）、tap-db-api、tap-login-api、tap-compliance-api（均为 4.11.0）与 tap-themislite 1.0.7.8。
• 提供方：易玩（上海）网络科技有限公司
• 适用渠道：TapTap 版
• 使用目的：TapTap 账号登录。据 TapSDK 合规说明，SDK 采集设备信息是为了确保设备系统兼容、定位解决问题；其数据分析模块用于数据分析。本游戏未配置任何自定义数据分析事件。
• 收集的个人信息：
  • 登录授权：TapTap 账号标识（openid、unionid），以及你授权的“公开资料”中的昵称与头像（我们的服务器保存 openid 与昵称，昵称用作排行榜显示名；头像与 unionid 不保存）；
  • 设备信息：系统版本、设备型号、设备 CPU 信息、设备内存信息、Android ID；
  • 网络信息：网络类型；
  • 数据分析模块列出的信息：WiFi 信息、设备版本、手机样式、传感器列表；
  • 检查设备上是否安装了 TapTap 客户端，以便跳转授权。
  具体以 TapSDK 隐私政策为准。
• 收集方式：SDK 自行采集。TapSDK 的全部组件只在你点击“同意”本政策之后才初始化，之前不运行、不采集。
• 隐私政策：TapSDK 隐私政策；TapTap 隐私政策 https://www.taptap.cn/doc/privacy-policy/

2. Google Play 游戏服务

• SDK 名称与版本：Play 游戏服务 v2，com.google.android.gms:play-services-games-v2 22.1.0（随附 Google Play 服务基础库 play-services-base、play-services-basement、play-services-tasks）。
• 提供方：Google LLC
• 适用渠道：Google Play 版
• 使用目的：用 Play 游戏账号登录，识别你在本游戏中的账号。本游戏不使用 Play 游戏服务的成就、排行榜或云存档功能。
• 收集的个人信息：Play 游戏玩家 ID（playerId）与玩家身份（游戏昵称、头像）——我们的服务器只保存 playerId；据 Google 说明，SDK 还会为改善稳定性与产品采集分析与诊断信息。具体以 Google 隐私政策为准。
• 收集方式：SDK 自行采集。Play 游戏服务只在你点击“同意”本政策之后才初始化；初始化后 Google 按其机制用你设备上的 Play 游戏资料自动登录（没有 Play 游戏资料时 Google 会提示创建，你可以拒绝）。
• 隐私政策：https://policies.google.com/privacy；你可以在 Google Play 游戏应用或 myaccount.google.com 管理或删除 Play 游戏资料。

3. 微信小游戏平台能力

• 名称：微信小游戏运行环境提供的平台能力（不是另行接入的 SDK）
• 提供方：深圳市腾讯计算机系统有限公司
• 适用渠道：微信小游戏
• 使用的能力与目的：wx.login（登录，取得 openid）；本地存储（保存设置等）；网络请求（连接游戏服务器、加载游戏图片与音频）；分享面板（分享游戏）；震动（操作反馈）；读取窗口尺寸、安全区与系统语言（只在本机用于排版和选择语言，不上传）；设置剪贴板（仅在无法打开隐私指引时写入本政策网址，不读取剪贴板）。本游戏不调用获取微信昵称、头像、手机号、位置或好友关系的接口。
• 收集的个人信息：我们只从微信取得你在本游戏下的 openid。微信客户端自身处理的信息以微信隐私政策为准。
• 收集方式：由微信客户端提供，登录凭证经我们的服务器向微信核验。
• 隐私政策：微信隐私保护指引

4. Google 移动广告 SDK（AdMob）与 User Messaging Platform（UMP）

• SDK 名称与版本：Google 移动广告 SDK com.google.android.gms:play-services-ads 25.5.0；Google User Messaging Platform com.google.android.ump:user-messaging-platform 4.0.0；AdMob 中介的 Unity Ads 适配器 com.google.ads.mediation:unity 4.20.1.0。
• 提供方：Google LLC
• 适用渠道：Google Play 版、itch.io 安卓版
• 使用目的：在你点击“观看视频”时加载并播放激励视频广告，看完后发放额外的每日材料；通过 AdMob 中介向 Unity Ads 请求广告；UMP 用于在需要的地区展示 Google 的同意消息并保存你的广告同意选择。据 Google 说明，相关信息用于广告投放、效果衡量、频次控制、防止欺诈，以及在你同意时投放个性化广告。
• 收集的个人信息：据 Google 说明，可能包括设备广告标识（Android 广告 ID）、IP 地址及据此推断的大致位置、设备与应用信息、广告互动数据、诊断与性能数据。具体以 Google 说明为准。
• 收集方式：SDK 自行采集。UMP 与 Google 移动广告 SDK 只在你点击“同意”本政策之后才初始化，之前不运行、不采集。
• 隐私政策：Google 如何使用来自使用其服务的网站或应用的信息 https://policies.google.com/technologies/partner-sites；Google 隐私政策

5. Unity Ads

• SDK 名称与版本：Unity Ads SDK com.unity3d.ads:unity-ads 4.20.1
• 提供方：Unity Technologies
• 适用渠道：Google Play 版、itch.io 安卓版
• 使用目的：作为激励视频广告的来源，既经 AdMob 中介提供广告，也由本游戏直接请求广告。据 Unity 说明，相关信息用于广告投放、效果衡量、频次控制、防止欺诈，以及在你同意时投放个性化广告。
• 收集的个人信息：据 Unity 说明，可能包括设备广告标识（Android 广告 ID）、IP 地址及据此推断的大致位置、设备与应用信息、广告互动数据、诊断与性能数据。具体以 Unity 隐私政策为准。
• 收集方式：SDK 自行采集。Unity Ads 只在你点击“同意”本政策之后才初始化；本游戏会把你在 Google 同意消息中的选择（包括美国相关州的“不出售或共享”选择）传给 Unity Ads。
• 隐私政策：Unity 游戏玩家与应用用户隐私政策 https://unity.com/legal/game-player-and-app-user-privacy-policy

6. Google H5 游戏广告（Google AdSense）

• 名称：Google AdSense 的 H5 游戏广告（Ad Placement API），脚本 adsbygoogle.js 由 Google 服务器提供，不随游戏打包；发布商 ID ca-pub-6465473285974998。
• 提供方：Google LLC
• 适用渠道：浏览器版（itch.io 与 https://yue-witness.github.io/forge/play/）
• 使用目的：在你点击“观看视频”时播放激励视频广告，看完后发放额外的每日材料。
• Cookie 与个性化广告：第三方供应商（包括 Google）会使用 Cookie，根据用户以往对本网站或其他网站的访问情况投放广告。Google 使用广告 Cookie，使其及其合作伙伴能够根据用户对本网站和/或互联网上其他网站的访问情况投放广告。你可以在 Google 广告设置 https://adssettings.google.com 中停用个性化广告，也可以访问 https://www.aboutads.info 停用第三方供应商使用 Cookie 投放的个性化广告。
• 收集方式：由 Google 的脚本在你的浏览器中自行采集并直接发送给 Google，我们收不到。在欧洲经济区、英国和瑞士，Google 会先展示其同意消息（经 Google 认证的同意管理平台），再投放个性化广告。
• 隐私政策：Google 如何使用来自使用其服务的网站或应用的信息 https://policies.google.com/technologies/partner-sites；Google 隐私政策

7. TapADN 广告 SDK（TapTap 版）

• SDK 名称与版本：TapADN（Dirichlet）Android 广告 SDK 5.3.2.0（包名 com.tapsdk.tapad，依赖开源网络库 OkHttp 3.10.0）。
• 提供方：上海艾得蒽数字科技有限公司及其关联方（TapTap 广告联盟）。
• 适用渠道：TapTap 版
• 使用目的：在你点击“观看视频”时加载并播放激励视频广告，看完后发放额外的每日材料；暂时没有可播放的广告时，本游戏会提示并直接发放该次材料。据提供方说明，相关信息用于广告投放、监测归因、统计分析、反作弊与保障 SDK 稳定运行。
• 收集的个人信息：设备基础信息（品牌、型号、系统版本、屏幕分辨率、语言、时区）、网络类型、IP 地址、应用包名与版本号、设备 DRM 标识（用于反作弊与去重）、广告展示与点击等交互信息；具体以 TapADN 隐私政策为准。本游戏已通过 SDK 的隐私配置关闭全部可选采集项：不读取位置、电话状态与设备序列号、Wi-Fi 信息（含 BSSID / SSID）、MAC 地址、传感器、外部存储、已安装应用列表、Android ID 与 OAID，并关闭摇一摇互动；TapTap 版在安装清单中移除了 SDK 申请的安装应用、查询全部应用与 OAID 相关权限，只保留网络、网络状态与振动权限。
• 收集方式：SDK 自行采集并直接发送给提供方，我们收不到。TapADN SDK 只在你点击“同意”本政策之后才初始化。
• 隐私政策：TapADN SDK 隐私政策 https://ssp.dirichlet.cn/docs/agreement/；TapADN 合规说明

此外，安卓版包含 AndroidX WebKit 支持库 1.14.0（androidx.webkit:webkit，Google 提供的开源组件），只用于在应用内显示游戏页面，不收集个人信息。

六、未成年人

我们不会主动收集未成年人的个人信息。未满 14 周岁的未成年人应在监护人阅读并同意本政策后使用本游戏。

七、共享、存储地点与保存期限

我们不出售我们服务器上保存的你的信息，也不将其用于广告。除上文所述向微信、TapTap、Google 核验登录，以及排行榜向其他玩家公开显示显示名与成绩外，我们不向第三方提供你的信息。Google Play 版与 itch.io 安卓版中的广告 SDK 按第五部分所述直接收集信息并发送给 Google 与 Unity，TapTap 版中的 TapADN 广告 SDK 直接收集信息并发送给其提供方，浏览器版中的 Google 广告脚本直接收集信息并发送给 Google，我们收不到这些信息。

服务器存储地点：微信小游戏与 TapTap 版的数据保存在腾讯云（中国上海）的服务器；Google Play 版与 itch.io 版的数据保存在 Google Cloud（中国台湾，asia-east1）的服务器（海外服）。两服数据库互不相通，数据库与缓存只在服务器内部网络运行，不对外开放。

保存期限：账号与游戏记录在本游戏运营期间保存，用于排行榜、历史最佳与防止重复领取，你可以随时要求删除；服务器日志按容量循环覆盖，不长期保存；数据库每日备份，备份保留 7 天。设备上的数据保存至你删除为止。

八、你的选择与权利

你可以拒绝本政策（此时无法开始游戏），可以在系统设置中清除本游戏数据或卸载本游戏。你可以通过下方邮箱要求查阅、更正或删除我们服务器上与你账号相关的信息，请在邮件中注明渠道与游戏内显示的名称（匿名名；TapTap 版为 TapTap 昵称；itch.io 版为用户名），我们会在核实后尽快处理，一般不超过 15 个工作日。删除后，你的排行榜记录与历史最佳将一并清除；已删除的数据最长在 7 天内随备份轮换清除。对第三方 SDK 与平台处理的信息，可依据其隐私政策向提供方行使权利。

广告选择（Google Play 版与 itch.io 安卓版）：广告只在你点击“观看视频”时播放，不看广告也可以正常游戏。在欧洲经济区、英国和瑞士，本游戏会展示 Google 的同意消息（UMP），由你选择是否同意广告相关的数据处理与个性化广告；在美国相关州，你可以选择不出售或共享你的个人信息。在需要的地区，设置页会显示“广告隐私选项”，你可以随时在其中更改选择。你还可以在 Android 系统设置中重置或删除广告 ID、限制个性化广告。

广告选择（TapTap 版）：广告只在你点击“观看视频”时播放，不看广告也可以正常游戏；本游戏关闭了广告 SDK 的全部可选设备信息采集，不读取 OAID 等广告标识。你可以在系统设置中关闭个性化广告推荐或卸载本游戏。

广告选择（浏览器版）：广告只在你点击“观看视频”时播放，不看广告也可以正常游戏。在欧洲经济区、英国和瑞士，Google 会在投放个性化广告前展示其同意消息。你可以在 https://adssettings.google.com 停用个性化广告，或在 https://www.aboutads.info 停用第三方供应商的个性化广告，也可以在浏览器中清除或阻止 Cookie。

九、政策变更

如本游戏处理信息的方式发生变化，我们会更新本政策及上方的更新日期；接入新的 SDK 或新增收集项时会在游戏内重新征得你的同意。

十、联系我们

如对本政策有疑问或需要行使上述权利，请联系：[email protected]

Forge Simulator: Epic Gear Privacy Policy

Last updated: 8 November 2026 (third update: the TapTap edition now uses TapADN for ads)

This policy applies to the game "Forge Simulator: Epic Gear" (Chinese title 每日强化挑战, "the game") on these channels: the WeChat mini game, the TapTap Android edition, the Google Play Android edition (these two Android editions use the package name com.xueyue.qianghua), and the Android edition (package name com.xueyue.qianghua.itch) and browser (HTML5) edition published on itch.io (the same browser edition can also be played at https://yue-witness.github.io/forge/play/; together "the browser edition"). The game is developed and operated by the independent game studio Blood Moon Studio (血月的工作室, "we", "us"). This policy explains what information the game handles, why, where it is stored, and which third-party SDKs and platform features it uses.

The Google Play edition, the TapTap edition, the itch.io Android edition and the browser edition include rewarded video ads, shown only when you tap "Watch Video" to claim extra daily materials. The WeChat mini game has no ads. The game has no purchases. Apart from a username you choose in the itch.io editions, it does not ask for your name, phone number or email address. Apart from showing your TapTap nickname on leaderboards in the TapTap edition, it does not obtain your platform nickname, and it does not obtain your avatar, precise location, contacts or friend list.

1. Consent first

The first time you tap "Start", the game shows a privacy policy consent dialog. Until you tap "Agree", the game does not sign you in, does not initialize any third-party SDK (the TapTap edition initializes no TapSDK component, including its data analytics module and ThemisLite; the Google Play edition does not initialize Play Games Services and does not sign you in automatically; the Google Play edition and the itch.io Android edition initialize no advertising SDK, including the Google Mobile Ads SDK, UMP and Unity Ads; the TapTap edition does not initialize the TapADN ad SDK), does not call WeChat sign-in, and does not send any account or game data to our servers. If you do not agree, you cannot start the game.

The browser edition follows the same order: Google's ad script (see item 6 of section 5) loads only after you accept this policy, and ads are shown only when you tap "Watch Video".

2. Sign-in and information stored on our servers

Enhancement results, leaderboards and daily resources are calculated and stored on our servers. Sign-in works differently on each channel:

• WeChat mini game: the game calls WeChat wx.login to get a one-time code, and our server exchanges it with WeChat for your openid in this game. The session key and other values WeChat returns are not stored.
• TapTap edition: you authorize through the TapTap login SDK, and our server uses the access token to ask TapTap for your openid in this game and your TapTap nickname. The nickname is stored as your display name and synchronized each time you sign in (if you rename yourself on TapTap, leaderboards update at your next sign-in); the avatar and unionid TapTap returns are not stored.
• Google Play edition: Play Games Services provides a one-time server authorization code, and our server exchanges it with Google for your Play Games player ID (playerId). The gamer name, avatar and other values Google returns are not stored; the access token is used only for that sign-in and is not stored.
• itch.io editions (Android and browser): there is no platform account. On first launch the game generates a random device identifier and stores it on your device (in the app's private storage on Android, in browser local storage in the browser edition), and asks you to enter a username of 2–16 characters (letters, digits, spaces and _ - .), which is shown on leaderboards. The game then signs in with that identifier. The identifier is created by the game at random and is not a hardware identifier or advertising identifier. If you uninstall the game or clear the app data or browser storage, a new identifier and a new account are created, and the old account cannot be recovered.
• During testing, if sign-in for a channel is not yet available, the game may fall back to a test sign-in that uses a random test identifier generated on your device. This identifier is created by the game at random and is not a hardware identifier. Test sign-in will be turned off before the official launch.

Our servers store:

• Account: the platform account identifier above (openid, playerId or the itch.io random device identifier, or the random test identifier during testing), an internal player number, a display name (an anonymous name generated at random by the system, such as "Name#1234"; in the TapTap edition, your TapTap nickname; in the itch.io editions, the username you entered), the channel you first signed in from (WeChat / TapTap / Google Play / itch.io / Test) and the creation time.
• Game records: daily resource claims (source and amount), resource balance and spending; for each enhancement, the slot, level change, result, cost, server-generated random numbers and time; current levels and scores of each slot, daily final score and rank, and your best results.
• Request records: the ID of each claim and enhancement request and the server's response, so that a network retry cannot claim or enhance twice.
• Server logs: access logs may contain your IP address, request time, requested address and client identifier (User-Agent); application logs may contain your internal player number and enhancement results. Logs are used only for troubleshooting and abuse prevention. The server also uses IP addresses briefly in memory to limit request rates.

3. Leaderboards and sharing

Leaderboards show other players your display name (the anonymous name; your TapTap nickname in the TapTap edition; your username in the itch.io editions), rank, score and channel (WeChat / TapTap / Google Play / itch.io). There are two separate servers: the WeChat mini game and the TapTap edition share the mainland China server, and the Google Play and itch.io editions use the overseas server.

The game offers sharing, such as "Share today's result": the Android editions open the system share sheet and the WeChat mini game opens the WeChat share panel. The shared content is generated by the game, and you choose the recipient in the system or in WeChat. The game does not learn who you share with and does not read your contacts or friend list.

4. Information stored on your device

The game keeps in local storage: settings (master volume, music and sound on/off and volume, quick mode, language), your privacy consent status, which daily results and end-of-day notices you have already seen, the date you ticked "Don't remind me again today" on the demotion warning, the random device identifier of the itch.io editions, and the random test identifier that may be created during testing. The game token received after sign-in is kept only in memory. The TapTap SDK and Play Games Services keep their own sign-in state on the device; the advertising SDKs and UMP keep your ad consent choices and similar information on the device under their own mechanisms; in the browser edition, Google and its partners may set or read cookies in your browser to serve ads (see item 6 of section 5). System backup is turned off for the Android editions, so this data is not uploaded with system backups.

You can delete this data by clearing the game's storage in system settings or uninstalling the game (for the WeChat mini game, delete it in WeChat; for the itch.io browser edition, clear the site's data in your browser).

The Android editions declare three normal permissions, granted at install without a prompt: internet access (INTERNET), network state (ACCESS_NETWORK_STATE, to tell whether you are online) and vibration (VIBRATE, for button and enhancement feedback). The Google Play edition and the itch.io Android edition also include normal permissions declared by the advertising SDKs and their dependency libraries, likewise granted at install without a prompt: advertising ID (com.google.android.gms.permission.AD_ID), Android ad services (ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS), WAKE_LOCK and FOREGROUND_SERVICE. The game does not request location, contacts, camera, microphone, phone, photos or files.

5. Third-party SDKs and platform features

The SDKs and platform features below process information under their providers' own privacy policies. Device and network information collected by an SDK is sent directly to its provider; we do not receive it.

1. TapSDK (TapTap login)

• SDK and version: TapSDK 4.11.0, modules com.taptap.sdk:tap-core and com.taptap.sdk:tap-login; the core library brings its dependency modules tap-common, tap-db (data analytics), tap-db-api, tap-login-api, tap-compliance-api (all 4.11.0) and tap-themislite 1.0.7.8.
• Provider: 易玩（上海）网络科技有限公司 (Yiwan (Shanghai) Network Technology Co., Ltd.)
• Channel: TapTap edition
• Purpose: TapTap account sign-in. According to TapSDK's compliance notes, device information is collected to ensure device and system compatibility and to diagnose problems; its data analytics module is used for data analysis. The game does not configure any custom analytics events.
• Personal information collected:
  • Sign-in authorization: TapTap account identifiers (openid, unionid), and the nickname and avatar in the "public profile" you authorize (our server stores the openid and the nickname, which is used as your leaderboard display name; the avatar and unionid are not stored);
  • Device information: OS version, device model, CPU information, memory information, Android ID;
  • Network information: network type;
  • Items listed for the data analytics module: Wi-Fi information, device version, phone style, sensor list;
  • A check whether the TapTap app is installed, so that authorization can open it.
  See the TapSDK privacy policy for details.
• How it is collected: by the SDK itself. All TapSDK components are initialized only after you tap "Agree" to this policy; before that they do not run or collect anything.
• Privacy policies: TapSDK privacy policy; TapTap privacy policy https://www.taptap.cn/doc/privacy-policy/

2. Google Play Games Services

• SDK and version: Play Games Services v2, com.google.android.gms:play-services-games-v2 22.1.0 (with the Google Play services base libraries play-services-base, play-services-basement and play-services-tasks).
• Provider: Google LLC
• Channel: Google Play edition
• Purpose: sign-in with your Play Games account to identify your account in the game. The game does not use Play Games achievements, leaderboards or saved games.
• Personal information collected: Play Games player ID (playerId) and gamer identity (gamer name, avatar), of which our server stores only the playerId; according to Google, the SDK also collects analytics and diagnostics data to improve SDK stability and its products. See Google's privacy policy for details.
• How it is collected: by the SDK itself. Play Games Services is initialized only after you tap "Agree" to this policy; after that, Google signs you in automatically with the Play Games profile on your device (if you have no Play Games profile, Google offers to create one and you can decline).
• Privacy policy: https://policies.google.com/privacy. You can manage or delete your Play Games profile in the Google Play Games app or at myaccount.google.com.

3. WeChat mini game platform features

• Name: platform features of the WeChat mini game runtime (not a separately integrated SDK)
• Provider: 深圳市腾讯计算机系统有限公司 (Shenzhen Tencent Computer Systems Company Limited)
• Channel: WeChat mini game
• Features used and purposes: wx.login (sign-in, to get your openid); local storage (settings and similar); network requests (connecting to the game server, loading game images and audio); share panel (sharing the game); vibration (feedback); reading window size, safe area and system language (used only on your device for layout and language choice, not uploaded); setting the clipboard (only to copy this policy's address when the privacy guide cannot be opened; the clipboard is never read). The game does not call the interfaces for your WeChat nickname, avatar, phone number, location or friend list.
• Personal information collected: we obtain only your openid in this game from WeChat. Information processed by the WeChat app itself is governed by WeChat's privacy policy.
• How it is collected: provided by the WeChat app; the sign-in code is verified with WeChat by our server.
• Privacy policy: WeChat Privacy Protection Guidelines

4. Google Mobile Ads SDK (AdMob) and User Messaging Platform (UMP)

• SDK and version: Google Mobile Ads SDK com.google.android.gms:play-services-ads 25.5.0; Google User Messaging Platform com.google.android.ump:user-messaging-platform 4.0.0; Unity Ads adapter for AdMob mediation com.google.ads.mediation:unity 4.20.1.0.
• Provider: Google LLC
• Channels: Google Play edition, itch.io Android edition
• Purpose: loading and showing a rewarded video ad when you tap "Watch Video", and granting the extra daily materials after you watch it; requesting ads from Unity Ads through AdMob mediation; UMP shows Google's consent message in regions where it is required and stores your ad consent choices. According to Google, this information is used for ad delivery, measurement, frequency capping, fraud prevention and, where you consent, personalised ads.
• Personal information collected: according to Google, this may include the device advertising identifier (Android Advertising ID), IP address and approximate location derived from it, device and app information, ad interaction data, and diagnostic and performance data. See Google's disclosures for details.
• How it is collected: by the SDK itself. UMP and the Google Mobile Ads SDK are initialized only after you tap "Agree" to this policy; before that they do not run or collect anything.
• Privacy policies: How Google uses information from sites or apps that use its services https://policies.google.com/technologies/partner-sites; Google Privacy Policy

5. Unity Ads

• SDK and version: Unity Ads SDK com.unity3d.ads:unity-ads 4.20.1
• Provider: Unity Technologies
• Channels: Google Play edition, itch.io Android edition
• Purpose: a source of rewarded video ads, both through AdMob mediation and through direct requests from the game. According to Unity, this information is used for ad delivery, measurement, frequency capping, fraud prevention and, where you consent, personalised ads.
• Personal information collected: according to Unity, this may include the device advertising identifier (Android Advertising ID), IP address and approximate location derived from it, device and app information, ad interaction data, and diagnostic and performance data. See Unity's privacy policy for details.
• How it is collected: by the SDK itself. Unity Ads is initialized only after you tap "Agree" to this policy; the game passes the choices you make in Google's consent message (including an opt-out of sale or sharing in applicable US states) to Unity Ads.
• Privacy policy: Unity Game Player and App User Privacy Policy https://unity.com/legal/game-player-and-app-user-privacy-policy

6. Google H5 Games Ads (Google AdSense)

• Name: Google AdSense H5 Games Ads (Ad Placement API); the script adsbygoogle.js is served by Google's servers and is not bundled with the game; publisher ID ca-pub-6465473285974998.
• Provider: Google LLC
• Channel: browser edition (on itch.io and at https://yue-witness.github.io/forge/play/)
• Purpose: showing a rewarded video ad when you tap "Watch Video", and granting the extra daily materials after you watch it.
• Cookies and personalised ads: third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet. You may opt out of personalised advertising by visiting Google Ads Settings https://adssettings.google.com, and you can opt out of a third-party vendor's use of cookies for personalised advertising by visiting https://www.aboutads.info.
• How it is collected: by Google's script itself in your browser, and sent directly to Google; we do not receive it. In the EEA, the UK and Switzerland, Google shows its consent message (a Google-certified consent management platform) before serving personalised ads.
• Privacy policies: How Google uses information from sites or apps that use its services https://policies.google.com/technologies/partner-sites; Google Privacy Policy

7. TapADN ad SDK (TapTap edition)

• SDK and version: TapADN (Dirichlet) Android ad SDK 5.3.2.0 (package com.tapsdk.tapad, with the open-source networking library OkHttp 3.10.0).
• Provider: Shanghai Aideen Digital Technology Co., Ltd. and its affiliates (TapTap Ad Network).
• Channel: TapTap edition
• Purpose: loading and showing a rewarded video ad when you tap "Watch Video", and granting the extra daily materials after you watch it; when no ad is available, the game tells you and grants that claim directly. According to the provider, this information is used for ad delivery, measurement and attribution, statistics, fraud prevention and keeping the SDK stable.
• Personal information collected: basic device information (brand, model, OS version, screen resolution, language, time zone), network type, IP address, app package name and version, a device DRM identifier (for fraud prevention and de-duplication), and ad impression and click interactions; see the TapADN privacy policy for details. The game turns off every optional collection item through the SDK's privacy configuration: no location, phone state or device serial number, Wi-Fi information (including BSSID / SSID), MAC address, sensors, external storage, installed app list, Android ID or OAID, and shake interactions are disabled. The TapTap edition also removes the install-packages, query-all-packages and OAID-related permissions the SDK requests, keeping only network, network-state and vibration permissions.
• How it is collected: by the SDK itself, sent directly to the provider; we do not receive it. The TapADN SDK is initialized only after you tap "Agree" to this policy.
• Privacy policies: TapADN SDK privacy policy https://ssp.dirichlet.cn/docs/agreement/; TapADN compliance notes

The Android editions also include the AndroidX WebKit support library 1.14.0 (androidx.webkit:webkit, an open-source component from Google), used only to display the game inside the app. It does not collect personal information.

6. Minors

We do not knowingly collect personal information from minors. Children under 14 should use the game only after a parent or guardian has read and agreed to this policy.

7. Sharing, storage location and retention

We do not sell the information about you stored on our servers, and we do not use it for advertising. Apart from verifying sign-in with WeChat, TapTap and Google as described above, and showing your display name and results to other players on leaderboards, we do not provide your information to third parties. The advertising SDKs in the Google Play edition and the itch.io Android edition collect information and send it directly to Google and Unity as described in section 5, the TapADN ad SDK in the TapTap edition sends it directly to its provider, and Google's ad script in the browser edition collects information and sends it directly to Google; we do not receive it.

Server locations: data for the WeChat mini game and the TapTap edition is stored on Tencent Cloud servers in Shanghai, China; data for the Google Play and itch.io editions is stored on Google Cloud servers in Taiwan (asia-east1) (the overseas server). The two servers' databases are separate, and the databases and caches run only on the servers' internal networks with no public access.

Retention: account and game records are kept while the game is operated, for leaderboards, best results and preventing duplicate claims, and you can ask us to delete them at any time. Server logs are overwritten in rotation as they reach their size limit and are not kept long term. The database is backed up daily and backups are kept for 7 days. Data on your device is kept until you delete it.

8. Your choices and rights

You can decline this policy (you then cannot start the game), and you can clear the game's data in system settings or uninstall the game. You can ask us, at the email address below, to access, correct or delete the information on our servers related to your account. Please include your channel and the name shown in the game (the anonymous name; your TapTap nickname in the TapTap edition; your username in the itch.io editions); we will act after verification, usually within 15 working days. Deleting your account also removes your leaderboard entries and best results; deleted data leaves our backups within 7 days as they rotate. For information processed by third-party SDKs and platforms, you can exercise your rights with the provider under its privacy policy.

Ad choices (Google Play edition and itch.io Android edition): ads play only when you tap "Watch Video", and you can play normally without watching ads. In the EEA, the UK and Switzerland, the game shows Google's consent message (UMP), where you choose whether to consent to ad-related data processing and personalised ads. In applicable US states, you can opt out of the sale or sharing of your personal information. Where required, an "Ad Privacy Options" entry appears in Settings so you can change your choices at any time. You can also reset or delete your advertising ID and limit ad personalisation in Android settings.

Ad choices (TapTap edition): ads play only when you tap "Watch Video", and you can play normally without watching ads. The game turns off all optional device-information collection by the ad SDKs and does not read advertising identifiers such as OAID. You can turn off personalised ad recommendations in system settings or uninstall the game.

Ad choices (browser edition): ads play only when you tap "Watch Video", and you can play normally without watching ads. In the EEA, the UK and Switzerland, Google shows its consent message before serving personalised ads. You can opt out of personalised advertising at https://adssettings.google.com, or of third-party vendors' personalised advertising at https://www.aboutads.info, and you can clear or block cookies in your browser.

9. Changes to this policy

If the way the game handles information changes, we will update this policy and the "Last updated" date above. When we add a new SDK or collect new types of information, the game will ask for your consent again.

10. Contact

If you have questions about this policy or want to exercise the rights above, contact: [email protected]