隐私政策
Privacy Policy

生效日期 / Effective date: 2026-08-27

最后更新 / Last updated: 2026-08-27

纸盒创造营隐私政策

本政策说明杭州升曜寰枢商贸有限责任公司（“我们”）在你使用纸盒创造营游戏、玩家关卡、机关工坊以及相关支持服务时如何处理信息。若某个版本没有启用联网功能，相应的服务端数据不会从该版本收集；最终行为以你正在使用的版本及本政策说明为准。

1. 我们处理的信息

账户与标识符

联网功能启用时，应用会生成随机安装 ID，并为匿名账户分配用户 ID，用于登录、会话连续性和防止账号混淆。
若某个版本提供“通过 Apple 登录”，我们会处理 Apple 提供的身份凭证、由其派生的账户标识，以及你选择提供的显示名。我们不接收你的 Apple ID 密码。
中国大陆 TapTap 版本使用 TapTap 登录和合规认证。应用把 TapTap 提供的账号标识传给合规认证模块，并仅根据认证结果决定能否进入游戏；我们不会从该模块取得或自行保存你的姓名或身份证号码。
认证 token 保存在设备上并用于访问你的联网账户。退出或删除账户时会清除或撤销相应 token。

本地游戏数据

课程进度、成绩、XP、装扮、设置、低动效选择和本地草稿可保存在设备上。
仅留在设备上的数据不会发送给我们；卸载、清除数据或在应用内完成账户删除可能使这些数据无法恢复。

玩家关卡与内容安全数据

当你提交玩家关卡时，我们处理关卡标题、组件和参数、作者 ID、版本、通关校验信息以及关卡缩略图。
关卡标题属于自由文本；其他关卡内容主要由应用内允许的组件构成。提交的版本在审核通过前不会进入公开玩家关卡流。
我们处理举报原因与补充说明、隐藏、屏蔽作者、申诉、审核状态、封禁和审核操作记录，以保护社区安全并执行规则。

游玩与互动数据

可能包括关卡开始、通关、死亡、用时、死亡次数、首次死亡位置、划走、预设快速评价及时间戳。
可能包括点赞、收藏、关注、隐藏、举报、屏蔽作者和解除屏蔽状态。
我们使用这些信息提供游戏功能、恢复用户选择、展示创作者反馈、保障安全并了解功能表现。

网络、安全与诊断信息

联网服务的生产 API 托管于阿里云上海地域。为提供联网功能、排查故障并防止滥用，服务器和网络基础设施可能处理 IP 地址、User-Agent、请求时间、请求路径、HTTP 状态、请求 ID、错误和安全事件；这些信息不用于定向广告。

生产托管、CDN、防滥用或监控服务可能处理 IP 地址、User-Agent、请求 ID、请求时间、错误和安全事件。我们会按实际供应商配置最小化这些信息，不会把未启用的诊断或广告 SDK 写成已收集。

激励视频广告数据（Android）

Android 版本可能提供由玩家主动选择观看的激励视频。只有在玩家同意本隐私政策并点击激励广告入口后，应用才初始化广告 SDK；不观看不会阻止使用普通游戏功能，但不会取得对应的可选奖励。
候选包包含 TapADN（Dirichlet）聚合 SDK 5.1.2.3、穿山甲广告 SDK 7.6.1.2 和优量汇 SDK 4.690.1560。SDK 可能处理设备品牌/型号/系统版本、屏幕与 CPU 信息、IP 和网络状态、应用包名/版本/运行状态、OAID 等设备标识符、广告展示/点击/转化数据及崩溃/性能数据，用于广告投放、监测归因、反作弊、统计和稳定性。
为核验激励奖励，应用会向广告服务传入游戏内用户 ID、广告位、一次性广告会话标识、奖励名称和数量，并由服务器核验回执后发放奖励。
当前接入默认限制个性化广告，并关闭广告 SDK 对精确位置、电话状态/IMEI、Android ID、应用列表、外部存储和 Wi-Fi 状态等可选信息的主动访问；应用不为激励广告申请位置或电话权限。广告 SDK 仍可能处理其提供基础广告与反作弊功能所必需的信息，具体以本版本、设备系统和各 SDK 政策为准。

2. 使用目的

创建和维护匿名账户或 Apple 登录账户；
在中国大陆 TapTap 版本中完成 TapTap 登录、实名认证和未成年人防沉迷限制；
提供官方课程、玩家关卡、机关工坊、收藏、关注和跨会话状态；
验证关卡、处理举报与申诉、屏蔽作者、审核和下架违规内容；
记录成绩、改善稳定性、排查故障并保护服务免受滥用；
履行法律义务、解决争议并执行我们的条款和社区规则。

3. 共享、出售与追踪

我们不会出售你的个人信息，也不会把游戏账户数据用于跨公司应用或网站的定向广告。Android 版本的可选激励视频会使用下列第三方广告 SDK 进行广告投放、监测归因和反作弊。

阿里云为联网服务提供上海地域的云主机与网络基础设施，并为 privacy@abei.work、support@abei.work、safety@abei.work 和 security@abei.work 等公开联系地址提供企业邮箱服务。TapTap 登录、合规认证以及 Android 激励视频广告的供应商在下文单独列出。尚未确认由其他第三方提供生产 CDN、对象存储或人工内容审核服务。

中国大陆 TapTap 版本使用易玩（上海）网络科技有限公司提供的 TapTap 登录和合规认证。TapSDK 可能为登录、实名认证、防沉迷和故障定位处理系统版本、设备型号、CPU 信息、网络类型、AndroidID、设备内存信息、网络权限及网络状态；详情见 TapSDK 隐私政策。应用已关闭 TapTap Event、广告标识符采集和反射式 OAID 获取。

Android 激励视频使用上海艾得蒽数字科技有限公司提供的 TapADN（Dirichlet）聚合 SDK，并可能由北京巨量引擎网络技术有限公司提供的穿山甲广告 SDK或深圳市腾讯计算机系统有限公司提供的优量汇 SDK实际投放广告。各供应商按照其政策处理广告所需信息；玩家不进入激励广告流程时，该选择不会触发广告 SDK 初始化。

我们仅在提供托管、存储、安全、登录、客户支持等必要服务时向受约束的服务商提供所需信息；也可能在法律要求、保护用户安全、调查滥用或公司重组时依法披露。服务商不得将数据用于自己的定向广告。

4. 保留期限

账户和玩家关卡数据：在账户存续和提供功能所必需的期间保留；成功删除账户后从活跃系统删除。
备份：活跃系统删除后，残留副本最迟在 30 天内随备份轮换删除，除非法律要求或安全隔离需要更长时间。
安全日志：通常保留 180 天，用于安全、反滥用和故障调查。
审核与申诉记录：通常保留 180 天，以处理安全事件、重复违规和争议。

如法律要求保留某些记录，我们只保留所需范围，并限制访问和用途。上述期限必须与最终生产服务及公开承诺保持一致。

5. 删除账户与数据

在联网功能可用且你已连接账户时，可在应用内进入“设置”的“数据与注销”，两次确认删除联网账户。请求受理后进入 7 天可撤销宽限期；宽限期内可在同一设备查询状态或撤销。普通登录凭证会立即撤销，宽限期结束且未撤销后才执行最终删除。

请求受理时撤销普通认证 token，并保存仅用于查询或撤销本次删除的恢复凭证；
最终删除完成后，账户资料、作者关卡和缩略图、玩家级成绩、互动、举报、反应、事件及与你直接关联且无保留义务的记录从活跃系统删除；
本机到达宽限期截止点后停止自动匿名登录、移除安装认证 secret，并把旧玩家范围隔离；本机状态不单独代表服务端已经完成删除；
宽限期内撤销后可以继续使用账户；最终删除完成后通常无法恢复进度和作品。

如你无法打开应用，可发送邮件至 privacy@abei.work。请勿通过邮件发送密码、Apple 身份 token 或其他敏感凭证；我们可能要求有限信息来验证请求。

6. 你的选择与权利

在应用内隐藏关卡、举报内容、举报并屏蔽作者；你可在收藏页的屏蔽名单中解除屏蔽。
删除联网账户和本地数据；停止使用联网功能。
不观看可选激励广告；当前版本默认限制个性化广告。
根据适用法律请求访问、更正、删除、限制或反对某些处理，并向当地监管机构投诉。

我们会根据你的所在地、请求性质和法律要求进行验证与处理。隐私请求请联系 privacy@abei.work。

7. 儿童与青少年

本游戏在 TapTap 商店使用 8+ 适龄提示，但不在 TapTap 合规认证之外另设最低可玩年龄。未成年人仍须完成适用的实名认证，并受到法定游戏时长、时段和付费限制；若法律要求监护人同意，我们将遵守该要求。若你认为儿童在未经适当同意的情况下提供了信息，请联系隐私邮箱，我们会调查并采取删除或限制措施。

8. 跨境处理

数据托管和处理地区：中国境内（阿里云上海地域）。如果信息被传输至你所在国家或地区之外，我们会采用适用法律要求的保护措施。

9. 安全

我们采用与风险相称的访问控制、传输保护、密钥管理、日志和备份措施。任何系统都无法保证绝对安全；如发现产品漏洞、账号接管或疑似密钥泄露，请联系 security@abei.work，不要公开可被利用的凭证或个人信息。UGC 不良内容仍通过支持中心列出的内容安全邮箱举报。

10. 政策变更

如数据类别、用途、第三方服务或保留期限发生实质变化，我们会更新本页面和“最后更新”日期，并在法律要求时通过应用内提示或其他适当方式通知你。

11. 联系我们

数据控制者/运营主体：杭州升曜寰枢商贸有限责任公司

地址：浙江省杭州市上城区延安路8号601室-19

隐私邮箱：privacy@abei.work

一般支持：支持中心

纸盒创造营 Privacy Policy

This policy explains how 杭州升曜寰枢商贸有限责任公司 (“we,” “us,” or “our”) handles information when you use the 纸盒创造营 game, Player Levels, Mechanism Workshop, and related support services. If online features are disabled in a particular build, the corresponding server data is not collected from that build. Actual behavior depends on the version you use and this policy.

1. Information we handle

Account data and identifiers

When online features are enabled, the app generates a random installation ID and assigns a user ID to an anonymous account for authentication, session continuity, and account separation.
If a build offers Sign in with Apple and you choose it, we process the Apple identity credential, an account identifier derived from it, and any display name you choose to provide. We do not receive your Apple ID password.
The mainland-China TapTap build uses TapTap Login and Compliance. The app passes the TapTap account identifier to the compliance module and uses only its result to decide whether play may begin; we do not receive or independently store your legal name or government identification number from that module.
An authentication token is stored on the device to access the online account. The applicable token is cleared or revoked when you sign out or delete the account.

Local game data

Course progress, results, XP, cosmetics, settings, reduced-motion preference, and local drafts may be stored on your device.
Data that remains only on the device is not sent to us. Uninstalling, clearing app data, or completing in-app account deletion may make it unrecoverable.

Player levels and safety data

When you submit a player level, we process its title, components and parameters, author ID, version, creator-clear verification, and thumbnail.
Level titles are free text; most other level content uses components allowed by the app. A submitted version is not placed in the public Player Levels feed until moderation approves it.
We process report reasons and details, hides, author blocks, appeals, moderation status, suspensions, and moderation audit records to protect the community and enforce rules.

Gameplay and interaction data

This may include level starts, clears, deaths, elapsed time, death count, first-death point, swipes, preset reactions, and timestamps.
This may include likes, favorites, follows, hides, reports, author blocks, and unblock status.
We use this information to provide game functions, restore choices, show creator feedback, protect users, and understand feature performance.

Network, security, and diagnostic information

The production API for online services is hosted in Alibaba Cloud's Shanghai region. To provide online features, troubleshoot failures, and prevent abuse, the server and network infrastructure may process IP addresses, User-Agent values, request times, request paths, HTTP status codes, request IDs, errors, and security events. This information is not used for targeted advertising.

Production hosting, CDN, abuse-prevention, or monitoring services may process IP addresses, User-Agent values, request IDs, request times, errors, and security events. We minimize this information according to actual provider configuration and do not claim to collect diagnostics or advertising data from an SDK that is not enabled.

Rewarded-video advertising data (Android)

The Android build may offer optional rewarded videos. The advertising SDK is initialized only after the player agrees to this policy and selects a rewarded-ad entry. Declining an ad does not block ordinary gameplay, but the optional reward is not granted.
The candidate contains TapADN (Dirichlet) Mediation SDK 5.1.2.3, Pangle SDK 7.6.1.2, and Tencent Youlianghui SDK 4.690.1560. These SDKs may process device model and system information, screen and CPU information, IP and network state, app package/version/runtime state, device identifiers such as OAID, ad impressions/clicks/conversions, and crash/performance data for ad delivery, attribution, fraud prevention, statistics, and reliability.
For server-side reward verification, the app supplies the in-game user ID, ad placement, one-time ad session identifier, reward name, and amount. A reward is granted only after the server verifies the receipt.
The integration limits personalized advertising by default and disables active access to optional precise location, phone state/IMEI, Android ID, installed-app list, external storage, and Wi-Fi state. The app does not request location or phone permission for rewarded ads. Advertising SDKs may still process information required for basic ad delivery and fraud prevention, subject to the build, operating system, and provider policies.

2. Why we use information

Create and maintain anonymous or Sign in with Apple accounts;
Perform TapTap sign-in, real-name verification, and minor anti-addiction restrictions in the mainland-China TapTap build;
Provide the official course, Player Levels, Mechanism Workshop, favorites, follows, and cross-session state;
Validate levels, handle reports and appeals, block authors, moderate content, and remove violations;
Record results, improve reliability, troubleshoot, and protect the service from abuse;
Meet legal obligations, resolve disputes, and enforce our terms and community rules.

3. Sharing, sale, and tracking

We do not sell personal information or use game-account data for targeted advertising across other companies’ apps or websites. Optional rewarded videos in the Android build use the third-party advertising SDKs listed below for delivery, attribution, and fraud prevention.

Alibaba Cloud supplies cloud-computing and network infrastructure in its Shanghai region for the online service and enterprise email service for the public contact addresses privacy@abei.work, support@abei.work, safety@abei.work, and security@abei.work. Providers for TapTap Login, Compliance, and Android rewarded-video advertising are listed separately below. No other third party has yet been confirmed as providing the production CDN, object storage, or human content-moderation service.

The mainland-China TapTap build uses TapTap Login and Compliance supplied by Yiwan (Shanghai) Network Technology Co., Ltd. TapSDK may process operating-system version, device model, CPU information, network type, AndroidID, device memory information, network permission, and network status for sign-in, real-name verification, anti-addiction enforcement, and troubleshooting. See the TapSDK Privacy Policy. The app disables TapTap Event, advertising-identifier collection, and reflective OAID collection.

Android rewarded videos use the TapADN (Dirichlet) Mediation SDK supplied by 上海艾得蒽数字科技有限公司. Ads may be delivered by the Pangle SDK supplied by Beijing Ocean Engine Network Technology Co., Ltd. or the Tencent Youlianghui SDK supplied by Shenzhen Tencent Computer Systems Co., Ltd. Each provider processes advertising information under its policy; choosing not to enter the rewarded-video flow does not trigger SDK initialization.

We provide only necessary information to service providers bound to perform hosting, storage, security, sign-in, or customer-support functions. We may also disclose information when legally required, to protect users, to investigate abuse, or as part of a corporate transaction. Service providers may not use it for their own targeted advertising.

4. Retention

Account and player-level data: retained while the account exists and as needed to provide features; deleted from active systems after successful account deletion.
Backups: after deletion from active systems, residual copies are removed through backup rotation within 30 days unless law or security isolation requires longer.
Security logs: ordinarily retained for 180 days for security, abuse prevention, and incident investigation.
Moderation and appeal records: ordinarily retained for 180 days to address safety events, repeat abuse, and disputes.

If law requires us to retain a record, we limit it to what is required and restrict access and use. These periods must match the final production service and public commitment.

5. Account and data deletion

When online features are available and your account is connected, open Data and Deletion (数据与注销) in Settings and confirm account deletion twice. An accepted request enters a seven-day revocable grace period. On the same device, you can check or cancel it during that period. Ordinary sign-in credentials are revoked immediately; final deletion occurs only after the grace period expires without cancellation.

When the request is accepted, ordinary authentication tokens are revoked and a recovery credential is retained solely to check or cancel that deletion;
After final deletion, account profile, authored levels and thumbnails, player-level results, interactions, reports, reactions, events, and directly linked records without a retention obligation are deleted from active systems;
At the local grace cutoff, the app suppresses automatic anonymous sign-in, removes the installation authentication secret, and isolates the old player scope. Local state alone does not prove server deletion is complete;
Cancellation during the grace period restores continued account use. After final deletion, progress and creations ordinarily cannot be recovered.

If you cannot access the app, email privacy@abei.work. Do not email passwords, Apple identity tokens, or other sensitive credentials. We may request limited information to verify the request.

6. Your choices and rights

Hide a level, report content, or report and block an author; unblock an author from the blocked-author list on Favorites.
Delete the online account and local data, or stop using online features.
Decline optional rewarded videos; the current build limits personalized advertising by default.
Where applicable, request access, correction, deletion, restriction, or objection, and complain to a local regulator.

We verify and process requests according to your location, the request, and applicable law. Contact privacy@abei.work for a privacy request.

7. Children and teens

The game uses an 8+ suitability label on TapTap but does not impose an additional minimum playable age beyond TapTap Compliance. Minors remain subject to applicable real-name verification and statutory play-time, play-window, and payment restrictions. Where parental consent is legally required, we follow that requirement. If you believe a child provided information without appropriate consent, contact us so we can investigate and delete or restrict it as appropriate.

8. International processing

Data hosting and processing regions: Mainland China (Alibaba Cloud, Shanghai region). If information is transferred outside your country or region, we use safeguards required by applicable law.

9. Security

We use access controls, transport protection, key management, logging, and backups appropriate to the risk. No system can guarantee absolute security. Report a product vulnerability, account takeover, or suspected credential leak to security@abei.work without publicly disclosing exploitable credentials or personal information. Continue to report harmful UGC through the content-safety address listed in the Support Center.

10. Changes to this policy

If data categories, purposes, service providers, or retention periods change materially, we update this page and its “Last updated” date and provide in-app or other notice where required by law.

11. Contact us

Data controller/operator: 杭州升曜寰枢商贸有限责任公司

Address: 浙江省杭州市上城区延安路8号601室-19

Privacy email: privacy@abei.work

General help: Support Center

隐私政策Privacy Policy

纸盒创造营 隐私政策