Kaitai Taiwan Mahjong · 私隱政策 / Privacy Policy
最後更新 Last updated: 2026-10-06
刪除帳號／資料申請 · Delete account / data
本政策說明開枱！台灣牌處理玩家資料、保存及刪除資料嘅方式。
單人模式可離線使用。手機保存暱稱、頭像、背景、進度、成就、籌碼、未結算牌局及除錯記錄。網上帳號使用伺服器隨機 ID 同私人復原碼；公開 ID 唔足以還原帳號。新帳號唔會讀取 Android ID 或 Apple IDFV；舊 ID 可保留作進度遷移。
網上對戰會傳送玩家 ID、暱稱、頭像、背景、枱號、出牌動作同牌局狀態，並保存伺服器核實嘅分數及成就。啟用網上帳號或備份後，單人進度亦可包含喺私人備份；完局或 App 進入背景時可更新備份。較舊版本可能喺完局時自動同步進度及記錄。除錯記錄可包含手牌及動作歷史、錯誤、連線情況。回報問題會傳送文字、版本同近期記錄片段，完整記錄另以受保護批次保存。
同枱玩家會見到暱稱及外觀，計分榜只公開網上核實成績。私人資料、備份、記錄同回報限帳號本人或授權支援功能存取。伺服器保存復原密碼雜湊；正式版本使用 HTTPS/WSS。託管服務會處理 IP 等連線資料，以提供及保護服務。
資料用作帳號延續、遊戲同排錯。有效帳號資料保存至帳號被刪除；遊戲同除錯記錄亦設有容量上限。用作復原嘅備份副本最多保存 30 日，唔會用作重新啟用已刪除帳號。我哋會保留最少量嘅刪除核對記錄（玩家 ID 嘅雜湊值，唔包含密碼、暱稱或遊戲記錄），只用作防止舊備份重新啟用已刪除帳號，並只喺仍需要防止還原嘅期間保留。App 唔賣資料、唔出廣告、冇付款或兌現，唔讀通訊錄、相簿、位置，亦唔錄音或要求咪高峰權限。
離開網上牌桌後，可用「復原帳號 → 刪除網上帳號」再確認，刪除伺服器有效帳號、備份、成績、記錄及回報；本機進度保留。清除 App 資料可刪本機資料，另受裝置備份設定影響。無法登入可聯絡 admin@cashmate.hk 核實擁有權及申請刪除，唔好喺普通電郵附上私人復原碼。已刪除帳號喺復原備份或遷移存檔中嘅副本，最遲會喺 30 日內清除。電郵申請請用主旨「刪除資料」，提供公開玩家 ID；我哋會核實擁有權，公開 ID 本身唔係登入或擁有權證明。
籌碼只係遊戲分數，冇現金價值。本 App 唔係專為 13 歲以下兒童而設。
Email 登入係自選功能。你要求登入或登記時，我哋會將你輸入嘅 Email 及一次性驗證碼交予 Cloudflare Email Service，向該地址寄出驗證郵件。完成驗證後先會綁定或復原玩家帳號。Email 唔會公開喺排行榜或牌桌。訪客單人模式毋須提供 Email。
遊戲資料庫保存 Email 嘅密鑰識別值（以伺服器密鑰計算嘅 HMAC）、遮罩地址、綁定時間，以及驗證碼同裝置登入憑證嘅雜湊，唔保存完整 Email 或明文驗證碼。驗證碼十分鐘到期，只可使用一次；裝置登入憑證三十日到期，亦可登出撤銷。驗證記錄建立二十四小時後會喺下一次清理移除，伺服器啟動及每小時執行清理。寄信服務會處理收件地址、內容及送信紀錄；我哋已關閉 Cloudflare 郵件內容預覽，其他供應商紀錄按其政策處理。詳見 Cloudflare 私隱政策。
Email 綁定保存至更換、合併或帳號刪除，並受上述備份保存同防止已刪除帳號復活規則保障。新版手機 App 使用裝置安全儲存保存登入憑證；部分平台可能喺移除 App 後仍保留。請先登出以移除本機網上身份。新版刪除路徑為「帳號 → 帳號管理 → 刪除網上帳號」，會同時刪除有效 Email 關聯、驗證記錄及裝置登入憑證；本機遊戲進度保留。
Updated 6 October 2026. This policy explains how Kaitai Taiwan Mahjong collects, uses, retains and deletes player data.
The app supports offline solo play and online multiplayer. Chips are game scores, with no cash value or cash-out. No Google or Apple sign-in is required. Online play uses a random server-issued account ID and a private recovery secret. The public player ID alone does not restore an account. New accounts do not derive IDs from Android ID or Apple's IDFV; existing local identifiers may be retained during migration so progress is not lost.
On your device, we retain your display name, chosen avatar/background, gameplay progress, achievements, chip balance, account credential, unfinished solo accounting snapshot and debugging history. Local storage errors are reported in the app. Removing the app clears ordinary local app data, subject to device or browser backup/restore settings. Securely stored login credentials may remain on some platforms; sign out first to remove local online access.
When you use online play, backup or feedback, our server processes your random player ID, display name, avatar/background, table code, gameplay actions, room state, scores, achievements and account recovery information. A private backup can include solo progress and accounting checkpoints. Once an online account is enabled, backups may update when the app goes into the background or a hand ends. Earlier app versions may sync progress and logs automatically after a hand. Gameplay debugging logs may include tile/action history, errors and connection context. Feedback includes your written report, app version and the recent log excerpt; retained full log batches are stored separately when synced. Do not include private recovery codes in a report.
Your display name and cosmetics appear at your table. The leaderboard publishes server-verified online ranking statistics, not arbitrary uploaded offline scores. Opponent concealed tiles are hidden during play. Profiles, private backups, retained logs and feedback are accessible only to their owner or an authorized support function. Server credentials are stored as hashes. Traffic uses HTTPS/WSS in release builds. The hosting provider necessarily processes connection information, including IP addresses, to serve and protect the service.
We do not sell data or include advertising, purchase flows, contacts/photos/location access or audio recording. The app plays bundled voice clips; it does not request microphone permission. Local play works without a server account. Active account records are retained until account deletion, with capacity limits on gameplay and troubleshooting records. Recovery backups are retained for a maximum of 30 days and are not used to reactivate deleted accounts. We retain a minimal deletion record (a hash of the random player ID, without a password, display name or gameplay history) solely to prevent restoration of deleted accounts, for as long as that protection is needed.
Use 復原帳號 → 刪除網上帳號, then confirm, to delete active server account data after leaving any table. Your local progress remains until you clear the app data. If you cannot access your account, contact admin@cashmate.hk for ownership verification and a deletion request. Do not send a recovery secret in an ordinary email. Copies belonging to deleted accounts in recovery backups or migration archives are removed within 30 days. For email requests, use the subject 刪除資料 and provide your public player ID; we will verify ownership. A public ID alone is not proof of account ownership. The app is not directed at children under 13.
When you request email registration or sign-in, we process your email address and send it with a one-time verification code to Cloudflare Email Service to deliver the requested message. Verification is required before linking or restoring a player account. Your email is not published on the leaderboard or at the table. Guest solo play does not require an email address.
The game database stores a keyed HMAC identifier derived from your email, a masked address, the link date, and hashes of verification codes and device credentials, rather than the full address or plaintext code. Codes expire after ten minutes and are single-use. Device credentials expire after thirty days and can be revoked by signing out. Verification records become eligible for removal after twenty-four hours; cleanup runs on startup and hourly. The delivery provider processes the recipient address, message content and delivery records. We have disabled Cloudflare message-content previews; other provider records are handled under its policies. See Cloudflare's privacy policy.
Email associations remain until replacement, account merge or account deletion and follow the backup-retention and deletion protections above. Updated native apps use device secure storage for credentials, which may survive app removal on some platforms. Sign out to remove local online access. In newer versions, use 帳號 → 帳號管理 → 刪除網上帳號 to delete active email associations, verification records and device credentials together with account data. Local gameplay progress remains.
Contact: admin@cashmate.hk.
在支援帳號管理的版本，更換 Email 需要驗證原有及新地址；合併需要驗證兩邊擁有權並確認摘要。合併保留主帳號身份、合併伺服器核實戰績和收藏，單人進度由玩家選擇保留其中一份。來源帳號停用，其歷史記錄歸於主帳號並跟隨主帳號刪除。競技評分只根據合資格真人配對的伺服器結算；不採用上傳的單人分數。營運備份可加密保存於營運者私人裝置，採用同一最長 30 日保留及防止刪除帳號復活的規則。
In versions supporting account management, changing an email requires verification of the old and new addresses. Merging accounts requires proof of ownership and explicit review. The retained account receives verified online statistics and combined collections; you select one solo backup. The source account is retired and its history follows the retained account's deletion lifecycle. Competitive ratings use eligible server-confirmed human matchmaking results, not uploaded solo scores. Operational backups may be stored encrypted on the operator's private device, subject to the same maximum 30-day retention and protection against restoring deleted accounts.