YOUR JOURNEY, YOUR DATA
隐私说明
账号是可选的。我们只为提供游戏、保存你的记录和保护服务而处理相关信息。
搭档可看到昵称，不会看到你的邮箱。单人练习最佳成绩保存在设备上。
当前版本无广告或应用内购买，未接入广告、广告归因或行为分析 SDK。
1. 适用范围与我们处理的信息
本说明适用于微光同行 iPhone App 和 biesatang.lipeilong.cn 的游戏及账号服务。无需注册即可体验游客玩法。
- 账号：选择注册时，我们处理邮箱、昵称、随机账号标识、创建时间和邮箱验证状态。密码以加盐哈希保存，不保存明文密码；登录使用会话标识。
- 联机与记录：在线游戏处理房间、角色、操作输入和游戏状态。登录玩家保存对局时间、搭档昵称、章节、用时、掉落次数、收集物、分数、星级和结束原因。记录仅本人可查询；搭档在自己的记录中看到你的昵称，不会看到邮箱。纯游客对局和单人练习不写入账号历史。
- 安全与技术：我们处理 IP 地址、请求时间、请求路径、响应状态、User-Agent 与来源页面信息，用于安全防护和故障排查；账号安全数据包括会话与邮件令牌摘要、时间及发送状态。邮件操作令牌置于链接片段，不随网页请求网址发送给服务器。
- 本机与支持：App 在设备上保存触感开关、离线练习最佳成绩及保持登录所需的网页 Cookie。你主动联系支持时，我们处理所提供的邮箱、文字和附件；请勿发送密码或邮件操作链接。
2. 用途与服务提供方
信息用于提供联机、确认账号身份、发送你申请的验证和重设邮件、保存个人记录、防止滥用与处理支持请求。我们不出售个人数据，不将其用于跨 App 或跨网站广告追踪。
游戏及账号服务运行在阿里云香港服务器。账号邮件通过阿里云邮件推送发送，当前配置为杭州区域；邮件服务会处理收件邮箱、邮件内容、操作链接与投递状态，你的邮件服务商也会处理收件。香港游戏服务器不表示全部相关信息都只在香港处理。Apple 为商店分发和系统服务进行的信息处理由其隐私说明覆盖。
3. 保存多久
- 账号资料、累计成绩和章节足迹在账号有效期间保留；每人保留最近 200 局详情，进行中的记录不因数量限制清理。
- 账号登录会话最长有效 7 天，可提前撤销。验证邮件令牌有效 30 分钟，重设密码令牌有效 15 分钟；过期令牌由服务维护清理。
- 邮件发送限额记录保留约 24 小时。删除账号后仅保留不含账号关联的发送时间戳，供全局发送限额使用，到期清理。
- 服务器访问日志每天轮换，保留 14 份轮换记录及当天日志，约 15 天。支持邮件仅在处理请求所需期间保留，你可以申请清理。
发布前的隔离一致性副本可能包含后来已删除的数据，按 7 天到期自动清理；如服务器停机，到期清理会在恢复后执行。副本不用于日常服务，不会自动恢复账号。若无法可靠确认并重新执行制作副本之后发生的账号删除，禁止将旧副本恢复上线。
4. 查看、退出与永久删除
登录后在「我的旅程」查看个人记录。需要删除时，点首页昵称打开账号面板，选择「永久删除账号」，重新输入当前密码和「永久删除」确认后提交。
删除会立即从在线数据库移除账号、会话、邮件令牌、个人成绩、逐局记录与章节足迹，所有设备退出，正在进行的联机旅程结束。搭档保留自己的记录，其中你的昵称替换为「已注销的同行者」。删除不可恢复。
卸载 App 不会删除服务器账号。退出登录仅撤销当前登录，不会删除游玩记录。忘记密码时，可先从登录页申请邮件重设，再删除账号。
关于数据访问、更正或清理，可联系 pilotlee@foxmail.com。处理请求时可能需要核实身份，我们只会要求必要的信息；客服联系不替代 App 内删除入口。
5. 安全、年龄与更新
客户端传输使用 HTTPS/WSS，邮件服务连接使用 TLS。密码使用独立随机盐和 scrypt 摘要，登录及邮件令牌使用摘要保存；个人记录按账号权限访问，成绩由服务器计算。没有系统能保证绝对安全。
当前没有儿童专用账号或监护人同意机制，商店年龄分级不替代适用的数据保护要求。如你认为信息被不当提交，请联系支持。信息处理方式变化时，我们会更新本页；重要变化会按适用要求说明。
Privacy Notice
Updated October 21, 2026 · Provider: Peilong Li
Contact: pilotlee@foxmail.com
Information and purposes
This notice covers the Glow Together iPhone app and services at biesatang.lipeilong.cn. Accounts are optional. Registration uses your email, nickname, assigned account ID, creation time and verification status. Passwords are stored as salted hashes, not plaintext. Sessions keep you signed in.
Online play processes room details, roles, controls and game state. Signed-in players keep their run dates, partner nickname, chapters, time, falls, collected lights, scores, stars and end reasons. Your history is private to your account; your partner sees your nickname in their own shared-run record, never your email. Guest-only runs and solo practice are not stored as account history.
For security and troubleshooting, servers process IP addresses, request times and paths, response status, User-Agent and referrer information. Security records include session and email-token hashes and sending timestamps. Email action tokens use URL fragments, which are not sent as part of the page request. The app stores haptic preferences, offline best scores and sign-in cookies on your device. Support email contains the details and attachments you choose to send.
Data is used to provide and protect the game, authenticate accounts, send requested emails, preserve personal records and provide support. We do not sell personal information or use it for cross-app or cross-site advertising tracking. There are no ads, in-app purchases or advertising, attribution or behavioral analytics SDKs in the current version.
Providers and locations
Game and account services run on Alibaba Cloud in Hong Kong. Requested account messages use Alibaba Cloud DirectMail, configured in the Hangzhou region. It processes recipient addresses, message content, action links and delivery status. Your email provider also handles messages. Not all related processing therefore occurs in Hong Kong. Apple explains its own processing for distribution and system services.
Retention
Account details and cumulative chapter results remain while the account is active. Each player keeps up to 200 recent run details; active runs are not removed by that limit. Sessions expire within seven days unless ended sooner. Verification and reset tokens expire after 30 and 15 minutes respectively and are removed by maintenance. Email-send limits use records for approximately 24 hours; after account deletion, only unlinked send timestamps remain until expiry.
Access logs rotate daily with 14 rotated files plus the current day, approximately 15 days in total. Support messages are kept for the time needed to handle a request; you can request cleanup.
An isolated consistency copy made before a release may contain data deleted afterward. It expires after seven days and is automatically cleaned up; if the server is offline, cleanup runs after it resumes. This copy is not used for normal service and does not automatically restore accounts. An old copy must not be restored to the live service unless account deletions since its creation can be reliably identified and reapplied.
Your account and choices
View your records under “我的旅程” (my journeys). To delete, sign in, tap your nickname, choose “永久删除账号”, enter your password and the confirmation text “永久删除”, then submit. Your account, sessions, email tokens and personal game records are removed immediately from the live database. All devices are signed out and active co-op play ends. Your partner retains their own record with your nickname replaced by an anonymous label. Deletion cannot be undone.
Uninstalling does not delete a server account; signing out does not delete history. Recover your password first if needed. Contact support about applicable access, correction or deletion requests. We may request necessary identity verification; support contact does not replace in-app deletion.
Security and updates
Client traffic uses HTTPS/WSS, and the email-service connection uses TLS. Passwords use individually salted scrypt hashes; session and email tokens are stored as hashes. Records are access-controlled and scores are calculated by the server. No system can guarantee absolute security.
The current service has no child-specific account or parental-consent system. App Store age ratings do not replace applicable privacy requirements. Contact us about improperly submitted information. We will update this notice when practices change and explain material changes as applicable.