Shen Gui Pai — Privacy Policy
This policy explains what information Shen Gui Pai (“the Game”) collects, how it is used and protected, and how you can manage or delete it. The Game is an online 1-vs-1 card battle game and collects only the minimum information needed to run.
1. Information we collect
| Information | Purpose | Where and how long |
|---|---|---|
| Username | Sign-in; shown to your opponent in matches | Server, until you delete your account |
| Password | Authentication. The server stores only a bcrypt hash — never the password itself, and it cannot be recovered from the hash | Server, until you delete your account |
| Avatar choice | Shown in the lobby and in matches | Server, until you delete your account |
| Email address (optional) | If you choose to link one, used to reset your password: we send verification codes to it when you link it or reset your password | Server, until you change it or delete your account; codes are stored only as a hash, expire after 10 minutes and are deleted once used |
| Sign-in token | Keeps you signed in between launches. The server stores only a SHA-256 digest of it | Your device and the server; expires after 30 days without use, and is revoked immediately when you log out, sign in on another device, or delete your account |
| IP address | Network connection, rate-limiting sign-in attempts, troubleshooting | Used during the connection; may appear in server logs used only for troubleshooting and cleared periodically |
| Diagnostics (error logs, abnormal exits) with device model, OS version and game version | Finding and fixing bugs. Does not include your username or anything else that identifies you | Server, kept for 90 days |
| Usage statistics (app launches, how far the tutorial got, how often each screen is opened, which accounts signed in each day) | Improving the Game. Counted per day; your individual actions are not recorded | Server, kept for 90 days; sign-in records are deleted with your account |
| Rating, rank and match history (both line-ups, scores, result, rating change) | Showing your record, match history and rank; computing ranked rating | Server. When you delete your account, your username is removed from match records (only anonymous match data is kept) |
| Friends, friend requests and block list | Friends, friendly matches and blocking | Server, until you remove the friend / unblock, or either player deletes their account |
| Private chat messages | Chatting with friends | Server, until you or the other player deletes their account |
| Reports | Handling misconduct | Server. When you delete your account, your username is removed from reports |
| Local settings (language, volume) | Remembering your preferences | Your device only |
| Feedback (what you write, game version, device model) | Handling the problems and suggestions you send | Server. When you delete your account, your username is removed from your feedback |
| Guest account device identifier | Finding the same guest account again on this device when you choose "Play as guest" (SHA-256 hashed, not the device serial number) | Server, until you save the guest account as a full account or delete it |
| Google account identifier (optional) | Recognizing the same Google account after you sign in with or link Google; we do not read your contacts or other Google data | Server, until you delete your account |
| Jade, avatar frames, mail and season pass progress | Collection, shop, mail rewards and the season pass | Server, until you delete your account; mail is removed when it expires (usually 30 days) |
| Purchase records (transaction ID, product, time) | Verifying App Store purchases and granting jade exactly once; payment is handled by Apple and we never see your payment details | Server. When you delete your account, your username is removed from purchase records |
The Game does not collect your real name, phone number, contacts, location, photos, or advertising identifier (IDFA). It contains no ads and no third-party analytics or advertising SDKs.
2. Use and sharing
This information is used only to provide the Game. We do not sell, rent, or share it with third parties, except where required by law or necessary to protect players and the service. Verification emails are delivered through an email service provider, which processes your email address only to deliver that message. Your username, avatar and rank are visible to the players you are matched against, to your friends, and on the global leaderboard (top 100 each season); other players can find you by username and send you a friend request; private messages are visible only to you and the other player.
3. Security
All traffic between the app and the server is encrypted with TLS; the in-match fast path (UDP) is also encrypted and integrity-checked, with keys delivered only over TLS. Passwords and sign-in tokens are stored on the server only as one-way hashes. The server is located in [服务器所在地区].
4. Your choices: log out and account deletion
- Log out: tap your own avatar in the lobby to open your profile, then “Log out”. This removes the saved sign-in token from your device and revokes it on the server.
- Delete account: in your profile, tap “Delete account” and confirm. The server immediately and permanently deletes your account, password hash, avatar, linked email address, sign-in token, friends, block list and private messages, and removes your username from match records and reports. This cannot be undone.
- For questions about your information or this policy, contact support@sggame.games.
5. Children
The Game is not directed to children under 13, and we do not knowingly collect their personal information. If you believe we have, please contact us and we will delete it.
6. Changes
We may update this policy as the Game changes. Updates will be posted on this page with a new effective date; significant changes will also be announced in the Game.