隱私政策（繁體中文）

生效日：2026-08-16

Sonarium（下稱「本遊戲」）由 Binlight Studio（下稱「我們」）開發與發行。這是一款深海邏輯解謎遊戲：沒有帳號、不需登入，解謎本身完全不需要連網。會用到網路的只有四件事：分析與當機報告、廣告、版本更新檢查、購買，見第 3 到第 6 節。以下如實說明存了什麼、傳了什麼。

1. 我們不收集的東西

• 姓名、電子郵件、電話等任何身分資料（本遊戲沒有帳號系統）
• 精確位置、通訊錄、相簿、麥克風、相機
• 我們不做跨 App／跨網站追蹤，不把任何資料賣給別人，也不分享給資料仲介

2. 存在你裝置上的資料（本機存檔）

遊戲進度只儲存在你的裝置上，包含：

• 已解關卡、每次嘗試的次數與用時、圖鑑與發現紀錄、每日連勝、徽章
• 劇情讀到哪裡（已讀的幕間、看過的事件與開場、夜間航次的紀錄）
• 你自己填或選的名字（船名、代號、劇情中的選擇）
• 你的設定（音效、震動、通知與提醒時間、顯示語言）
• 幾個時間標記（首次開啟日期、提醒與橫幅的顯示紀錄），用來決定哪天該提醒你、哪些提示不必再出現

刪除 App 即刪除全部進度，我們沒有副本、也無法替你復原。上面這些資料不會離開你的裝置：本機通知（每日提醒、連勝保護）完全在裝置上排程，不經任何伺服器；你填的名字與劇情選擇也從不上傳。

3. 分析與當機報告（Firebase）

為了改善遊戲（例如哪一關讓太多人卡住、哪個版本會閃退），我們使用 Google 的 Firebase Analytics 與 Firebase Crashlytics。它們會自動收集：

• 使用資料：遊戲事件、App 版本、裝置型號、作業系統版本、語言、依 IP 推得的國家層級地區。遊戲事件記的都是進度節點：開場與教學有沒有完成、哪一關開始、完成或中途離開、每日掃描與連勝、劇情讀到哪一段、停了多久、按過幾次分享、超過嘗試上限後的重新掃描
• 診斷資料：當機堆疊、當機當下的裝置狀態、效能資料
• 裝置層級識別碼：Firebase 安裝 ID、供應商識別碼（IDFV）

事件只帶固定的代號、數字與是非值（例如關卡代號、花了幾毫秒、有沒有跳過教學），不包含盤面內容，也不包含你輸入的任何文字。這些資料不與你的身分連結（我們手上本來就沒有你的身分資料），不用於跨 App 追蹤，只用於統計與除錯。Crashlytics 資料由 Google 保留 90 天。詳見 Google 隱私權政策 與 Firebase 資料處理條款。

我們另外使用 Firebase Remote Config，讓少數設定（例如分享網址、建議更新的版本門檻）不必改版就能調整。它每次啟動會向 Google 取一次設定，過程中會送出上述的 Firebase 安裝 ID；它不會回傳你的遊玩資料。

4. 廣告（Google AdMob）

本遊戲只有一種廣告：每日掃描或巡邏超過嘗試上限後，你主動選「觀看廣告以重新掃描」，才會播一支獎勵式影片。沒有橫幅與插頁，解題途中永遠不會跳出廣告。

• 我們的廣告以非個人化廣告（NPA）投放：廣告依當下情境（如 App 類別、粗略地區）挑選，不依據你在其他 App 或網站的行為。
• 我們完全不追蹤，也不使用 Apple 的廣告追蹤識別碼（IDFA），所以你不會看到「要求追蹤」的系統彈窗（App Tracking Transparency）。
• AdMob 為了播放廣告、防詐欺與頻次控制，仍會處理裝置資訊與 IP 位址等資料，詳見 Google 廣告技術政策。
• 歐洲經濟區（EEA）／英國／瑞士的玩家：我們沒有啟用同意訊息，因為送出的一律是非個人化請求；App 啟動時不會出現任何同意詢問。

5. 版本更新檢查

在 iOS 上，App 啟動時會向 Apple 的 App Store 查詢一次本遊戲目前上架的版本號，用來在你的版本過舊時提示更新。這個查詢只送出本遊戲的 App 識別碼，不含任何你的資料；與所有網路連線一樣，Apple 會看到你的 IP 位址。

6. 購買

完整版是一次買斷，沒有訂閱、不會自動續扣。付款由 Apple 的 App Store 處理，整段流程都在 Apple 那邊完成。我們收不到你的姓名、卡號或帳單資料；App 只會從 Apple 得到一個答案：這個 Apple 帳號有沒有買過完整版——有，後續章節就解開。換裝置或重裝後按「恢復購買」，問的也是同一個問題。要退款請找 Apple（reportaproblem.apple.com）。

7. 兒童隱私

本遊戲為一般向作品（預估分級 4+），不屬於「兒童專用」類別，也不針對兒童行銷。我們不收集任何身分資料，廣告採非個人化投放。若你是家長，對孩子的資料有疑慮，請來信。我們手上沒有可刪的個人資料，但會替你確認清楚。

8. 你的權利

我們不持有可識別你個人的資料，所以多數存取或刪除請求的答案是「我們沒有你的資料」。裝置上的進度，刪 App 就清掉了。Firebase 上的分析資料只掛在裝置的安裝識別碼下，對不回任何一個人，我們也就無法單獨找出或刪除「你的」那一份。若你仍有疑慮，來信我們必回。

9. 政策變更

政策若有實質變更（例如新增資料收集），我們會更新本頁；App 設定頁裡的「隱私政策」連的就是這一頁，你看到的永遠是最新版。重大變更會在 App Store 的更新說明裡註明。

10. 聯絡我們

binlight.support@gmail.com

Privacy Policy (English)

Effective date: 2026-08-16

Sonarium ("the game") is developed and published by Binlight Studio ("we"). It is a deep-sea deduction puzzle: no account, no sign-in, and solving puzzles needs no connection at all. Only four things use the network — analytics and crash reporting, ads, an update check, and purchases (sections 3 to 6). Here is what is stored and what is sent.

1. What we do not collect

• No name, email, phone number, or any identity data (there is no account system)
• No precise location, contacts, photos, microphone, or camera access
• We do not track you across other apps or websites, we never sell your data to anyone, and we never share it with data brokers

2. Data stored on your device (local save)

Your progress is stored only on your device. It covers:

• Solved levels, per-attempt counts and times, the discovery log, daily streak, and badges
• How far you have read (interludes read, story events and openings seen, your record of night voyages)
• Names and choices you enter or pick yourself (ship name, crew mark, story choices)
• Your settings (sound, haptics, notifications and reminder time, display language)
• A few timestamps (first-open date, which reminders and banners you have already seen), used to decide when to remind you and which hints no longer need to appear

Deleting the app deletes it all; we keep no copy and cannot restore it. None of it leaves your device: local notifications (daily reminder, streak protection) are scheduled entirely on-device and never touch a server, and the names and story choices you enter are never uploaded.

3. Analytics and crash reporting (Firebase)

To improve the game (which level stalls players, which build crashes), we use Google's Firebase Analytics and Firebase Crashlytics. They automatically collect:

• Usage data: game events, app version, device model, OS version, language, and country-level region derived from IP. The events are progress markers: whether the opening and tutorial were completed, which levels were started, finished or abandoned, daily scans and streaks, how far into a story section you read and for how long, taps on share, and rescans after the attempt limit
• Diagnostics: crash stack traces, device state at crash time, performance data
• Device-level identifiers: Firebase installation ID, identifier for vendor (IDFV)

Events carry only fixed identifiers, numbers, and yes/no values (which level, how many milliseconds, whether the tutorial was skipped) — never board contents, never text you typed. This data is not linked to your identity (we have none to link it to), is not used for cross-app tracking, and is used only for aggregate statistics and debugging. Crashlytics data is retained by Google for 90 days. See Google's Privacy Policy and the Firebase Data Processing Terms.

We also use Firebase Remote Config so that a few settings (the share URL, the version threshold at which we suggest updating) can be adjusted without shipping a new build. It fetches those settings from Google once per launch, sending the Firebase installation ID named above; it sends back none of your gameplay data.

4. Advertising (Google AdMob)

This game has exactly one kind of ad: a rewarded video that plays only when you run out of attempts in the Daily Scan or a Patrol and choose to watch one for a rescan. There are no banners or interstitials, and no ad ever interrupts a puzzle.

• Ads are served as non-personalized ads (NPA): chosen from context (app category, coarse region), not from your behavior in other apps or websites.
• We do no tracking at all and never touch Apple's advertising identifier (IDFA), so the system's "Allow tracking?" prompt (App Tracking Transparency) never appears.
• To serve ads, prevent fraud, and cap frequency, AdMob still processes device information and IP address; see Google's advertising technologies policy.
• Players in the EEA / UK / Switzerland: as required by law, a Google-certified consent message (UMP) appears when the app launches, and you may decline. Consent or not, the request we send is the same non-personalized one; whether an ad still comes back after a decline is AdMob's call. The Daily Scan is one puzzle a day: if today's goes unsolved, tomorrow brings a new one.

5. Checking for updates

On iOS, the app asks Apple's App Store once at launch which version of this game is current, so it can prompt you when your build is out of date. That request sends only this game's app identifier and none of your data; as with any network request, Apple sees your IP address.

6. Purchases

The Full Version is a one-time purchase: there is no subscription and nothing renews. Payment is handled by Apple's App Store from start to finish. We never receive your name, card number, or billing details; the only thing the app gets back from Apple is one answer — whether this Apple Account has bought the Full Version. If it has, the later parts open. "Restore Purchase", after a reinstall or on a new device, asks Apple that same question. For refunds, use Apple's reportaproblem.apple.com.

7. Children's privacy

Sonarium is a general-audience game (expected rating 4+). It is not in the Kids category and is not directed at children. We collect no identity data and serve only non-personalized ads. If you are a parent with concerns about your child's data, write to us. In practice we hold no personal data to delete, but we will gladly check for you.

8. Your rights

Because we hold no data that identifies you, most access or deletion requests come down to "we have no data about you." The save on your device is erased by deleting the app. Analytics on Firebase sit under a device-level installation identifier tied to no one, so we cannot single out or delete "your" share of them. If you still have concerns, write to us — we always reply.

9. Changes

If this policy materially changes (say, new data collection), we update this page; the Privacy Policy link in the app's settings opens this same page, so what you read is always current. Major changes are also noted in the App Store release notes.

10. Contact

binlight.support@gmail.com