隐私政策 · 星爆幸存者
Privacy Policy · Nova Survivors
适用应用：星爆幸存者（Nova Survivors，包名 com.novasurvivors.game）
最后更新：2026 年 11 月 7 日 · 生效日期：2026 年 11 月 7 日
Applies to: Nova Survivors (package name com.novasurvivors.game)
Last updated: 7 November 2026 · Effective: 7 November 2026
本政策说明 Nova Studio（下称“我们”）在你游玩《星爆幸存者》时如何处理你的信息。我们只收集让游戏正常运转所必需的数据，不出售你的个人信息，也不把它用于与游戏无关的用途。
1. 我们收集哪些信息
| 类别 | 具体内容 | 何时收集 |
|---|---|---|
| 账号标识 | 账号 UID、登录方式（游客 / 平台账号）、平台返回的账号标识、你在游戏内设置的昵称与头像。若你创建本地账号，用户名由你自定，口令以不可逆的 scrypt 哈希保存，我们不保存明文口令。 | 创建账号或首次云同步时 |
| 游戏数据 | 关卡进度、已解锁角色与天赋、装备与背包、金币与钻石余额、设置项。以 JSON 形式保存，用于跨设备恢复。 | 启用云存档时 |
| 购买记录 | 商品 ID、平台订单号、购买令牌、金额、币种、订单状态与时间。用于发货、补单、退款与防欺诈。银行卡号与支付凭据由 Google Play 处理，我们从不接触。 | 进行内购时 |
| 排行榜数据 | 你的昵称、分数、角色与上榜时间。排行榜是公开功能，其他玩家可以看到这些内容。 | 你提交成绩时 |
| 技术日志 | IP 地址、请求时间、请求路径、响应状态、客户端版本。用于限流、防刷、排查故障与安全审计。 | 访问我们的服务器时 |
| 广告标识符 | 由 Google AdMob 收集的广告 ID（GAID）、设备型号与系统版本、粗略位置（由 IP 推断）。用于展示与统计广告。 | 展示广告时 |
2. 我们不收集的信息
本应用未申请以下权限，因此不会读取：精确位置、通讯录、短信、通话记录、照片与文件、麦克风、相机、日历、已安装应用列表。我们不收集你的真实姓名、邮箱地址或手机号，也没有接入任何第三方行为分析或崩溃上报 SDK。
3. 我们如何使用这些信息
- 提供游戏服务：保存与恢复进度、同步角色与设置、发放已购买的道具。
- 交易与客服：核对订单、补发未到账的商品、处理退款与申诉。
- 安全与公平：识别作弊、异常刷取与攻击行为，限制滥用。
- 广告：通过 AdMob 展示广告，并据此获得收入以维持运营。
我们不会为了营销目的向第三方出售、出租你的个人信息，也不会用它做与上述目的无关的画像。
4. 第三方服务
游戏集成了下列第三方 SDK，它们会按各自的政策处理数据。我们无法控制其行为，建议你阅读对应政策：
- Google Play 结算服务（内购）：policies.google.com/privacy
- Google AdMob（广告）：policies.google.com/technologies/ads，并提供广告 ID 的控制说明
- Google Play 游戏服务（如你使用平台登录或成就）：policies.google.com/privacy
- TapTap SDK（如你在 TapTap 渠道使用其登录）：developer.taptap.io/privacy
你可以在设备设置中重置或删除广告 ID：Android「设置 → Google → 广告」。
5. 存储位置与保留期限
游戏服务器由阿里云托管，机房位于美国。若你位于其他地区，使用本游戏意味着你同意将上述数据传至该机房处理。
- 账号与游戏数据：保留至你申请删除账号，或我们终止本游戏的运营时。账号连续 24 个月无登录的，我们可能在提前通知后清理。
- 订单记录：按税务与会计要求保留，通常为交易完成后 3 年。
- 服务器访问日志：按日滚动保存，最多保留 30 天（实际短于该上限）。
6. 我们如何保护数据
客户端与服务器之间的通信使用 HTTPS 加密；口令使用 scrypt 加盐哈希存储；数据库与缓存只能由后端服务以专用账号访问，不对外提供应用接口；管理接口需要独立凭据。但没有任何系统能保证绝对安全，请妥善保管你的账号。
7. 你的权利
你可以要求查阅、更正、导出或删除我们持有的你的数据，也可以撤回对云同步的授权（撤回后游戏仍可离线游玩）。请通过下方邮箱联系我们，我们会在 30 天内答复。删除账号后，除法律要求保留的交易记录外，其余数据将被清除且无法恢复。
8. 儿童隐私
本游戏不面向 13 岁以下儿童，我们不会有意收集儿童的个人信息。若你是家长或监护人，发现孩子向我们提供了信息，请联系我们，我们会尽快删除。
9. 政策变更
当我们新增功能或调整数据处理方式时，会更新本页面并修改顶部日期。重大变更会在游戏内提示。
10. 联系我们
数据控制者：Nova Studio
邮箱：sheteng@live.cn
我们通常在 3 个工作日内回复。
This policy explains how Nova Studio ("we") handles your information when you play Nova Survivors. We collect only what the game needs to work, we do not sell your personal information, and we do not use it for purposes unrelated to the game.
1. What we collect
| Category | Details | When |
|---|---|---|
| Account identifiers | Account UID, sign-in method (guest or platform account), the identifier returned by that platform, and the nickname and avatar you choose in game. If you create a local account, the username is chosen by you and the passphrase is stored as an irreversible scrypt hash — we never store it in plain text. | When you create an account or first sync |
| Game data | Stage progress, unlocked characters and talents, equipment and inventory, coin and gem balances, settings. Stored as JSON so your progress can be restored on another device. | When cloud saves are enabled |
| Purchase records | Product ID, store order ID, purchase token, amount, currency, order status and timestamps, used to deliver items, restore missing purchases, handle refunds, and prevent fraud. Card numbers and payment credentials are handled by Google Play; we never see them. | When you make a purchase |
| Leaderboard data | Your nickname, score, character, and submission time. Leaderboards are public — other players can see this content. | When you submit a score |
| Technical logs | IP address, request time, request path, response status, client version, used for rate limiting, abuse prevention, troubleshooting, and security auditing. | When your client contacts our servers |
| Advertising identifiers | Advertising ID (GAID), device model and OS version, and coarse location inferred from IP, collected by Google AdMob to serve and measure ads. | When ads are shown |
2. What we do not collect
The app does not request the following permissions, so it cannot access: precise location, contacts, SMS, call logs, photos or files, microphone, camera, calendar, or the list of installed apps. We do not collect your real name, email address, or phone number, and we have not integrated any third-party analytics or crash-reporting SDK.
3. How we use it
- Run the game: save and restore progress, sync characters and settings, deliver purchased items.
- Transactions and support: verify orders, re-deliver missing items, process refunds and appeals.
- Safety and fairness: detect cheating, abnormal currency generation, and attacks; limit abuse.
- Advertising: show ads through AdMob, which funds ongoing development.
We do not sell or rent your personal information for marketing, and we do not build profiles unrelated to the purposes above.
4. Third-party services
The game integrates the following third-party SDKs, which process data under their own policies:
- Google Play Billing (in-app purchases): policies.google.com/privacy
- Google AdMob (advertising): policies.google.com/technologies/ads, plus Google's advertising ID controls
- Google Play Games Services (if you sign in or use achievements): policies.google.com/privacy
- TapTap SDK (if you sign in through that store): developer.taptap.io/privacy
You can reset or delete your advertising ID in Android settings under Google → Ads.
5. Where data is stored and for how long
Game servers are hosted on Alibaba Cloud in a data center located in the United States. By using the game you consent to the transfer and processing of the data described above in that location.
- Account and game data: kept until you ask us to delete your account, or until we discontinue the game. If an account has not been used for 24 months, we may delete it after notifying you.
- Order records: kept as required by tax and accounting law, typically 3 years after the transaction.
- Server access logs: rotated daily, retained for no more than 30 days (in practice, less).
6. Security
Traffic between the client and our servers is encrypted with HTTPS. Passphrases are stored as salted scrypt hashes. Databases and caches are accessed only by the backend service using dedicated credentials and expose no public application interface; administrative endpoints require separate credentials. No system is perfectly secure; please keep your account credentials safe.
7. Your rights
You may request access to, correction of, export of, or deletion of the data we hold about you, and you may withdraw consent for cloud sync (the game remains playable offline). Contact us at the address below; we respond within 30 days. After deletion, all data is erased except transaction records we must keep by law, and it cannot be recovered.
8. Children
The game is not directed to children under 13, and we do not knowingly collect their personal information. If you are a parent or guardian and believe a child has provided us with information, contact us and we will delete it promptly.
9. Changes
When we add features or change how data is handled, we update this page and the date at the top. Material changes are announced in game.
10. Contact
Data controller: Nova Studio
Email: sheteng@live.cn
We usually reply within 3 business days.