大海巡時代 Haixun隱私權政策 Privacy Policy
「大海巡時代」（以下稱「本遊戲」）是一款在瀏覽器上玩的多人海上遊戲，網址是 https://dahaixun.com/。本政策說明本遊戲會收集哪些資料、怎麼使用、存在哪裡，以及你可以怎麼刪除。
1. 用 Threads 登入時讀取的資料
「用 Threads 登入」是選用功能，不登入也能玩。登入時本遊戲只申請 Threads 的 threads_basic 權限，並且只讀取：
- Threads 用戶 ID：用來確認帳號是真的。
- Threads 帳號名稱（username）：顯示在你的船名牌上，並加上「✅ 已驗證」標記。
- Threads 大頭貼：印在你的船旗和名牌上。
本遊戲不會讀取你的貼文、回覆、私訊、追蹤名單或任何其他資料，也不會代你發文、按讚或追蹤任何人。
Threads 發給本遊戲的存取權杖（access token）只在登入那一刻用來讀取上面三項資料，用完立即丟棄，不會儲存。登入成功後，伺服器會簽發一張有效 90 天的「驗證票」（內容只有你的 Threads 用戶 ID、帳號名稱和到期時間，並附數位簽章），存在你自己的瀏覽器裡；之後連線時附上，伺服器驗證簽章後就知道名牌上的帳號是你本人。
2. 你在遊戲裡自己填寫或上傳的資料
- 暱稱、Threads 帳號（未登入時自己填寫，名牌不會有 ✅）、IG 帳號（選填）。
- 大頭貼照片、船帆圖案、「我想分享」的文字和圖片（皆選填）。
- 船的外型、顏色和角色造型。
- 在海上傳送的對話泡泡。
3. 資料存在哪裡、保存多久
| 資料 | 存放位置 | 保存期間 |
|---|---|---|
| 個人資料、船和角色設定、上傳的圖片、驗證票、封鎖名單、遊戲進度 | 你自己的瀏覽器（localStorage） | 直到你登出或清除瀏覽器資料；驗證票 90 天後失效 |
| 連線中的名牌資料（暱稱、Threads 帳號名稱、大頭貼、船與角色外觀、分享內容）、位置、對話泡泡 | 遊戲伺服器的記憶體 | 只在你連線期間存在，離線後即消失，不寫入資料庫 |
| IG 帳號 | 連線期間在伺服器記憶體 | 同上；只會在「互追成立」時傳給對方 |
| 檢舉紀錄（見第 5 點） | 遊戲伺服器儲存空間 | 保存至處理完畢；可來信要求刪除 |
本遊戲沒有會員資料庫，不會把你的 Threads 資料存在伺服器上。
4. 誰看得到你的資料
- 同一海域的玩家：看得到你的暱稱、Threads 帳號名稱、大頭貼、船和角色外觀、分享內容，以及距離夠近時的對話泡泡。你可以選擇隱身。
- 互追成立的玩家：雙方都對彼此按「追蹤」後，才會互相看到 Threads 主頁連結；IG 帳號只在你勾選「互追成立時，公開我的 IG」且互追成立時才會給對方。
- 你封鎖的玩家看不到你，你也看不到對方。
- 本遊戲不會出售、出租或分享你的資料給任何廣告商或第三方。
5. 檢舉
你檢舉其他玩家時，伺服器會保存一筆檢舉紀錄，內容包括：雙方的 Threads 帳號名稱與遊戲內識別碼、被檢舉者暱稱、海域、時間、你填寫的原因，以及當下畫面上最近幾則對話。這些紀錄只由營運者用來處理騷擾、冒用等違規行為。
6. 第三方服務
- Meta Threads：提供登入，適用 Threads 隱私權政策。
- Cloudflare：主機與網路服務，會依其政策處理連線所需的 IP 位址和技術紀錄。
- Google Analytics：統計匿名的造訪與使用情形（例如人數、使用的裝置），會使用 Cookie。本遊戲不會把你的 Threads 資料傳給 Google。你可以用瀏覽器設定封鎖 Cookie，或安裝 Google Analytics 停用外掛程式。
- Google Fonts、jsDelivr：提供字型和 3D 繪圖程式庫，下載時會收到你的 IP 位址。
- 挪威氣象局（MET Norway）：伺服器向其查詢海域天氣，不會傳送任何玩家資料。
7. 刪除你的資料
- 在遊戲設定畫面按「登出」，即刪除瀏覽器中的驗證票；清除本網站的瀏覽器資料，即刪除所有遊戲資料。
- 到 Threads App →「設定」→「帳號」→「網站權限」移除「海巡 Haixun」，即撤銷授權。移除時 Meta 會通知本遊戲，因伺服器沒有保存你的 Threads 資料，不需要另外刪除。
- 資料刪除狀態說明：https://dahaixun.com/api/auth/threads/deletion
- 要刪除檢舉紀錄或有其他問題，請來信聯絡我們（見第 10 點）。
8. 兒童
本遊戲不針對 13 歲以下兒童設計；使用 Threads 登入需符合 Threads 的年齡規定。
9. 政策更新
政策內容如有修改，會更新本頁的生效日期；重大變更會在遊戲內公告。
10. 聯絡我們
大海巡時代營運者：s890142s2009@gmail.com
"Haixun" (大海巡時代, "the Game") is a multiplayer browser game at https://dahaixun.com/. This policy explains what data the Game collects, how it is used and stored, and how you can delete it.
1. Data read when you log in with Threads
Log in with Threads is optional; you can play without it. The Game requests only the Threads threads_basic permission and reads only:
- Threads user ID – to confirm the account is genuine.
- Threads username – shown on your boat's name tag with a "✅ verified" badge.
- Threads profile picture – shown on your boat's flag and name tag.
The Game does not read your posts, replies, messages, followers or any other data, and never posts, likes or follows on your behalf.
The access token issued by Threads is used only once, at login, to read the three items above, and is discarded immediately; it is never stored. After login, the server signs a 90-day "verification ticket" (containing only your Threads user ID, username and expiry time, plus a signature) that is kept in your own browser and sent when you connect, so the server can verify that the name tag belongs to you.
2. Data you enter or upload in the Game
- Nickname, Threads username (self-entered if not logged in; no ✅ badge), Instagram username (optional).
- Profile photo, sail image, and "share" text and image (all optional).
- Boat appearance, colors and character design.
- Chat bubbles you send at sea.
3. Where data is stored and for how long
| Data | Location | Retention |
|---|---|---|
| Profile, boat and character settings, uploaded images, verification ticket, block list, game progress | Your own browser (localStorage) | Until you log out or clear browser data; the ticket expires after 90 days |
| Name tag data while connected (nickname, Threads username, profile picture, boat/character appearance, share content), position, chat bubbles | Game server memory | Only while you are connected; gone when you disconnect. Never written to a database |
| Instagram username | Server memory while connected | Same as above; sent to another player only when you mutually follow each other |
| Reports (see section 5) | Game server storage | Until the report is handled; deletable on request |
The Game has no user database and does not store your Threads data on its servers.
4. Who can see your data
- Players in the same sea area can see your nickname, Threads username, profile picture, boat/character appearance, share content, and chat bubbles when nearby. You can choose to sail hidden.
- Mutual followers: Threads profile links are revealed only after both players tap "follow" on each other. Your Instagram username is shared only if you enable "Show my IG when we mutually follow" and a mutual follow happens.
- Players you block cannot see you, and you cannot see them.
- The Game does not sell, rent or share your data with advertisers or other third parties.
5. Reports
When you report another player, the server keeps a report record containing both players' Threads usernames and in-game IDs, the reported player's nickname, sea area, time, the reason you entered, and the few most recent chat lines on screen. Reports are used only by the operator to handle harassment, impersonation and other violations.
6. Third-party services
- Meta Threads – login; subject to the Threads Privacy Policy.
- Cloudflare – hosting and network; processes IP addresses and technical logs needed to serve connections.
- Google Analytics – anonymous visit and usage statistics (e.g. visitor counts, device types), using cookies. The Game never sends your Threads data to Google. You can block cookies in your browser or install the Google Analytics Opt-out Add-on.
- Google Fonts, jsDelivr – fonts and the 3D graphics library; they receive your IP address when downloaded.
- MET Norway – the server fetches weather for sea areas; no player data is sent.
7. Deleting your data
- Tap "Log out" in the Game's settings to delete the verification ticket from your browser; clearing this site's browser data deletes all game data.
- In the Threads app, go to Settings → Account → Website permissions and remove "海巡 Haixun" to revoke access. Meta then notifies the Game; since no Threads data is stored on the server, nothing else needs to be deleted.
- Data deletion status: https://dahaixun.com/api/auth/threads/deletion
- To delete a report record or for any other request, email us (section 10).
8. Children
The Game is not directed at children under 13. Logging in with Threads requires meeting Threads' age requirements.
9. Changes
If this policy changes, the effective date above will be updated; significant changes will be announced in the Game.
10. Contact
Haixun operator: s890142s2009@gmail.com