FloraSpan 隱私政策 / Privacy Policy

FloraSpan 隱私政策

生效日：2026 年 10 月 26 日 適用於 App Store 上的 FloraSpan（植語蔓生），開發者為個人開發者 candan。

English version follows the Chinese text. Jump to English →

一句話版本

FloraSpan 不收集、不傳輸、不儲存你的任何個人資料。

這不是一句口號，而是一個技術事實：這個 App 不會連線到任何伺服器，包含我自己的伺服器 —— 因為我根本沒有伺服器。例外有兩個，都是 Apple 自己的服務：Apple 的 Game Center，它預設關閉，只有在你自己打開之後才會連線（見下方「Game Center（可選）」）；以及免費局數的計數這一個數字，會由 iOS 同步到你自己的 iCloud 帳戶（見下方「免費局數的計數」）。

我不收集什麼

我沒有接入任何分析（analytics）、廣告、歸因或崩潰回報的第三方 SDK。具體而言，以下資料 完全不存在於我這一端：

姓名、電子郵件、電話、地址
裝置識別碼、IDFA、廣告識別碼
IP 位址、地理位置
使用行為、遊玩紀錄、當機紀錄
聯絡人、照片、麥克風、相機、健康資料

FloraSpan 不要求任何系統權限，也不會跳出任何權限請求。它沒有自己的帳號系統、沒有登入、沒有使用者生成內容；排行榜與成就走的是 Apple 的 Game Center，而且是可選的。

在 App Store 的隱私標籤上，這對應到 「未收集資料」（Data Not Collected）。

留在你裝置上的資料

App 會在你的裝置本機儲存四項資料，用來讓遊戲能運作。這些資料從未離開你的裝置：

項目	內容	目的
`save.current`	一局進行中的牌局（盤面、手牌、回合數）	讓你關掉 App 之後能續玩
`settings`	語言、動畫速度、音量、高對比、觸覺強度、教學進度、購買狀態、打賞次數、Game Center 開關	記住你的偏好
`stats`	每局結束後的一筆紀錄（難度、分數、seed、時長），以及由此推導的成就與免費局數	顯示統計、歷史紀錄與成就、計算免費額度
`daily`	最近 30 天的每日挑戰成績與連續天數	顯示每日挑戰卡

這些資料以 iOS 的標準本機偏好設定機制儲存，受你裝置的系統保護。

刪除方式：移除 App 即可。iOS 會連同上述全部資料一併刪除，我這邊沒有任何備份可以保留或復原 —— 因為我從來沒有拿到過。

你也可以在 App 內「設定 → 丟棄存檔」單獨清掉進行中的牌局。

免費局數的計數

前 3 局完整對局免費。為了讓「移除 App 再重裝」不會重置這個額度，App 會把你已經打完幾局這一個數字另外存在兩個地方：

位置	內容	說明
這台裝置的 iOS 鑰匙圈（Keychain）	一個整數，例如 `3`	只在這台裝置上，不同步
你自己的 iCloud 鍵值儲存	同一個整數	由 iOS 同步到你的 Apple 帳戶；沒有登入 iCloud 時只留在本機

這個數字不含任何個人資訊：沒有分數、沒有時間、沒有裝置識別碼。
它存在的是你的 iCloud，不是我的伺服器 —— 我沒有伺服器，也無法讀取它。
它在移除 App 之後仍會保留，這正是它存在的目的。它只會增加、不會減少，而且只用來判斷免費額度。

購買

FloraSpan 提供一項一次性的 App 內購買（完整版解鎖），以及三檔完全自願的「支持開發者」打賞。

付款完全由 Apple 處理。 我不會、也無法取得你的姓名、付款方式、信用卡號或帳單地址。
我從 Apple 收到的只有匯總的銷售報表（例如某天某地區賣出幾份），其中不包含任何可識別個人的資訊。
App 不做伺服器端的收據驗證 —— 購買狀態與打賞次數單純記錄在你裝置本機的 settings 裡。
「還原購買」透過你的 Apple 帳戶進行，由 Apple 驗證，我不經手。

Apple 如何處理你的付款資料，適用 Apple 的隱私政策。

Game Center（可選）

FloraSpan 支援 Apple 的 Game Center：每日挑戰排行榜、三個難度分段的最高分排行榜，以及 19 項成就。

預設關閉。 只有在你打開「設定 → Game Center」，或按下每日挑戰卡上的「排行榜」時，App 才會請 iOS 登入 Game Center。在那之前，沒有任何資料離開你的裝置。
打開之後送出去的只有遊戲成績：每日挑戰的分數、各難度的最高分、已達成的成就。這些資料送到的是 Apple 的 Game Center 伺服器，不是我的 —— 我沒有伺服器。
登入、暱稱與個人檔案由 Apple 管理。我不會取得你的 Apple 帳戶、電子郵件或任何聯絡資訊；排行榜上顯示的是你在 Game Center 設定的暱稱。
你隨時可以在「設定」裡關掉開關（之後不再上傳），或在 iOS 的「設定 → Game Center」登出、管理你的資料。

Game Center 如何處理你的資料，適用 Apple 的隱私政策。

當機與診斷資訊

如果 App 發生錯誤，錯誤訊息會寫進裝置記憶體中最近 20 筆的暫存區。

這份資訊不會自動上傳到任何地方。
只有在你主動按下「設定 → 匯出診斷資訊」時，它才會顯示出來，讓你自己決定要不要複製給我。
App 關閉後這份暫存區就消失。

如果你選擇把它寄給我，那份純文字裡包含的是錯誤訊息與時間戳記，不含個人資料。寄不寄由你決定。

兒童

FloraSpan 的年齡分級為 4+：無暴力、無廣告、無聊天或社群功能、無使用者生成內容、無外部連結（App 內除外）。由於它不收集任何資料，它不會、也無法收集兒童的個人資料；Game Center 的使用適用 Apple 對兒童帳戶的規範。

第三方

FloraSpan 使用的開源軟體套件（Flutter 及其相關函式庫）皆在你的裝置上本機執行，不會傳輸資料給任何第三方。App 內不含廣告網路、社群 SDK 或追蹤工具。

唯一的第三方是 Apple，範圍僅限於 App 的下載、更新、App 內購買，以及你自己選擇打開的 Game Center。

政策變更

若這份政策有變更，我會更新本頁的生效日。由於 App 本身沒有任何收集資料的程式碼，任何實質性的變更都需要 App 本身的改版，因此也會在 App Store 的版本更新說明中一併說明。

聯絡

有任何隱私相關問題，請來信：

candanweng@gmail.com

Privacy Policy

Effective 26 October 2026 This policy covers FloraSpan on the App Store, published by candan, an individual developer.

The short version

FloraSpan collects no personal data, transmits no data, and stores nothing about you.

That is a technical fact rather than a promise: the app never connects to any server, including mine — I do not operate one. There are two exceptions, both Apple's own services: Apple's Game Center, which is off by default and only connects after you turn it on yourself (see "Game Center (optional)" below); and the free-game count, a single number that iOS syncs to your own iCloud account (see "The free-game count" below).

What I do not collect

The app integrates no analytics, advertising, attribution, or crash-reporting SDK of any kind. None of the following exists on my side:

Name, email address, phone number, postal address
Device identifiers, IDFA, advertising identifiers
IP address or location
Usage behaviour, play history, crash reports
Contacts, photos, microphone, camera, health data

FloraSpan requests no system permissions and shows no permission prompts. It has no accounts of its own, no sign-in, and no user-generated content; leaderboards and achievements go through Apple's Game Center, and only if you choose to.

On the App Store privacy label this corresponds to Data Not Collected.

Data that stays on your device

The app stores four items locally so the game can function. None of it ever leaves your device:

Item	Contents	Purpose
`save.current`	One game in progress (board, hand, turn)	Lets you resume after closing the app
`settings`	Language, animation speed, volumes, high contrast, haptic strength, tutorial progress, purchase state, tip count, Game Center switch	Remembers your preferences
`stats`	One record per finished game (difficulty, score, seed, duration), plus achievements and the free-game count derived from them	Shows statistics, game history and achievements, and counts the free quota
`daily`	The last 30 days of daily challenge results and your streak	Shows the daily challenge card

These are stored using the standard iOS local preferences mechanism and are protected by your device's own security.

To delete it: remove the app. iOS deletes all of the above with it. I hold no backup that could survive this, because I never received the data in the first place.

You can also clear just the game in progress from Settings → Discard save inside the app.

The free-game count

The first three complete games are free. So that removing and reinstalling the app does not reset that allowance, the app keeps one number — how many games you have finished — in two more places:

Where	Contents	Notes
This device's iOS Keychain	One integer, e.g. `3`	This device only; not synced
Your own iCloud key-value store	The same integer	Synced by iOS to your Apple Account; stays local if you are not signed in to iCloud

The number contains nothing personal: no scores, no times, no device identifiers.
It lives in your iCloud, not on a server of mine — I run none, and I cannot read it.
It survives removing the app, which is the point. It only ever goes up, and it is used for nothing but the free allowance.

Purchases

FloraSpan offers one one-time in-app purchase (full unlock), plus three entirely optional "Support the developer" tips.

Payment is handled entirely by Apple. I do not and cannot see your name, payment method, card number, or billing address.
What I receive from Apple is aggregate sales reporting (for example, how many units sold in a region on a given day). It contains nothing that identifies a person.
The app performs no server-side receipt validation — purchase state and tip count are simply recorded in settings on your device.
Restore Purchases runs through your Apple Account and is verified by Apple. I am not involved.

Apple's handling of your payment data is governed by Apple's Privacy Policy.

Game Center (optional)

FloraSpan supports Apple's Game Center: a daily challenge leaderboard, a best-score leaderboard for each of the three difficulty bands, and 19 achievements.

Off by default. The app asks iOS to sign in to Game Center only when you turn on Settings → Game Center, or tap Leaderboard on the daily challenge card. Until then, nothing leaves your device.
Once it is on, only game results are sent: your daily challenge score, your best score per difficulty, and the achievements you have earned. They go to Apple's Game Center servers, not mine — I have none.
Sign-in, your nickname and your profile are managed by Apple. I never receive your Apple Account, email address or any contact details; leaderboards show the nickname you set in Game Center.
You can turn the switch off in Settings at any time (nothing more is sent), or sign out and manage your data in iOS Settings → Game Center.

Game Center's handling of your data is governed by Apple's Privacy Policy.

Crashes and diagnostics

If the app hits an error, the error message is written to an in-memory buffer holding the 20 most recent entries.

This is never uploaded anywhere automatically.
It is shown only when you actively tap Settings → Export diagnostics, so you can decide whether to send it to me.
The buffer is discarded when the app closes.

If you choose to email it, the plain text contains error messages and timestamps, not personal data. Sending it is entirely your choice.

Children

FloraSpan is rated 4+: no violence, no advertising, no chat or social features, no user-generated content, no outbound links from within gameplay. Because it collects no data at all, it does not and cannot collect personal information from children; Game Center use is subject to Apple's rules for child accounts.

Third parties

The open-source packages FloraSpan uses (Flutter and related libraries) run locally on your device and transmit nothing to third parties. The app contains no ad networks, social SDKs, or tracking tools.

The only third party involved is Apple, and only for app distribution, updates, in-app purchases, and Game Center if you choose to turn it on.

Changes to this policy

If this policy changes, I will update the effective date on this page. Because the app contains no data-collection code, any substantive change would require a new app version, and would also be described in the App Store release notes.

Contact

For any privacy question, write to: