Privacy Policy / 隐私政策

English Version

Thank you for using Rovilo ("the App"). We respect your privacy. This policy explains what information is collected, used and shared on Android devices, and how you can control it.

1. Data We Collect

Data type	Collected?	Purpose
Advertising ID (AAID), app set ID and other device identifiers	Yes	Google AdMob uses these to serve ads, control ad frequency and prevent invalid traffic; Firebase uses an app-instance identifier for analytics
Approximate location (inferred from IP address)	Yes	The App requests no location permission and never reads your device's GPS. However, Google AdMob and Firebase Analytics receive your IP address, from which an approximate, city-level location may be inferred, for ad targeting and analytics
App activity (anonymous in-game events: game start, level complete, hint used, ad shown/clicked, purchase funnel)	Yes	Understand retention and feature performance (Firebase Analytics); ad delivery and measurement (Google AdMob)
Crash logs and diagnostics (crash stack traces, app launch time, hang rate, energy usage)	Yes	Diagnose crashes and improve stability (Firebase Crashlytics); SDK diagnostics (Google AdMob)
Game save data (progress, coins, preferences)	Local only	Stored on your device only; never uploaded to any server. Uninstalling or clearing data removes it.
Accounts, contacts, photos and other sensitive data	No	The App has no account system and requests no contact or photo permission. It requests no location permission either — see the approximate-location row above for how IP-inferred location is handled

2. Third-Party SDKs

Google AdMob / Google User Messaging Platform (UMP): serve rewarded/interstitial ads; UMP obtains consent where required (e.g. EEA). See Google Privacy Policy.
Google Play Billing (Unity IAP): processes the "Remove Ads" non-consumable purchase and returns only purchase receipts.
Firebase Analytics / Crashlytics: anonymous events and crash reporting.

Sharing. The data types marked "Yes" in section 1 are transmitted to Google and processed there for advertising, analytics and fraud-prevention purposes. We do not sell your data to anyone, and we operate no server of our own that stores it.

3. Children's Privacy

The App is intended for users aged 13 and above. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Our ad requests are not configured as child-directed. If you believe that a child under 13 has provided us with personal information, please contact us using the address in section 5 and we will delete it.

4. Your Rights and Choices

Consent: in applicable regions you will see a UMP consent form on first launch and can accept or reject personalized ads.
Deletion: we operate no server and all game saves are local — uninstall the App or clear its data to remove them. For the data held by the advertising and analytics SDKs (device identifiers, approximate location, app activity, diagnostics), you may request deletion at any time by emailing slx97065227@gmail.com; we will pass the request to the relevant provider and reply within 30 days.
Security: everything the App sends is transmitted over encrypted connections (HTTPS/TLS). Nothing is stored on a server we control, because we operate none.
Opt out of personalized ads: reset your Advertising ID in Android Settings → Privacy → Ads.
Purchases: buying "Remove Ads" disables ads for all time; purchases can be restored on the in-app store screen.

5. Changes and Contact

We may update this policy; the latest version will always be published on this page. For privacy questions: slx97065227@gmail.com.

中文版

感谢你使用 Rovilo（「本应用」）。我们非常重视你的隐私。本隐私政策说明本应用在 Android 设备上收集、使用和共享哪些信息，以及你可以如何管理这些信息。

1. 我们收集的数据

数据类型	是否收集	用途
广告标识符（Advertising ID / AAID）、应用集 ID 及其他设备标识符	是	Google AdMob 用于展示广告、控制广告频次并防止无效流量；Firebase 使用应用实例标识符做统计分析
大致位置（依据 IP 地址推算）	是	本应用不申请定位权限，也从不读取设备 GPS。但 Google AdMob 与 Firebase Analytics 会收到你的 IP 地址，据此可能推算出城市级的大致位置，用于广告投放与统计分析
应用活动（匿名游戏内事件：开始游戏、完成一局、使用提示、广告展示/点击、内购漏斗）	是	了解玩法留存与功能效果（Firebase Analytics）；广告展示与效果衡量（Google AdMob）
崩溃日志与诊断信息（崩溃堆栈、启动耗时、卡顿率、耗电情况）	是	诊断崩溃与改进稳定性（Firebase Crashlytics）；广告 SDK 自身的诊断（Google AdMob）
游戏存档（数独进度、货币、设置偏好）	仅本地	存档只保存在你的设备上，不上传任何服务器；卸载应用或清除数据会删除存档
账号、邮箱、通讯录、照片等个人敏感信息	否	本应用不包含账号系统，不请求任何联系人或相册权限，也不申请定位权限——IP 推算位置的说明见上表「大致位置」一行

2. 第三方 SDK

本应用接入以下第三方服务，它们可能处理广告标识符等设备信息：

Google AdMob / Google User Messaging Platform（UMP）：展示激励视频、插屏广告；UMP 用于在欧盟等地区征得用户同意。开发者可通过 Google 隐私政策了解详情。
Google Play Billing（Unity IAP）：处理「去广告」内购商品结算，仅返回购买凭据，不收集个人身份信息。
Firebase Analytics / Crashlytics：匿名事件埋点与崩溃统计。

关于共享。第 1 节中标记为「是」的数据会传输给 Google，并在那里用于广告、分析与防欺诈目的。我们不会将你的数据出售给任何其他方，自身也不运营任何存储这些数据的服务器。

3. 儿童隐私

本应用面向 13 岁及以上用户，不面向 13 岁以下儿童。我们不会有意收集 13 岁以下儿童的个人信息，也不会将广告请求配置为面向儿童。如你认为有 13 岁以下儿童向我们提供了个人信息，请通过第 5 节的联系方式告知我们，我们将予以删除。

4. 你的权利与选择

同意管理：在欧洲经济区（EEA）等适用地区，首次启动时你会看到 UMP 同意弹窗，可选择接受或拒绝个性化广告；之后也可随时在系统设置中管理。
删除数据：我们不运营服务器，所有游戏存档仅存于设备本地，卸载应用或在系统设置中清除应用数据即可删除。对于广告与分析 SDK 所持有的数据（设备标识符、大致位置、应用活动、诊断信息），你可随时发邮件至 slx97065227@gmail.com 请求删除，我们会将请求转达相应服务商并在 30 天内答复。
传输安全：本应用发出的一切数据均经加密连接（HTTPS/TLS）传输。我们自身不运营任何服务器，因此没有由我们控制的服务器留存这些数据。
关闭个性化广告：可在 Android 系统「隐私 → 广告」中重置广告标识符。
内购：购买「去广告」商品后你将不再看到广告；恢复购买可在应用内商店页面操作。

5. 政策更新与联系方式

我们可能更新本政策，更新后会在本页面发布新版本并同步更新「最后更新」日期。如有隐私相关问题，请联系：

slx97065227@gmail.com