游客优先，云端功能由你选择。Guest-first, with cloud features by choice.

发布状态：本文件为产品实现草案，正式公开前必须由合格律师完成专业复核。Publication status: this is an implementation draft and must receive professional review by qualified counsel before public launch.

版本与最后更新：Version and last updated: 2026-08-03-draft

适用范围与地区Scope and region

本说明覆盖 getzed.app、accounts.getzed.app 以及接入统一账号的 GetZed 产品。账号与云数据服务仅面向中国大陆以外地区；服务端会在账号创建、会话建立及每个用户数据 API 强制阻止 CN。地区无法确认时，账号创建和云端写入会被拒绝。游客页面和本地存档仍可按产品规则使用。This notice covers getzed.app, accounts.getzed.app, and GetZed products connected to the shared account. Account and cloud-data services are offered only outside mainland China; the server blocks CN at account creation, session establishment, and every user-data API. If country cannot be confirmed, account creation and cloud writes are denied. Guest pages and local saves remain available under each product's rules.

我们处理的数据Data we process

• Google 身份：Google 稳定账号标识、邮箱、邮箱验证状态、显示名称和可选头像。我们只申请 openid、email、profile，不申请通讯录、云盘或其他 Google 数据。Google identity: stable Google account identifier, email, email-verification status, display name, and optional profile image. We request only openid, email, and profile—not contacts, Drive, or other Google data.
• 账号与安全：GetZed 用户 ID、会话和设备标识、浏览器/用户代理、IP 与 Cloudflare 提供的国家代码、登录/退出/撤销记录、条款与隐私版本确认、限流和安全审计事件。Account and security: GetZed user ID, session and device identifiers, browser/user agent, IP and Cloudflare-provided country code, sign-in/sign-out/revocation records, acknowledged Privacy and Terms versions, rate-limit data, and security audit events.
• 产品云数据：按产品分区的工作台、挑战、收藏、阅读进度、最佳成绩、积分流水、带版本与校验和的游戏存档，以及导入和同步元数据。服务器从会话确定用户归属，不接受客户端指定的 userId 或权限。Product cloud data: product-scoped workbench items, challenges, favorites, reading progress, best scores, credit ledger entries, versioned game saves with checksums, and import/sync metadata. The server determines ownership from the session and does not accept a client-selected userId or permissions.
• 购买与支持（仅在使用时）：订单或收据标识、商品权益、退款状态以及你主动发送给支持邮箱的信息。完整支付卡资料由支付服务商处理，不应发送给 GetZed。Purchases and support (only when used): order or receipt identifiers, entitlements, refund status, and information you choose to email to support. Full payment-card details are handled by the payment provider and must not be sent to GetZed.

处理目的Purposes

数据用于建立稳定的 GetZed 身份、维持安全会话、执行地区限制、提供用户选择的云存档与跨设备同步、管理积分/购买权益、解决冲突与幂等导入、提供导出和删除、响应支持请求，以及发现滥用和调查安全事件。不会出售个人数据，也不会把 Google 资料用于广告画像。Data is used to establish a stable GetZed identity, maintain secure sessions, enforce region restrictions, provide user-selected cloud save and cross-device sync, manage credits/purchase entitlements, resolve conflicts and idempotent imports, provide export and deletion, answer support requests, and detect abuse or investigate security events. We do not sell personal data or use Google profile data for advertising profiles.

服务提供商Service providers

Google 提供 OAuth/OIDC 身份验证；Google 会依其自身政策处理登录交互。Cloudflare 提供 DNS/CDN、安全、Workers、D1 数据库和 Web Analytics。Cloudflare Web Analytics 的产品说明称其分析信标不使用 Cookie 或 localStorage 进行个人跟踪。未来支付功能会在启用前披露具体支付服务商。Google provides OAuth/OIDC authentication and processes the sign-in interaction under its own policy. Cloudflare provides DNS/CDN, security, Workers, D1 database, and Web Analytics. Cloudflare describes its analytics beacon as not using cookies or localStorage for individual tracking. Any future payment provider will be named before purchases are enabled.

Google Privacy Policy · Cloudflare Privacy Policy

保留期限Retention

• 有效会话最长 7 天；撤销、全部退出或账号删除会使其立即失效。过期会话记录由维护任务清理。Active sessions last at most 7 days; revocation, all-device logout, or account deletion invalidates them immediately. Expired session rows are removed by maintenance.
• OAuth 流程记录有效 10 分钟，幂等请求记录有效 7 天，限流桶在窗口结束后清理；Google Token 不写入数据库。OAuth flow records are valid for 10 minutes, idempotency records for 7 days, and rate-limit buckets are removed after their windows; Google tokens are not written to the database.
• 账号、条款确认和产品云数据保留至用户删除账号或相关数据；为解决争议、安全和合法义务，审计事件计划最多保留 24 个月。Account, consent, and product cloud data remain until the user deletes the account or relevant data; audit events are planned to remain for up to 24 months for disputes, security, and legal obligations.
• 备份轮换计划不超过 30 天；删除后的数据可能在受限备份中停留至轮换完成，除非法律要求更长保留。Backup rotation is planned not to exceed 30 days; deleted data may remain in restricted backups until rotation completes unless law requires longer retention.

本地导入、冲突与回滚Local import, conflicts, and rollback

登录不会自动上传匿名玩家数据。首次云端导入前会明确询问；成功上传后仍暂时保留本地存档和现有导出能力。脑洞骰子使用稳定 client_id 幂等导入；血战鬼子采用确定性最佳成绩合并；搞钱帝国遇到版本冲突时必须由用户选择本地版或云端版，不会静默覆盖。Signing in does not automatically upload anonymous player data. The user is asked before the first cloud import; local saves and existing export tools remain temporarily after upload. Brain Dice uses stable client_id values for idempotent imports; Xuezhan uses deterministic best-score merging; Tycoon requires the user to choose local or cloud when revisions conflict and never silently overwrites.

导出、删除与选择Export, deletion, and choices

账号中心允许查看状态、撤销会话、退出全部设备、导出数据，以及删除账号和云端数据。删除 GetZed 账号不会删除 Google 账号，也不会自动删除仍在设备上的本地存档。用户可以不登录并继续以游客方式使用公开功能。请求或问题可发送至 NhmacphersonellisF7@iname.com。The account center lets users view status, revoke sessions, sign out all devices, export data, and delete the account and cloud data. Deleting a GetZed account does not delete the Google account or automatically erase local saves still on a device. Users may stay signed out and continue using public guest features. Requests or questions can be sent to NhmacphersonellisF7@iname.com.

跨境处理与安全Cross-border processing and security

Google 和 Cloudflare 运营全球基础设施，数据可能在用户所在国家/地区之外处理。正式发布前将确定 D1 数据驻留配置并完成适用的跨境与供应商合同评估。GetZed 使用传输和静态加密能力、HttpOnly/Secure Cookie、最小权限、访问隔离、审计和备份，但任何系统都无法保证绝对安全。Google and Cloudflare operate global infrastructure, so data may be processed outside the user's country. Before launch, GetZed will select D1 data-residency settings and complete applicable cross-border and vendor-contract review. GetZed uses encryption in transit and at rest, HttpOnly/Secure cookies, least privilege, access isolation, audit, and backup controls, but no system can guarantee absolute security.

未成年人Minors

账号和云数据功能不面向 13 岁以下儿童，也不面向所在地区未达到数字同意年龄且没有监护人有效授权的用户。若发现不符合条件的未成年人账号，请联系支持邮箱，我们会调查并删除相应数据。具体游戏的年龄分级或家长提示仍由产品页面说明。Account and cloud-data features are not directed to children under 13, or to users below their local age of digital consent without valid guardian authorization. If an ineligible minor's account is identified, contact support so we can investigate and delete the data. Product pages remain responsible for game-specific age ratings and parental guidance.

条款确认不是登录本身Sign-in is not legal acceptance

Google 登录只验证身份，不代表用户接受全部法律文件。启用云端数据前，账号服务会单独显示并记录当时的隐私和条款版本及用户确认。重大更新会要求新的确认。Google sign-in verifies identity; it does not mean the user accepts every legal document. Before cloud data is enabled, the account service separately presents and records the Privacy and Terms versions and the user's acknowledgement. Material updates require a new acknowledgement.