抽衛生紙 隱私權政策
生效日：2026-09-20｜聯絡信箱：support@unrealprologue.com
《抽衛生紙》（下稱「本遊戲」）由 UnrealPrologue（下稱「我們」）開發與營運。本政策說明我們收集哪些資料、如何使用與保護，以及您擁有的權利。
一、我們收集哪些資料
- 帳號識別碼：本遊戲以 Firebase 匿名帳號登入，僅產生一組隨機使用者識別碼（uid）。我們不會要求您提供姓名、電子郵件、電話或社群帳號。
- 遊戲資料：遊戲進度、經濟數值、圖鑑收藏、成就、設定，以及您自行輸入的暱稱。
- 遊玩紀錄：對局結果、遊戲內操作紀錄（含用於防弊比對的抽獎過程事件）、資源異動紀錄與登入時間。
- 當機與診斷資訊：當程式發生錯誤時，Firebase Crashlytics 會蒐集裝置型號、作業系統版本、當機堆疊與應用程式狀態。
- 意見回饋內容：您在遊戲內主動送出的回饋文字。
- 購買紀錄：您透過 Google Play 購買金幣包時，伺服器會保存購買憑證、訂單編號、商品與金額摘要及購買時間，用於發貨、退款沖銷與帳務對帳。付款資料（如信用卡號）由 Google Play 直接處理，本遊戲不會取得。
- 裝置識別碼：Firebase Analytics 會讀取裝置的廣告 ID，僅用於使用量數據分析。
二、我們不收集哪些資料
- 不投放廣告，本遊戲未整合任何廣告 SDK，不將廣告 ID 用於廣告投放或跨應用程式追蹤。
- 不收集精確位置、通訊錄、相片、簡訊或通話紀錄。
- 不販售您的個人資料。
三、資料用途
- 保存並跨裝置回復您的遊戲進度。
- 提供排行榜等遊戲功能。
- 診斷並修正當機與錯誤，改善穩定度。
- 驗證遊戲請求來自未經竄改的正版應用程式（Google Play Integrity），防止作弊。
- 處理您送出的意見回饋。
- 驗證金幣包購買並發放金幣，處理退款沖銷與帳務對帳。
- 彙總營運指標（不用於廣告投放）。
四、第三方服務
本遊戲使用 Google LLC 提供之下列服務處理上述資料：Firebase Authentication（匿名登入）、Cloud Firestore（遊戲資料儲存）、Firebase Crashlytics 與 Analytics（當機與使用診斷）、Google Play Integrity API（正版驗證）、Google Play In-App Updates（版本更新）、Google Play 結帳（應用程式內購買付款）。資料儲存於 Google Cloud Platform 之伺服器，Google 對資料之處理受其隱私權政策約束：https://policies.google.com/privacy。
五、資料保留
遊戲資料在您的帳號存續期間保留。當機診斷資訊依 Firebase Crashlytics 預設保留政策留存。營運分析用的資料庫鏡像會逐筆保存資料異動時的原始內容，詳見下節「保留例外」。
六、帳號刪除
如何刪除帳號
請於遊戲內「設定」頁點選「刪除帳號」，即可直接送出刪除請求，這是最快且建議的途徑。若您已無法開啟或安裝本遊戲，仍可寄信至support@unrealprologue.com請求刪除；請在信中說明您要刪除帳號，我們會與您確認身分後代為執行。
刪除範圍
送出刪除請求後，伺服器會刪除下列與您帳號相關的所有資料：
- 玩家主檔與其全部子資料（經濟數值、進度、設定、圖鑑收藏、成就、資源異動紀錄）
- 排行榜紀錄
- 登入紀錄
- 抽獎 session 紀錄（含回放事件）
- 對局結果紀錄
- 掉落紀錄
- 您送出過的遊戲內意見回饋
- Firebase 帳號本身（刪除後即無法再用原帳號登入）
刪除完成後，上述資料將無法復原。
保留例外
我方另外維運一份用於營運分析的資料庫鏡像，逐筆保存前述資料異動時的原始內容，包含使用者識別碼、裝置資訊與您送出過的意見回饋文字。帳號刪除後，這些既有紀錄列不會被移除或匿名化，且目前未設定保留期限上限；我方會在後續的每日營運指標計算中將您的資料排除，但這僅代表該資料不再被計入指標統計，不代表原始紀錄已被刪除。
此外，刪除操作本身會在伺服器記錄檔留下一行紀錄（含使用者識別碼與各類刪除筆數），作為刪除確實執行過的稽核證據，依平台預設的記錄檔保留政策留存。
購買交易紀錄在帳號刪除後仍會保留，並標記為屬於已刪除帳號。這些紀錄包含使用者識別碼、購買憑證、訂單編號與收據摘要，基於退款回收與會計、稅務對帳之營運需要而例外保留。
若刪除過程中途失敗，遊戲會顯示刪除失敗；此時您的帳號與大部分資料仍在，可再次操作刪除。若重試後仍持續失敗，請透過下方聯絡方式與我們聯繫。
七、您的權利
- 查詢：主要遊戲資料可於遊戲內個人頁面檢視。
- 刪除：依前節「帳號刪除」之途徑辦理；刪除後遊戲進度無法復原。
- 其他權利：依個人資料保護法，您得請求更正、補充或停止利用您的個人資料，請來信support@unrealprologue.com，我們將於合理期間內回覆。
八、資料安全
資料傳輸全程使用加密連線（HTTPS）；伺服器資料之存取受權限控管。惟任何網路傳輸與儲存方式均無法保證絕對安全，我們將於發現資安事件時依法通知並處置。
九、兒童隱私
本遊戲並非以未滿 13 歲之兒童為對象，我們不會在知情之情況下收集兒童之個人資料。若您認為我們誤收了兒童資料，請聯絡我們，我們將儘速刪除。
十、應用程式內購買與退款
- 本遊戲免費下載與遊玩，購買金幣包並非遊玩前提。金幣包為選購之虛擬物品，僅供遊戲內使用，不可兌換現金或轉讓。
- 價格以 Google Play 付款頁顯示為準；付款與發票由 Google Play 處理。退款除可依 Google Play 退款政策向 Google Play 申請外，就下述「台灣消費者權益」之解除契約與未成年消費退費，亦得直接向我們申請；經退款的金幣會自您的帳號扣回，已用罄時餘額可能為負值。
- 付費金幣可用於兌換隨機寶箱，兌換前可於遊戲內查看掉落機率資訊。
- 台灣消費者權益——契約審閱期間：您於購買前得合理審閱本購買與退款條款，審閱期間至少三日；我們不會要求您拋棄審閱期間。
- 台灣消費者權益——七日解除權：您自開始遊玩本遊戲之日起七日內，得以書面（包含來信 support@unrealprologue.com）通知我們解除契約，無須附理由且免負擔費用；我們將於解除生效後三十日內，以原付款方式或雙方另行約定之方式，退還您已購買但尚未使用之金幣或遊戲費用（得扣除必要成本）。
- 台灣消費者權益——未成年人消費與退費：未滿十八歲之限制行為能力人購買金幣前應取得法定代理人同意，家長並可透過 Google Play 家長監護與購買驗證功能管理消費；若限制行為能力人或無行為能力人未經法定代理人同意或未由其代為購買，法定代理人得備妥證明文件來信 support@unrealprologue.com，依本條公告之流程申請，經我們確認後退還尚未使用之遊戲費用。
- 如對購買或退款有疑問，請寄信至support@unrealprologue.com。
十一、政策變更
本政策如有更新，我們會更新本頁的生效日；重大變更會於遊戲內公告。
十二、聯絡我們
如對本政策、您的資料或帳號刪除有任何疑問，請寄信至support@unrealprologue.com。
Pull the Toilet Paper Privacy Policy
Effective date: 2026-09-20 | Contact: support@unrealprologue.com
Pull the Toilet Paper ("the game") is developed and operated by UnrealPrologue ("we", "us"). This policy explains what data we collect, how we use and protect it, and what rights you have.
1. Data We Collect
- Account identifier: the game signs you in with a Firebase anonymous account, which produces only a randomly generated user identifier (uid). We do not ask for your name, email address, phone number, or social accounts.
- Game data: progression, economy values, figurine collection, achievements, settings, and the nickname you choose.
- Gameplay records: session outcomes, in-game action records (including pull-session events used for anti-cheat verification), resource ledger entries, and sign-in times.
- Crash and diagnostic data: when the app fails, Firebase Crashlytics collects your device model, OS version, crash stack traces, and app state.
- Feedback content: the text you voluntarily submit through the in-game feedback form.
- Purchase records: when you buy a coin pack through Google Play, the server stores the purchase token, order ID, product and amount summary, and purchase time, used for delivery, refund reversal, and accounting reconciliation. Payment details (such as card numbers) are handled directly by Google Play and never reach the game.
- Device identifier: Firebase Analytics reads the device advertising ID, used only for usage analytics.
2. Data We Do Not Collect
- No ads. The game contains no ad SDK, and the advertising ID is never used for ad targeting or cross-app tracking.
- No precise location, contacts, photos, SMS, or call logs.
- We do not sell your personal data.
3. How We Use Data
- To store and restore your game progress across devices.
- To provide game features such as leaderboards.
- To diagnose and fix crashes and errors, improving stability.
- To verify that requests come from a genuine, untampered app (Google Play Integrity) and prevent cheating.
- To process the feedback you submit.
- To verify coin pack purchases and grant coins, and to process refund reversals and accounting reconciliation.
- To compute aggregate operational metrics (never for ad targeting).
4. Third-Party Services
The game uses the following services provided by Google LLC to process the data above: Firebase Authentication (anonymous sign-in), Cloud Firestore (game data storage), Firebase Crashlytics and Analytics (crash and usage diagnostics), the Google Play Integrity API (app authenticity), Google Play In-App Updates, and Google Play Billing (in-app purchase payments). Data is stored on Google Cloud Platform servers, and Google's processing is governed by its privacy policy: https://policies.google.com/privacy.
5. Data Retention
Game data is retained for as long as your account exists. Crash diagnostics are retained under Firebase Crashlytics' default retention policy. An analytics database mirror records each data change as it happened -- see "Retention Exception" below.
6. Account Deletion
How to Delete Your Account
Open the in-app Settings screen and select "Delete Account" to submit a deletion request directly -- this is the fastest and recommended route. If you can no longer open or install the game, you may instead email support@unrealprologue.com to request deletion; state in your message that you want your account deleted, and we will verify your identity and carry it out for you.
What Gets Deleted
Once a deletion request is submitted, the server deletes all of the following data associated with your account:
- Your player profile and all of its sub-data (economy values, progression, settings, figurine collection, achievements, resource ledger)
- Leaderboard entry
- Login history
- Pull session records (including replay events)
- Session outcome records
- Drop event records
- Any in-game feedback you submitted
- Your Firebase account itself (you can no longer sign in with it afterward)
This data cannot be recovered once deletion completes.
Retention Exception
We separately maintain an analytics database mirror that records each data change as it happened, including your user identifier, device information, and the text of any feedback you submitted. After your account is deleted, these existing mirrored records are not removed or anonymized, and no retention limit is currently configured for them; we exclude your data from future daily operational metric calculations going forward, but this only means the data no longer counts toward those metrics -- it does not mean the underlying records have been deleted.
The deletion request itself also leaves one server log line (your user identifier and the number of records removed per category) as proof that the deletion ran, retained under the platform's default log retention policy.
Purchase transaction records are retained after account deletion and marked as belonging to a deleted account. These records include your user identifier, purchase token, order ID, and receipt summary, and are retained as an operational exception for refund recovery and accounting or tax reconciliation.
If the deletion fails partway through, the app reports a failure; your account and most of your data are still present and you can request deletion again. If it keeps failing on retry, please contact us using the details below.
7. Your Rights
- Access: your main game data is viewable on the in-game profile screen.
- Deletion: use either route described in "Account Deletion" above; progress cannot be recovered afterward.
- Other rights: under Taiwan's Personal Data Protection Act you may request correction, supplementation, or cessation of use of your personal data. Email support@unrealprologue.com and we will respond within a reasonable period.
8. Data Security
All data is transmitted over encrypted connections (HTTPS), and access to server-side data is permission-controlled. No method of transmission or storage is perfectly secure; should a security incident occur, we will notify and act as required by law.
9. Children's Privacy
The game is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe we have done so, please contact us and we will delete it promptly.
10. In-App Purchases and Refunds
- The game is free to download and play; buying coin packs is never required to play. Coin packs are optional virtual items for in-game use only and cannot be exchanged for cash or transferred.
- Prices are those shown on the Google Play payment screen. Payment and invoicing are handled by Google Play. Refunds may be requested from Google Play under its refund policy; for the contract-withdrawal and minor-purchase refunds described under "Taiwan Consumer Rights" below, you may also request them directly from us. Refunded coins are deducted from your account, and the balance may become negative if the coins have already been spent.
- Purchased coins can be exchanged for random chests; drop rate information is available in-game before you exchange.
- Taiwan consumer rights — contract review period: Before purchasing you may reasonably review these purchase and refund terms; the review period is at least three days, and we will not ask you to waive it.
- Taiwan consumer rights — seven-day withdrawal: Within seven days from the day you start playing the game, you may notify us in writing (including by email to support@unrealprologue.com) to withdraw from the contract, without giving a reason and free of charge; within thirty days after the withdrawal takes effect we will refund the coins or game fees you have purchased but not yet used (necessary costs may be deducted), via the original payment method or another mutually agreed method.
- Taiwan consumer rights — minors' purchases and refunds: Users under 18 with limited legal capacity should obtain a legal guardian's consent before buying coins, and guardians can manage spending through Google Play's parental controls and purchase authentication; if a person with limited or no legal capacity purchased coins without the guardian's consent, the guardian may email support@unrealprologue.com with supporting documents to apply under the process announced in this section, and after our verification we will refund the unused game fees.
- For questions about purchases or refunds, email support@unrealprologue.com.
11. Changes to This Policy
If this policy changes, we will update the effective date on this page; significant changes will also be announced in-game.
12. Contact Us
For any question about this policy, your data, or account deletion, email support@unrealprologue.com.