珊瑚礁
隱私權政策
最後更新：2026 年 11 月 7 日（招募網頁加入「用 Google 帳號帶入 Email」與官方 LINE）
「珊瑚礁」（以下稱「本 App」）由紫芙數位（以下稱「我們」）提供。本政策說明我們收集哪些資料、怎麼使用，以及你有哪些選擇。
先說重點
- 不登入也能玩。不登入時，遊戲進度只存在你的手機裡。
- 你可以選擇用 Google 帳號登入，把進度備份到雲端、換手機也能接著玩。
- 只有你主動送出「回報問題」或「許願」時，那一次的內容才會傳給我們。
- 瓶中信是你主動寫的一句話，會匿名漂給今天有上線的另一位玩家看；對方看不到你是誰。請不要在瓶子裡寫出個人資料。
- App 當機時會把錯誤紀錄傳給我們修正（Google Firebase Crashlytics，只有正式版、可以在設定關掉）。
- 匿名使用數據（Google Firebase Analytics）：記你玩到哪一步、有沒有打開商店這類事，不含名字、帳號、存檔或廣告識別碼，用來改進遊戲；只有正式版、可以在設定關掉（26.11 之後的版本）。
- 本 App 含廣告（Google AdMob 提供），這部分會由 Google 蒐集廣告識別碼等資料。成為會員或購買「去廣告」後，不再載入廣告。
- 你可以隨時在 App 內刪除帳號，雲端上屬於你的資料會一併刪除。
我們收集的資料
| 資料 | 何時收集 | 用途 |
|---|---|---|
| 帳號資料：Google 帳號的電子郵件、顯示名稱，以及系統產生的帳號識別碼 | 你用 Google 登入時（由 Google Firebase Authentication 保存） | 辨識你的帳號、在 App 內顯示你登入的是哪個帳號 |
| 雲端存檔：遊戲進度（珊瑚、等級、珍珠、卡冊、任務、成就、你取的珊瑚暱稱與缸名、購買與會員狀態）、存檔時間、手機型號 | 登入後，自動備份與你按「立即同步」時 | 讓你換手機或重新安裝後取回進度；手機型號用來在「兩邊都有進度」時讓你分辨是哪一支手機的存檔 |
| 送禮與交換禮物：你的遊戲暱稱、禮物內容、你和收禮玩家的帳號 ID、時間 | 你用朋友的分享碼送禮給朋友，或在 11、12 月把禮物放進交換箱時 | 把禮物送到對方帳號；收到的玩家會看到你的遊戲暱稱（交換禮物還有你選的祝福語），看不到你的信箱或帳號。不想讓對方看到暱稱，可以先在玩家頁把暱稱改掉 |
| 回報問題內容 | 你送出回報時：你寫的說明、當下的畫面截圖（送出前可預覽或移除）、App 版本、機型、Android 版本、所在畫面、語言、字體縮放、是否去廣告或會員、珊瑚礁狀況摘要（例如等級、缸裡幾株、進行中的事件）、帳號識別碼，以及用 Google 登入時的帳號電子郵件（讓我們知道是哪個帳號回報的） | 重現並修正問題；把處理進度與獎勵送回你的 App |
| 許願內容（只限年訂閱會員） | 你送出許願時：許願文字、App 版本、帳號識別碼、送出時間 | 了解大家想要什麼功能；把評估結果通知你 |
| 分享碼與兌換紀錄 | 你在「會員」頁取得自己的分享碼，或輸入分享碼、兌換碼時：你的分享碼與被兌換的次數、兌換到的會員期限（含訂閱期間暫停保存的天數）、你兌換過哪些代碼與時間、當天嘗試兌換的次數、帳號識別碼 | 產生不重複的分享碼、發給你和朋友會員天數、避免同一組代碼被重複兌換或被猜代碼。朋友兌換你的分享碼時，我們不會讓對方看到你的信箱或名稱 |
| 瓶中信（匿名漂流瓶） | 你用 Google 登入、看過瓶中信規則並按「我知道了」之後，每天打開 App：當天「有上線」的紀錄（只有日期和一個隨機數）；沒開過瓶中信的人不會有這筆紀錄。你丟瓶子或回覆時：你寫的文字、送出時間、你的帳號識別碼與收到這則的帳號識別碼。你檢舉時：檢舉理由與那則內容。你封鎖時：被封鎖的帳號識別碼 | 把瓶子隨機交給今天上線的另一位玩家、讓收到的人回覆一次、限制每天的數量、處理檢舉與停權。收到的人只看得到文字，看不到你的帳號、名稱或信箱；誰寄給誰只有伺服器與開發者看得到。買了金色漂流瓶時，剩下幾個記在伺服器 |
| 缸參觀（缸參觀卡） | 你買了缸參觀卡並按「公開我的缸」時：你的遊戲暱稱、缸名、海景、缸裡珊瑚的種類與成長階段、缸友、公開期限。你幫別人的缸按讚時：你的帳號識別碼、那個缸與日期 | 讓其他玩家在「逛別人的缸」隨機看到你的缸並按讚、每天每個缸只算一個讚。其他玩家看得到你的暱稱與缸名，看不到你的帳號或信箱；參觀卡到期後就不會再被看到，刪除帳號時一併刪除。你檢舉一個缸時：你的帳號識別碼、檢舉理由、被檢舉缸的暱稱與缸名，用來讓管理員處理；管理員下架時，下架紀錄會保留暱稱、缸名與時間。刪除帳號時，你送出的檢舉一併刪除 |
| 每週主題缸 | 你在「逛別人的缸 › 本週主題缸」按「用我的缸參加」時：你的遊戲暱稱、缸名、海景、缸裡珊瑚的種類與成長階段、缸友。你投票時：你的帳號識別碼、投給哪個缸、那一週與日期。你檢舉參賽的缸時：你的帳號識別碼、檢舉理由、被檢舉缸的暱稱與缸名 | 讓其他玩家在那一週看到你的缸並投票、每人每天限 5 票、每週結算名次並發獎勵。其他玩家看得到你的暱稱與缸名，看不到你的帳號或信箱；被 3 個人檢舉會先藏起來。不需要缸參觀卡。刪除帳號時，你參加的缸、投票、檢舉與領獎紀錄一併刪除 |
| 缸友互訪 | 朋友用你的分享碼拜訪時：朋友看得到你的遊戲暱稱、缸名、海景、珊瑚與缸友。你拜訪朋友時：你的帳號識別碼、遊戲暱稱與拜訪日期會留在朋友那裡（「誰來拜訪」），朋友的愛心數加一 | 讓朋友互相拜訪、每天發拜訪獎勵。可以在「逛別人的缸」關掉「讓朋友用分享碼拜訪我的缸」；刪除帳號時，你的拜訪紀錄、愛心與留在朋友那裡的拜訪通知一併刪除 |
| 好友榜 | 你用分享碼拜訪朋友、或幫朋友餵珊瑚時，你們會互相記成好友（存在伺服器，只有伺服器看得到名單）。好友榜顯示：好友的遊戲暱稱、等級、圖鑑收錄種數、放流數 | 讓好友在「逛別人的缸 › 好友」互相比進度。好友看得到你的暱稱、等級、圖鑑種數與放流數，看不到你的帳號或信箱；關掉「讓朋友用分享碼拜訪我的缸」就不會出現在別人的好友榜。刪除帳號時，你的好友名單一併刪除，你也會從別人的名單移除 |
| 幫朋友餵 | 你幫朋友餵珊瑚時：你的帳號識別碼、遊戲暱稱與日期會留在朋友那裡（「誰幫你餵了」），每天幫了幾位記在伺服器 | 讓朋友回到 App 時知道是誰幫忙，並在他自己的手機補上營養與一點珍珠（不會改動朋友的存檔）；限制每天的次數。朋友看過就刪除；刪除帳號時，你留在朋友那裡的紀錄與次數一併刪除 |
| 全服復育目標 | 你登入後放流珊瑚時：你的帳號識別碼、那一週、這週放流了幾株（每週最多算 20 株）；全服這週的放流總數；你是否領過那週的獎勵 | 算出全服這週一起放流了幾株、達標後發獎勵給那週有放流的人。只公開全服的加總數字，不公開是誰放流。刪除帳號時，你的放流計數與領獎紀錄一併刪除 |
| 陪伴珊瑚的時間 | 你用 Google 登入、而且沒有在「設定 → 支援與關於」關掉「提供陪伴時間統計」時：最近 31 天每天開著 App 的分鐘數，以及累計分鐘數。只有分鐘數，不含你做了什麼 | 了解大家每天玩多久，用來改善遊戲內容。關掉這個設定會刪除雲端上的統計；沒登入時只記在手機上（給你自己在玩家頁看） |
| 幸運大獎（每日登入抽獎、幸運號碼、全服禮物） | 你用 Google 登入、每天第一次打開 App 時：伺服器記下你的帳號 ID 與帳號建立日期、最近 14 天有打開的日期、你是第幾位登入的玩家（第一次訂閱成功時另記第幾位訂閱會員），符合資格就報名當天的抽獎；中獎或拿到幸運號碼時，記下要送你的珍珠、抽數券、稱號與是否領過 | 判斷抽獎資格（防止灌小號）、每天抽出得獎者、把獎送到你的帳號；公開看板只顯示大約人數，不顯示帳號。抽獎名單保留 30 天後自動刪除；刪除帳號時一併刪除你的獎項、打開紀錄與號碼 |
| 封閉測試期間的使用紀錄（2026 年 10 月 19 日起）：Google 帳號的電子郵件與名稱、帳號識別碼、App 版本、有打開 App 的日期（台灣日期） | 封閉測試期間，你用 Google 登入後，每天第一次打開 App 時自動送出一次；沒登入不會記 | 確認誰參加了測試、測了幾天，好發放測試獎勵（高級會員）。不記錄你在 App 裡做了什麼 |
| 訂閱與購買紀錄 | 你購買或恢復購買時：Google Play 的購買憑證、訂閱方案與到期時間 | 確認會員資格（由我們的伺服器向 Google Play 查詢）、發放購買的道具、避免同一筆購買被重複領取；有購買次數限制的禮包，伺服器會記下訂單編號與購買時間來核對次數，超過時不發放並自動退款。付款由 Google Play 處理，我們看不到你的付款資料 |
| 當機報告：當機時的程式錯誤紀錄、手機型號、Android 版本、App 版本、安裝識別碼 | App 當機或發生嚴重錯誤時（Google Firebase Crashlytics，只有正式版會送） | 找出並修正造成當機的問題；不含存檔內容、帳號信箱或你寫的文字。可以在「設定 › 支援與關於 › 傳送當機報告」關閉 |
| 匿名使用數據：你做了哪種事（看完新手教學、新手任務線第幾步、前 15 級升級、看獎勵廣告、打開會員商店、按購買的商品代號、首頁新手禮包卡出現與點擊）、打開 App 的時間與次數、手機型號、Android 版本、App 版本、語言、大致國家（由網路位址判斷）、App 自己產生的安裝識別碼（不是廣告 ID，也不是你的帳號） | 不論有沒有登入，使用 App 時（Google Firebase Analytics，只有從 Google Play 安裝的正式版會送，26.11 之後的版本） | 了解多少人隔天、一週、一個月後還在玩，新手卡在哪一步，哪些功能和商品有人用，用來改進遊戲；購買金額由 Google Play 帳單自動統計。不含名字、Email、帳號識別碼、遊戲進度或廣告識別碼，不用來投放廣告，也不和其他資料合併辨識你。可以在「設定 › 支援與關於 › 傳送使用數據」關閉 |
| 廣告識別碼、裝置資訊、大致位置（由網路位址判斷）、廣告互動 | 開啟 App 時，只要你不是會員、也沒有購買去廣告。歐盟等地區會先請你同意 | 由 Google AdMob 提供與統計廣告、避免作弊。依 Google 隱私權政策處理。你可以隨時在手機系統設定重設或刪除廣告識別碼 |
只在你手機上、不會傳出的資料
- 步數（「陪珊瑚散步」，需要你允許「體能活動」權限）：用來換算可以領的珍珠。你登入時，今天走了幾步與累計步數會跟著遊戲進度一起存進雲端存檔，用途是換手機時接續進度與步數成就；不會分享給其他人，也不會用在廣告。
- 環境光線（關燈進入夜晚）、手機傾斜與搖晃：只在手機上用來換算遊戲效果，不會上傳。
- 步數、環境光線、傾斜與搖晃都可以在設定裡關掉。
- 拍照模式的照片與珊瑚名片：存在你自己的相簿，要不要分享、分享給誰，由你自己決定。
- 照顧提醒等通知由手機本機產生；你可以隨時在 App 設定或手機系統設定關閉。
「連動真實海洋」功能會從我們的伺服器下載 NOAA 珊瑚礁觀測衛星的公開白化警戒資料，這個過程不會傳送你的任何資料。
你自己在設定選了「家鄉礁區」時，App 會把那個礁區的固定座標（例如墾丁外海，不是你的位置，本 App 不使用定位）送到海洋天氣服務 Open-Meteo 查詢海水溫度與浪高，Open-Meteo 會看到你的網路位址；查到的資料只存在手機上，我們的伺服器收不到。
我們不會收集你的精確位置、通訊錄、麥克風或相簿內容。當機報告與匿名使用數據見上表（都可以關閉）；另外一份使用統計是上面的「陪伴珊瑚的時間」（只有每天的分鐘數，可以關掉）。
截圖要特別注意：截圖就是你當下手機上本 App 的畫面，可能包含你替珊瑚取的暱稱或缸名。送出前請先看過預覽，不想傳的可以移除截圖。
資料存放在哪裡
帳號、雲端存檔、回報、許願、瓶中信與訂閱紀錄存放在 Google Firebase（Authentication、Firestore、Cloud Functions）；當機報告存放在 Firebase Crashlytics；匿名使用數據存放在 Google Analytics for Firebase。傳輸過程加密。只有你自己的 App 讀得到你的存檔；回報與許願只有開發者看得到。瓶中信的文字只有收到的那位玩家看得到（不含你的身分），檢舉的內容由開發者審查。
保存多久
- 帳號與雲端存檔：保存到你刪除帳號為止。
- 回報：處理完成後定期清除（連同截圖），最長保存 90 天。
- 許願：保存到我們評估完需求為止。
- 當機報告：依 Firebase Crashlytics 的設定保存 90 天。
- 匿名使用數據：個別事件依 Google Analytics 的設定保存 2 個月，之後只留統計數字。
- 陪伴時間統計：最近 31 天，保存到你關掉設定或刪除帳號為止。
- 瓶中信：在瓶中信頁最下方按「不想再收到別人的瓶子」，會立即刪除你的上線紀錄，之後也不會再收到別人的瓶子；收件匣與「我丟出的」可以隨時自己刪除；伺服器上的瓶子內容、上線紀錄、每天的數量與封鎖名單保存到你刪除帳號為止。被檢舉的內容保存到我們處理完成為止。
- 訂閱紀錄：保存到訂閱結束後、或你刪除帳號為止。
- 封閉測試期間的使用紀錄：保存到你刪除帳號為止（刪除帳號會一併刪除）。
- 分享碼與兌換到的會員期限：保存到你刪除帳號為止。你兌換過別人分享碼的紀錄（只有帳號識別碼與時間）會留在那組分享碼底下，用來避免同一個帳號重複兌換。
我們不會做的事
- 不會出售你的資料。
- 不會把你的存檔、回報或許願內容提供給廣告商或第三方。
- 不會把你的資料用在與本 App 無關的用途。
你的選擇與權利
- 不想上傳進度：不要登入，遊戲所有功能照常使用（雲端存檔、回報與許願需要登入）。
- 不想看到廣告：成為會員或購買「去廣告」。
- 不想傳當機報告：「設定 › 支援與關於 › 傳送當機報告」關閉（記在這支手機）。
- 不想傳使用數據：「設定 › 支援與關於 › 傳送使用數據」關閉（記在這支手機）。
- 刪除帳號與雲端資料：在 App 內「選單 → 玩家 → 刪除帳號」，確認後會刪除你的帳號，以及雲端上的存檔、回報、通知、許願、瓶中信（你寄出與收到的瓶子、上線紀錄、封鎖名單）、陪伴時間統計、訂閱紀錄、你的分享碼與兌換到的會員期限、封閉測試期間的使用紀錄，手機上的進度也會清除。刪除帳號不會取消 Google Play 的訂閱，請另外到 Google Play 取消。
- 沒辦法開啟 App 時：來信 zifubazaar@gmail.com，用你登入的 Google 帳號信箱寫信給我們，我們會在確認後刪除該帳號的所有資料。
- 移除本 App 會刪除手機上的進度；雲端存檔要刪除帳號才會刪除。
封閉測試招募
我們在招募網頁（coralreef-f5053.web.app/join）收集以下資料，與 App 內的帳號資料分開存放，存放在 Google Firebase（Firestore）：你填寫的 Email、你使用的手機系統（Android／iPhone）、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版，以及登記時間。
用途只有：安排 Google Play 封閉測試（僅限 Android 使用者）、測試完成後發放獎勵，以及依你的回答，日後通知你新產品測試或 iOS 版的消息。我們不會用這些資料發送廣告，也不會出售或提供給第三方；你的 Email 會提供給 Google Play 作為測試名單，依 Google 的隱私權政策處理。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕：按下後會跳出 Google 帳號選單，我們只讀取你選的那個帳號的 Email 來填進欄位，讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄（只用來讀取 Email，不會用在 App），不保存你的 Google 名稱、頭像或其他資料；如果你本來就有珊瑚礁的帳號，這個動作不會刪除或更動它。不想用的話，也可以直接輸入 Email。
招募網頁另提供官方 LINE 連結，加入好友或用 LINE 傳送你的帳號給我們都是選擇性的；這些訊息由 LINE 依其隱私權政策處理，我們只用來確認你的登記與聯絡測試事項。
為了防止有人用程式大量登記假資料占用名額，你送出登記時，我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間（不保存原始 IP 位址），只用來限制同一個網路在短時間內的登記次數，隔天自動刪除。
登記之後，招募網頁上「加入測試群組」「成為測試人員」「前往 Play 商店下載」三個按鈕，你第一次按下每一個時，我們會在你的登記資料裡記下按的時間（不記錄你在 Google 群組或 Play 商店裡做了什麼），只用來統計多少人完成加入流程；為了做到這件事，你的 Email 會存在你自己的瀏覽器（localStorage）裡。這些時間和登記資料一起保存、一起刪除。
你可以隨時來信 zifubazaar@gmail.com 要求查詢或刪除你的登記。刪除招募登記只會刪除招募網頁上的資料，不會影響你的 App 帳號。
退款
- 用真錢買的東西（會員、禮包、珍珠包等），請向 Google Play 申請退款（Google Play 退款說明）。
- 未成年人沒有經過家長同意購買的，家長可以寫信到 zifubazaar@gmail.com，附上 Google Play 訂單編號（GPA. 開頭），我們會協助處理。
兒童
本 App 不是專為 13 歲以下兒童設計，我們不會刻意收集兒童的個人資料。
政策更新
我們可能會更新本政策，重大變更會在 App 內或上架頁面通知。
聯絡我們
紫芙數位 zifubazaar@gmail.com
CoralReef
Privacy Policy
Last updated: November 7, 2026 (sign-up page adds “Fill in my email with Google” and our official LINE). This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.
CoralReef (“the App”) is provided by Zifu Digital (“we”). This policy explains what data we collect, how we use it, and the choices you have.
The short version
- You can play without signing in. Without signing in, your progress stays on your phone.
- You can choose to sign in with Google to back up your progress to the cloud and continue on a new phone.
- Only when you choose to send a bug report or a wish is that content sent to us.
- A bottle is a line you choose to write. It drifts anonymously to another player who opened the App today; they cannot see who you are. Please don’t put personal information in a bottle.
- When the App crashes, the error log is sent to us so we can fix it (Google Firebase Crashlytics, release versions only, and you can turn it off in Settings).
- Anonymous usage data (Google Firebase Analytics): which steps you reach and whether you open the shop, with no name, account, save data or advertising ID, only to improve the game. Release versions only, and you can turn it off in Settings (versions after 26.11).
- The App shows ads provided by Google AdMob, and Google collects data such as the advertising ID for them. Members and players who bought “Remove ads” no longer load ads.
- You can delete your account in the App at any time, and your data in the cloud is deleted with it.
Data we collect
| Data | When | Purpose |
|---|---|---|
| Account data: your Google account email, display name and a system-generated account ID | When you sign in with Google (stored by Google Firebase Authentication) | To identify your account and show which account you are signed in with |
| Cloud save: game progress (corals, level, pearls, cards, quests, achievements, the coral nicknames and tank name you chose, purchase and membership status), save time and phone model | After you sign in, during automatic backups and when you tap “Sync now” | To restore your progress on a new phone or after reinstalling. The phone model helps you tell saves apart when both your phone and the cloud have progress |
| Gifts and gift exchange: your in-game nickname, what you gave, your and the recipient’s account IDs, and the time | When you send a gift to a friend with their share code, or put a gift in the exchange box in November and December | To deliver the gift to the other player. The player who receives it sees your in-game nickname (and, for the exchange, the wish you picked), never your email or account. If you don’t want them to see your nickname, change it on the Profile page first |
| Bug reports | When you send a report: your description, a screenshot of the current screen (you can preview or remove it before sending), app version, device model, Android version, current screen, language, font scale, whether you are ad-free or a member, a summary of your reef (such as level, number of corals and current events), your account ID and, if you signed in with Google, your account email (so we know which account sent it) | To reproduce and fix problems, and to send progress and rewards back to your App |
| Wishes (yearly members only) | When you send a wish: the wish text, app version, account ID and time sent | To learn which features players want and tell you the outcome |
| Share codes and redemptions | When you get your share code on the Reef Club page, or enter a share code or gift code: your share code and how many times it has been redeemed, the membership time you received (including days paused while you subscribe), which codes you redeemed and when, how many redeem attempts you made that day, and your account ID | To create unique share codes, give membership days to you and your friends, and stop codes being redeemed twice or guessed. Friends who redeem your code never see your email or name |
| Bottles (anonymous messages) | Once you are signed in with Google and have tapped “Got it” on the bottle rules, each day you open the App: a record that you were online that day (only the date and a random number). Players who never opened Bottles have no such record. When you throw or reply to a bottle: your text, the time, your account ID and the account ID of the player who receives it. When you report: the reason and that bottle’s text. When you block: the blocked account ID | To pass your bottle to a random player who is online today, let them reply once, limit how many you can send each day, and handle reports and suspensions. The person who receives it sees only the text, never your account, name or email; who sent what to whom is visible only to our server and the developer. If you buy gold bottles, how many you have left is kept on our server |
| Tank visits (tank visit pass) | When you have a tank visit pass and tap “Open my tank”: your in-game nickname, tank name, scene, the species and growth stage of your corals, your tank mates and the pass end date. When you like someone’s tank: your account ID, that tank and the date | To let other players find your tank at random under “Visit tanks” and like it, counting one like per tank per day. Other players can see your nickname and tank name, never your account or email. Your tank is hidden once the pass ends, and this data is deleted when you delete your account. When you report a tank: your account ID, the reason, and that tank's nickname and tank name, so an admin can review it; if an admin takes a tank down, a record of its nickname, tank name and time is kept. Reports you sent are deleted when you delete your account |
| Weekly theme tanks | When you tap “Enter my tank” in Visit tanks › Weekly theme: your in-game nickname, tank name, scene, the species and growth stage of your corals, and your tank mates. When you vote: your account ID, which tank, the week and the date. When you report an entry: your account ID, the reason, and that tank's nickname and tank name | To show your tank to other players that week so they can vote, limit votes to 5 per person per day, and work out the weekly ranking and rewards. Other players can see your nickname and tank name, never your account or email; an entry reported by 3 people is hidden. No tank visit pass is needed. When you delete your account, your entries, votes, reports and reward records are deleted |
| Friend visits | When a friend visits with your share code: they see your in-game nickname, tank name, scene, corals and tank mates. When you visit a friend: your account ID, nickname and the visit date are left with that friend (“who visited”), and their heart count goes up by one | To let friends visit each other and give a daily visit reward. You can turn off “Let friends visit my tank with my share code” in Visit tanks; when you delete your account, your visit records, hearts and the visit notes you left with friends are deleted |
| Friends board | When you visit a friend with their share code, or feed a friend's tank, you are recorded as friends of each other (kept on our server; only the server sees the list). The board shows each friend's in-game nickname, level, number of collected species and number of releases | To let friends compare progress under Visit tanks › Friends. Friends can see your nickname, level, collected species and releases, never your account or email. Turn off “Let friends visit my tank with my share code” to stay off other people's boards. When you delete your account, your friend list is deleted and you are removed from other people's lists |
| Feeding a friend's tank | When you feed a friend's tank: your account ID, in-game nickname and the date are left with that friend (“who fed your corals”), and how many friends you helped that day is kept on our server | To let your friend see who helped when they come back, and to top up food and give a few pearls on their own phone (your friend's save is never changed by you); to limit how often this can happen each day. The note is deleted once your friend sees it; when you delete your account, the notes you left and your daily counts are deleted |
| Global reef goal | When you release a coral while signed in: your account ID, the week, and how many corals you released that week (up to 20 count); the total released by everyone that week; whether you claimed that week's reward | To add up how many corals everyone released this week and give the reward to people who released one when the goal is reached. Only the overall total is shown, never who released. When you delete your account, your release counts and reward records are deleted |
| Time with your corals | When you are signed in with Google and have not turned off “Share time-with-coral stats” in Settings → Support & about: how many minutes you had the App open on each of the last 31 days, and your total minutes. Only minutes, nothing about what you did | To learn how long players play each day so we can improve the game. Turning the setting off deletes these stats from the cloud; when you are not signed in, the time is only kept on your phone (for you to see on your profile) |
| Lucky Prizes (daily sign-in draw, lucky numbers, server-wide gifts) | When you are signed in with Google and open the App for the first time each day: your account ID and account creation date, the days you opened the App in the last 14 days, and your sign-in order number (plus your subscriber number after your first successful subscription); if you are eligible, you are entered in that day’s draw. If you win or get a lucky number, the pearls, draw tickets and title we send you and whether you have claimed them | To check draw eligibility (to stop duplicate accounts), draw a winner each day and deliver prizes to your account. The public board shows only approximate player counts, never accounts. Draw lists are deleted automatically after 30 days; your prizes, open history and numbers are deleted when you delete your account |
| Usage record during the closed test (from October 19, 2026): your Google account email and name, account ID, app version and the dates you opened the App (Taiwan time) | During the closed test, after you sign in with Google, sent automatically the first time you open the App each day; nothing is recorded if you are not signed in | To confirm who took part in the test and for how many days, so we can give out the test reward (Premium). We do not record what you do in the App |
| Subscription and purchase records | When you buy or restore a purchase: the Google Play purchase token, subscription plan and expiry | To confirm membership (our server checks with Google Play), deliver purchased items and stop the same purchase being claimed twice. For bundles with purchase limits, our server keeps the order ID and purchase time to check the limit, and refunds any purchase over the limit instead of delivering it. Payment is handled by Google Play and we never see your payment details |
| Crash reports: the error log at the time of a crash, phone model, Android version, app version and an installation ID | When the App crashes or hits a serious error (Google Firebase Crashlytics, release versions only) | To find and fix the cause of crashes. They contain no save data, account email or text you wrote. You can turn them off in Settings › Help & about › Send crash reports |
| Anonymous usage data: what kind of thing you did (finishing the tutorial, which beginner task step, level-ups up to level 15, watching a rewarded ad, opening the member shop, the product ID you tap to buy, the home-screen starter pack card being shown or tapped), when and how often the App is opened, phone model, Android version, app version, language, rough country (from the network address) and an installation ID created by the App (not the advertising ID and not your account) | Whenever you use the App, signed in or not (Google Firebase Analytics, only release versions installed from Google Play, versions after 26.11) | To learn how many people are still playing after a day, a week and a month, where new players get stuck, and which features and products are used, so we can improve the game. Purchase amounts are counted automatically from Google Play billing. It does not include your name, email, account ID, game progress or advertising ID, is not used for advertising and is not combined with other data to identify you. You can turn it off in Settings › Help & about › Send usage data |
| Advertising ID, device information, approximate location (from IP address) and ad interactions | When you open the App, unless you are a member or bought “Remove ads”. Users in the EU and similar regions are asked for consent first | Used by Google AdMob to serve and measure ads and prevent fraud, under the Google Privacy Policy. You can reset or delete your advertising ID in your phone’s settings at any time |
Data that stays on your phone
- Steps (“Walk with your coral”, which needs the Physical activity permission): used to work out the pearls you can claim. When you are signed in, today’s step count and your total steps are saved with your game progress in your cloud save, so they carry over to a new phone and count toward step achievements. They are never shared or used for ads.
- Ambient light (night mode when the room is dark) and tilt and shake: used only on your phone to work out in-game effects, never uploaded.
- Steps, ambient light and tilt and shake can each be turned off in Settings.
- Photo mode pictures and coral cards are saved to your own gallery. Whether and with whom you share them is up to you.
- Notifications such as care reminders are created on your phone; you can turn them off in the App or in your phone’s settings at any time.
The “Link to the real ocean” feature downloads public NOAA Coral Reef Watch bleaching alerts from our server. This sends none of your data.
If you choose a “Home reef” in Settings, the App sends that reef’s fixed coordinates (for example, off Kenting; not your location, and the App does not use location services) to the marine weather service Open-Meteo to look up sea temperature and wave height. Open-Meteo sees your IP address. The data is stored only on your phone and never reaches our servers.
We do not collect your precise location, contacts, microphone or gallery contents. Crash reports and anonymous usage data are described above (you can turn both off); the other usage statistic is “Time with your corals” above (minutes per day only, and you can turn it off).
About screenshots: a screenshot shows the App’s screen at that moment and may include your coral nicknames or tank name. Check the preview before sending, and remove it if you don’t want to send it.
Where data is stored
Accounts, cloud saves, bug reports, wishes, bottles and subscription records are stored in Google Firebase (Authentication, Firestore and Cloud Functions); crash reports are stored in Firebase Crashlytics; anonymous usage data is stored in Google Analytics for Firebase. Data is encrypted in transit. Only your own App can read your save; bug reports and wishes can only be seen by the developer.
How long we keep it
- Account and cloud save: until you delete your account.
- Bug reports: cleared regularly after they are resolved (screenshots included), kept for no more than 90 days.
- Wishes: kept until we have reviewed the request.
- Crash reports: kept for 90 days under Firebase Crashlytics settings.
- Anonymous usage data: individual events are kept for 2 months under Google Analytics settings; after that only totals remain.
- Time-with-coral stats: the last 31 days, kept until you turn the setting off or delete your account.
- Bottles: tap “Stop receiving bottles” at the bottom of the Bottles screen to delete your online record right away and stop receiving other players’ bottles. You can delete items from your received and sent lists at any time. Bottle text on our server, online records, daily counts and your block list are kept until you delete your account. Reported bottles are kept until we have reviewed the report.
- Subscription records: until the subscription ends or you delete your account.
- Usage record during the closed test: until you delete your account (deleting your account deletes it too).
- Share codes and membership time from codes: until you delete your account. The record that you redeemed someone else’s share code (only your account ID and the time) stays with that code so the same account cannot redeem it twice.
What we never do
- We never sell your data.
- We never share your save, bug reports or wishes with advertisers or other third parties.
- We never use your data for purposes unrelated to the App.
Your choices and rights
- Don’t want to upload your progress: don’t sign in. Every game feature still works (cloud save, bug reports and wishes need sign-in).
- Don’t want ads: become a member or buy “Remove ads”.
- Don’t want to send crash reports: turn off Settings › Help & about › Send crash reports (saved on this phone).
- Don’t want to send usage data: turn off Settings › Help & about › Send usage data (saved on this phone).
- Delete your account and cloud data: in the App, go to Menu → Profile → Delete account. After you confirm, your account is deleted together with your cloud save, bug reports, notifications, wishes, bottles (those you sent and received, online records and your block list), time-with-coral stats, subscription records, your share code and membership time from codes, your closed-test usage record, and the progress on your phone is cleared. Deleting your account does not cancel a Google Play subscription; cancel it separately in Google Play.
- If you can’t open the App: email zifubazaar@gmail.com from the Google account you signed in with, and we will delete all data for that account after confirming it.
- Uninstalling the App deletes the progress on your phone; your cloud save is only deleted when you delete your account.
Closed-test sign-up
On the sign-up page (coralreef-f5053.web.app/join) we collect the following, stored separately from in-app account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to the 14-day continuous testing condition, whether you'd like to test future products, whether you want an iOS version, and the time you signed up.
We use it only to arrange the Google Play closed test (Android users only), give out rewards when the test is completed, and, depending on your answers, tell you about future new-product tests or an iOS version. We do not use this data for advertising and we never sell it or share it with third parties; your email is given to Google Play as part of the tester list and handled under Google's privacy policy.
The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a Coral Reef account, this never deletes or changes it. If you prefer, you can simply type your email instead.
The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.
To stop automated fake sign-ups from using up the spots, when you submit we temporarily store a one-way hash of your network IP address and the time of submission (we never store the IP address itself). It is used only to limit how many sign-ups can come from the same network in a short time, and it is deleted automatically the next day.
After you register, the first time you tap each of the three buttons on the sign-up page (“Join the test group”, “Become a tester” and “Download on Google Play”), we record the time in your sign-up record (we do not record anything you do in Google Groups or on Google Play). It is used only to count how many people completed the joining steps; to do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.
You can email zifubazaar@gmail.com at any time to see or delete your sign-up. Deleting your sign-up only removes the sign-up page data and does not affect your app account.
Refunds
- For anything bought with real money (membership, bundles, pearl packs and so on), request a refund through Google Play (Google Play refund help).
- If a minor made a purchase without a parent’s consent, the parent can email zifubazaar@gmail.com with the Google Play order number (starting with GPA.) and we will help.
Children
The App is not designed for children under 13, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this policy. Significant changes will be announced in the App or on the store listing.
Contact
Zifu Digital · zifubazaar@gmail.com