今日懸案
隱私權政策
最後更新:2026 年 11 月 8 日(加入每日連勝、好友榜、挑戰好友連結、舊案券包、匿名使用數據與退款說明;節日活動與節日禮盒)
「今日懸案」(以下稱「本遊戲」)由紫芙數位(以下稱「我們」)提供。本政策說明我們收集哪些資料、怎麼使用,以及你有哪些選擇。
先說重點
- 不登入也能玩:紀錄只存在你的手機。
- 可以選擇用 Google 帳號登入:結案紀錄與星數會存到雲端,換手機或重裝都接得回來。
- 獎勵廣告(Google AdMob):只有你自己在舊案櫃按「看廣告解鎖這一件」才會播放;歐盟等地區會先請你同意。會員不會看到廣告。
- 高級會員的付款由 Google Play 處理,我們看不到你的付款資料。
- 回報問題時,你寫的說明與當下的畫面截圖會送給開發者(送出前可以預覽或移除截圖)。
- 遊戲當掉時,會把不含個人資料的錯誤紀錄傳給開發者;可以在「設定 → 傳送當機報告」關閉。
- 不出售你的資料,也不提供給廣告商;沒有使用行為分析工具。可以隨時在 App 內刪除帳號,雲端資料一併刪除。
我們收集哪些資料
- 帳號資料(你按「用 Google 登入」時,由 Google Firebase Authentication 保存):系統產生的帳號識別碼、Google 帳號的電子郵件與顯示名稱。用來辨識你的帳號、在設定顯示登入的帳號、換手機時找回紀錄。
- 雲端存檔(登入後結案時自動同步):每一案的星數、用時、有沒有破案。用來在換手機或重裝後找回紀錄。辦到一半的案件與設定不會上傳。
- 今日排行(登入後第一次破當天的案件時):你設定的排行暱稱(預設「偵探+編號」,不用你的 Google 名字)、星數、用時、帳號識別碼。登入的玩家都看得到當天排行的暱稱、星數與用時,看不到你的帳號或信箱。
- 每日任務、三餐券角、舊案券、每日連勝與每月活動(你領券、領三餐、用券、打開「今日」分頁時):手上的舊案券張數與券角數、領券的日期、當天領過哪幾餐、用券解鎖的舊案、連勝天數與最後算進連勝的日期、這個月累積的星數與蓋過的月份印章、買過新手禮包沒有、領過哪幾次節日禮物、最近買過哪一次節日禮盒。連勝與每月星數由伺服器從今日排行的成績算出。用來發券、避免重複領。
- 好友榜(你在「今日排行 → 好友」使用時):你的 6 碼好友碼、好友的帳號識別碼與排行暱稱(最多 50 位)。互加好友後,雙方能看到對方當天的排行暱稱、星數與用時;看不到對方的信箱或 Google 名字。可以隨時移除好友。
- 邀請朋友與代碼(你打開「我的 → 邀請朋友」、兌換代碼、領會員體驗碼時):你的分享碼與被兌換的次數、你的帳號兌換過哪些代碼與時間、發給你的體驗碼(代碼、用掉沒、到期日)、每天嘗試兌換的次數(防止有人猜代碼),以及加到你帳號的會員天數。朋友兌換你的分享碼時看不到你的信箱或 Google 名字。你送出去的體驗碼在你刪除帳號後仍可使用,其他資料會隨帳號一起刪除。
- 幸運大獎(你用 Google 登入、每天第一次打開 App 時):最近 14 天打開的日期、你是第幾位登入與第幾位付費會員、今天有沒有報名抽獎、中到與領過的獎(舊案券、會員天數、限定徽章),以及帳號建立日期(從 Google Firebase Authentication 讀,用來判斷抽獎資格)。每天的報名名單只有帳號識別碼,保存 30 天。公開看板只顯示到十位數的人數,不顯示任何名字或帳號。幸運大獎的紀錄會隨帳號一起刪除。
- 挑戰好友連結(你按「挑戰朋友」分享時):連結裡只有案件代號、你的星數、用時與排行暱稱,由你自己傳給朋友;我們的伺服器不保存這條連結,朋友打開的網頁也不寫入任何資料。
- 回報問題(你送出回報時):你寫的說明、當下的畫面截圖(送出前可預覽或移除)、App 版本、機型、Android 版本、所在畫面、語言、字體縮放、星數合計、帳號識別碼與 Google 帳號的電子郵件。用來重現並修正問題,把處理進度與回覆送回你的「我的回報」。截圖在處理後刪除,回報最長保存 90 天。
- 購買紀錄(你購買會員、舊案券包、新手禮包、節日禮盒或恢復購買時):Google Play 的購買憑證、商品、訂閱方案與到期時間;買終身會員或券包時另有訂單編號;買節日禮盒時另記是哪個節日,並把那個節日的徽章加到你的帳號。由我們的伺服器向 Google Play 查詢、確認會員資格,避免同一筆購買被不同帳號使用。付款由 Google Play 處理,我們看不到你的付款資料。
- 廣告(你按「看廣告解鎖這一件」時,由 Google AdMob 收集):廣告識別碼、裝置資訊、大致位置(由網路位址判斷)、廣告互動與同意設定。用來提供與統計廣告、避免作弊,依 Google 隱私權政策處理。會員不會載入廣告。
- 當機報告(遊戲當掉或發生嚴重錯誤時,由 Google Firebase Crashlytics 收集):當機時的程式錯誤紀錄、手機型號、Android 版本、App 版本與安裝識別碼,只用來修正當機,保存 90 天。只有正式版會傳送,可以在「設定 → 傳送當機報告」關閉。
- 匿名使用數據(由 Google Firebase Analytics 收集):用了哪些功能的事件(例如開始或破了哪一種案件、打開會員頁、看完新手教學)、星數與用時這類數字、App 版本、手機型號、國家層級的大致地區與安裝識別碼。用來了解隔天、一週後有多少人回來玩、新手卡在哪一步、哪些功能需要改。不收廣告識別碼、不做廣告個人化,也不記你的名字、帳號或暱稱。只有正式版會傳送,可以在「設定 → 傳送使用數據」關閉。
我們不收集精確位置、聯絡人或相片。
只在你手機上的資料
下面這些記在手機的 app 專屬儲存空間,只有本遊戲讀得到,不會上傳:
- 沒登入時的結案紀錄、辦到一半的案件(翻開的線索、筆記、指認紀錄)
- 看廣告解鎖過的舊案(依帳號分開記)
- 設定(語言、音效、震動、大字、傳送當機報告)、教學與登入提示看過沒有、回報浮標的位置
手機上的紀錄依帳號分開保存:換帳號登入時看不到上一個帳號的紀錄,原帳號回來時紀錄還在。要刪除:解除安裝本遊戲,或在手機的「設定 → 應用程式 → 今日懸案 → 儲存空間 → 清除資料」。如果手機開啟了 Android 內建的「備份到 Google 雲端硬碟」,系統可能會把這些資料一起備份;這項備份由 Google 依照你的帳號設定處理,我們無法存取。
權限
- 網路、網路狀態:登入、雲端存檔、回報問題、會員確認、廣告與當機報告。
- 廣告識別碼(AD_ID):只供 Google AdMob 的獎勵廣告使用。你可以在手機系統設定重設或刪除廣告識別碼。
- Google Play 帳單:購買高級會員。
- 通知、開機後重新排程:每天早上 8 點的早安通知(今日案件上架,在手機上排程,不經過我們的伺服器);可在「設定 → 早安通知」關閉。
- 震動:破案時的震動回饋(一般權限,不用詢問;可在「設定」關閉)。
本遊戲不申請相機、麥克風、位置、聯絡人與儲存空間權限。
第三方服務與存放位置
- Google Firebase(Authentication、Firestore、Cloud Functions、Crashlytics):帳號、雲端存檔、回報問題與會員紀錄存放在台灣彰化的 asia-east1 機房,傳輸過程加密。會員紀錄只有伺服器能寫入,你的 App 只能讀取自己的;回報問題只有開發者看得到。
- Google Play 帳單:訂閱與終身會員的付款與管理。
- Google AdMob:獎勵廣告與歐盟等地區的同意管理。
以上服務的資料處理也適用 Google 隱私權政策 與 Firebase 隱私權說明。
封閉測試招募
我們在招募網頁(dailycase-zifu.web.app/join)收集以下資料,與 App 分開存放在 Google Firebase(Firestore):你填寫的 Email、你使用的手機系統(Android/iPhone)、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版,以及登記時間。
用途只有:安排 Google Play 封閉測試(僅限 Android 使用者)、測試完成後發放獎勵(用你登記的 Email 找到你在 App 用 Google 登入的帳號,加上 3 個月高級會員),以及依你的回答,日後通知你新產品測試或 iOS 版的消息。不會用來發廣告,也不會出售或提供給第三方;你的 Email 會提供給 Google Play 作為測試名單,依 Google 的隱私權政策處理。
封閉測試期間,你在 App 用 Google 登入後,每天第一次打開 App 時,我們會記下這個帳號的識別碼、Email、Google 顯示名稱、App 版本與打開的日期(台灣日期),只用來確認誰連續測試滿 14 天、把獎勵加到正確的帳號,也讓我們在發獎勵時記下送了幾天。這份紀錄只有管理員看得到,正式版上架後不再新增,刪除帳號時一起刪除。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕:按下後會跳出 Google 帳號選單,我們只讀取你選的那個帳號的 Email 來填進欄位,讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄(只用來讀取 Email,不會用在 App),不保存你的 Google 名稱、頭像或其他資料;如果你本來就有今日懸案的帳號,這個動作不會刪除或更動它。不想用的話,也可以直接輸入 Email。
招募網頁另提供官方 LINE 連結,加入好友或用 LINE 傳送你的帳號給我們都是選擇性的;這些訊息由 LINE 依其隱私權政策處理,我們只用來確認你的登記與聯絡測試事項。
為了防止有人用程式大量登記假資料占用名額,你送出登記時,我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間(不保存原始 IP 位址),只用來限制同一個網路在短時間內的登記次數,隔天自動刪除。登記後,你第一次按下「加入測試群組」「成為測試人員」「前往 Play 商店下載」時,我們會在登記資料裡記下按的時間(不記錄你在 Google 群組或 Play 商店裡做了什麼),只用來統計多少人完成加入流程;為此你的 Email 會存在你自己的瀏覽器(localStorage)裡。
保存期限:兩題都選「不願意/不需要」的人,Email 在測試結束、獎勵發放後刪除;其他人最久保存 2 年。你可以隨時來信 zifubazaar@gmail.com 要求查詢或刪除你的登記。
兒童
本遊戲適合所有年齡,案件都是生活小事、沒有血腥內容;但不是專為 13 歲以下兒童設計,我們不會刻意收集兒童的個人資料。
你的選擇、刪除帳號與政策變更
- 不想上傳任何紀錄:不要登入,其他功能照常使用。
- 不想看到廣告:不按「看廣告解鎖這一件」就不會播放;成為會員後不會載入廣告。歐盟等地區可在設定的「廣告隱私權選項」修改同意。
- 刪除帳號與雲端資料:在「設定 → 帳號 → 刪除帳號」,確認後刪除你的帳號、雲端存檔、會員紀錄、舊案券、連勝與每月活動紀錄、好友名單(也會從好友的名單移除你)、回報問題與處理通知,手機上屬於這個帳號的紀錄也會清除。刪除帳號不會取消 Google Play 的訂閱,請另外到 Google Play 取消。
- 不想傳送使用數據或當機報告:在「設定 → 通知與隱私」關閉。
- 退款:購買由 Google Play 處理,請在 Google Play 申請退款;未成年人未經法定代理人同意的購買,法定代理人可以寫信到 zifubazaar@gmail.com,附上訂單編號,我們協助處理。退款後,對應的會員資格或舊案券會收回。
- 沒辦法開啟 App 時:用你登入的 Google 帳號信箱寫信到 zifubazaar@gmail.com,我們確認後刪除該帳號的所有資料。
- 政策變更:之後改變資料的處理方式時,會先更新這份政策與上方日期,重大變更會在 App 內或上架頁面通知。
聯絡我們
本遊戲由紫芙數位開發。對這份政策有任何問題,請來信:
紫芙數位 zifubazaar@gmail.com
Daily Case
Privacy Policy
Last updated: November 8, 2026 (adds daily streaks, the friends ranking, challenge links, case pass packs, anonymous usage data and refunds; festival events and festival boxes). This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.
Daily Case (“the game”) is provided by Zifu Digital (“we”). This policy explains what data we collect, how we use it, and the choices you have.
The short version
- You can play without signing in; your records then stay on your phone.
- You can choose to sign in with Google so your case results and stars are saved to the cloud and come back on a new phone or after reinstalling.
- Rewarded ads (Google AdMob) play only when you tap "Watch an ad to unlock" in the case archive. In the EU and some other regions you are asked for consent first. Premium members never see ads.
- Premium payments are handled by Google Play; we never see your payment details.
- When you report a problem, your description and a screenshot of the screen at that moment are sent to the developer (you can preview or remove the screenshot first).
- If the game crashes, an error log with no personal data is sent to the developer; you can turn this off under Settings → Send crash reports.
- We never sell your data or give it to advertisers, and we use no behavioral analytics. You can delete your account in the app at any time, and your cloud data is deleted with it.
Data we collect
- Account data (when you tap "Sign in with Google"; stored by Google Firebase Authentication): a system-generated account ID and your Google account email and display name. Used to identify your account, show who is signed in, and restore your records on a new phone.
- Cloud saves (synced automatically when you close a case while signed in): stars, time and whether you solved each case. Used to restore your records on a new phone or after reinstalling. A case in progress and your settings are not uploaded.
- Today's ranking (the first time you solve the day's case while signed in): your ranking name (by default "Detective" plus a number, never your Google name), stars, time and account ID. Signed-in players can see the day's ranking names, stars and times, but not your account or email.
- Daily tasks, meal pass corners, case passes, daily streaks and the monthly event (when you claim a pass or a meal, use a pass, or open the Today tab): how many passes and pass corners you have, the day you claimed a pass, which meals you claimed that day, the past cases you unlocked, your streak length and the last day counted, this month's total stars and monthly stamps, whether you bought the starter pack, which festival gifts you claimed, and the last festival box you bought. Streaks and monthly stars are calculated by our server from your ranking results. Used to give out passes and prevent duplicate claims.
- Friends ranking (when you use Today's ranking → Friends): your 6-character friend code, and your friends' account IDs and ranking names (up to 50). Once you add each other, you both see each other's ranking name, stars and time for the day, but not each other's email or Google name. You can remove a friend at any time.
- Invite friends and codes (when you open Me → Invite Friends, redeem a code, or claim a member trial code): your share code and how many times it has been redeemed, which codes your account has redeemed and when, the trial codes issued to you (code, whether used, expiry), the number of redeem attempts each day (to stop code guessing), and the Premium days added to your account. A friend who redeems your share code can't see your email or Google name. Trial codes you've given away still work after you delete your account; everything else is deleted with your account.
- Lucky Draw (each day you first open the app while signed in with Google): the days you opened the app in the last 14 days, your sign-in number and paid-member number, whether you were entered in today's draw, the prizes you won and claimed (case passes, Premium days, limited badges), and the date your account was created (from Google Firebase Authentication, to check eligibility). The daily entry list holds only account IDs and is kept for 30 days. The public board shows only rounded player counts, never names or accounts. Your Lucky Draw records are deleted with your account.
- Challenge links (when you tap Challenge a friend): the link contains only the case code, your stars, your time and your ranking name, and you send it yourself. Our server does not store the link, and the web page your friend opens does not save anything.
- Bug reports (when you send one): your description, a screenshot of the screen at that moment (you can preview or remove it first), app version, phone model, Android version, current screen, language, font scale, total stars, account ID and your Google account email. Used to reproduce and fix the problem and to send progress and replies back to My reports. Screenshots are deleted once handled, and reports are kept for up to 90 days.
- Purchase records (when you buy Premium, a case pass pack, the starter pack or a festival box, or restore a purchase): the Google Play purchase token, product, subscription plan and expiry; for lifetime Premium and pass packs, also the order number; for a festival box, also which festival it was for, and that festival's badge is added to your account. Our server checks these with Google Play to confirm your membership and to stop one purchase from being used by different accounts. Payment is handled by Google Play, and we never see your payment details.
- Ads (when you tap "Watch an ad to unlock"; collected by Google AdMob): advertising ID, device information, approximate location (from your network address), ad interactions and consent settings. Used to serve and measure ads and prevent fraud, under the Google Privacy Policy. Ads are not loaded for Premium members.
- Crash reports (when the game crashes or hits a serious error; collected by Google Firebase Crashlytics): the error log, phone model, Android version, app version and an installation ID, only to fix crashes, kept for 90 days. Only release versions send them, and you can turn them off under Settings → Send crash reports.
- Anonymous usage data (collected by Google Firebase Analytics): events for which features you use (for example starting or solving a kind of case, opening the Premium page, finishing the tour), numbers such as stars and time, app version, phone model, country-level region and an installation ID. Used to see how many players come back the next day or a week later, where new players get stuck, and what to improve. We do not collect the advertising ID or personalize ads, and we never record your name, account or ranking name. Only release versions send it, and you can turn it off under Settings → Send usage data.
We do not collect your precise location, contacts or photos.
Data that stays on your phone
The following is kept in the game's private app storage. Only the game can read it, and it is never uploaded:
- Case results while you are not signed in, and a case in progress (clues opened, notes, accusations)
- Past cases you unlocked by watching an ad (kept separately for each account)
- Settings (language, sound, vibration, large text, send crash reports), whether you have seen the tutorial and the sign-in prompt, and where you placed the report button
Records on your phone are kept separately for each account: when you sign in with a different account you won't see the previous account's records, and they are still there when the original account comes back. To delete them, uninstall the game or go to your phone's Settings → Apps → Daily Case → Storage → Clear data. If Android's built-in backup to Google Drive is on, the system may include this data in your device backup. Google handles that backup under your account settings, and we cannot access it.
Permissions
- Internet and network state: sign-in, cloud saves, bug reports, membership checks, ads and crash reports.
- Advertising ID (AD_ID): used only by Google AdMob for rewarded ads. You can reset or delete it in your phone's system settings.
- Google Play billing: buying Premium.
- Notifications and rescheduling after restart: the 8 a.m. morning reminder that today's case is up (scheduled on your phone, not through our servers); you can turn it off under Settings → Morning reminder.
- Vibration: haptic feedback when you solve a case (a normal permission with no prompt; you can turn it off in Settings).
The game does not request camera, microphone, location, contacts or storage permissions.
Third-party services and storage
- Google Firebase (Authentication, Firestore, Cloud Functions, Crashlytics): accounts, cloud saves, bug reports and membership records are stored in the asia-east1 data center in Changhua, Taiwan, encrypted in transit. Membership records can only be written by our server, and your app can read only your own; bug reports are visible only to the developer.
- Google Play Billing: payment and management of subscriptions and lifetime Premium.
- Google AdMob: rewarded ads and consent management in the EU and some other regions.
These services are also covered by the Google Privacy Policy and Firebase privacy information.
Closed-test sign-up
On the sign-up page (dailycase-zifu.web.app/join) we collect the following, stored separately from the app in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to the 14-day continuous testing condition, whether you'd like to test future products, whether you want an iOS version, and the time you signed up.
We use it only to arrange the Google Play closed test (Android users only), give out the reward when the test is completed (we use your registered email to find the account you sign in to the app with using Google, and add 3 months of Premium), and, depending on your answers, tell you about future product tests or an iOS version. We do not use it for advertising and never sell or share it with third parties; your email is given to Google Play as part of the tester list and handled under Google's privacy policy.
During the closed test, once you sign in to the app with Google, the first time you open the app each day we record that account's ID, email, Google display name, app version and the date (Taiwan time). We use this only to see who has tested for 14 days in a row, to add the reward to the right account, and to note how many days of Premium we gave. Only administrators can see this record; we stop adding to it after the public release, and it is deleted when you delete your account.
The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a Daily Case account, this never deletes or changes it. If you prefer, you can simply type your email instead.
The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.
To stop automated fake sign-ups from using up the spots, when you submit we temporarily store a one-way hash of your network IP address and the time of submission (never the IP address itself), only to limit how many sign-ups can come from the same network in a short time; it is deleted automatically the next day. After you register, the first time you tap "Join the test group", "Become a tester" or "Download on Google Play", we record the time in your sign-up record (we do not record anything you do in Google Groups or on Google Play), only to count how many people completed the joining steps; to do this, your email is kept in your own browser (localStorage).
How long we keep it: if you answer "No" to both questions, your email is deleted after the test ends and the reward is given; otherwise we keep it for up to 2 years. You can email zifubazaar@gmail.com at any time to see or delete your sign-up.
Children
The game is suitable for all ages, and cases are about everyday mishaps with no violence or gore. It is not designed specifically for children under 13, and we do not knowingly collect their personal information.
Your choices, account deletion and changes
- Don't want anything uploaded: don't sign in; everything else still works.
- Don't want ads: ads play only when you tap "Watch an ad to unlock" and are not loaded for Premium members. In the EU and some other regions, you can change your consent under Ad privacy options in Settings.
- Delete your account and cloud data: go to Settings → Account → Delete account. After you confirm, we delete your account, cloud saves, membership records, case passes, streak and monthly event records, your friends list (and remove you from your friends' lists), bug reports and their notices, and the records for that account on your phone. Deleting your account does not cancel a Google Play subscription; cancel it in Google Play.
- Don't want to send usage data or crash reports: turn them off under Settings → Notifications & privacy.
- Refunds: purchases are handled by Google Play, so please request refunds there. If a minor made a purchase without a parent's or guardian's consent, the parent or guardian can email zifubazaar@gmail.com with the order number and we will help. After a refund, the matching Premium membership or case passes are removed.
- Can't open the app: email zifubazaar@gmail.com from the Google account you signed in with, and we will delete all data for that account after confirming.
- Changes: if we change how data is handled, we will update this policy and the date above first, and announce major changes in the app or on the store listing.
Contact
Daily Case is developed by Zifu Digital (紫芙數位). For questions about this policy, email:
Zifu Digital zifubazaar@gmail.com