花語小園
隱私權政策
最後更新：2026 年 11 月 7 日（招募網頁加入「用 Google 帳號帶入 Email」與官方 LINE）
「花語小園」（以下稱「本 App」）由紫芙數位（以下稱「我們」）提供。本政策說明我們收集哪些資料、怎麼使用，以及你有哪些選擇。
先說重點
- 不登入也能玩。不登入時，遊戲進度只存在你的手機裡。
- 使用花友會、購買驗證、分享碼等連線功能時，系統會替你建立一個匿名的訪客帳號（只有一組系統產生的識別碼，不含姓名或信箱）。
- 你可以選擇用 Google 帳號登入，把進度備份到雲端、換手機也能接著玩。
- 只有你主動送出「回報問題」或「許願」時，那一次的內容才會傳給我們。另外 App 當掉時會自動送出當機紀錄（不含存檔與帳號資料），可以在設定裡關掉。
- 花友會沒有自由聊天。暱稱、會名、宣言與留言都只能從固定詞庫挑選，不會出現你自己打的文字。
- 本 App 含廣告（Google AdMob 提供），這部分會由 Google 蒐集廣告識別碼等資料。成為會員或購買「去廣告」後，不再載入廣告。
- 你可以隨時在 App 內刪除帳號，雲端上屬於你的資料會一併刪除。
我們收集的資料
| 資料 | 何時收集 | 用途 |
|---|---|---|
| 帳號識別碼：系統產生的匿名帳號識別碼；用 Google 登入時，另有 Google 帳號的電子郵件與顯示名稱 | 第一次使用連線功能時（匿名）；你用 Google 登入時（由 Google Firebase Authentication 保存） | 辨識你的帳號、在 App 內顯示你登入的是哪個帳號 |
| 雲端存檔：遊戲進度（花園、等級、花瓣、圖鑑、故事進度、小鎮居民好感、裝扮、購買與會員狀態）、存檔時間 | 用 Google 登入後，自動備份時 | 讓你換手機或重新安裝後取回進度 |
| 花友會資料：從固定詞庫組成的暱稱、頭像、等級、所屬花友會與職位、貢獻與澆水紀錄、從固定詞庫挑選的留言、種子請求與贈送紀錄、最後活動時間 | 你建立或加入花友會、設定暱稱、在花友會裡互動時 | 讓花友會運作。同一個花友會的成員看得到你的暱稱、頭像、等級、職位、貢獻與留言；花友會的名稱、會徽、宣言與人數所有玩家都看得到。其他玩家看不到你的信箱或帳號識別碼 |
| 回報問題內容 | 你送出回報時：你寫的說明、打開設定前那個畫面的截圖（送出前可預覽或移除）、App 版本、機型、Android 版本、所在畫面、語言、字體縮放、是否去廣告或會員、花園狀況摘要（例如等級、田地數、主線進度、花瓣與花幣數量）、帳號識別碼，以及用 Google 登入時的帳號電子郵件（讓我們知道是哪個帳號回報的；訪客沒有信箱就不會附上） | 重現並修正問題；把處理進度、回覆與花瓣獎勵送回你的 App |
| 許願內容（只限年訂閱會員） | 你送出許願時：許願文字、App 版本、帳號識別碼、送出時間 | 了解大家想要什麼功能；把評估結果通知你 |
| 分享碼與兌換紀錄 | 你在「會員」頁取得自己的分享碼，或輸入分享碼、兌換碼時：你的分享碼與被兌換的次數、兌換到的會員期限、你兌換過哪些代碼與時間、當天嘗試兌換的次數、帳號識別碼 | 產生不重複的分享碼、發給你和朋友會員天數、避免同一組代碼被重複兌換或被猜代碼。朋友兌換你的分享碼時，我們不會讓對方看到你的信箱或名稱 |
| 遊戲貨幣與祈願紀錄 | 你玩遊戲時：花瓣、祈願券、花神碎片的餘額，你領過哪些獎勵（例如任務、成就、升級）、用花瓣買了什麼，以及每次花神祈願的時間、獎池與結果、帳號識別碼 | 這三種貨幣的餘額存在我們的伺服器、由伺服器計算（花神祈願也在伺服器抽），用來防止竄改、確認購買、避免同一份獎勵被重複領取，以及處理客服問題 |
| 訂閱與購買紀錄 | 你購買或恢復購買時：Google Play 的購買憑證、商品或訂閱方案、到期時間 | 確認購買與會員資格（由我們的伺服器向 Google Play 查詢）、發放購買的花瓣與禮包、累計 VIP 等級、避免同一筆購買被重複領取。付款由 Google Play 處理，我們看不到你的付款資料 |
| 當機紀錄：錯誤發生的程式位置與錯誤訊息、App 版本、機型、Android 版本、記憶體與儲存空間狀態、當機時間、一組 Firebase 安裝識別碼（不是你的帳號識別碼，不含存檔、信箱或位置） | App 當掉或發生嚴重錯誤時自動送出（由 Google Firebase Crashlytics 處理）。可以在「設定 → 回報問題 → 傳送當機報告」關掉 | 找出並修正讓 App 當掉的問題。依 Firebase 隱私權說明處理 |
| 廣告識別碼、裝置資訊、大致位置（由網路位址判斷）、廣告互動 | 開啟 App 與觀看獎勵廣告時，只要你不是會員、也沒有購買去廣告。歐盟等地區會先請你同意 | 由 Google AdMob 提供與統計廣告、避免作弊。依 Google 隱私權政策處理。你可以隨時在手機系統設定重設或刪除廣告識別碼 |
只在你手機上的資料
不登入 Google 時，你的花園、故事、裝扮等遊戲進度只存在手機裡，不會上傳。本 App 只需要網路權限，不會收集你的位置、通訊錄、相機、麥克風或相簿內容，也沒有使用分析工具；只有 App 當掉時會送出上面說的當機紀錄。
你自己在設定打開「真實天氣」並選縣市時，App 會把那個縣市的固定代表座標（不是你的位置，本 App 不使用定位）送到天氣服務 Open-Meteo 查天氣，Open-Meteo 會看到你的網路位址；查到的天氣只存在手機上，我們的伺服器收不到。
關於抽獎（祈願）
「祈願」各獎項的機率公開在 App 內的機率表。抽獎結果在你的手機上產生，不會另外蒐集你的資料。
資料存放在哪裡
帳號、雲端存檔、遊戲貨幣與祈願紀錄、花友會、回報、許願、分享碼與購買紀錄存放在 Google Firebase（Authentication、Firestore、Cloud Functions，伺服器位於亞洲），傳輸過程加密。只有你自己的 App 讀得到你的存檔；回報與許願只有開發者看得到。
保存多久
- 帳號與雲端存檔：保存到你刪除帳號為止。
- 花友會資料：退出花友會或刪除帳號時，你的成員資料會移除。花友會動態（例如加入、退出、從詞庫挑選的留言，顯示你當時的暱稱）只保留最近 60 則，較舊的會被新的動態取代，帳號刪除後也一樣。
- 回報：處理完成後定期清除（截圖在處理時就先移除），最長保存 90 天；給你的處理通知在刪除帳號時一併刪除。
- 許願：保存到我們評估完需求為止；刪除帳號時一併刪除。
- 分享碼與兌換到的會員期限：保存到你刪除帳號為止。你兌換過別人分享碼的紀錄（只有帳號識別碼與時間）會留在那組分享碼底下，用來避免同一個帳號重複兌換。
- 遊戲貨幣與祈願紀錄：保存到你刪除帳號為止，刪除帳號時一併刪除。
- 當機紀錄：由 Firebase Crashlytics 保存 90 天後自動刪除。
- 購買紀錄：為了避免同一筆購買被重複領取，購買憑證會以無法還原的雜湊值保存，並記下它綁定的帳號識別碼與商品，帳號刪除後仍會保留這筆紀錄。
我們不會做的事
- 不會出售你的資料。
- 不會把你的存檔、花友會、回報或許願內容提供給廣告商或第三方。
- 不會把你的資料用在與本 App 無關的用途。
你的選擇與權利
- 不想上傳進度：不要用 Google 登入，遊戲功能照常使用（雲端存檔、分享碼、許願需要 Google 登入）。
- 不想讓其他玩家看到你：不要加入花友會，或隨時退出。
- 不想看到廣告：廣告只會在你自己選擇觀看獎勵廣告時出現；成為會員或購買「去廣告」後就不再載入廣告。
- 不想送出當機紀錄：在 App 內「設定 → 回報問題 → 傳送當機報告」選「關」，之後就不會再送。
- 刪除帳號與雲端資料：在 App 內「設定 → 帳號 → 刪除帳號」，確認後會刪除你的帳號，以及雲端上的存檔、花友會成員資料、許願與通知、回報的處理通知、會員紀錄、你的分享碼與兌換到的會員期限。訪客請先用 Google 登入（訪客的資料會接到 Google 帳號上）再刪除。刪除帳號不會取消 Google Play 的訂閱，請另外到 Google Play 取消。
- 沒辦法開啟 App 時：來信 zifubazaar@gmail.com，用你登入的 Google 帳號信箱寫信給我們，我們會在確認後刪除該帳號的所有資料。
- 移除本 App 會刪除手機上的進度；雲端資料要刪除帳號才會刪除。
封閉測試招募
我們在招募網頁（huayu-garden.web.app/join）收集以下資料，與 App 內的帳號資料分開存放，存放在 Google Firebase（Firestore）：你填寫的 Email、你使用的手機系統（Android／iPhone）、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版，以及登記時間。
用途只有：安排 Google Play 封閉測試（僅限 Android 使用者）、測試完成後發放獎勵，以及依你的回答，日後通知你新產品測試或 iOS 版的消息。我們不會用這些資料發送廣告，也不會出售或提供給第三方；你的 Email 會提供給 Google Play 作為測試名單，依 Google 的隱私權政策處理。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕：按下後會跳出 Google 帳號選單，我們只讀取你選的那個帳號的 Email 來填進欄位，讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄（只用來讀取 Email，不會用在 App），不保存你的 Google 名稱、頭像或其他資料；如果你本來就有花語小園的帳號，這個動作不會刪除或更動它。不想用的話，也可以直接輸入 Email。
招募網頁另提供官方 LINE 連結，加入好友或用 LINE 傳送你的帳號給我們都是選擇性的；這些訊息由 LINE 依其隱私權政策處理，我們只用來確認你的登記與聯絡測試事項。
為了防止有人用程式大量登記假資料占用名額，你送出登記時，我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間（不保存原始 IP 位址），只用來限制同一個網路在短時間內的登記次數，隔天自動刪除。
登記之後，招募網頁上「加入測試群組」「成為測試人員」「前往 Play 商店下載」三個按鈕，你第一次按下每一個時，我們會在你的登記資料裡記下按的時間（不記錄你在 Google 群組或 Play 商店裡做了什麼），只用來統計多少人完成加入流程；為了做到這件事，你的 Email 會存在你自己的瀏覽器（localStorage）裡。這些時間和登記資料一起保存、一起刪除。
你可以隨時來信 zifubazaar@gmail.com 要求查詢或刪除你的登記。刪除招募登記只會刪除招募網頁上的資料，不會影響你的 App 帳號。
封閉測試期間的使用紀錄（2026 年 10 月 19 日起）：封閉測試期間，如果你在 App 內用 Google 登入，App 每天第一次打開時會告訴我們的伺服器「這個帳號今天打開過」。我們記下你的 Google 帳號 Email、名稱、帳號識別碼、App 版本，以及有打開的日期（台灣日期），用來確認誰參加了測試、測了幾天，好發放測試獎勵（高級會員）。不記錄你在 App 裡做了什麼；沒登入（訪客）的不會記。在 App 內刪除帳號會一併刪除這份紀錄。
兒童
本 App 不是專為 13 歲以下兒童設計，我們不會刻意收集兒童的個人資料。
政策更新
我們可能會更新本政策，重大變更會在 App 內或上架頁面通知。
聯絡我們
紫芙數位 zifubazaar@gmail.com
Flower Garden
Privacy Policy
Last updated: November 7, 2026 (sign-up page adds “Fill in my email with Google” and our official LINE). This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.
Flower Garden (“the App”) is provided by Zifu Digital (“we”). This policy explains what data we collect, how we use it, and the choices you have.
The short version
- You can play without signing in. Without signing in, your progress stays on your phone.
- When you use online features such as the Garden Club, purchase verification or share codes, an anonymous guest account is created for you (just a system-generated ID, with no name or email).
- You can choose to sign in with Google to back up your progress to the cloud and continue on a new phone.
- Only when you choose to send a bug report or a wish is that content sent to us. When the App crashes it also sends a crash log automatically (no save data or account info), which you can turn off in Settings.
- The Garden Club has no free chat. Nicknames, club names, mottos and messages are all picked from fixed word lists, so nothing you type yourself is shown.
- The App shows ads provided by Google AdMob, and Google collects data such as the advertising ID for them. Members and players who bought “Remove ads” no longer load ads.
- You can delete your account in the App at any time, and your data in the cloud is deleted with it.
Data we collect
| Data | When | Purpose |
|---|---|---|
| Account ID: a system-generated anonymous account ID; if you sign in with Google, also your Google account email and display name | The first time you use an online feature (anonymous); when you sign in with Google (stored by Google Firebase Authentication) | To identify your account and show which account you are signed in with |
| Cloud save: game progress (garden, level, petals, collection, story progress, friendship with townsfolk, outfits, purchase and membership status) and save time | After you sign in with Google, during automatic backups | To restore your progress on a new phone or after reinstalling |
| Garden Club data: a nickname built from fixed word lists, avatar, level, your club and role, contributions and watering records, messages picked from fixed phrases, seed requests and gifts, and last active time | When you create or join a club, set your nickname or interact in a club | To run the Garden Club. Members of the same club can see your nickname, avatar, level, role, contributions and messages; every player can see a club’s name, emblem, motto and member count. Other players never see your email or account ID |
| Bug reports | When you send a report: your description, a screenshot of the screen you were on before opening Settings (you can preview or remove it before sending), app version, device model, Android version, current screen, language, font scale, whether you are ad-free or a member, a summary of your garden (such as level, number of plots, story progress, petals and coins), your account ID and, if you signed in with Google, your account email (so we know which account sent it; guests have no email, so none is attached) | To reproduce and fix problems, and to send progress, replies and petal rewards back to your App |
| Wishes (yearly members only) | When you send a wish: the wish text, app version, account ID and time sent | To learn which features players want and tell you the outcome |
| Share codes and redemptions | When you get your share code on the Member page, or enter a share code or gift code: your share code and how many times it has been redeemed, the membership time you received, which codes you redeemed and when, how many redeem attempts you made that day, and your account ID | To create unique share codes, give membership days to you and your friends, and stop codes being redeemed twice or guessed. Friends who redeem your code never see your email or name |
| In-game currency and wish history | While you play: your petal, wish ticket and Flora shard balances, which rewards you have claimed (such as tasks, achievements and level-ups), what you bought with petals, and the time, banner and results of each Flora’s Wish, with your account ID | These balances are kept and calculated on our servers (Flora’s Wish is also drawn on our servers) to prevent tampering, confirm purchases, stop the same reward being claimed twice and handle support requests |
| Subscription and purchase records | When you buy or restore a purchase: the Google Play purchase token, product or subscription plan, and expiry | To confirm purchases and membership (our server checks with Google Play), deliver petals and packs, track your VIP level and stop the same purchase being claimed twice. Payment is handled by Google Play and we never see your payment details |
| Crash logs: where in the code the error happened and the error message, app version, device model, Android version, memory and storage status, time of the crash, and a Firebase installation ID (not your account ID; no save data, email or location) | Sent automatically when the App crashes or hits a serious error (handled by Google Firebase Crashlytics). You can turn this off in Settings → Report a problem → Send crash reports | To find and fix what makes the App crash, under the Firebase privacy information |
| Advertising ID, device information, approximate location (from IP address) and ad interactions | When you open the App and watch rewarded ads, unless you are a member or bought “Remove ads”. Users in the EU and similar regions are asked for consent first | Used by Google AdMob to serve and measure ads and prevent fraud, under the Google Privacy Policy. You can reset or delete your advertising ID in your phone’s settings at any time |
Data that stays on your phone
If you don’t sign in with Google, your garden, story and outfits stay on your phone and are never uploaded. The App only needs internet access. It does not collect your location, contacts, camera, microphone or gallery contents, and does not use analytics tools; only the crash logs described above are sent when the App crashes.
If you turn on “Real weather” in Settings and pick a county, the App sends that county’s fixed coordinates (not your location; the App does not use location services) to the weather service Open-Meteo to look up the weather. Open-Meteo sees your IP address. The weather is stored only on your phone and never reaches our servers.
About prize draws
The odds for every prize in the prize draws are published in the App’s odds table. Draw results are generated on your phone and no extra data is collected for them.
Where data is stored
Accounts, cloud saves, in-game currency and wish history, Garden Club data, bug reports, wishes, share codes and purchase records are stored in Google Firebase (Authentication, Firestore and Cloud Functions, with servers in Asia) and encrypted in transit. Only your own App can read your save; bug reports and wishes can only be seen by the developer.
How long we keep it
- Account and cloud save: until you delete your account.
- Garden Club data: your member record is removed when you leave a club or delete your account. The club activity feed (such as joins, leaves and phrase messages, shown with your nickname at the time) keeps only the latest 60 entries, and older ones are replaced by newer activity, including after your account is deleted.
- Bug reports: cleared regularly after they are resolved (screenshots are removed as soon as a report is handled), kept for no more than 90 days. Progress notifications sent to you are deleted with your account.
- Wishes: kept until we have reviewed the request, and deleted with your account.
- Share codes and membership time from codes: until you delete your account. The record that you redeemed someone else’s share code (only your account ID and the time) stays with that code so the same account cannot redeem it twice.
- In-game currency and wish history: until you delete your account, and deleted with it.
- Crash logs: kept by Firebase Crashlytics for 90 days, then deleted automatically.
- Purchase records: to stop the same purchase being claimed twice, purchase tokens are kept as an irreversible hash together with the account ID and product they were bound to. This record is kept after the account is deleted.
What we never do
- We never sell your data.
- We never share your save, Garden Club data, bug reports or wishes with advertisers or other third parties.
- We never use your data for purposes unrelated to the App.
Your choices and rights
- Don’t want to upload your progress: don’t sign in with Google. Every game feature still works (cloud save, share codes and wishes need Google sign-in).
- Don’t want other players to see you: don’t join a Garden Club, or leave at any time.
- Don’t want ads: ads only appear when you choose to watch a rewarded ad; members and players who bought “Remove ads” no longer load ads.
- Don’t want to send crash logs: in the App, go to Settings → Report a problem → Send crash reports and choose “Off”. No more crash logs will be sent.
- Delete your account and cloud data: in the App, go to Settings → Account → Delete account. After you confirm, your account is deleted together with your cloud save, Garden Club member records, wishes and notifications, bug report notifications, membership records, your share code and membership time from codes. Guests should sign in with Google first (guest data is carried over to the Google account) and then delete. Deleting your account does not cancel a Google Play subscription; cancel it separately in Google Play.
- If you can’t open the App: email zifubazaar@gmail.com from the Google account you signed in with, and we will delete all data for that account after confirming it.
- Uninstalling the App deletes the progress on your phone; your cloud data is only deleted when you delete your account.
Closed-test sign-up
On the sign-up page (huayu-garden.web.app/join) we collect the following, stored separately from in-app account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to the 14-day continuous testing condition, whether you'd like to test future products, whether you want an iOS version, and the time you signed up.
We use it only to arrange the Google Play closed test (Android users only), give out rewards when the test is completed, and, depending on your answers, tell you about future new-product tests or an iOS version. We do not use this data for advertising and we never sell it or share it with third parties; your email is given to Google Play as part of the tester list and handled under Google's privacy policy.
The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a FlowerGarden account, this never deletes or changes it. If you prefer, you can simply type your email instead.
The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.
To stop automated fake sign-ups from using up the spots, when you submit we temporarily store a one-way hash of your network IP address and the time of submission (we never store the IP address itself). It is used only to limit how many sign-ups can come from the same network in a short time, and it is deleted automatically the next day.
After you register, the first time you tap each of the three buttons on the sign-up page (“Join the test group”, “Become a tester” and “Download on Google Play”), we record the time in your sign-up record (we do not record anything you do in Google Groups or on Google Play). It is used only to count how many people completed the joining steps; to do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.
You can email zifubazaar@gmail.com at any time to see or delete your sign-up. Deleting your sign-up only removes the sign-up page data and does not affect your app account.
Usage record during the closed test (from October 19, 2026): during the closed test, if you sign in with Google in the app, the app tells our server "this account opened the app today" the first time you open it each day. We record your Google account email, name, account ID, app version and the dates you opened the app (Taiwan time), only to confirm who took part in the test and for how many days, so we can give out the test reward (Premium). We do not record what you do in the app, and nothing is recorded if you are not signed in (guest). Deleting your account in the app also deletes this record.
Children
The App is not designed for children under 13, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this policy. Significant changes will be announced in the App or on the store listing.
Contact
Zifu Digital · zifubazaar@gmail.com