LianliankanAbout the app →

Lianliankan
Privacy Policy

Effective October 31, 2026. Applies to versions released after 26.10.27.1. This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.

Lianliankan (“the game”) is provided by Zifu Digital (“we”). This policy explains what data we collect, how we use it, and the choices you have.

The short version

In short: we collect nothing ourselves unless you sign in, and then we only keep your game progress so you can continue on another phone. When you choose to watch an ad for items, Google's ad service handles ad-related data.

• Everything is playable without signing in. Your data then stays on your phone.
• If you sign in with Google, we use Google's Firebase to store your account ID, email, name and game progress, only to sync your progress.
• If you buy Premium, the Starter Pack, item packs, look bundles, a Premium gift card or the Wonder Pass, we keep the purchase record only to confirm it with Google Play and tie what you bought to your account. Google Play handles payment details, and we never receive them.
• On the home screen you can choose to watch an ad for items (3 times a day). Ads only play then: no banners, no interstitials. Ads are provided by Google AdMob; where required we ask for your consent first, and you can change it under Settings → Ad privacy options. Premium members see no ads.
• When you play PK battles (sign-in required), we keep each match's result and progress curve; rivals only see your nickname (for example "旅人 3F2A") and your result.
• Face-to-face battles need no internet: nearby phones connect directly, and results stay between those phones, never uploaded or kept.
• When you invite friends with a share code, we keep the share code, redemption records and the membership period redeemed, only to grant member days.
• When you report a problem with the bug button (sign-in required), we keep the description you write, the screenshot you agree to attach and device info, only to find and fix the problem and reply to you. Screenshots are deleted once the report is handled.
• If the game crashes, an error log (where in the code it crashed, phone model, Android and app version) is sent to the developer to fix the problem. It contains no progress or account data, and you can turn it off under Settings → Send crash reports.
• Google Firebase Analytics collects anonymous usage data (for example how often the app is opened, how far players get and whether the shop is opened), with no name, account, progress or advertising ID, only to improve the game. You can turn it off under Settings → Accessibility & privacy → Send usage data (versions after 26.11). We never sell your data, and we don't share it with third parties other than the Google services described here.
• You can delete your account in the game at any time, and your cloud progress is deleted with it.

Data we collect

Without signing in: we collect nothing except the crash reports and anonymous usage data described below. If you choose to watch an ad, Google AdMob handles ad data as described below.

When you sign in with Google: we collect the following, only for the purposes listed.

• Account ID (Firebase UID), email and Google display name, from the Google account you choose, to identify your account and show which account you're signed in with under Settings → Account.
• Game progress: stars per level, daily and weekly challenge results, item counts, Treasury items, statistics, tutorials seen and Wonder Pass points and claimed rewards, to sync your progress across phones on the same account.
• Purchase records: the purchase token, plan and expiry of a subscription or lifetime purchase, only when you buy, to confirm it with Google Play and tie the membership to your account.
• One-time purchase records: the purchase token (stored only as a hash), product, the month a pass covers and whether the items were collected, for the Starter Pack, item packs, look bundles, tile sets, festival boxes, lucky bags, tips, Premium gift cards and the Wonder Pass (including the 3-month pass), plus the result of each lucky-bag draw, only when you buy, to confirm the purchase with Google Play, give the items or pass to your account and stop one purchase from being collected twice. Deleted with your account.
• Premium gift card and trial codes: the codes created by gift cards you buy or by the monthly 7-day trial code members receive, whether they have been redeemed and when they expire, with the buyer's or receiver's account ID on the code (for trial codes we also record when each was received, for the one-per-month limit), so you can send them to family or friends and see whether they were used. If you delete your account, codes already created stay valid until redeemed or expired (you may have sent them already); they keep only the account ID, not your email or name.
• Family plan: the owner's family code and the account IDs and Google display names of family members who join, when a yearly or lifetime member creates a code or a family member enters it, so the family can share Premium. The owner can see family members' display names (not their email) in the family list. Removed when a member leaves, is removed or deletes their account.
• Leaderboard scores: your best score and time for the Daily Stack, Weekly Stack and this week's Time Attack, with a nickname derived from your account (for example "旅人 3F2A"), sent automatically when you clear a board or a Time Attack run ends while signed in. Other signed-in players can see the nickname and score, but not your email, name or account ID. Deleted with your account.
• PK battles: for each match, the difficulty, board number, your nickname, tiles left, time, score, rank, your progress updated every 1.5 seconds during the match, and a progress curve sampled every 3 seconds. We also keep which matches you played (last 50), your wins and matches played, and how many rewarded matches you used today. This lets players in the same match see each other's nickname, progress and result, rank the match, give rewards and update the weekly PK leaderboard. Your latest curve per difficulty (nickname only, no account data) may be replayed as a "shadow rival" for players who can't find an opponent. Matches are deleted 7 days after they end. When you delete your account, your seat and progress are removed from matches you played, your nickname there becomes "—", and your PK records and shadow curves are deleted.
• Friends (from 2026-10-28): your 6-character friend code and who you are friends with (up to 30). Used for the friends leaderboard, which shows only your and your friends' nicknames and scores. Friends see your nickname, never your email, name or account ID. Removing a friend removes it on both sides; deleting your account deletes your friend code and friendships.
• Lucky Draw (from 2026-10-31): daily draw entries (account ID and date), the days you opened the app recently, your order number for first Google sign-in and first payment, and prize and claim records. Entered automatically the first time you open the app each day while signed in with Google (if eligible); numbers are given on first Google sign-in and first subscription or lifetime purchase. Used to pick daily winners, check lucky numbers, and give items, Premium trial codes and limited titles. The public board shows only approximate counts and event progress, never anyone's account. Entry lists are deleted within 30 days; deleting your account immediately deletes your prizes and numbers and removes your recent entries.
• Community goal (from 2026-10-28): how many pairs you matched this week and today, and whether you claimed this week's reward, plus the community total and target. Sent automatically at the end of each game while signed in, to track the weekly goal and check if you can claim. Others can't see your personal count; deleting your account deletes your contribution record (the community total is not reduced).
• Wishes: the feature wish text that yearly and lifetime members send, with the time and app version, to evaluate new features. Its status appears under "My wishes".
• Problem reports: the description and screenshot (which you can remove first) you send with the bug button, plus the app version, phone model, Android version, screen name and a progress summary (next level, stars, number of purchases). Sign-in is required. They are used to find and fix the problem, reply with its progress and send you a supply pack if it is confirmed. Screenshots are deleted once the report is handled; reports are deleted about 10 days after that.
• Free membership records: when the developer grants you free membership in the admin tool, we keep your email and the days and time granted, to give your account a membership period and log the change. Deleted with your account.
• Share codes and redemptions: your share code, how many times it was redeemed, which codes you redeemed and the membership period redeemed, to grant member days and prevent repeated redemption. Deleted with your account.

We ourselves do not collect location, contacts, photos or device identifiers, and we never use your game data for ads. Payment details such as card numbers are handled by Google Play, and we never receive them.

Face-to-face battles (nearby devices): when you choose Face to face in PK Battle and allow the "Nearby devices" permission, the app uses Google Play services Nearby Connections to connect directly to the phones next to you (Bluetooth and Wi-Fi Direct), with no internet needed. While connected, the nearby phones can see your nickname (for example "旅人 3F2A"). During a match only tiles left, time, score and rank are sent between those phones; nothing is uploaded to our servers, and nothing is kept after the match. On Android 12 and earlier, the system requires location permission for Nearby Connections, but we never read or store your location. The permission is only requested when you tap Face to face, and you can turn it off in system settings at any time.

Daily Challenge dare links: when you tap Dare a friend after clearing the Daily Challenge and share it, the link carries that day's date, your time and, if you are signed in, your nickname (for example "旅人 3F2A"). This lives only in the link you share; our servers don't store it. Anyone who opens the link can see it, so don't share it if you'd rather not.

Crash reports: whether or not you sign in, when the game crashes or hits a serious error, Google Firebase Crashlytics collects the error log at the time, phone model, Android version, app version and an installation ID (not the advertising ID and not your account), only to find and fix the cause. They are kept for 90 days under Crashlytics settings. Only release versions installed from Google Play send them, and you can turn them off under Settings → Send crash reports.

Anonymous usage data (versions after 26.11): whether or not you sign in, Google Firebase Analytics collects what kind of thing you did (finished the tutorial or the home tour, the level number when you first clear one of the first 30 levels, watched a rewarded ad, opened the shop on the Premium page, the product code when you tap buy, and when the Starter Pack card on the home screen is shown or tapped), when and how often you open the app, phone model, Android version, app version, language, approximate country (from the network address) and an installation ID made by the app (not the advertising ID and not your account). It is used to see how many players come back the next day, after a week and after a month, where new players get stuck, and which features and products are used, so we can improve the game; purchase amounts come from Google Play billing automatically. It does not include your name, email, account ID, game progress or advertising ID, is not used for ads, and is not combined with other data to identify you. Individual events are kept for 2 months under Google Analytics settings, after which only aggregate numbers remain. Only release versions installed from Google Play send it, and you can turn it off under Settings → Accessibility & privacy → Send usage data.

Ads: when you watch an ad for items, Google AdMob collects the advertising ID, device and network information, approximate location (from IP) and ad interactions to serve ads, measure them and prevent fraud. Whether ads are personalized follows your choice in the consent form. See how Google uses information in ads.

Where data is stored and who can see it

• Accounts and progress are stored in Google Firebase (Firebase Authentication and Cloud Firestore) on servers in the United States. Crash reports are stored in Firebase Crashlytics, and anonymous usage data in Google Analytics for Firebase.
• All traffic between your phone and the servers is encrypted (HTTPS).
• Security rules only let your own account read and write your progress. Other players cannot see it.
• The developer can see the account list (including emails) in the Firebase console, only for administration and to handle deletion requests.
• Leaderboards only show a nickname (for example "旅人 3F2A") and a score, visible only to signed-in players; scores can only be written by our cloud function. Purchase and pass records can also only be written by our cloud functions after checking with Google Play.
• PK results can only be written by our cloud functions; during a match you can only update your own seat's progress. Rivals can't see your email, name or account ID. Room and challenge codes only work for people you share them with.

Data stored on your device

Whether or not you sign in, the game keeps your levels, challenge results, items, Treasury items, settings, statistics, tutorials seen, any game in progress, the list of problem reports you sent (the start of each description and its time), the bug button's position and how many ads you watched for items today in its private app storage so you can pick up where you left off. Settings are never uploaded.

Deleting your account and data

• In the game: Settings → Account → Delete account. This deletes your account along with your cloud progress, the link between your purchases and the account, your one-time purchase and pass records, your wishes, your problem reports and their progress, your share code and redemption records, your closed-test usage records, your leaderboard scores (including the weekly PK board), your PK battle records and shadow-rival curves, your friend code and friendships, your community goal contributions, your Lucky Draw prizes, numbers and entries, and your family plan (if you own it, it is dissolved and family members lose the shared Premium; if you are a member, you leave it). Game progress on this phone is cleared too (settings stay). Gift card and trial codes already created stay valid until redeemed or expired. Deleting the account does not cancel a Google Play subscription, so cancel it in Google Play separately.
• If you can't use the game: email the contact address below with the Google account email to delete. We will delete that account and its cloud progress within 30 days and reply to confirm.
• Data on your phone only: uninstall the game, or choose "Reset all progress" in Settings.

Deletion cannot be undone. We keep no data from deleted accounts.

Backup

If Android's built-in backup to Google Drive is on, the system may include the game progress on your phone in your device backup. Google handles that backup under your account settings, and we cannot access it. You can turn it off in your phone's system settings.

Permissions

• Internet and network state: used for Google sign-in, progress sync, confirming purchases, problem reports and loading ads.
• Vibration: used for haptic feedback when you clear tiles (a normal permission with no prompt; you can turn it off in Settings).
• Notifications: used for a daily 8 a.m. (phone local time) greeting notification. Android 13 and later ask you first, and you can turn it off in Settings or system settings. The notification is created on your phone and never goes through our servers.
• Receive boot completed: used to reschedule the greeting after the phone restarts. It reads no data.
• Advertising ID (AD_ID): used by Google AdMob to serve ads.
• Google Play billing: used for subscriptions, the lifetime purchase, and buying the Starter Pack, item packs, look bundles, tile sets, festival boxes, lucky bags, tips, Premium gift cards and the Wonder Pass. Lucky-bag results are drawn on our server, and the odds of every prize are shown in the game before you buy.
• Biometrics (fingerprint, face): declared by the Google sign-in component. The game does not use them and never reads any biometric data.
• Nearby devices (Bluetooth and nearby Wi-Fi devices; location on Android 12 and earlier): only used to find and connect to the phones next to you for face-to-face battles, and only requested when you tap Face to face. Location is never read or stored.

The game does not request camera, microphone, contacts or storage permissions. Location permission is only requested on Android 12 and earlier because the system requires it for Nearby Connections; your location is never obtained.

Third-party services

Sign-in, cloud sync, crash reports (Crashlytics) and anonymous usage data (Analytics) use Google Firebase. Its handling of that data is also covered by the Google Privacy Policy and Firebase privacy information. Rewarded ads use Google AdMob (how Google uses information in ads). No other third-party services are used.

Closed-test sign-up

On the sign-up page (lianliankan-game.web.app/join) we collect the following, stored separately from in-app account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to the 14-day continuous testing condition, whether you'd like to test future products, whether you want an iOS version, and the time you signed up.

We use it only to arrange the Google Play closed test (Android users only), give out rewards when the test is completed, and, depending on your answers, tell you about future new-product tests or an iOS version. We do not use this data for advertising and we never sell it or share it with third parties; your email is given to Google Play as part of the tester list and handled under Google's privacy policy.

The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a Lianliankan account, this never deletes or changes it. If you prefer, you can simply type your email instead.

The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.

To stop automated fake sign-ups from using up the spots, when you submit we temporarily store a one-way hash of your network IP address and the time of submission (we never store the IP address itself). It is used only to limit how many sign-ups can come from the same network in a short time, and it is deleted automatically the next day.

After you register, the first time you tap each of the three buttons on the sign-up page (“Join the test group”, “Become a tester” and “Download on Google Play”), we record the time in your sign-up record (we do not record anything you do in Google Groups or on Google Play). It is used only to count how many people completed the joining steps; to do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.

You can email zifubazaar@gmail.com at any time to see or delete your sign-up. Deleting your sign-up only removes the sign-up page data and does not affect your app account.

Usage record during the closed test (from October 19, 2026): during the closed test, if you are signed in with Google in the App, the first time you open the App each day it tells our server “this account opened the App today”. We record your Google account email, name, account ID, App version and the dates you opened the App (Taiwan time), only to confirm who took part in the test and for how many days so we can give out the test reward (premium membership). We do not record what you do in the App, and nothing is recorded if you are not signed in. Deleting your account in the game (Settings → Account → Delete account) also deletes this record.

Refunds

• For anything bought with real money, request a refund through Google Play (Google Play refund help).
• If a minor made a purchase without a parent's permission, the parent can email zifubazaar@gmail.com with the Google Play order number (starting with GPA.) and we will help.

Children

The game is suitable for all ages, and everything can be played without signing in. Children under 13 should only use Google sign-in with a parent's permission. Ads only play when a player taps "Watch an ad for items"; they never pop up on their own.

Changes

If a future version changes how data is handled, we will update this policy and its effective date before releasing that version.

Contact

Lianliankan is developed by Zifu Digital (紫芙數位). For questions about this policy or to request deletion of your account and data, email:

Zifu Digital　zifubazaar@gmail.com