夜市合合樂
隱私權政策
生效日期：2026 年 11 月 9 日 適用所有版本（含封閉測試版；2026 年 11 月 8 日補上封閉測試招募網頁、幸運大獎、會員體驗碼、每日排行與好友挑戰書；2026 年 11 月 9 日補上滿月大胃王、全服行情、接力擺攤、自製關卡）
「夜市合合樂」（以下稱「本遊戲」）由紫芙數位（以下稱「我們」）提供。本政策說明我們收集哪些資料、怎麼使用，以及你有哪些選擇。
先說重點
一句話：不登入就能玩全部內容，這時遊戲紀錄只存在你的手機；選擇用 Google 登入後，我們才保存你的遊戲進度，讓你換手機也接得回來。
- 登入是自己選的：不登入也能玩全部主題、每週挑戰盤與每日福利。
- 用 Google 登入時，我們透過 Google 的 Firebase 服務保存你的帳號識別碼、Email、名稱與遊戲進度（最高分、主題圖鑑、道具、每日福利與成就紀錄），只用來同步進度。
- 購買高級會員（訂閱或終身）時，我們保存購買記錄，只用來向 Google Play 確認並讓會員跟著你的帳號；付款資料由 Google Play 處理，我們拿不到。
- 用分享碼邀請朋友、許願時，我們保存分享碼、兌換紀錄與你寫的心願，只用來發放會員天數與回覆你。
- 你按畫面上的小瓢蟲回報問題時（需要登入），我們保存你寫的說明、你同意附上的畫面截圖與裝置資訊，只用來找出並修正問題、回覆你；截圖在處理完成後就刪除。
- 遊戲當掉時，正式版會把錯誤紀錄傳給開發者修正問題，不含進度與帳號資料；可以在「設定 → 傳送當機報告」關閉。
- 廣告只在你自己按的時候播：每日福利頁「看廣告領道具」（每天 3 次），以及盤面滿了時「看廣告多放 3 塊」（每局一次）。廣告由 Google AdMob 提供，需要的地區會先詢問你的同意，之後可在「設定 → 廣告隱私選項」修改。高級會員不播廣告。
- 不出售你的資料，也不把遊戲紀錄用於廣告。
我們收集哪些資料
沒有登入時：除了下方的「當機報告」，我們不收集任何資料。你自己選擇看廣告時，Google AdMob 會依下方「廣告」一段處理廣告資料。
用 Google 登入時：收集以下資料，只用在下表的用途。
| 資料 | 來源 | 用途 |
|---|---|---|
| 帳號識別碼（Firebase UID）、Email、Google 帳號顯示名稱 | 你選擇的 Google 帳號 | 辨識你的帳號；在「設定 → 帳號」顯示你登入的是哪個帳號 |
| 遊戲進度：最高分、玩過幾局、新手局玩過沒、主題圖鑑、道具袋（萬用塊、鐘槌）與最後變動時間、三餐與每日任務領取紀錄、今天看廣告領了幾次、累計次數、成就、連續擺攤天數、本月最高分、每週挑戰盤成績 | 你在遊戲裡的遊玩紀錄 | 存到雲端，讓同一個帳號在不同手機上接著玩；兩支手機都玩過時合併成一份 |
| 購買記錄：訂閱的方案、狀態與到期時間；終身會員的購買憑證；購買憑證的雜湊值與綁定的帳號 | 你在 Google Play 的購買（只有購買時） | 向 Google Play 確認購買有效，並綁定在你的帳號，讓會員權益跟著帳號、不能被別的帳號拿去用 |
| 分享碼、被兌換的次數、兌換紀錄、兌換來的會員期限；每日兌換嘗試次數 | 你取得分享碼、兌換朋友的代碼時 | 發放會員天數、防止重複兌換與猜碼 |
| 每日會員補給領過的日期 | 會員領每日補給時 | 一天只能領一次 |
| 心願：你寫的內容、處理狀態、我們的回覆、App 版本、時間 | 年訂閱或終身會員送出心願時 | 評估要不要做、回覆你 |
| 回報問題：你按下畫面上的小瓢蟲送出的說明、當下的畫面截圖（可以先移除）、App 版本、手機型號、Android 版本、語言、字體大小、是不是會員、畫面名稱、進度摘要（最高分、局數、道具數量、今日主題）、你登入的 Email；處理進度與回覆 | 你主動送出 | 找出並修正問題、在「我的回報」回覆處理進度、確認是問題時送你攤販補給；處理完成後截圖會刪除，回報在處理完約 10 天後刪除 |
| 封閉測試期間：你的 Email、Google 帳號顯示名稱、App 版本、第一次與最近一次打開的時間、打開過的日期 | 封閉測試版每天第一次打開（已登入時） | 確認誰真的參與測試、發放測試者獎勵；正式版上架後不再記錄 |
| 會員體驗碼（2026-11-08 起）：你領到的體驗碼、來源（會員每月福利、幸運大獎）、有沒有被用掉、到期日，以及最近 30 天領了幾組 | 付費會員按「領這個月的會員體驗碼」、還不是會員的幸運大獎得主 | 讓你自己用或送朋友（一碼一次、90 天內有效）、限制領取次數。領取前會向 Google Play 確認你是付費會員（免費試用不算）。刪除帳號時刪除領取紀錄；已經發出、還沒被用掉的碼保留到被兌換或過期 |
| 幸運大獎（2026-11-08 起）：抽獎報名（帳號識別碼、報名日期）、最近打開的日期、第一次用 Google 登入與第一次付費的順序號碼、中獎與領取紀錄、限定稱號 | 用 Google 登入後每天第一次打開 App 時自動報名（符合資格才算）；帳號滿 3 天時給登入號碼；第一次訂閱或買終身會員時給付費號碼 | 抽出每日得主、確認幸運號碼、發放道具（伺服器記下已領，道具加進你手機上的道具袋）、會員天數、體驗碼與限定稱號；付費會員獎領取前會向 Google Play 確認沒有退款、不是免費試用。公開看板只顯示大約人數與活動進度，不顯示任何人的帳號。報名名單 30 天內刪除；刪除帳號時立刻刪除你的獎項與號碼，近兩天的報名一併拿掉。拿過登入號碼的帳號刪除後，我們保留一份無法還原的電子郵件雜湊，只用來避免同一個 Google 帳號刪除重來重複領號碼 |
| 每日排行（2026-11-08 起）：你送出的排行局（台灣日期、每一步放在哪一格）、伺服器算出的分數與手數、當天送了幾局、上過榜的日期 | 用 Google 登入後玩「每日排行盤」，收攤時送出（每天最多 3 局） | 伺服器照每一步重播一次算分（手機報的分數不算數，防作弊），列出當天的全服排行。排行榜只顯示分數和一個由帳號識別碼算出的 4 碼代號，不顯示 Email、Google 名稱或頭像；登入的玩家都看得到排行榜。刪除帳號時刪除你所有的排行成績與送出紀錄 |
| 好友挑戰書（2026-11-08 起）：你發的戰帖（6 碼代號、那一盤的種子、你的分數、4 碼代號、建立與到期時間）、你接的戰帖的分數與勝負、每天發了幾張 | 用 Google 登入後下戰帖或輸入代號接戰帖時送出（每天最多發 10 張，每張最多 20 人接） | 讓朋友用代號玩同一盤、伺服器重播驗分、在「挑戰書」頁列出你的戰帖與勝負。接同一張戰帖的人只看得到彼此的分數和 4 碼代號，不顯示 Email 或名字。戰帖 7 天後不能再接；刪除帳號時刪除你發的戰帖（連同別人接的紀錄）、你接戰帖的成績與每天的次數紀錄 |
| 滿月大胃王與全服行情（2026-11-09 起）：收攤時送出的這局開市次數、合出 2～8 各幾次、台灣日期，以及當天回報了幾局；打大胃王的下數與領獎紀錄；「大胃王剋星」稱號 | 用 Google 登入後每局收攤時自動送出 | 算全服大胃王的血量與每個人的獎勵；統計全服當天合出最多與最少的數字，當作隔天的行情。行情只公開數字與局數，不含任何帳號。刪除帳號時刪除你的回報、打大胃王紀錄與稱號 |
| 猜明天的行情（2026-11-09 起）：你猜的數字、日期、有沒有領獎 | 用 Google 登入後在「全服夜市」猜行情時送出 | 隔天開獎、送猜中的獎勵。刪除帳號時刪除 |
| 接力擺攤（2026-11-09 起）：你開的或接的接力代號、每一步放在哪一格、你這棒的分數、一個由帳號識別碼算出的 4 碼代號與無法還原的雜湊代號、每天開了幾場 | 用 Google 登入後開接力或輸入代號接棒時送出（每天最多開 10 場，每場最多 5 棒） | 伺服器照每一步重播驗分，讓接同一場的朋友看到每一棒的分數（只顯示 4 碼代號，不顯示 Email 或名字）。刪除帳號時刪除你的接力清單與每天的次數紀錄；你在接力場跑過的那一棒（分數、4 碼代號、雜湊代號）會留在那一場，讓其他棒的成績完整，無法還原成你的帳號 |
| 自製關卡（2026-11-09 起）：你做的盤面、目標、塊數、名稱（只能從固定詞庫選，不能打字）、你自己過關的操作、被玩與被按讚的次數、可領的攤位幣、每天發佈幾關；你玩別人的關卡時記一筆「玩過、有沒有按讚」（用無法還原的雜湊代號，不存帳號） | 用 Google 登入後發佈關卡、輸入代號玩關卡時送出（每天最多發佈 5 關） | 伺服器確認這關過得了才給代號；統計人氣、選本週人氣關卡（公開代號、名稱與盤面，不顯示作者）、發攤位幣給作者。刪除帳號時刪除你發佈的所有關卡（連同別人玩過與按讚的紀錄）、你的關卡清單與次數紀錄 |
除了你回報問題時附上的遊戲畫面截圖，我們自己不讀取位置、聯絡人、相片、相機、麥克風或裝置識別碼，也不會把你的遊戲資料用於廣告或分析。手機上的設定（語言、字體大小、音效、震動、深淺色、盤面外觀、小工具）不會上傳。
當機報告：不論有沒有登入，正式版當掉或發生嚴重錯誤時，Google Firebase Crashlytics 會收集當機時的程式錯誤紀錄、手機型號、Android 版本、App 版本與一個安裝識別碼（不是廣告 ID，也不是你的帳號），只用來找出並修正造成當機的問題，依 Crashlytics 的設定保存 90 天。可以在「設定 → 傳送當機報告」關閉，關閉後不再傳送。
廣告：你按「看廣告」時，Google AdMob 會收集廣告 ID、裝置與網路資訊、大致位置（由 IP 推估）與廣告互動紀錄，用來提供廣告、計算成效與防止詐欺；是否顯示個人化廣告依你在同意表單的選擇。詳見 Google 的廣告說明。這些資料由 Google 處理，我們拿不到你的廣告 ID。
資料存在哪裡、誰看得到
- 帳號與進度存在 Google 的 Firebase（Firebase Authentication、Cloud Firestore），資料庫與雲端函式位於台灣（asia-east1）；當機報告存在 Firebase Crashlytics。
- 手機與伺服器之間的傳輸全程加密（HTTPS）。
- 雲端的安全規則只允許你自己的帳號讀寫你的進度、讀你的會員紀錄，其他玩家看不到；會員紀錄只能由我們的雲端函式寫入。
- 回報、截圖、封閉測試紀錄只有管理員帳號能在回報後台讀取；其他玩家看不到。
- 只有開發者在處理問題、回覆心願或發放會員天數時會查看相關紀錄。
存在你手機裡的資料
為了讓你下次打開能接著玩，遊戲會在手機的 App 專屬儲存空間記下以下內容。這些資料只有本遊戲讀得到；登入時，其中的遊戲進度會照上表同步到雲端。
| 內容 | 用途 |
|---|---|
| 遊戲進度（同上表）與這份進度屬於哪個帳號 | 首頁、我的紀錄、圖鑑、每日福利；換帳號時不會把上一個帳號的進度帶過去 |
| 設定（語言、字體大小、深淺色、音效、震動、早安通知、首頁推薦小卡、盤面外觀、當機報告開關）、看過的新手教學 | 記住你的偏好 |
| 玩到一半的那一局 | 暫時切到別的 App 回來能接著玩 |
| 桌面小工具顯示的資訊與更新時間 | 桌面小工具 |
| 「紫芙的其他 App」清單與圖示的快取 | 沒網路時也看得到上次的清單 |
| 你送過的回報清單（說明開頭與時間，每個帳號分開記）、小瓢蟲的位置 | 在「我的回報」對上處理進度、記住小瓢蟲放哪裡 |
如果有一部分紀錄讀不懂（例如檔案毀損），遊戲會把原本那份另外存一份在同一個空間，方便日後協助你處理，不會上傳。
網路連線
- 登入後同步進度、確認購買、分享碼、每日會員補給、許願、回報問題與領回報獎勵、每日排行、好友挑戰書、滿月大胃王、全服行情、接力擺攤、自製關卡、幸運大獎與體驗碼時，連到 Google Firebase。
- 預先載入與播放廣告時，連到 Google AdMob（見上方「廣告」）。
- 顯示「紫芙的其他 App」（設定頁與首頁推薦小卡）時，從我們的官網 zifu-digital.web.app 下載 App 清單與圖示。主機服務（Google Firebase Hosting）會依一般網站運作方式處理連線紀錄（例如 IP 位址）；我們不會用它辨識你，請求裡也不帶任何遊戲資料。點推薦卡片會用瀏覽器或 Google Play 打開那個 App 的頁面，之後依那個網站自己的政策處理。
- 「新版本提示」與「評分邀請」使用 Google Play 提供的功能（In-App Updates、In-App Review），由手機上的 Google Play 處理；你有沒有評分我們不會知道。
分享圖片
你按「分享」時，遊戲會在手機上畫出成績、成就、圖鑑或分享碼的圖片（只有分數、主題、成就名稱或分享碼，不含 Email、名稱等個人資料），暫存在本遊戲的快取空間，再交給你選的 App 分享出去。分享給誰、怎麼分享由你決定；我們看不到，也不保存。
登出與刪除資料
- 登出：「設定 → 帳號 → 登出」會先把最新進度備份到雲端才登出（沒網路時不登出），登出後這支手機回到全新的訪客，雲端的進度保留，下次登入接回來。
- 刪除帳號：「設定 → 帳號 → 刪除帳號」會刪除你在本遊戲的雲端進度與 Google 登入帳號，並一併刪除購買綁定、會員補給紀錄、分享碼與兌換紀錄、心願、回報與處理進度、封閉測試期間的使用紀錄、後台給的免費會員紀錄、體驗碼的領取紀錄、幸運大獎的獎項、號碼與報名、每日排行成績、你發的與接的挑戰書、大胃王與行情的回報、猜行情紀錄、你發佈的自製關卡（連同別人玩過的紀錄）、接力紀錄；這支手機也回到全新的訪客。已經發出、還沒被用掉的體驗碼保留到被兌換或過期；拿過幸運號碼的帳號會留一份無法還原的電子郵件雜湊；你在別人接力場跑過的那一棒分數與雜湊代號會留在那一場，無法還原成你的帳號（見上表）。刪除後不能復原。已付費的訂閱請另外到 Google Play 取消，否則會繼續扣款。
- 也可以來信 zifubazaar@gmail.com 要求刪除帳號與資料，請用登入的那個 Email 寄信，我們會在 30 天內處理。
- 沒有登入的話，解除安裝本遊戲，或在手機的「設定 → 應用程式 → 夜市合合樂 → 儲存空間 → 清除資料」，手機上的所有遊戲紀錄就會刪除。
- 當機報告依 Crashlytics 的設定 90 天後自動刪除。
備份
如果你的手機開啟了 Android 內建的「備份到 Google 雲端硬碟」，系統可能會把手機上的遊戲紀錄一起備份，換手機時還原。這項備份由 Google 依照你的帳號設定處理，我們無法存取；你可以在手機的系統設定裡關閉。
權限
- 網路、網路狀態：用於 Google 登入、同步進度、確認購買、分享碼、許願、載入廣告，以及下載「紫芙的其他 App」清單。
- Google Play 計費：用於高級會員的訂閱與終身購買。
- 廣告 ID 與廣告相關權限（AD_ID、Android 廣告服務）：由 Google AdMob 使用，用於提供廣告。
- 生物辨識（指紋、臉部）：這是 Google 登入元件附帶宣告的權限，本遊戲不使用，也不會讀取任何生物辨識資料。
- 喚醒、前景服務、接收 Google 服務訊息：由 Google 的元件（Firebase、廣告）附帶宣告，供它們在背景完成工作；本遊戲不用它們讀取你的資料。
- 震動：用於合成、開市時的震動回饋（一般權限，不用詢問；可在「設定」關閉）。
- 通知：用於每天早上 8 點（手機當地時間）的「早安通知」，Android 13 以上會先詢問你；可以在「設定」或系統設定關閉。通知內容只在你的手機上產生，不經過我們的伺服器。
- 開機完成：用於手機重新開機後重新排定早安通知的時間，不讀取任何資料。
本遊戲不申請位置、相機、麥克風、聯絡人與儲存空間權限。
第三方服務
登入、雲端存檔、會員與分享碼的雲端函式、當機報告（Crashlytics）使用 Google Firebase；購買使用 Google Play；新版本提示與評分邀請使用 Google Play；獎勵廣告使用 Google AdMob（Google 的廣告說明）；官網主機使用 Google Firebase Hosting。相關處理適用 Google 隱私權政策 與 Firebase 隱私權說明。除此之外沒有其他第三方服務。
封閉測試招募網頁
招募網頁：我們在招募網頁（tword-9a1ae.web.app/join）收集以下資料，與 App 內的帳號資料分開存放，存放在 Google Firebase（Firestore）：你填寫的 Email、你使用的手機系統（Android／iPhone）、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版，以及登記時間。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕：按下後會跳出 Google 帳號選單，我們只讀取你選的那個帳號的 Email 來填進欄位，讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄（只用來讀取 Email，不會用在 App），不保存你的 Google 名稱、頭像或其他資料；如果你本來就有夜市合合樂的帳號，這個動作不會刪除或更動它。不想用的話，也可以直接輸入 Email。
招募網頁另提供官方 LINE 連結，加入好友或用 LINE 傳送你的帳號給我們都是選擇性的；這些訊息由 LINE 依其隱私權政策處理，我們只用來確認你的登記與聯絡測試事項。
為了防止有人用程式大量登記假資料占用名額，你送出登記時，我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間（不保存原始 IP 位址），只用來限制同一個網路在短時間內的登記次數，隔天自動刪除。
登記之後，招募網頁上「加入測試群組」「成為測試人員」「前往 Play 商店下載」三個按鈕，你第一次按下每一個時，我們會在你的登記資料裡記下按的時間（不記錄你在 Google 群組或 Play 商店裡做了什麼），只用來統計多少人完成加入流程；為了做到這件事，你的 Email 會存在你自己的瀏覽器（localStorage）裡。這些時間和登記資料一起保存、一起刪除。
用途只有：通知你測試相關的消息、測試完成後用你的 Email 找到你的 App 帳號（對照有沒有登入、測試期間打開 App 的天數）並直接加上高級會員（不寄兌換碼），以及依你的回答，日後通知你新產品測試或 iOS 版的消息。我們不會用這些資料發送廣告，也不會出售或提供給第三方。加入 Google 群組由 Google 依其隱私權政策處理，我們只用群組寄測試通知。
保存多久：兩題都選「不願意／不需要」的人，Email 在測試結束、會員發放後刪除；其他人最久保存 2 年，期間可以隨時來信 zifubazaar@gmail.com 要求刪除。App 內的刪除帳號不包含招募登記，要刪除請來信。
兒童
本遊戲適合所有年齡，不需要登入就能玩全部內容。未滿 13 歲的兒童請在家長同意下才使用 Google 登入或購買。廣告只在玩家自己按「看廣告」時播放，不會自動跳出。
政策變更
如果之後的版本改變資料的處理方式，我們會先更新這份政策並修改上方的生效日期，再發布新版本。
聯絡我們
本遊戲由紫芙數位開發。對這份政策有任何問題，或要求刪除帳號與資料，請來信：
紫芙數位 zifubazaar@gmail.com
Night Market MergeAbout the app →
Night Market Merge
Privacy Policy
Effective November 9, 2026. Applies to all versions, including closed-test builds (closed-test sign-up page, Lucky Draw, Premium trial codes, daily leaderboard and friend challenges added November 8, 2026; Full Moon Feast, market prices, Stall Relay and Custom Levels added November 9, 2026). This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.
Night Market Merge (“the game”) is provided by Zifu Digital (“we”). This policy explains what data we collect, how we use it, and the choices you have.
The short version
In short: you can play everything without signing in, and then your game records stay on your phone. Only if you choose to sign in with Google do we keep your game progress, so it comes back on a new phone.
- Signing in is your choice: every theme, the Weekly Challenge and Daily Perks work without it.
- When you sign in with Google, we use Google's Firebase to keep your account ID, email, name and game progress (best scores, Theme Album, items, Daily Perks and achievement records), only to sync your progress.
- When you buy Premium (a subscription or lifetime), we keep the purchase record only to confirm it with Google Play and tie the membership to your account. Google Play handles payment details, and we never receive them.
- When you invite friends with a share code or send a wish, we keep the share code, redemption records and your wish, only to grant member days and reply to you.
- When you report a problem with the ladybug button (sign-in required), we keep the description you write, the screenshot you agree to attach and device info, only to find and fix the problem and reply to you. Screenshots are deleted once the report is handled.
- If the game crashes, release builds send an error log to the developer to fix the problem. It contains no progress or account data, and you can turn it off under Settings → Send crash reports.
- Ads only play when you tap for one: "Watch an ad for an item" on the Daily Perks page (3 times a day) and "Watch ad to keep going" when your board is full (once per round). Ads are provided by Google AdMob; where required we ask for your consent first, and you can change it under Settings → Ad privacy options. Premium members see no ads.
- We never sell your data or use your game records for ads.
Data we collect
Without signing in: apart from the crash reports below, we collect no data. When you choose to watch an ad, Google AdMob handles ad data as described under "Ads" below.
When you sign in with Google: we collect the following, used only for the purposes listed.
| Data | Source | Purpose |
|---|---|---|
| Account ID (Firebase UID), email, Google account display name | The Google account you choose | Identify your account; show which account you're signed in with under Settings → Account |
| Game progress: best score, rounds played, whether you've played the starter round, Theme Album, item bag (Wilds and Mallets) and when it last changed, meal and mission claims, how many ad rewards you claimed today, lifetime totals, achievements, play streak, this month's best, Weekly Challenge scores | How you play the game | Saved to the cloud so the same account can continue on another phone; if two phones were used, they're merged into one |
| Purchase records: subscription plan, state and expiry; the lifetime purchase token; a hash of each purchase token and the account it's tied to | Your Google Play purchases (only when you buy) | Confirm the purchase with Google Play and tie it to your account, so Premium follows your account and can't be used by another account |
| Share code, how many times it was redeemed, redemption records, member days redeemed; daily redeem attempts | When you get your share code or redeem a friend's code | Grant member days and prevent repeat redemptions and code guessing |
| The date you last claimed the daily member supply | When a member claims the daily supply | Allow one claim per day |
| Wishes: what you write, its status, our reply, app version and time | When a yearly or lifetime member sends a wish | Consider the request and reply to you |
| Problem reports: the description you send with the ladybug button, the screenshot taken at that moment (you can remove it first), app version, phone model, Android version, language, text size, whether you're a member, screen name, a progress summary (best score, rounds, item counts, today's theme) and the email you're signed in with; progress updates and replies | You send it | Find and fix the problem, reply with its progress in My reports, and send you supplies if it's confirmed. Screenshots are deleted once the report is handled; reports are deleted about 10 days after that |
| During closed testing: your email, Google account display name, app version, when you first and last opened the app, and the dates you opened it | The first time each day you open a closed-test build while signed in | Confirm who actually took part in testing and grant tester rewards; no longer recorded after the public release |
| Premium trial codes (from 2026-11-08): the trial codes you receive, where they came from (monthly member perk or Lucky Draw), whether they were used, their expiry date and how many you received in the last 30 days | A paying member claims this month's code, or a non-member wins the Lucky Draw | Let you use a code yourself or give it to a friend (one use, valid for 90 days) and limit how many are issued. Before a code is issued we check with Google Play that you are a paying member (free trials don't count). Deleting your account deletes these records; codes already issued and not yet used stay valid until redeemed or expired |
| Lucky Draw (from 2026-11-08): daily draw entries (account ID and date), the days you opened the app recently, your order number for first Google sign-in and first payment, prize and claim records, and limited titles | Entered automatically the first time you open the app each day while signed in with Google (if eligible); a sign-in number once your account is 3 days old; a paid number on your first subscription or lifetime purchase | Pick daily winners, check lucky numbers, and give items (the server records the claim and the items go into the item bag on your phone), member days, trial codes and limited titles; before a paid-member prize is given we check with Google Play that the purchase wasn't refunded and isn't a free trial. The public board shows only approximate counts and event progress, never anyone's account. Entry lists are deleted within 30 days; deleting your account immediately deletes your prizes and numbers and removes your recent entries. If an account that received a sign-in number is deleted, we keep a one-way hash of its email address, only so the same Google account can't delete and start over to get another number |
| Daily leaderboard (from 2026-11-08): the leaderboard rounds you submit (Taiwan date and which cell each move went to), the score and move count the server calculates, how many rounds you submitted that day, and the dates you made the board | Sent when you finish a Daily Board round while signed in with Google (up to 3 rounds a day) | The server replays every move to calculate the score (the score your phone reports doesn't count, to prevent cheating) and lists that day's server-wide ranking. The leaderboard shows only the score and a 4-character code derived from your account ID, never your email, Google name or picture; any signed-in player can view it. Deleting your account deletes all your leaderboard results and submission records |
| Friend challenges (from 2026-11-08): the challenges you send (6-character code, that board's seed, your score, 4-character code, when it was created and when it expires), your scores and results on challenges you take, and how many you sent each day | Sent when you send a challenge or enter a code to take one while signed in with Google (up to 10 sent a day, up to 20 players per challenge) | Let friends play the same board with the code, verify scores by replaying them on the server, and list your challenges and results on the Challenges page. Players on the same challenge see only each other's scores and 4-character codes, never emails or names. A challenge can't be taken after 7 days; deleting your account deletes the challenges you sent (including others' results on them), your results on challenges you took and your daily count records |
| Full Moon Feast and market prices (from 2026-11-09): when you finish a round, how many times you opened the market, how many 2s through 8s you made, the Taiwan date and how many rounds you reported that day; your Feast hits and prize claims; the "Feast Breaker" title | Sent automatically when you finish a round while signed in with Google | Work out the server-wide Feast's health and each player's prize, and count the most and least merged numbers across all players as the next day's market prices. Market prices show only numbers and round counts, never any account. Deleting your account deletes your reports, Feast records and title |
| Market guesses (from 2026-11-09): the number you guess, the date and whether you claimed the prize | Sent when you guess tomorrow's prices on the Market page while signed in with Google | Reveal the result the next day and give the prize for a right guess. Deleted when you delete your account |
| Stall Relay (from 2026-11-09): codes of relays you start or join, which cell each move went to, your leg's score, a 4-character code and a one-way hash derived from your account ID, and how many relays you started each day | Sent when you start a relay or enter a code to take a leg while signed in with Google (up to 10 started a day, up to 5 legs each) | The server replays every move to verify scores, and friends on the same relay see each leg's score (only the 4-character code, never emails or names). Deleting your account deletes your relay list and daily counts; legs you already ran (score, 4-character code and hash) stay in that relay so the other players' results stay complete, and can't be traced back to your account |
| Custom Levels (from 2026-11-09): the boards you make, the goal, piece count, name (picked from fixed word lists, no typing), the moves you used to clear it, how many plays and likes it gets, the stall coins you can claim, and how many you publish each day; when you play someone else's level we record whether you played and liked it (using a one-way hash, not your account) | Sent when you publish a level or enter a code to play one while signed in with Google (up to 5 published a day) | The server checks a level can be cleared before giving it a code, counts popularity, picks the weekly featured level (its code, name and board are public; the author isn't shown) and gives stall coins to authors. Deleting your account deletes every level you published (including others' plays and likes on them), your level list and daily counts |
Apart from the game screenshot you attach to a problem report, we ourselves do not access your location, contacts, photos, camera, microphone or device identifiers, and we never use your game data for ads or analytics. Settings on your phone (language, text size, sound, vibration, appearance, board look, widget) are not uploaded.
Crash reports: whether or not you're signed in, if a release build crashes or hits a serious error, Google Firebase Crashlytics collects the error log, phone model, Android version, app version and an installation ID (not the advertising ID and not your account), used only to find and fix the cause, kept for 90 days under Crashlytics' settings. You can turn this off under Settings → Send crash reports.
Ads: when you tap to watch an ad, Google AdMob collects the advertising ID, device and network information, approximate location (estimated from your IP address) and ad interactions to serve ads, measure them and prevent fraud. Whether ads are personalized follows your choice in the consent form. See how Google uses information from ads. Google handles this data; we never receive your advertising ID.
Where data is stored and who can see it
- Accounts and progress are stored in Google's Firebase (Firebase Authentication and Cloud Firestore); the database and cloud functions are located in Taiwan (asia-east1). Crash reports are stored in Firebase Crashlytics.
- Everything between your phone and our servers is encrypted in transit (HTTPS).
- Our security rules only let your own account read and write your progress and read your membership records; other players can't see them, and membership records can only be written by our cloud functions.
- Problem reports, screenshots and closed-test records can only be read by admin accounts in our admin site; other players can't see them.
- Only the developer looks at the related records, when fixing problems, replying to wishes or granting member days.
Data stored on your device
So you can pick up where you left off, the game keeps the following in its private app storage. Only the game can read it; when you're signed in, the game progress is synced to the cloud as described above.
| Content | Purpose |
|---|---|
| Game progress (as above) and which account it belongs to | Home, My Records, Album, Daily Perks; when you switch accounts, the previous account's progress is never carried over |
| Settings (language, text size, appearance, sound, vibration, morning greeting, home suggestion card, board look, crash report switch) and tutorials you've seen | Remember your preferences |
| A round in progress | Come back to it after switching apps |
| What the home screen widget shows and when it was updated | Home screen widget |
| A cached copy of the "More Apps from Zifu" list and icons | Still shows the last list offline |
| The list of problem reports you sent (the start of each description and its time, kept per account) and where you put the ladybug | Match your reports with their progress in My reports and remember the ladybug's position |
If part of your records can't be read (for example, a damaged file), the game keeps a backup copy of the original in the same storage so it can help you later. It is never uploaded.
Network connections
- When you're signed in, the game connects to Google Firebase to sync progress, confirm purchases, handle share codes, the daily member supply, wishes, problem reports and report rewards, the daily leaderboard, friend challenges, the Full Moon Feast, market prices, Stall Relay, Custom Levels, the Lucky Draw and trial codes.
- It connects to Google AdMob to preload and play ads (see "Ads" above).
- To show "More Apps from Zifu" (in Settings and on the home suggestion card), it downloads the app list and icons from our website, zifu-digital.web.app. The hosting service (Google Firebase Hosting) handles connection logs such as IP addresses as websites normally do; we don't use them to identify you, and the request carries no game data. Tapping a suggestion opens that app's page in your browser or Google Play, which then follows that site's own policy.
- The update prompt and rating invitation use Google Play features (In-App Updates and In-App Review), handled by Google Play on your phone. We never learn whether you rated the game.
Sharing images
When you tap Share, the game draws an image of your score, achievement, album or share code on your phone (only scores, theme, achievement names or the share code, no email, name or other personal data), stores it briefly in the game's cache, and hands it to the app you choose. Who you share it with is up to you; we can't see it and don't keep it.
Signing out and deleting data
- Sign out: Settings → Account → Sign out first backs up your latest progress to the cloud (it won't sign out while you're offline). Afterward this phone starts over as a guest; your cloud progress stays and comes back the next time you sign in.
- Delete account: Settings → Account → Delete account deletes your cloud progress for this game and the Google sign-in account, along with purchase bindings, member supply records, share code and redemption records, wishes, problem reports and their progress, closed-test usage records, free membership records granted by us, your trial code records, your Lucky Draw prizes, numbers and entries, your daily leaderboard results, the friend challenges you sent and took, your Feast and market reports, market guesses, the Custom Levels you published (including others' plays on them) and your relay records. This phone also starts over as a guest. Trial codes already issued and not yet used stay valid until redeemed or expired; an account that received a lucky number leaves a one-way hash of its email address, and legs you ran in other players' relays keep their score and hash code in that relay, which can't be traced back to your account (see above). This can't be undone. Cancel any paid subscription separately in Google Play, or you'll keep being charged.
- You can also email zifubazaar@gmail.com to ask us to delete your account and data. Please email from the address you signed in with; we'll handle it within 30 days.
- If you never signed in, uninstall the game, or go to your phone's Settings → Apps → Night Market Merge → Storage → Clear data, and all game records on the phone are deleted.
- Crash reports are deleted automatically after 90 days under Crashlytics' settings.
Backup
If Android's built-in backup to Google Drive is on, the system may include the game records on your phone in your device backup and restore them on a new phone. Google handles that backup under your account settings, and we cannot access it. You can turn it off in your phone's system settings.
Permissions
- Internet and network state: used for Google sign-in, syncing progress, confirming purchases, share codes, wishes, loading ads and downloading the "More Apps from Zifu" list.
- Google Play billing: used for Premium subscriptions and the lifetime purchase.
- Advertising ID and ad-related permissions (AD_ID, Android ad services): used by Google AdMob to serve ads.
- Biometrics (fingerprint, face): declared by the Google sign-in component. The game doesn't use it and never reads any biometric data.
- Wake lock, foreground service and receiving Google service messages: declared by Google's components (Firebase, ads) so they can finish work in the background. The game does not use them to read your data.
- Vibration: used for haptic feedback on merges and grand openings (a normal permission with no prompt; you can turn it off in Settings).
- Notifications: used for a daily 8 a.m. (phone local time) morning greeting. Android 13 and later ask you first, and you can turn it off in Settings or system settings. The notification is created on your phone and never passes through our servers.
- Receive boot completed: used to reschedule the greeting after the phone restarts. It reads no data.
The game does not request location, camera, microphone, contacts or storage permissions.
Third-party services
Sign-in, cloud saves, the cloud functions for Premium and share codes, and crash reports (Crashlytics) use Google Firebase; purchases, the update prompt and rating invitation use Google Play; rewarded ads use Google AdMob (how Google uses information from ads); our website is hosted on Google Firebase Hosting. Their handling is covered by the Google Privacy Policy and Privacy and Security in Firebase. No other third-party services are used.
Closed-test sign-up page
Sign-up page: our sign-up page (tword-9a1ae.web.app/join) collects the following, stored separately from your App account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to test for 14 days in a row, whether you would test future products, whether you want an iOS version, and when you signed up.
The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a Night Market Merge account, this never deletes or changes it. If you prefer, you can simply type your email instead.
The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.
To stop scripts from filling the spots with fake sign-ups, when you submit we briefly store a one-way hash of your network IP address and the time (never the raw IP address), only to limit how many sign-ups one network can make in a short time. It is deleted automatically the next day.
After you sign up, the first time you tap each of the three buttons “Join the test group”, “Become a tester” and “Download from Google Play”, we record when you tapped it in your sign-up record (not what you do in Google Groups or the Play Store), only to count how many people finish joining. To do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.
We use this only to send you test-related notices; after the test, to find your App account with your email (checking whether you signed in and how many days you opened the App during the test) and add Premium to it directly (no redemption codes); and, depending on your answers, to tell you about future product tests or an iOS version. We never use it for advertising and never sell or give it to third parties. Joining the Google group is handled by Google under its privacy policy; we only use the group to send test notices.
How long we keep it: if you answered “No” to both questions, your email is deleted after the test ends and rewards are granted; otherwise we keep it for up to 2 years, and you can ask us to delete it at any time at zifubazaar@gmail.com. Deleting your account in the App does not remove your sign-up; email us to delete it.
Children
The game is suitable for all ages, and everything can be played without signing in. Children under 13 should only sign in with Google or make purchases with a parent's permission. Ads only play when a player taps to watch one; they never pop up on their own.
Changes
If a future version changes how data is handled, we will update this policy and its effective date before releasing that version.
Contact
Night Market Merge is developed by Zifu Digital (紫芙數位). For questions about this policy, or to ask us to delete your account and data, email:
Zifu Digital zifubazaar@gmail.com