環球夜市大富翁
隱私權政策
最後更新：2026 年 11 月 7 日（招募網頁加入「用 Google 帳號帶入 Email」與官方 LINE）
「環球夜市大富翁」（以下稱「本 App」）由紫芙數位（以下稱「我們」）提供。本政策說明我們收集哪些資料、怎麼使用，以及你有哪些選擇。
先說重點
- 不登入也能玩全部關卡，這時遊戲進度、關卡星數與存檔只存在你的手機裡。用 Google 登入後，關卡進度會備份到雲端，換手機登入同一個帳號就拿得回來；玩到一半的那一局仍只存在手機。
- 你可以選擇用 Google 帳號登入，登入後才能回報問題、收到我們的回覆、購買或恢復高級會員與小秘書次數、使用分享碼、體驗碼與許願。
- 本 App 有獎勵廣告（Google AdMob 提供）：只有你自己按「看廣告，請阿土再請客一次」「看廣告，試穿會員外觀」或「看廣告抽一張福袋卡」才會播放；歐盟等地區會先請你同意。會員不會載入廣告。
- 可以購買高級會員（訂閱或終身）：付款由 Google Play 處理，我們看不到你的付款資料。
- 本 App 不讀取你的位置、聯絡人、相片、麥克風或檔案。
- App 當掉時會送出當機紀錄幫我們修正，你可以在設定裡關掉「傳送當機報告」。
- 你可以隨時在 App 內刪除帳號，也可以來信要求刪除資料。
我們收集的資料
| 資料 | 何時收集 | 用途 |
|---|---|---|
| 帳號資料：Google 帳號的電子郵件、顯示名稱、系統產生的帳號識別碼 | 你按「用 Google 登入」時（由 Google Firebase Authentication 保存） | 辨識你的帳號、在設定頁顯示登入的帳號、回覆你的問題回報 |
| 回報問題內容：你寫的說明、當下的畫面截圖（送出前可移除）、App 版本、機型、Android 版本、所在畫面、語言、字體縮放、目前在哪個夜市與第幾回合、帳號識別碼與登入的電子郵件 | 你按畫面上的紅燈籠、填好說明並送出時 | 重現並修正問題；把處理進度與回覆送回你的 App |
| 當機紀錄：App 版本、機型、Android 版本、當機時的程式位置、Crashlytics 的安裝識別碼 | 正式版 App 當掉時（設定裡關掉「傳送當機報告」就不會送） | 找出當機原因並修正 |
| App 完整性驗證資訊（Firebase App Check、Google Play Integrity） | App 連線到我們的伺服器時 | 確認請求來自從 Google Play 安裝的正版 App，防止他人冒用 |
| 訂閱與終身會員的購買紀錄：Google Play 的購買憑證、訂閱方案與到期時間；終身會員另有訂單編號 | 你購買或恢復購買時 | 由我們的伺服器向 Google Play 確認會員資格、避免同一筆購買被不同帳號重複使用。付款由 Google Play 處理，我們看不到你的付款資料 |
| 分享碼與兌換紀錄：你的分享碼與被兌換的次數、兌換到的會員期限、你兌換過哪些代碼與時間、當天嘗試兌換的次數、帳號識別碼 | 你登入後取得分享碼，或輸入分享碼、兌換碼時 | 產生不重複的分享碼、發給你和朋友會員天數、避免同一組代碼被重複兌換或被猜代碼。朋友兌換你的分享碼時，不會看到你的信箱或名稱 |
| 雲端存檔（只限用 Google 登入的人）：關卡星數、達成的挑戰與成就、擲骰次數、最近 50 局戰績、看過的劇情與提示、選的貓咪與外觀、帳號識別碼 | 登入時與之後進度有變的時候 | 讓你換手機或重新安裝後拿回進度；登出前會先備份。只有你自己的帳號讀得到 |
| 小秘書次數：剩餘次數、Google Play 購買憑證（雜湊後保存）與訂單編號、帳號識別碼 | 你用 Google 登入後使用或購買小秘書次數時 | 由我們的伺服器向 Google Play 確認付款、記錄剩幾次，避免同一筆購買重複加次數 |
| 體驗碼：你領到的體驗碼、是否已被使用、到期日、每月領取紀錄、帳號識別碼 | 訂閱或終身會員領取每月體驗碼時 | 產生一次性的 7 天會員體驗碼；朋友兌換時不會看到你的信箱或名稱 |
| 封閉測試期間的使用紀錄：帳號的電子郵件與顯示名稱、哪幾天打開過 App、App 版本 | 封閉測試期間，已用 Google 登入的人每天第一次打開 App 時 | 確認測試者有實際使用、發送測試獎勵；正式上架後不再收集 |
| 許願內容（只限年訂閱與終身會員）：許願文字、App 版本、帳號識別碼、送出時間 | 你送出許願時 | 了解大家想要什麼功能，把評估結果通知你 |
| 廣告資料：廣告識別碼、裝置資訊、大致位置（由網路位址判斷）、廣告互動、同意設定 | 你按「看廣告」的按鈕時；歐盟等地區會先詢問你是否同意（Google 同意管理平台）。會員不會初始化廣告 | 由 Google AdMob 提供與統計廣告、避免作弊，依 Google 隱私權政策處理。你可以在設定的「廣告隱私權選項」修改同意，也可以在手機系統設定重設或刪除廣告識別碼 |
只在你手機上、不會傳出的資料
- 沒有登入時：選擇的貓咪、關卡進度與星數、看過的劇情、遊戲存檔。
- 玩到一半的那一局、福袋卡、今天的三餐與每日任務、自由模式的設定、桌面小工具的內容與勾選（依帳號分開保存）。
- 回報浮標的位置、送過的回報清單、是否問過要不要登入、當機報告開關。
- 選的貓咪配件、攤位金框開關、試穿會員外觀的到期時間、每局戰績：依帳號分開保存。
刪掉 App 會一併刪除這些資料。
會連線的第三方服務
- Google Firebase（Authentication、Cloud Firestore、Crashlytics、App Check）：由 Google 代我們保存帳號、回報問題與當機紀錄，資料存放在 Google 的雲端（Firestore 位於台灣 asia-east1）。
- Firebase Cloud Functions：在伺服器上確認購買、發放分享碼天數、收許願（位於台灣 asia-east1）。會員與購買紀錄只有伺服器能寫入，你的 App 只能讀取自己的。
- Google Play Integrity：驗證 App 是不是從 Google Play 安裝的正版。
- Google Play 帳單：訂閱與終身會員的付款與管理由 Google Play 處理。
- Google AdMob（含 Google 同意管理平台）：提供獎勵廣告，依 Google 的廣告政策處理資料。
所有連線都經過加密（HTTPS）。
保存多久
- 帳號資料：直到你刪除帳號。
- 回報問題：處理完成後保留，方便追蹤同樣的問題；截圖在問題處理完後刪除。你刪除帳號或來信要求時一併刪除。
- 當機紀錄：依 Firebase Crashlytics 的保存期限（目前為 90 天）自動刪除。
- 訂閱紀錄：保存到訂閱結束後、或你刪除帳號為止。購買憑證的雜湊值與帳號識別碼的對應會保留，用來避免同一筆購買被不同帳號重複使用。
- 分享碼與兌換到的會員期限：保存到你刪除帳號為止。你兌換過別人分享碼的紀錄（只有帳號識別碼與時間）會留在那組分享碼底下，用來避免同一個帳號重複兌換。
- 許願：保存到我們評估完需求、或你刪除帳號為止。
- 當天嘗試兌換的次數：隔天就不再使用。
我們不會做的事
- 不會出售你的資料，也不會提供給其他第三方，除非法律要求。
- 不會把你的帳號、回報或許願資料提供給廣告商；廣告由 Google AdMob 依你的同意設定投放。
- 不會讀取你的位置、聯絡人、相片或檔案。
你的選擇與權利
- 不登入：不登入也能玩全部關卡，只是不能回報問題、購買會員、使用分享碼與許願。
- 不想看到廣告：不按「看廣告」的按鈕就不會播放；成為會員後不會載入廣告。
- 修改廣告同意：設定 →「廣告隱私權選項」（需要時才會出現）。
- 登出：設定 →「登出」。登出前會先把進度備份到雲端，之後這支手機從頭開始；同一個帳號再登入就拿回來。
- 關掉當機報告：設定 →「傳送當機報告」。
- 刪除帳號：設定 →「刪除帳號」，會刪除你的帳號，以及雲端上的雲端存檔、小秘書次數、會員與購買紀錄、你的分享碼與兌換到的會員期限、體驗碼領取紀錄、許願、回報問題的處理通知，手機上這個帳號的進度也一併刪除；已經送給朋友、還沒使用的體驗碼仍可使用。刪除帳號不會取消 Google Play 的訂閱，請另外到 Google Play 取消。
- 來信刪除資料：寫信到 zifubazaar@gmail.com，註明你登入用的 Google 帳號，我們會在 30 天內刪除你的帳號與問題回報。
封閉測試招募與意願調查
我們在招募網頁（nightmarket-tycoon-tw.web.app/join）收集以下資料，與 App 內的帳號資料分開存放，存放在 Google Firebase（Firestore）：你填寫的 Email、你使用的手機系統（Android／iPhone）、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版，以及登記時間。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕：按下後會跳出 Google 帳號選單，我們只讀取你選的那個帳號的 Email 來填進欄位，讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄（只用來讀取 Email，不會用在 App），不保存你的 Google 名稱、頭像或其他資料；如果你本來就有環球夜市大富翁的帳號，這個動作不會刪除或更動它。不想用的話，也可以直接輸入 Email。
招募網頁另提供官方 LINE 連結，加入好友或用 LINE 傳送你的帳號給我們都是選擇性的；這些訊息由 LINE 依其隱私權政策處理，我們只用來確認你的登記與聯絡測試事項。
為了防止有人用程式大量登記假資料占用名額，你送出登記時，我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間（不保存原始 IP 位址），只用來限制同一個網路在短時間內的登記次數，隔天自動刪除。
登記之後，招募網頁上「加入測試群組」「成為測試人員」「前往 Play 商店下載」三個按鈕，你第一次按下每一個時，我們會在你的登記資料裡記下按的時間（不記錄你在 Google 群組或 Play 商店裡做了什麼），只用來統計多少人完成加入流程；為了做到這件事，你的 Email 會存在你自己的瀏覽器（localStorage）裡。這些時間和登記資料一起保存、一起刪除。
用途只有：通知你測試相關的消息、測試完成後用你的 Email 找到你的 App 帳號（對照有沒有登入、測試期間打開 App 的天數）並直接加上高級會員（不寄兌換碼），以及依你的回答，日後通知你新產品測試或 iOS 版的消息。我們不會用這些資料發送廣告，也不會出售或提供給第三方。加入 Google 群組由 Google 依其隱私權政策處理，我們只用群組寄測試通知。
保存多久：兩題都選「不願意／不需要」的人，Email 在測試結束、會員發放後刪除；其他人最久保存 2 年，期間可以隨時來信 zifubazaar@gmail.com 要求刪除。App 內的刪除帳號不包含招募登記，要刪除請來信。
兒童
本 App 不是為 13 歲以下兒童設計，我們不會刻意收集兒童的個人資料。如果你發現兒童提供了個人資料，請來信，我們會刪除。
政策更新
政策有變動時，我們會更新本頁並修改上方的「最後更新」日期；重大變更會在 App 的版本更新資訊中說明。
聯絡我們
紫芙數位 zifubazaar@gmail.com
Night Market TycoonAbout the app →
Night Market Tycoon
Privacy Policy
Last updated: November 7, 2026 (sign-up page adds “Fill in my email with Google” and our official LINE). This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.
Night Market Tycoon (the "App") is provided by Zifu Digital ("we"). This policy explains what data we collect, how we use it, and the choices you have.
The short version
- You can play every market without signing in. Then your progress, stars, and saved games stay on your phone. If you sign in with Google, your market progress is backed up to the cloud so you can get it back on a new phone; a game in progress still stays on your phone.
- You can choose to sign in with Google to report problems and receive our replies, buy or restore Premium and secretary uses, use share codes and trial codes, and make wishes.
- The App has rewarded ads (provided by Google AdMob). An ad plays only when you tap "Watch an ad: Ah-Tu treats you once more", "Watch an ad to try premium looks", or "Watch an ad to draw a card". In the EU and some other regions, we ask for your consent first. Members never load ads.
- You can buy Premium (subscription or lifetime). Payment is handled by Google Play; we never see your payment details.
- The App does not read your location, contacts, photos, microphone, or files.
- If the App crashes, it sends a crash log so we can fix it. You can turn off "Send crash reports" in Settings.
- You can delete your account in the App at any time, or email us to delete your data.
Data we collect
| Data | When | Why |
|---|---|---|
| Account data: your Google email, display name, and a system-generated account ID | When you tap "Sign in with Google" (stored by Google Firebase Authentication) | To identify your account, show it in Settings, and reply to your reports |
| Problem reports: your description, a screenshot (you can remove it before sending), app version, device model, Android version, current screen, language, font scale, current market and round, account ID and signed-in email | When you tap the red lantern and send a report | To reproduce and fix problems, and send progress and replies back to your App |
| Crash logs: app version, device model, Android version, where the crash happened, Crashlytics installation ID | When the release App crashes (not sent if you turn off "Send crash reports") | To find and fix the cause of crashes |
| App integrity data (Firebase App Check, Google Play Integrity) | When the App connects to our servers | To confirm requests come from the genuine App installed from Google Play |
| Subscription and lifetime purchase records: the Google Play purchase token, plan, and expiry date; for lifetime Premium, also the order number | When you buy or restore a purchase | Our server checks your membership with Google Play and prevents one purchase from being used by different accounts. Payment is handled by Google Play; we never see your payment details |
| Share codes and redemptions: your share code and how many times it was redeemed, the membership period you received, which codes you redeemed and when, how many redemption attempts you made that day, and your account ID | When you get your share code after signing in, or enter a share code or redemption code | To create unique share codes, give you and your friends membership days, and prevent repeated redemptions or code guessing. Friends who redeem your code never see your email or name |
| Cloud save (Google sign-in only): market stars, challenges and badges completed, dice roll count, your last 50 game records, story scenes and tips seen, chosen cat and looks, account ID | When you sign in and whenever your progress changes | So you get your progress back on a new phone or after reinstalling; it is backed up before you sign out. Only your own account can read it |
| Secretary uses: uses left, Google Play purchase token (stored hashed) and order number, account ID | When you use or buy secretary uses while signed in with Google | Our server checks the payment with Google Play and keeps count, so one purchase is never added twice |
| Trial codes: codes you received, whether they were used, expiry dates, monthly claim record, account ID | When a subscriber or lifetime member claims the monthly trial code | To create one-time 7-day Premium trial codes; a friend who redeems one never sees your email or name |
| Closed-test activity: your account email and display name, which days you opened the App, App version | During closed testing, the first time each day a signed-in tester opens the App | To confirm testers actually play and to send tester rewards; no longer collected after public launch |
| Wishes (yearly and lifetime members only): your wish text, app version, account ID, and when you sent it | When you send a wish | To learn which features people want and tell you the result |
| Ad data: advertising ID, device information, approximate location (from your IP address), ad interactions, and consent settings | When you tap a "Watch an ad" button; in the EU and some other regions, you are asked for consent first (Google consent management platform). Ads are never initialized for members | Google AdMob serves and measures ads and prevents fraud, under Google's privacy policy. You can change your consent under "Ad privacy options" in Settings, and reset or delete your advertising ID in your phone's settings |
Data that stays on your phone
- When you're not signed in: your chosen cat, market progress and stars, story scenes you have seen, and saved games.
- A game in progress, lucky bag cards, today's meals and daily missions, Free Play settings, and home widget content and choices (kept separately for each account).
- The report button's position, your list of sent reports, whether we asked you to sign in, and the crash report setting.
- Your cat accessory, gold stall frame setting, when your premium looks trial ends, and your game records, kept separately for each account.
Uninstalling the App deletes this data.
Third-party services
- Google Firebase (Authentication, Cloud Firestore, Crashlytics, App Check): stores accounts, problem reports, and crash logs for us in Google's cloud (Firestore is located in Taiwan, asia-east1).
- Firebase Cloud Functions: our server code that verifies purchases, grants share code days, and receives wishes (located in Taiwan, asia-east1). Membership and purchase records can be written only by the server; your App can read only your own.
- Google Play Integrity: verifies that the App is the genuine version from Google Play.
- Google Play Billing: handles payment and management of subscriptions and lifetime Premium.
- Google AdMob (including Google's consent management platform): provides rewarded ads and handles data under Google's advertising policies.
All connections are encrypted (HTTPS).
How long we keep it
- Account data: until you delete your account.
- Problem reports: kept after they are resolved so we can track repeat issues; screenshots are deleted once the problem is handled. Deleted when you delete your account or ask us by email.
- Crash logs: deleted automatically under Firebase Crashlytics' retention period (currently 90 days).
- Subscription records: kept until the subscription ends or you delete your account. A hash of the purchase token linked to your account ID is kept to prevent one purchase from being used by different accounts.
- Share codes and membership periods received: kept until you delete your account. A record that you redeemed someone else's code (only your account ID and the time) stays under that code to prevent the same account from redeeming it twice.
- Wishes: kept until we have evaluated them or you delete your account.
- Daily redemption attempt counts: no longer used after that day.
What we never do
- We never sell your data or share it with other third parties, unless required by law.
- We never give your account, reports, or wishes to advertisers. Ads are served by Google AdMob according to your consent settings.
- We never read your location, contacts, photos, or files.
Your choices and rights
- Play without signing in: you can play every market; you just can't report problems, buy Premium, use share codes, or make wishes.
- Don't want ads: ads play only when you tap a "Watch an ad" button, and members never load ads.
- Change ad consent: Settings → "Ad privacy options" (shown only when needed).
- Sign out: Settings → "Sign out". Your progress is backed up to the cloud first; this phone then starts fresh, and signing in again with the same account brings it back.
- Turn off crash reports: Settings → "Send crash reports".
- Delete your account: Settings → "Delete account". This deletes your account and, in the cloud, your cloud save, secretary uses, membership and purchase records, your share code and membership periods received, trial-code claim records, your wishes, and notices about your reports, plus this account's progress on your phone. Trial codes you already gave to friends and that are still unused keep working. Deleting your account does not cancel a Google Play subscription; cancel it separately in Google Play.
- Request deletion by email: write to zifubazaar@gmail.com with the Google account you signed in with, and we will delete your account and reports within 30 days.
Closed-test sign-up and survey
Our sign-up page (nightmarket-tycoon-tw.web.app/join) collects the following, stored separately from your App account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to test for 14 days in a row, whether you would test future products, whether you want an iOS version, and when you signed up.
The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a Night Market Tycoon account, this never deletes or changes it. If you prefer, you can simply type your email instead.
The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.
To stop scripts from filling the spots with fake sign-ups, when you submit we briefly store a one-way hash of your network IP address and the time (never the raw IP address), only to limit how many sign-ups one network can make in a short time. It is deleted automatically the next day.
After you sign up, the first time you tap each of the three buttons “Join the test group”, “Become a tester” and “Download from Google Play”, we record when you tapped it in your sign-up record (not what you do in Google Groups or the Play Store), only to count how many people finish joining. To do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.
We use this only to send you test-related notices; after the test, to find your App account with your email (checking whether you signed in and how many days you opened the App during the test) and add Premium to it directly (no redemption codes); and, depending on your answers, to tell you about future product tests or an iOS version. We never use it for advertising and never sell or give it to third parties. Joining the Google group is handled by Google under its privacy policy; we only use the group to send test notices.
How long we keep it: if you answered “No” to both questions, your email is deleted after the test ends and rewards are granted; otherwise we keep it for up to 2 years, and you can ask us to delete it at any time at zifubazaar@gmail.com. Deleting your account in the App does not remove your sign-up; email us to delete it.
Children
The App is not designed for children under 13, and we do not knowingly collect their personal data. If you find that a child has provided personal data, email us and we will delete it.
Changes to this policy
When this policy changes, we will update this page and the "Last updated" date above; major changes will also be noted in the App's release notes.
Contact
Zifu Digital · zifubazaar@gmail.com