老街修復
隱私權政策
最後更新：2026 年 11 月 8 日（加入匿名使用數據、單次購買、幸運大獎、體驗碼、逛朋友的老街、全服一起修老街、退款與未成年人購買說明）
「老街修復」（以下稱「本 App」）由紫芙數位（以下稱「我們」）提供。本政策說明我們收集哪些資料、怎麼使用，以及你有哪些選擇。
先說重點
- 不登入也能玩，這時老街的進度只存在你的手機裡。用 Google 登入後，進度會備份到雲端，換手機登入同一個帳號就拿得回來。
- 你可以選擇用 Google 帳號登入，登入後才能回報問題、收到我們的回覆、購買或恢復高級會員、使用分享碼與許願。
- 本 App 有獎勵廣告（Google AdMob 提供）：只有你自己按「看廣告多尋寶一次」或「看廣告施工減半」才會播放；歐盟等地區會先請你同意。會員不用看廣告。
- 可以購買高級會員（訂閱或終身）：付款由 Google Play 處理，我們看不到你的付款資料。
- 本 App 不讀取你的位置、聯絡人、相片、麥克風或檔案。
- App 當掉時會送出當機紀錄幫我們修正，你可以在設定裡關掉「傳送當機報告」。
- 正式版會送出匿名使用數據（例如打開的日子、修到第幾間），不含名字、帳號或存檔內容，可以在設定裡關掉「傳送使用數據」。
- 你把分享碼給別人，對方就能看到你老街的樣子（店的進度、招牌、擺設），看不到你的信箱、名稱或資源。
- 你可以隨時在 App 內刪除帳號，也可以來信要求刪除資料。
我們收集的資料
| 資料 | 何時收集 | 用途 |
|---|---|---|
| 帳號資料：Google 帳號的電子郵件、顯示名稱、系統產生的帳號識別碼 | 你按「用 Google 登入」時（由 Google Firebase Authentication 保存） | 辨識你的帳號、在設定頁顯示登入的帳號、回覆你的問題回報 |
| 雲端存檔（只限用 Google 登入的人）：每間店的修復進度與擺設、收集到的老物件、建材與人情、居民好感、今天的事件與任務、成就與三餐領取紀錄、帳號識別碼 | 登入時與之後進度有變的時候 | 讓你換手機或重新安裝後拿回進度；登出前會先備份。只有你自己的帳號讀得到 |
| 回報問題內容：你寫的說明、當下的畫面截圖（送出前可移除）、App 版本、機型、Android 版本、所在畫面、語言、字體縮放、修好幾間店與人情數、帳號識別碼與登入的電子郵件 | 你按畫面上的小瓢蟲、填好說明並送出時 | 重現並修正問題；把處理進度與回覆送回你的 App |
| 當機紀錄：App 版本、機型、Android 版本、當機時的程式位置、Crashlytics 的安裝識別碼 | 正式版 App 當掉時（設定裡關掉「傳送當機報告」就不會送） | 找出當機原因並修正 |
| App 完整性驗證資訊（Firebase App Check、Google Play Integrity） | App 連線到我們的伺服器時 | 確認請求來自從 Google Play 安裝的正版 App，防止他人冒用 |
| 訂閱與終身會員的購買紀錄：Google Play 的購買憑證、訂閱方案與到期時間；終身會員另有訂單編號 | 你購買或恢復購買時 | 由我們的伺服器向 Google Play 確認會員資格、避免同一筆購買被不同帳號重複使用。付款由 Google Play 處理，我們看不到你的付款資料 |
| 分享碼與兌換紀錄：你的分享碼與被兌換的次數、兌換到的會員期限、你兌換過哪些代碼與時間、當天嘗試兌換的次數、帳號識別碼 | 你登入後取得分享碼，或輸入分享碼、兌換碼時 | 產生不重複的分享碼、發給你和朋友會員天數、避免同一組代碼被重複兌換或被猜代碼。朋友兌換你的分享碼時，不會看到你的信箱或名稱 |
| 許願內容（只限年訂閱與終身會員）：許願文字、App 版本、帳號識別碼、送出時間 | 你送出許願時 | 了解大家想要什麼功能，把評估結果通知你 |
| 廣告資料：廣告識別碼、裝置資訊、大致位置（由網路位址判斷）、廣告互動、同意設定 | 你按「看廣告」的按鈕時；歐盟等地區會先詢問你是否同意（Google 同意管理平台） | 由 Google AdMob 提供與統計廣告、避免作弊，依 Google 隱私權政策處理。你可以在會員頁的「廣告隱私權選項」修改同意，也可以在手機系統設定重設或刪除廣告識別碼 |
| 匿名使用數據（Google Analytics for Firebase）：打開 App 的日子、修好第幾間店、新手教學有沒有看完、打開商店與按下購買的次數、看完獎勵廣告的次數、Firebase 的 App 安裝識別碼 | 使用正式版 App 時（設定 › 關於 ›「傳送使用數據」關掉就不會送） | 了解有多少人隔天、一週後還回來，哪一步讓人卡住，好改善遊戲。不收集廣告識別碼、不做廣告個人化，不記名字、帳號或存檔內容 |
| 單次購買（老戲院、招牌樣式、建材包、人情包、每月裝飾組、新手禮包、建材大箱）：購買憑證的雜湊值、商品、訂單編號、帳號識別碼；伺服器開給你的「發貨單」（要送進存檔的建材、人情、物件） | 你購買時 | 向 Google Play 確認付款後把東西送進你的老街；退款時收回 |
| 幸運大獎：帳號識別碼、最近打開 App 的日子、你的加入順序號碼、每日抽獎報名、中獎與領取紀錄 | 用 Google 登入的人每天第一次打開 App 時 | 自動報名每日抽獎、判斷「第 N 位」與全服人數獎、避免重複領取 |
| 體驗碼：你領到的 7 天會員碼、被誰用過（只記帳號識別碼與時間） | 付費會員領取或朋友兌換時 | 發碼、避免同一組碼被用兩次 |
| 逛朋友的老街：你輸入的朋友分享碼；你幫誰加油、當天收到幾次加油（帳號識別碼與日期） | 你逛朋友的老街或按「幫他加油」時 | 顯示朋友的街景、發加油的人情、限制每天的次數。拿到你分享碼的人可以看到你老街的樣子（每間店的進度、招牌、翻修等級、擺設、有沒有居民），看不到你的信箱、名稱、人情或建材 |
| 全服一起修老街：這週你完成幾段施工與翻修、領過哪幾階獎勵 | 用 Google 登入的人完成施工或翻修時 | 計算全服每週進度、讓有出力的人領獎 |
只在你手機上、不會傳出的資料
- 沒有登入時：老街的全部進度。
- 字體大小、音效、震動、早安通知開關、當機報告開關、使用數據開關。
- 最近逛過的朋友分享碼、新手禮包第一次出現的日子。
- 桌面小工具的內容與勾選、回報浮標的位置、送過的回報清單、是否問過要不要登入、新手教學與封測公告是否看過。
會連線的第三方服務
- Google Firebase（Authentication、Cloud Firestore、Crashlytics、App Check、Analytics）：由 Google 代我們保存帳號、雲端存檔、回報問題與當機紀錄，並匿名統計留存與功能使用（不收集廣告識別碼），資料存放在 Google 的雲端（Firestore 位於台灣 asia-east1）。
- Firebase Cloud Functions：在伺服器上確認購買、發放分享碼天數、收許願，發放單次購買與幸運大獎的獎品、體驗碼、逛老街的加油與每週全服目標的獎勵（位於台灣 asia-east1）。會員與購買紀錄只有伺服器能寫入，你的 App 只能讀取自己的。
- Google Play Integrity：驗證 App 是不是從 Google Play 安裝的正版。
- Google Play 帳單：訂閱與終身會員的付款與管理由 Google Play 處理。
- Google AdMob（含 Google 同意管理平台）：提供獎勵廣告，依 Google 的廣告政策處理資料。
所有連線都經過加密（HTTPS）。
保存多久
- 帳號資料與雲端存檔：直到你刪除帳號。
- 回報問題：處理完成後保留，方便追蹤同樣的問題；截圖在問題處理完後刪除。你刪除帳號或來信要求時一併刪除。
- 當機紀錄：依 Firebase Crashlytics 的保存期限（目前為 90 天）自動刪除。
- 訂閱紀錄：保存到訂閱結束後、或你刪除帳號為止。購買憑證的雜湊值與帳號識別碼的對應會保留，用來避免同一筆購買被不同帳號重複使用。
- 分享碼與兌換到的會員期限：保存到你刪除帳號為止。你兌換過別人分享碼的紀錄（只有帳號識別碼與時間）會留在那組分享碼底下，用來避免同一個帳號重複兌換。
- 許願：保存到我們評估完需求、或你刪除帳號為止。
- 當天嘗試兌換的次數：隔天就不再使用。
- 匿名使用數據：依 Google Analytics 的保存設定（目前為 2 個月）自動刪除。
- 幸運大獎：每日抽獎的報名名單（帳號識別碼）保存 30 天；中獎與領取紀錄保存到你刪除帳號為止。
- 單次購買的發貨單、體驗碼、加油紀錄、全服目標的出力紀錄：保存到你刪除帳號為止。
我們不會做的事
- 不會出售你的資料，也不會提供給其他第三方，除非法律要求。
- 不會把你的帳號、存檔、回報或許願資料提供給廣告商；廣告由 Google AdMob 依你的同意設定投放。
- 不會讀取你的位置、聯絡人、相片或檔案。
你的選擇與權利
- 不登入：不登入也能玩，只是進度不會備份，也不能回報問題、購買會員、使用分享碼與許願。
- 不想看到廣告：不按「看廣告」的按鈕就不會播放；成為會員後不用看廣告。
- 修改廣告同意：會員頁的「廣告隱私權選項」（需要時才會出現）。
- 登出：設定 →「登出」。登出前會先把進度備份到雲端，之後這支手機從頭開始；同一個帳號再登入就拿回來。
- 關掉當機報告：設定 →「傳送當機報告」。
- 關掉使用數據：設定 › 關於 →「傳送使用數據」。
- 不想讓別人看到你的老街：不要把分享碼給別人。
- 退款：向 Google Play 申請。未成年人購買：請法定代理人寫信到 zifubazaar@gmail.com，附上訂單編號。
- 刪除帳號：設定 →「刪除帳號」，會刪除你的帳號，以及雲端存檔、回報問題與截圖、回報的處理通知、會員與購買紀錄、你的分享碼與兌換到的會員期限、許願、幸運大獎、體驗碼、加油、全服目標與發貨單的紀錄，手機上這個帳號的進度也一併刪除。刪除帳號不會取消 Google Play 的訂閱，請另外到 Google Play 取消。
- 來信刪除資料：寫信到 zifubazaar@gmail.com，註明你登入用的 Google 帳號，我們會在 30 天內刪除你的帳號、雲端存檔與問題回報。
封閉測試招募與意願調查
我們在招募網頁（oldstreet-tw.web.app/join）收集以下資料，與 App 內的帳號資料分開存放，存放在 Google Firebase（Firestore）：你填寫的 Email、你使用的手機系統（Android／iPhone）、是否同意連續測試 14 天的條件、之後願不願意測試新產品、想不想要 iOS 版，以及登記時間。
招募網頁有一顆選用的「用 Google 帳號帶入 Email」按鈕：按下後會跳出 Google 帳號選單，我們只讀取你選的那個帳號的 Email 來填進欄位，讀完後會立即刪除這次按按鈕時剛建立的暫時登入紀錄（只用來讀取 Email，不會用在 App），不保存你的 Google 名稱、頭像或其他資料；如果你本來就有老街修復的帳號，這個動作不會刪除或更動它。不想用的話，也可以直接輸入 Email。
招募網頁另提供官方 LINE 連結，加入好友或用 LINE 傳送你的帳號給我們都是選擇性的；這些訊息由 LINE 依其隱私權政策處理，我們只用來確認你的登記與聯絡測試事項。
為了防止有人用程式大量登記假資料占用名額，你送出登記時，我們會暫存你的網路來源 IP 位址經單向雜湊後的值與送出時間（不保存原始 IP 位址），只用來限制同一個網路在短時間內的登記次數，隔天自動刪除。
登記之後，招募網頁上「加入測試群組」「成為測試人員」「前往 Play 商店下載」三個按鈕，你第一次按下每一個時，我們會在你的登記資料裡記下按的時間（不記錄你在 Google 群組或 Play 商店裡做了什麼），只用來統計多少人完成加入流程；為了做到這件事，你的 Email 會存在你自己的瀏覽器（localStorage）裡。這些時間和登記資料一起保存、一起刪除。
用途只有：通知你測試相關的消息、測試完成後用你的 Email 找到你的 App 帳號（對照有沒有登入、測試期間打開 App 的天數）並直接加上高級會員（不寄兌換碼），以及依你的回答，日後通知你新產品測試或 iOS 版的消息。我們不會用這些資料發送廣告，也不會出售或提供給第三方。加入 Google 群組由 Google 依其隱私權政策處理，我們只用群組寄測試通知。
保存多久：兩題都選「不願意／不需要」的人，Email 在測試結束、會員發放後刪除；其他人最久保存 2 年，期間可以隨時來信 zifubazaar@gmail.com 要求刪除。App 內的刪除帳號不包含招募登記，要刪除請來信。
兒童
本 App 不是為 13 歲以下兒童設計，我們不會刻意收集兒童的個人資料。如果你發現兒童提供了個人資料，請來信，我們會刪除。
政策更新
政策有變動時，我們會更新本頁並修改上方的「最後更新」日期；重大變更會在 App 的版本更新資訊中說明。
聯絡我們
紫芙數位 zifubazaar@gmail.com
Old Street RevivalAbout the app →
Old Street Revival
Privacy Policy
Last updated: November 8, 2026 (adds anonymous usage data, one-time purchases, Lucky Prizes, gift codes, visiting friends' streets, Restore Together, and refunds and purchases by minors). This is a translation; if it differs from the Traditional Chinese version, the Chinese version prevails.
Old Street Revival (the "App") is provided by Zifu Digital ("we"). This policy explains what data we collect, how we use it, and the choices you have.
The short version
- You can play without signing in. Your street then lives only on your phone. If you sign in with Google, your progress is backed up to the cloud so you can get it back on a new phone.
- Signing in with Google lets you report problems, get our replies, buy or restore Premium, use share codes and make feature wishes.
- The App shows reward ads (by Google AdMob) only when you tap "Watch an ad for 1 more trip" or "Watch an ad to halve the wait". Users in the EU and similar regions are asked for consent first. Members don't need to watch ads.
- You can buy Premium (subscription or lifetime). Payments are handled by Google Play; we never see your payment details.
- The App does not access your location, contacts, photos, microphone or files.
- If the App crashes, it sends a crash report so we can fix it. You can turn this off in Settings.
- The release App sends anonymous usage data (such as which days you play and how many shops you've restored), with no names, accounts or save contents. Turn it off with "Send usage data" in Settings.
- Anyone you give your share code to can see what your street looks like (shop progress, signs, decorations), but not your email, name or resources.
- You can delete your account in the App at any time, or email us to delete your data.
Data we collect
| Data | When | Why |
|---|---|---|
| Account: your Google email, display name and a system-generated account ID | When you tap "Sign in with Google" (stored by Google Firebase Authentication) | To identify your account, show it in Settings and reply to your reports |
| Cloud save (Google sign-in only): each shop's restoration and decorations, collected items, materials and favor, resident friendship, today's events and missions, badges and meal claims, account ID | When you sign in and whenever your progress changes | To restore your progress on a new phone or after reinstalling. Only your own account can read it |
| Problem reports: your description, a screenshot (removable before sending), app version, device model, Android version, current screen, language, font scale, shops restored and favor, account ID and signed-in email | When you tap the ladybug, write a description and send it | To reproduce and fix the problem and send updates back to your App |
| Crash reports: app version, device model, Android version, where the crash happened, Crashlytics installation ID | When the release App crashes (not sent if you turn off "Send crash reports") | To find and fix crashes |
| App integrity info (Firebase App Check, Google Play Integrity) | When the App talks to our server | To confirm requests come from the genuine App installed from Google Play |
| Subscription and lifetime purchases: Google Play purchase token, plan and expiry; order ID for lifetime | When you buy or restore a purchase | Our server checks your membership with Google Play and prevents one purchase from being used by several accounts. We never see your payment details |
| Share codes and redemptions: your code and how many times it was used, membership time earned, codes you redeemed and when, attempts per day, account ID | When you get your share code or redeem a code | To create unique codes, grant membership days and prevent reuse or guessing. Friends who redeem your code never see your email or name |
| Feature wishes (yearly and lifetime members only): your text, app version, account ID, time sent | When you send a wish | To learn what features people want and tell you what we decide |
| Ad data: advertising ID, device info, approximate location (from IP address), ad interactions, consent choices | When you tap a "Watch an ad" button; EU and similar regions are asked for consent first (Google consent management platform) | Google AdMob serves and measures ads and prevents fraud under Google's privacy policy. Change consent with "Ad privacy options" on the Premium page, or reset or delete your advertising ID in your phone settings |
| Anonymous usage data (Google Analytics for Firebase): which days you open the App, how many shops you've restored, whether you finished the tutorial, how often you open the store and tap Buy, reward ads watched, and the Firebase app instance ID | While you use the release App (not sent if you turn off Settings › About › "Send usage data") | To learn how many people come back the next day or week and where people get stuck, so we can improve the game. No advertising ID, no ad personalization, no names, accounts or save contents |
| One-time purchases (Old Theater, sign styles, material packs, favor pack, monthly decorations, Starter Pack, material crate): a hash of the purchase token, product, order ID, account ID; the "delivery slips" our server creates (materials, favor or items to add to your save) | When you buy | To deliver items to your street after Google Play confirms payment, and take them back after a refund |
| Lucky Prizes: account ID, recent days you opened the App, your join number, daily draw entries, wins and claims | The first time each day a Google-signed-in user opens the App | To enter you in the daily draw, decide numbered and milestone prizes, and prevent double claims |
| Gift codes: the 7-day membership codes you receive and who used them (account ID and time only) | When a paying member claims one or a friend redeems it | To issue codes and stop a code from being used twice |
| Visiting friends' streets: the friend share codes you enter; whom you cheered and how many cheers you received that day (account IDs and date) | When you visit a friend's street or tap "Cheer them on" | To show your friend's street, give cheer favor and limit daily cheers. Anyone with your share code can see what your street looks like (each shop's progress, sign, renovation level, decorations and whether a neighbor lives there), but not your email, name, favor or materials |
| Restore Together: how many construction steps and renovations you completed this week and which rewards you claimed | When a Google-signed-in user completes construction or a renovation | To count everyone's weekly progress and let contributors claim rewards |
Data that stays on your phone
- If you haven't signed in: all of your street's progress.
- Text size, sound, vibration, morning reminder, crash report and usage data settings.
- Friend share codes you visited recently, and the day the Starter Pack first appeared.
- Home widget content and choices, the report button's position, the list of reports you sent, whether we've asked you to sign in, and whether you've seen the tutorial and closed-test notice.
Third-party services
- Google Firebase (Authentication, Cloud Firestore, Crashlytics, App Check, Analytics) stores accounts, cloud saves, reports and crash logs for us and anonymously measures retention and feature use (no advertising ID), in Google's cloud (Firestore in Taiwan, asia-east1).
- Firebase Cloud Functions verify purchases, grant share-code days, receive wishes, and deliver one-time purchases, Lucky Prizes, gift codes, cheers and Restore Together rewards (Taiwan, asia-east1). Only our server can write membership and purchase records; your App can only read its own.
- Google Play Integrity checks that the App is the genuine version from Google Play.
- Google Play Billing handles payments and management of subscriptions and lifetime purchases.
- Google AdMob (with Google's consent management platform) provides reward ads under Google's advertising policies.
All connections are encrypted (HTTPS).
How long we keep it
- Account and cloud save: until you delete your account.
- Problem reports: kept after they are resolved so we can track repeat issues; screenshots are deleted once the problem is handled. Deleted when you delete your account or ask us.
- Crash reports: deleted automatically under Firebase Crashlytics' retention period (currently 90 days).
- Subscription records: until the subscription ends or you delete your account. A hash of the purchase token linked to the account ID is kept to prevent one purchase from being used by several accounts.
- Share codes and membership time earned: until you delete your account. A record that your account redeemed someone's code (account ID and time only) stays with that code to prevent repeat redemptions.
- Wishes: until we finish reviewing them or you delete your account.
- Daily redemption attempts: not used after that day.
- Anonymous usage data: deleted automatically under Google Analytics' retention setting (currently 2 months).
- Lucky Prizes: daily draw entry lists (account IDs) are kept for 30 days; wins and claims are kept until you delete your account.
- Delivery slips for one-time purchases, gift codes, cheer records and Restore Together contributions: until you delete your account.
What we never do
- We never sell your data or share it with other third parties unless required by law.
- We never give your account, save, report or wish data to advertisers; ads are served by Google AdMob according to your consent.
- We never access your location, contacts, photos or files.
Your choices and rights
- Don't sign in: you can still play, but your progress isn't backed up and you can't report problems, buy Premium, use share codes or make wishes.
- Avoid ads: ads only play when you tap a "Watch an ad" button; members don't need to watch ads.
- Change ad consent: "Ad privacy options" on the Premium page (shown when needed).
- Sign out: Settings → "Sign out". Your progress is backed up first; this phone then starts over, and signing in again brings it back.
- Turn off crash reports: Settings → "Send crash reports".
- Turn off usage data: Settings › About → "Send usage data".
- Keep your street private: don't give your share code to others.
- Refunds: request them through Google Play. Purchases by a minor: a parent or guardian can email zifubazaar@gmail.com with the order ID.
- Delete your account: Settings → "Delete account". This deletes your account, cloud save, problem reports and screenshots, report notices, membership and purchase records, your share code and membership time earned, your wishes, and your Lucky Prizes, gift codes, cheers, Restore Together and delivery slip records, plus this account's progress on the phone. It does not cancel a Google Play subscription; please cancel that in Google Play.
- Email us: write to zifubazaar@gmail.com with the Google account you signed in with, and we'll delete your account, cloud save and reports within 30 days.
Closed-test sign-up and survey
Our sign-up page (oldstreet-tw.web.app/join) collects the following, stored separately from your App account data in Google Firebase (Firestore): the email you enter, your phone system (Android / iPhone), whether you agree to test for 14 days in a row, whether you would test future products, whether you want an iOS version, and when you signed up.
The sign-up page has an optional “Fill in my email with Google” button. When you tap it, a Google account chooser appears and we read only the email of the account you pick, to fill in the field. Right after reading it, we delete the temporary sign-in record created by that tap (it is used only to read your email, never for the app), and we do not keep your Google name, profile picture or any other data. If you already have a Old Street Revival account, this never deletes or changes it. If you prefer, you can simply type your email instead.
The sign-up page also offers a link to our official LINE account. Adding us as a friend or sending us your account through LINE is entirely optional; those messages are handled by LINE under its own privacy policy, and we use them only to confirm your sign-up and to contact you about the test.
To stop scripts from filling the spots with fake sign-ups, when you submit we briefly store a one-way hash of your network IP address and the time (never the raw IP address), only to limit how many sign-ups one network can make in a short time. It is deleted automatically the next day.
After you sign up, the first time you tap each of the three buttons “Join the test group”, “Become a tester” and “Download from Google Play”, we record when you tapped it in your sign-up record (not what you do in Google Groups or the Play Store), only to count how many people finish joining. To do this, your email is kept in your own browser (localStorage). These times are kept and deleted together with your sign-up.
We use this only to send you test-related notices; after the test, to find your App account with your email (checking whether you signed in and how many days you opened the App during the test) and add Premium to it directly (no redemption codes); and, depending on your answers, to tell you about future product tests or an iOS version. We never use it for advertising and never sell or give it to third parties. Joining the Google group is handled by Google under its privacy policy; we only use the group to send test notices.
How long we keep it: if you answered “No” to both questions, your email is deleted after the test ends and rewards are granted; otherwise we keep it for up to 2 years, and you can ask us to delete it at any time at zifubazaar@gmail.com. Deleting your account in the App does not remove your sign-up; email us to delete it.
Children
The App is not designed for children under 13, and we don't knowingly collect their personal data. If you believe a child has provided personal data, email us and we will delete it.
Changes to this policy
When this policy changes, we update this page and the "Last updated" date. Major changes are also noted in the App's What's new.
Contact
Zifu Digital · zifubazaar@gmail.com