方寸之间 · 隐私政策
本政策适用于“方寸之间 · Worlds Within”游戏、网页版及相应原生构建。运营主体为北京键仁键智科技有限公司（Beijing Jianren Jianzhi Technology Co., Ltd.）。联系方式：support@lingo-bear.com。
1. 游戏进度保存在你的设备上
已完成关卡、当前路径、语言、声音与画面设置保存在当前浏览器或应用的本地存储中。Web/PWA 会缓存游戏资源；原生安装包内置游戏资源。我们没有提供云存档，也不会把这些关卡记录自动上传到购买服务。试玩前 10 关不需要登录；Web 买断与恢复购买需要通过邮箱验证码登录，原生购买使用对应商店账号。
清除浏览器数据、卸载应用、系统清理存储或更换设备，可能造成进度丢失。你可以主动导出进度码或 JSON 备份，再自行保存或迁移；导入只读取你选择的文件。进度备份不包含购买权益、登录会话或离线购买凭据，不能用于转移买断。
2. Web 邮箱登录与买断
Web 正式版提供前 10 关免费、一次买断其余画卷。买断绑定购买时登录的邮箱账号；实际价格、币种与可用支付方式以结算页为准。登录仅用于 Web 购买与权益恢复，不会自动开通云存档，也不会将 Apple 或 Google 的商店购买转为 Web 购买。
你请求验证码时，我们会处理邮箱地址、验证码验证信息及必要的会话和限流记录，用于登录、账号安全与防止滥发邮件。验证码通过 Resend 发送，不会因此订阅营销邮件。验证码有时效和尝试次数限制；浏览器使用必要的安全会话 Cookie 保持登录，并在本地缓存签名的离线权益凭据。这些数据不用于广告或跨站跟踪。
Web 付款通过 Stripe Checkout 处理。我们向 Stripe 提供当前登录邮箱和所购商品信息；我们保存或处理用于核对订单、恢复买断、退款及交易安全的邮箱账号、交易关联标识、支付和退款状态、金额/币种及必要时间记录。我们不会通过游戏收集你的完整银行卡号或安全码。Stripe 可能根据支付方式、法律和风控要求直接收集付款及账单信息。
网页跳转成功或进度导入不代表付款完成；解锁以购买服务确认的权益为准。退款或拒付可能使对应解锁失效。已经确认的 Web 买断可在有效的签名离线凭据期限内离线使用；凭据到期后需联网复核，这不表示再次收费。退出账号会清除该浏览器的 Web 登录与离线权益缓存，不能注销 Stripe 或商店账户。
服务商政策：Resend 隐私政策 · Stripe 隐私政策。Web 登录、订单和权益服务使用 Cloudflare Workers 和 D1；数据处理地点可能与居住地不同，具体以实际服务部署及提供方规则为准。
3. 原生商店购买
启用商店的原生版本提供前 10 关免费、一次买断其余画卷；是否提供购买及实际价格，以所安装版本和商店页面为准。原生购买由 Apple App Store 或 Google Play 处理。游戏通过对应商店接口查询商品、购买状态与恢复购买，在本机缓存商店和商品对应的解锁状态，以支持离线游玩，并在适当时机复核。原生购买不会发送到本游戏的 Web 邮箱购买服务；Web、Apple 和 Google 的购买不会自动互通。
Google Play 安卓版本使用 Google 的结算组件。该组件向 Google 发送结算运行诊断信息，可能涉及结算结果、应用及组件版本、设备型号、系统、网络类型、语言和地区等技术信息，以及可关联同一结算客户端多个事件的会话标识。这些信息用于结算功能和运行分析；游戏也会将购买关联凭据（purchase token）交给 Google Play 确认交易，用于支付处理、权益维护及交易安全与反欺诈。游戏启动和回到前台时会自动查询购买状态，并在需要时重试交易确认；应用内没有关闭这些结算处理的开关。相关网络传输使用加密连接。
此类商店组件处理不同于本机通关记录，也不能因为游戏没有广告或行为分析功能，就视为所有组件都不传输数据。本游戏没有将原生商店验单或诊断上传到自有服务器；原生交易账户、支付及退款数据由相关商店依其政策处理。Google 隐私政策。
4. 网络与网站服务
首次访问网页版、下载或更新资源、邮箱登录、Web 结算与权益复核、查询商店状态以及主动打开外部来源链接时，可能需要网络。Cloudflare 提供网站托管、购买服务计算与存储和网络服务。为交付页面、保护服务和排查故障，网络服务提供方可能处理 IP 地址、请求地址、浏览器信息、时间及技术性日志；这些信息不同于本机通关进度。具体日志和保留情况受服务配置及提供方规则约束。Cloudflare 隐私政策。
本游戏代码未接入广告、用户行为分析或跨站追踪 SDK，不申请位置、通讯录、相机或麦克风权限。你主动访问商店、邮件应用或来源网站后，该服务自己的隐私政策适用。
5. 文件、支持与保留
保存画幅或备份由你主动触发，文件通过浏览器下载或系统保存界面交给你选择的位置。游戏不会自动把这些文件发送给我们。发送支持邮件时，我们会收到你提供的邮箱、邮件内容与附件，用于答复问题、排查故障及处理依法需要保存的记录。请只发送必要信息，不要提供验证码、密码、银行卡、完整支付凭证或无关个人资料。
验证码、会话和离线权益凭据会按各自期限失效，失效不代表所有服务记录立即物理删除。邮箱账号、订单、权益、退款及安全记录会按提供服务、恢复购买、防止滥用和履行法律义务所需保留；不再需要且无需依法保留的信息将删除或匿名化。服务商保留的信息还受其政策约束。
6. 管理、退出与删除请求
设置中重置游戏进度不会取消 Web 或商店购买，也不会删除服务端账号或订单。清除浏览器/应用数据会移除相应本地记录；Web 买断通常需要用原购买邮箱重新登录并联网恢复，原生购买需要在同一商店账号下恢复。应用卸载后，本机文件和系统备份是否保留由设备及系统设置决定。
Web 可退出当前账号。若需访问、更正、删除邮箱账号或相关支持资料，请通过支持邮箱联系我们；我们会核实必要身份信息，并根据尚未完成的交易、争议及适用法律处理。删除请求不会自动退款，依法必须保留的交易或安全记录不一定能立即删除。游戏内重置或退出也不会删除 Stripe、Apple、Google、Resend 或网络服务方持有的记录；可按相应服务政策提出请求。请勿在支持邮件中发送登录验证码。
7. 未成年人、地区与更新
邮箱验证码只验证邮箱访问能力，不是年龄或实名验证。游戏没有聊天功能，也不通过本机通关记录收集年龄。未成年人购买应由监护人依适用规则管理；各地区发行与购买可用性以实际提供的渠道为准。若政策或数据处理发生实质变化，我们会更新本页及生效日期，并按适用要求告知或取得同意。
Worlds Within · Privacy Policy
This policy covers Worlds Within (方寸之间), its web version and corresponding native builds. The operator is Beijing Jianren Jianzhi Technology Co., Ltd. (北京键仁键智科技有限公司). Contact: support@lingo-bear.com.
1. Progress stays on your device
Completed levels, the current path, language, sound and graphics settings stay in the current browser or app. Web/PWA resources are cached; native packages include game resources. We provide no cloud saves and do not automatically upload level progress to the purchase service. The first ten levels need no login. Web purchases and restoration use email-code sign-in; native purchases use the relevant store account.
Clearing browser data, uninstalling, system storage cleanup or changing devices may remove progress. You can deliberately export a progress code or JSON backup and transfer it yourself. Imports read a file you select. Progress backups contain no purchase entitlement, login session or offline purchase credential, and cannot transfer ownership.
2. Web email sign-in and purchases
The production web version offers ten free levels and a one-time purchase for the remaining gardens. A web purchase belongs to the email account signed in when buying. The checkout shows the actual price, currency and available payment methods. Email sign-in supports web purchases and restoration; it does not enable cloud progress sync or convert Apple or Google purchases to web ownership.
When you request a code, we process your email address, verification information and necessary session and rate-limit records for sign-in, account security and abuse prevention. Resend delivers verification emails; requesting a code does not subscribe you to marketing. Codes expire and attempts are limited. The browser uses a necessary secure session cookie and locally caches a signed offline entitlement credential. These are not used for advertising or cross-site tracking.
Stripe Checkout processes web payments. We provide Stripe with the signed-in email address and product information. We store or process the email account, transaction references, payment and refund states, amount/currency and necessary timestamps to reconcile orders, restore purchases, handle refunds and secure transactions. The game does not collect full card numbers or security codes. Stripe may directly collect payment and billing information required by the payment method, law or fraud checks.
A successful redirect or imported progress does not prove payment; the purchase service must confirm ownership. Refunds or chargebacks may revoke the associated access. A confirmed web purchase works offline while its signed offline credential remains valid. Renewing an expired credential requires an online ownership check, not another purchase. Signing out clears this browser's web session and offline entitlement cache; it does not close Stripe or store accounts.
Provider policies: Resend Privacy Policy · Stripe Privacy Policy. Cloudflare Workers and D1 run the web sign-in, order and entitlement service. Processing may occur outside your country of residence, depending on deployment and provider arrangements.
3. Native store purchases
Store-enabled native versions offer ten free levels and a one-time purchase for the rest. Availability and price depend on the installed build and store listing. Apple App Store or Google Play processes native purchases. The game queries products, purchases and restoration through the relevant store interface, caches store/product ownership locally for offline use and rechecks when appropriate. Native purchases are not sent to this game's web email purchase service. Web, Apple and Google purchases do not automatically transfer between them.
The Google Play Android build uses Google's billing component, which sends billing diagnostics to Google. These may include billing results, app and component versions, device model, operating system, network type, language and region, and a session identifier that can associate multiple events from the same billing client. This information supports billing functionality and operational analytics. The game also passes purchase tokens to Google Play to acknowledge transactions for payment processing, entitlement maintenance, transaction security and fraud prevention. It queries purchases on launch and return to the foreground and retries acknowledgements when needed. There is no in-app switch to disable this billing processing. These network transfers use encrypted connections.
Store-component processing is separate from local progress. Having no ads or behavioral analytics does not mean every component transmits no data. We do not upload native store verification or diagnostics to our own server. The relevant store processes native account, payment and refund data under its policies. Google Privacy Policy.
4. Network and hosting
Initially loading the web game, downloading updates, email sign-in, web checkout and ownership checks, store queries and deliberately opening external source links may need a connection. Cloudflare provides hosting, purchase-service compute and storage, and network delivery. To deliver pages, protect the service and troubleshoot faults, providers may process IP addresses, request paths, browser information, timestamps and technical logs. These differ from local level progress. Logging and retention depend on configuration and provider rules. Cloudflare Privacy Policy.
The game code includes no advertising, behavioral analytics or cross-site tracking SDK, and requests no location, contacts, camera or microphone permission. Store, email and external source services apply their policies when you choose to use them.
5. Files, support and retention
Picture and backup exports occur when requested. Your browser or system save interface handles the destination; the game does not automatically send those files to us. If you email support, we receive the supplied address, message and attachments to answer, investigate and keep records where legally needed. Send only necessary information; omit verification codes, passwords, card details, complete receipts and unrelated personal data.
Codes, sessions and offline credentials expire according to their respective validity periods. Expiry does not mean every service record is immediately erased. Email-account, order, entitlement, refund and security records are retained as needed to provide service, restore ownership, prevent abuse and meet legal duties. Information no longer needed or legally required will be deleted or anonymized. Provider-held information is also subject to provider policies.
6. Control, sign-out and deletion requests
Resetting game progress does not cancel web or store purchases, or delete server-side accounts and orders. Clearing browser/app data removes relevant local records. Restoring a web purchase generally requires signing in online with the original purchase email; native purchases require the same store account. Device and system settings determine whether files or backups remain after uninstalling.
You can sign out of the current web account. To request access, correction or deletion of an email account or support information, contact support. We verify necessary identity information and consider unfinished transactions, disputes and applicable legal duties. Deletion does not automatically refund a purchase, and legally required transaction or security records may not be immediately deleted. In-game reset or sign-out does not erase provider-held records at Stripe, Apple, Google, Resend or network services; requests may be made under their policies. Never send a sign-in code to support.
7. Minors, regions and policy updates
An email code verifies access to an inbox, not age or legal identity. The game has no chat and does not collect age through local level progress. Guardians should manage minors' purchases under applicable rules. Regional distribution and purchase availability depend on the channels actually offered. We will update this page and its effective date for material changes, with notice or consent where required.