Bootleg Bites 隱私權政策

文件: 隱私權政策
版本日期: 2026-09-14
適用: Bootleg Bites 1.0.0 · iOS 15+ / Android 7+
聯絡: bootlegbites.unsent705@passinbox.com

Bootleg Bites（以下稱「我們」）重視您的隱私。本政策說明我們在您使用「Bootleg Bites」（以下稱「本應用程式」）時，如何蒐集、處理及利用您的個人資料。本政策依中華民國《個人資料保護法》第 8 條告知義務及 GDPR、CCPA 等適用法規撰寫。

一、蒐集機關／資料控制者

名稱：Bootleg Bites
聯絡方式：bootlegbites.unsent705@passinbox.com

二、蒐集之個人資料類別與目的

我們拿到什麼	用來做什麼	從哪裡來	會不會存起來
帳號識別碼（Apple／Google 給的 sub，一串英數字）	讓你下次登入還是同一個玩家	Sign in with Apple、Google 登入	會，存在我們的資料庫
電子郵件地址	只用來驗證登入憑證的有效性	Google 登入回傳的識別憑證中附帶	不會，驗證完就丟掉，不寫入資料庫
遊戲進度與操作紀錄（金庫、名氣、嫌疑、產品、訂單、常客、事件）	讓你換裝置還能接著玩、讓同一條街的結算算得出來	你在遊戲中的操作	會，存在我們的資料庫
你自己取的產品名稱	顯示在同一條街的攤位與黑心週報上	你在遊戲中輸入	會，存在我們的資料庫

說明：

我們不向 Apple 索取你的姓名或電子郵件（登入時要求的授權範圍是空的）。
Google 登入回傳的識別憑證中含有電子郵件欄位，我們的伺服器僅在驗證該憑證時讀取，不會寫入資料庫、不會用於行銷、也不會提供給第三方。上表仍將其列出，是為了完整揭露資料離開你的裝置這件事。
你自己取的產品名稱會被同一條街的其他玩家看到，請不要在名稱中填入真實姓名、電話、地址等個人資訊。

三、第三方服務（SDK）

本應用程式使用下列第三方服務，該等服務依其自身隱私權政策處理資料：

Sign in with Apple（Apple Inc.）— 登入驗證。隱私權政策：https://www.apple.com/legal/privacy/
Google 登入（Google LLC）— 登入驗證。隱私權政策：https://policies.google.com/privacy
Bootleg Bites 自有伺服器（Cloudflare Workers、D1 資料庫）— 存放帳號識別碼與遊戲進度。本政策即為其隱私權政策。

本應用程式不含廣告聯播網、行為分析或歸因追蹤 SDK。

四、利用期間、地區、對象及方式

期間：於蒐集目的存續期間內，或依法令規定之保存期間。
地區：台灣及本政策所列第三方服務之伺服器所在地（可能含跨境傳輸，我們會確保其具備適當保護措施）。
對象與方式：僅於上述目的範圍內，由我們及所列第三方服務以自動化系統處理。

五、您的權利（個資法當事人權利）

依《個人資料保護法》第 3 條，您作為個人資料當事人，得行使下列權利：查詢或請求閱覽、請求製給複製本、請求補充或更正、請求停止蒐集處理或利用、請求刪除。若您位於歐盟／歐洲經濟區，您另享有 GDPR 之近用權、更正權、刪除權（被遺忘權）、限制處理權、資料可攜權、反對權，以及向監管機關申訴之權利。若您為加州居民，您享有 CCPA/CPRA 之知情權、刪除權、更正權、退出「出售或分享」個人資訊之權利（Do Not Sell or Share My Personal Information），且不因行使權利而受歧視待遇。

行使上述權利，請來信 bootlegbites.unsent705@passinbox.com，我們將於法定期間內回覆。不提供個人資料之影響：部分功能（如帳號、雲端存檔）可能無法使用。

六、帳號與資料刪除

您可於本應用程式內刪除帳號，或透過網頁申請：https://bootlegbites.cc/delete-account。刪除後，我們將於合理期間內刪除或去識別化您的個人資料，法令要求保存者除外。詳細步驟請見「帳號刪除說明」頁。

七、兒童與青少年保護

本應用程式之目標年齡層為 13+ / Teen。我們不會在知情之情況下蒐集未滿 13 歲兒童之個人資料；若您認為我們誤蒐集了兒童個資，請與我們聯絡，我們將儘速刪除。

八、資料安全

我們採用傳輸加密（HTTPS/TLS）及存取控制等合理技術與組織措施保護您的資料。

九、政策變更

本政策修訂時，我們將於本頁公告並更新「最後更新日期」；重大變更將以應用程式內通知等適當方式告知。

十、聯絡我們

如對本政策有任何疑問，請聯絡：bootlegbites.unsent705@passinbox.com

本文件由 ShipReady 依實際掃描結果輔助生成；正式發布前建議由法律專業人員覆核。

Bootleg Bites Privacy Policy

DOCUMENT: Privacy Policy
REVISED: 2026-09-14
APPLIES TO: Bootleg Bites 1.0.0 · iOS 15+ / Android 7+
CONTACT: bootlegbites.unsent705@passinbox.com

Bootleg Bites ("we", "us") respects your privacy. This policy explains how we collect, use, and protect your information when you use "Bootleg Bites" (the "App"). It is written to satisfy the GDPR, CCPA/CPRA, Taiwan's Personal Data Protection Act, and the disclosure requirements of the Apple App Store and Google Play.

1. Data Controller

Name: Bootleg Bites
Contact: bootlegbites.unsent705@passinbox.com

2. Data We Collect and Why

What we receive	What it is used for	Where it comes from	Stored?
Account identifier (the `sub` string issued by Apple or Google)	Recognising you as the same player on your next sign-in	Sign in with Apple, Google Sign-In	Yes, in our database
Email address	Verifying that the sign-in credential is valid	Present in the identity token returned by Google Sign-In	No. Discarded after verification; never written to our database
Game progress and in-game activity (funds, fame, suspicion, products, orders, regulars, events)	Letting you continue on another device and letting your street's daily and weekly settlement work	Your actions in the game	Yes, in our database
Product names you type yourself	Shown on your stall and in the weekly report seen by others on your street	Your input in the game	Yes, in our database

Notes:

We do not request your name or email address from Apple. The requested scope is empty.
The identity token returned by Google Sign-In contains an email field. Our server reads it only while verifying that token. It is never written to our database, never used for marketing, and never shared. We still list it above so the disclosure is complete.
Product names you type are visible to other players on your street. Do not put real names, phone numbers or addresses in them.

3. Third-Party Services (SDKs)

The App uses the following third-party services, which process data under their own privacy policies:

Sign in with Apple (Apple Inc.) — sign-in verification. https://www.apple.com/legal/privacy/
Google Sign-In (Google LLC) — sign-in verification. https://policies.google.com/privacy
Bootleg Bites' own server (Cloudflare Workers, D1 database) — stores the account identifier and game progress. This policy is its privacy policy.

The App contains no advertising network, behavioural analytics, or attribution SDK.

4. Retention and International Transfers

We retain data only as long as needed for the purposes above or as required by law. Data may be processed on servers located outside your country; where this occurs we ensure appropriate safeguards are in place.

5. Your Rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to processing, and port your data (GDPR), or to know, delete, correct, and opt out of the "sale or sharing" of personal information without discrimination (CCPA/CPRA). Taiwan residents may exercise the rights provided by the Personal Data Protection Act. To exercise any right, contact bootlegbites.unsent705@passinbox.com.

6. Account and Data Deletion

You can delete your account inside the App, or request deletion via: https://bootlegbites.cc/delete-account. After deletion we remove or de-identify your personal data within a reasonable period, except where retention is legally required.

7. Children

The App is intended for users aged 13+ / Teen. We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it promptly.

8. Security

We use encryption in transit (HTTPS/TLS) and access controls to protect your data.

9. Changes to This Policy

We will post any changes on this page and update the "Last updated" date. Material changes will be notified in the App.

10. Contact

Questions? Contact us at bootlegbites.unsent705@passinbox.com.

Drafted with ShipReady based on an actual scan of the App. Please have legal counsel review before publishing.