Privacy Policy

We collect only what is needed to run accounts and game progress. The Game is fully playable offline; we receive no personal data until you create an account.

1. What we collect

• Account data: email address, password (stored only as a salted hash — we cannot recover the plaintext), nickname, avatar.
• Game data: match statistics (hands, wins, net result, fold distribution, special hand counts), coin balance and ledger, training contribution (hands played with each AI personality).
• Technical data: timestamps of auth requests, source IP used for rate limiting, session identifier. Required for account security; never used for advertising or profiling.

2. How we use it

• Create and verify accounts, authenticate logins, and support password recovery (codes sent by email).
• Restore your progress, coins and statistics on another device.
• Build leaderboards (showing your nickname and contribution hands).
• Prevent abuse: rate limiting and unusual-login detection.

We do not show ads, do not profile users, and do not sell or rent personal data.

3. Sharing

• Resend (email delivery): receives your email address and the verification code solely to deliver the message.
• ToTop platform: when the Game runs on ToTop's web platform, the platform handles runtime and analytics data under its own privacy policy, outside our control.
• We disclose data to other third parties only where required by law.

4. Teaching coach (LLM) data

• Text questions you send to the coach in teaching mode are forwarded through our relay to a third-party large language model (Alibaba Cloud Bailian) to generate a reply.
• Those requests are only cached temporarily on the relay for retry/rate-limiting, for no more than 24 hours, with a total size cap; a service restart clears them.
• Voice questions are transcribed to text on-device and handled as above; raw recordings are not uploaded or retained.
• Please do not include sensitive personal information (ID numbers, bank cards) in your questions.

5. Storage and security

• Data is stored on our server outside your country/region. Passwords use salted scrypt hashing; verification codes and session tokens are stored only as SHA-256 digests.
• We never log plaintext passwords, codes or tokens.
• One account may be signed in on only one device at a time.

6. Retention

Account data is kept until you delete your account. Verification codes expire in 10 minutes; sessions expire after 30 days and are cleaned up automatically. After deletion we remove your account and its game data (including leaderboard entries) within a reasonable period.

7. Your rights

• Access and correction: nickname and avatar can be viewed and edited in the in-game profile.
• Deletion: email support@weiziling.fun to request account deletion.
• Withdrawal of consent: you may stop using account features at any time; the offline game keeps working.

8. Children

The Game targets adult players. If you are below the legal age in your region, please use it with guardian consent; we do not knowingly collect children's personal data.

9. Changes

We will update this page and the effective date for any changes; material changes will be announced in-game.

10. Contact

For any privacy question, contact support@weiziling.fun.