私隱政策 · Privacy policy
我哋收集乜嘢
- 帳戶：電郵（或 Apple / Google 登入嘅識別碼）、帳號（handle）、顯示名稱、頭像、地區（可選）、語言。
- 對戰：你記錄或確認嘅對戰結果、分數、場地、使用嘅套裝，以及由此計算嘅評分同排名。排名同對戰紀錄會向其他用戶顯示。
- 聊天：你喺聊天室發送嘅訊息、同對戰過嘅玩家之間嘅私訊、你嘅封鎖同檢舉。訊息會經過粗口過濾，管理員可以刪除；私訊只有你哋兩位同（有人檢舉之後）管理員睇到。
- 相片：你上載嘅頭像（管理員批准後先公開）同對戰證明相片（只限該場對戰嘅參與者同管理員睇到，對戰完結 30 日後刪除），以及積分對戰裁判影嘅證據相片（只限嗰場嘅裁判同管理員睇到，對戰完結 90 日後刪除）。
- 帖文：你喺螺心社群動態發佈嘅相片帖文（相片、說明文字、標籤同觀眾設定）、你嘅留言同讚好，以及你對帖文或留言作出嘅舉報。帖文只有你揀嘅觀眾睇到（全港玩家，或者只限朋友；受管理帳戶一律只限朋友）；讚好數目同邊個讚好只有帖文作者同管理員睇到；管理員可以睇到等待審核、被舉報同已移除嘅帖文。每張相片喺其他人睇到之前，都會先經騰訊雲數據萬象（CI）圖片審核自動檢查；檢查未能確定嘅相片會等管理員決定。說明文字同留言會經過粗口過濾，管理員可以移除帖文同刪除留言。
- 見面確認嘅位置：只喺你同意進行嘅見面確認期間（最多兩分鐘、只限使用 App 時）傳送精確位置；確認完結後位置即刪除，只保留兩部手機嘅距離。對方永遠睇唔到你嘅位置。
- 發射力：你用藍牙連接 Beybattle Pass 時記錄嘅發射力（SP）數值。
- 裝置：推送通知 token（如你開啟通知）、App 版本同作業系統。
- 穩定性同使用數據：當機報告同效能數據（Sentry，只含用戶 ID，唔含電郵）同少量使用事件（例如「已記錄對戰」，同你喺邊幾日開過 App，連同用戶 ID），用嚟改善 App。
- 使用數據（可以隨時關閉）：預設開啟。App 會將你開過邊啲畫面、撳過邊啲掣、捲動幾多同用過邊啲掃動操作傳去 Google Analytics for Firebase。你可以隨時喺「設定 › 私隱 › 分享使用數據」關閉（受管理帳戶只可以由監護人更改）。呢啲事件唔包括用戶 ID、名稱、訊息或者位置，亦唔會收集廣告 ID；Google Analytics 會由連線嘅 IP 地址推算大概位置（城市同國家）。關閉之後即停止收集，並清走呢部手機上嘅數據。
- 封閉測試登記（beyhk.sh/beta/）：你喺網站登記封閉測試時填嘅電郵、手機平台（iOS 或 Android）、想用嘅帳號（可選）、係咪由家長或監護人幫 13 至 17 歲嘅玩家登記，同埋網站語言。我哋只會用呢啲資料揀測試玩家同寄 TestFlight 或 Google Play 測試邀請（電郵會交俾 Apple 或 Google 用嚟發邀請），只有管理員睇到，唔會連到你嘅 BeyHK 帳戶。登記嘅人要 18 歲或以上。封閉測試完結之後全部刪除；想早啲取消，電郵 privacy@beyhk.sh。
- 網站（beyhk.sh）分析（只限你接受咗）：第一次開呢個網站會問你接受定拒絕 Cookie。你撳「接受」之後，網站先會經 Google Tag Manager 載入 Google Analytics，記錄你睇咗邊啲頁、由邊度連過嚟、裝置同瀏覽器類型，同埋由 IP 地址推算嘅大概位置（城市同國家），並喺你嘅瀏覽器存 Google Analytics 嘅 Cookie。所有廣告用途（廣告 Cookie、廣告個人化、Google 信號）一律關閉。邀請連結（beyhk.sh/i/…）嘅頁面唔會載入分析，所以邀請碼唔會送去 Google。你可以隨時喺網站頁底「Cookie 設定」改變主意；揀拒絕會清走呢啲 Cookie。網站分析同 App 嘅使用數據分開處理，唔會連到你嘅 BeyHK 帳戶。
- 舉報分析：當有玩家舉報訊息或玩家時，以下資料會交由騰訊雲 TokenHub 上嘅智譜 GLM 模型自動分析（喺新加坡處理），為管理員提供建議：被舉報帳戶嘅用戶名、顯示名稱同陣容名稱；被舉報嘅訊息及同一聊天室前後嘅訊息（連同發訊者嘅用戶名同時間）；如屬舉報玩家，則為被舉報玩家最近嘅訊息（連同時間；私訊只限已有訊息被舉報嘅對話）；舉報人填寫嘅說明、舉報類別同時間；舉報人過往舉報嘅成立／駁回紀錄；雙方最近 48 小時內有冇爭議、拒絕或敗仗，以及有冇互相封鎖；以及被舉報帳戶嘅開戶日數、是否家長管理帳戶、是否停權、開放中嘅舉報數目、過往個案同處分、段位。唔會送出電郵地址、帳戶 ID 或位置。如果被舉報嘅係帖文或留言，會以同樣方式分析帖文嘅說明文字、帖文嘅留言（連同留言者嘅用戶名同時間）同被舉報玩家最近 20 篇公開帖文嘅說明文字；相片永遠唔會送去呢個模型。分析結果只有管理員睇到，唔會自動處分任何人；涉及兒童安全嘅舉報唔會送出分析。騰訊雲按其服務條款處理呢啲資料。
我哋點樣用
提供排名同對戰確認、發送與你對戰相關嘅通知、維持聊天室安全、修正錯誤同了解功能使用情況。我哋唔會出售你嘅資料，亦冇廣告網絡。
邊個可以睇到
資料儲存喺 Supabase（資料庫同檔案儲存）。當機報告由 Sentry 處理。推送通知經 Expo 送出。預設開啟嘅分享使用數據由 Google Analytics for Firebase 處理；如果你喺網站接受咗 Cookie，網站分析由 Google Analytics 處理。舉報分析由 騰訊雲 TokenHub（智譜 GLM 模型，新加坡）為管理員處理。帖文相片儲存喺騰訊雲（COS 物件儲存，香港區），並由騰訊雲數據萬象（CI，香港區）檢查。以上服務只為運作 App 而處理資料。
年齡
BeyHK 供 13 歲或以上人士使用；註冊時需要確認年齡。13 歲以下嘅玩家只可以用家長或監護人開設同管理嘅帳戶（受管理帳戶）：聊天、私訊、上載相片、發帖同顯示地區預設關閉，要監護人 PIN 先可以開啟。聊天室預設有未成年人在場，因此封鎖、檢舉、粗口過濾同管理員刪除功能一直開啟。
保留同刪除
你可以隨時喺「設定 → 刪除帳戶」刪除帳戶：登入資料、個人檔案、訊息、套裝同物品會被刪除；對戰紀錄會匿名化為「已刪除玩家」以保持其他玩家嘅排名正確；你作出過嘅舉報會留喺個案入面俾管理員處理，但唔會再連住你嘅帳戶。詳見刪除資料。你刪除嘅帖文，或者管理員移除嘅帖文，會即時隱藏，30 日後連同相片一併刪除；被圖片審核封鎖嘅相片會另存一份副本作審核證據，90 日後刪除。刪除帳戶會一併刪除你嘅帖文、留言、讚好同相片。如果刪除時你嘅帳戶涉及一宗管理員審理緊嘅對戰投訴，個案會繼續處理，管理員會保留判決同你用過嘅名稱作內部記錄，最多 2 年，絕不會俾其他玩家睇到；嗰場對戰嘅證據相片會保留到判決為止，之後按一般時間表刪除（拍攝後 90 日，如果判決時已經超過就即時刪除）。
聯絡
聯絡電郵：privacy@beyhk.sh
What we collect
- Account: email (or the identifier from Apple / Google sign-in), handle, display name, avatar, district (optional), language.
- Matches: results you log or confirm, scores, venue, decks used, and the rating and rank computed from them. Rankings and match history are visible to other users.
- Chat: messages you send in rooms, direct messages with players you have played, and your blocks and reports. Messages pass a profanity filter and can be removed by moderators; a direct message is seen only by the two of you and, once someone reports it, moderators.
- Photos: the avatar you upload (public only after a moderator approves it) and match-proof photos (seen only by that match's players and moderators, deleted 30 days after the match settles), and evidence photos a judge takes in a ranked battle (seen only by that battle's judge and moderators, deleted 90 days after the battle closes).
- Posts: the photo posts you publish to the 螺心 community feed (the photo, caption, tags and audience), your comments and likes, and the reports you file on posts or comments. A post is seen only by the audience you choose (all Hong Kong players, or friends only; a managed account always posts to friends only); the like count and who liked a post are seen only by its author and moderators; moderators can see posts that are waiting for review, reported or removed. Each photo is checked automatically by Tencent Cloud CI image moderation before anyone else can see it, and a photo the check is unsure about waits for a moderator. Captions and comments pass a profanity filter, and moderators can remove posts and delete comments.
- Location for the meet-up check: your precise location, only during a meet-up check you agree to (at most two minutes, only while the app is open). The positions are deleted when the check ends; only the distance between the two phones is kept. The other player never sees your position.
- Shoot power: the shoot-power (SP) readings saved when you connect a Beybattle Pass over Bluetooth.
- Device: a push notification token (if you enable notifications), app version and OS.
- Stability and usage: crash reports and performance data (Sentry, with your user id, never your email) and a small set of usage events with your user id (for example "match logged", and which days you open the app) to improve the app.
- Usage stats (you can switch them off): on by default. The app sends Google Analytics for Firebase which screens you open and which buttons you tap, how far you scroll and which swipe actions you use. You can switch it off any time in Settings › Privacy › Share usage stats (on a managed account only the guardian can). These events carry no user id, handle, messages or location, and no advertising id is collected; Google Analytics works out an approximate location (city and country) from the connection's IP address. Switching it off stops collection and clears the data held on your phone.
- Closed beta signups (beyhk.sh/beta/): when you sign up for the closed beta on the website, the email you enter, your phone platform (iOS or Android), the handle you would like (optional), whether a parent or guardian is signing up for a player aged 13–17, and the site language. We use these only to choose testers and send the TestFlight or Google Play tester invite (the email goes to Apple or Google to send it). Only admins see them, and they are not linked to a BeyHK account. Whoever signs up must be 18 or over. Every signup is deleted when the closed beta ends; email privacy@beyhk.sh to be removed sooner.
- Website (beyhk.sh) analytics (only if you accept): the first time you open the site it asks you to accept or reject cookies. Only after you tap Accept does the site load Google Analytics through Google Tag Manager, which records which pages you view, where you came from, your device and browser type and an approximate location (city and country) worked out from your IP address, and stores Google Analytics cookies in your browser. Every advertising use (ad cookies, ad personalisation, Google signals) is off. Invite-link pages (beyhk.sh/i/…) never load analytics, so invite codes are not sent to Google. You can change your mind at any time from "Cookie settings" at the foot of every page; rejecting clears those cookies. Website analytics is kept apart from the app's usage stats and is not linked to your BeyHK account.
- Report analysis: When a player reports a message or a player, the following is analysed by the Zhipu GLM model hosted on Tencent Cloud TokenHub (processed in Singapore) to give moderators a suggestion: the reported account's handle, display name and deck names; the reported message and nearby messages in the same room, with their senders' handles and times; for a player report, the reported player's recent messages with their times (direct messages only from conversations that already have a reported message); the reporter's note, the report category and time; the reporter's record of upheld and dismissed reports; whether the two players had a dispute, rejection or loss in the previous 48 hours, and whether either has blocked the other; and the reported account's age in days, whether it is a parent-managed account, whether it is banned, the number of open reports against the account, its past cases and actions, and its tier. No email address, account id or location is sent. Only moderators see the result and nothing is actioned automatically; child-safety reports are never sent. When a post or comment is reported, the post's caption, its comments (with each commenter's handle and time) and the reported player's 20 most recent public captions are analysed the same way; photos are never sent to this model. Tencent Cloud processes this data under its service terms.
How we use it
To run the ranking and match confirmation, send notifications about your matches, keep chat safe, fix bugs and understand which features are used. We do not sell your data and there is no ad network.
Who can see it
Data is stored with Supabase (database and file storage). Crash reports are handled by Sentry. Push notifications are delivered through Expo. Usage stats are processed by Google Analytics for Firebase; if you accepted cookies on the website, its analytics are processed by Google Analytics. Report triage for moderators is processed by Tencent Cloud TokenHub (Zhipu GLM model, Singapore). Post photos are stored in Tencent Cloud COS and checked by Tencent Cloud CI, both in the Hong Kong region. These providers process data only to operate the app.
Age
BeyHK is for people aged 13 and over; you confirm this at sign-up. A player under 13 can only use an account that a parent or guardian sets up and keeps (a managed account): chat, direct messages, photo uploads, posting and showing a district start off, and only the guardian PIN turns them on. Chat assumes minors are present, so blocking, reporting, a profanity filter and moderator deletion are always on.
Retention and deletion
You can delete your account at any time in Settings → Delete account: your login, profile, messages, decks and inventory are removed; match history is anonymised as "Deleted player" so other players' rankings stay correct; a report you filed stays with its case for a moderator to decide, no longer linked to your account. See Delete your data. A post you delete, or one a moderator removes, is hidden at once and deleted with its photo after 30 days; a copy of a photo the image check blocked is kept as moderation evidence for 90 days, then deleted. Deleting your account also deletes your posts, comments, likes and photos. If your account is part of a battle complaint under admin review when it is deleted, the case continues and moderators keep an internal record of the verdict and the names you used, for up to 2 years, never shown to other players; the evidence photos of that battle are kept until the verdict, then deleted on the normal schedule (90 days after they were taken, or at the verdict if older).
Contact
Contact email: privacy@beyhk.sh