Metal Ball Race （金属球障碍赛）
Privacy policy
隐私政策 · iOS 云存档与广告 / Android 离线版与 Solana 钱包版
English
This policy covers Metal Ball Race, published by ronchi, and this policy website. The Android 0.2.1 (1) candidate remains an offline version. The iOS 0.3.0 development version adds optional Apple sign-in, cloud saves and rewarded advertising. Cloud and advertising features depend on service configuration and testing; this policy does not mean that these features or a new store release are already generally available. WeChat, Douyin and Web previews have separate platform behavior.
You can play with a local save without an account. In the new iOS version, choosing Apple sign-in enables account-based cloud saves when configured. Rewarded ads are optional and require a separate choice. These versions do not offer in-app purchases or cash-out rewards.
Local progress and optional iOS cloud saves
The game saves course progress, points, fragments, cards, unlocked skins and language preferences on your device. Local play does not require Apple sign-in. Clearing app data or uninstalling may remove unsynchronized local progress.
If you enable cloud saves with Sign in with Apple, the game uses Apple's account identifier and authentication credentials to identify your game account and upload or restore progress through our HTTPS service at game1.yiyide.cc, hosted on Tencent Cloud. The sign-in flow does not request your name or email address. We do not receive your Apple account password.
The Solana Mobile dApp Store build adds optional wallet sign-in through Mobile Wallet Adapter and cloud saves on the same HTTPS service. It sends your public key and a signed, single-use login message for ownership verification. It never requests private keys, seed phrases, transaction signatures or transfers. The wallet app processes connection and signing requests under its own privacy policy; no wallet authorization token is persisted by the game. Your Solana game account and save are separate from Apple accounts. Game sessions last up to 24 hours on the server and remain only in app memory; after restarting, sign in again or restore an isolated offline cache. Solana builds from 0.4.0 add voluntary Google AdMob rewarded ads and UMP consent management. Test energy stays on the device and bonus-box tests do not grant production fragments. Google may process network, device identifiers (including advertising identifiers where available), ad interaction and diagnostic data. Privacy options are available in the game when applicable. The 0.4.1 Solana release candidate uses configured Android ad inventory. Energy and bonus-box rewards require a verified server callback; ad availability depends on Google approval and inventory. Wallet sign-in availability depends on configuration and device testing.
Choose Delete Cloud Account in the game and sign again with the same wallet to delete its game account, cloud save and sessions. This does not delete the wallet or change on-chain assets. Local-play progress is uploaded only with your explicit import choice. Login challenges expire after five minutes; expired challenge records are removed when new challenges are requested. Successful or failed verification consumes the challenge. Wallet signatures are verified but not stored in the account database; the public key identifies the account until deletion.
The game keeps a device session in iOS Keychain for up to 24 hours. Our server keeps the Apple refresh credential encrypted so it can manage and revoke the account connection. Account-linked cloud records contain saved progress, inventory and reward or synchronization records needed to operate the feature. They are separate from the local save. A cloud upload, download or conflict resolution requires an internet connection; a local-only save is not a cloud backup.
Cloud saves and account credentials are used for sign-in, backup, restoration, synchronization, account deletion and preventing duplicate or invalid rewards. Do not use another person's account to restore progress. When local and cloud progress differ, review the app's conflict choice before replacing a save. A failed or pending upload should not be treated as a completed backup.
Rewarded advertising in the new iOS version
The iOS development integration uses Google AdMob and Google's User Messaging Platform (UMP). Development builds may display official test ads; these do not establish production advertising availability. Real ads require the publisher's configured and approved advertising account and ad units.
Ads are shown after you choose an offer that states the reward. The game requests nonpersonalized advertising, disables Google's publisher first-party ID, and does not request permission to access the advertising identifier (IDFA). These settings do not mean that advertising collects no data.
Google's advertising SDK may process your IP address, an approximate location inferred from it, device or app identifiers and technical information, ad views and interactions, and performance or crash diagnostics to deliver and measure ads, maintain the service and prevent fraud. See Google's SDK data disclosure and Google's Privacy Policy. The game does not send your Apple sign-in identifier, email or sign-in credentials as advertising reward metadata.
For reward verification, a one-use random reward reference may be passed to Google and returned to our service with an ad transaction identifier, reward information and timestamp. This lets us associate a valid completed ad with its promised in-game reward and prevent repeated claims. A closed, failed or unavailable ad does not by itself verify a completed reward. You can continue to use the game's free play options without accepting an ad or tracking permission.
Where applicable, UMP presents regional privacy messages before ad requests. Use the app's privacy choices entry when it is available to review or change your choices. Refusing advertising consent does not remove your existing progress. You can report an inappropriate ad through the app's support entry; include only the information you choose to share.
Managing and deleting data
You can remove local game data through device settings or by uninstalling the app. This does not itself request deletion of an account or a cloud save. When the cloud service is enabled and confirms your account-deletion request, it immediately deletes your personal cloud account data, cloud save and sessions, even if Apple's revocation service is unavailable. It also attempts to revoke the Apple connection. If revocation needs a retry, only the minimum encrypted credential needed for that purpose is retained in a retry queue for up to seven days, then purged; your cloud profile is not kept while waiting for Apple. The app indicates when Apple revocation is pending. You can also stop using Metal Ball Race with Sign in with Apple in your iOS Apple Account settings. Deleting only that Apple authorization is separate from deleting game data. Contact support if you cannot access the account controls.
Cloud records are kept to provide the account and save features until replaced or deleted through the service. We do not promise a fixed backup-retention period or indefinite recovery. Service availability, sync conflicts or deletion can affect restoration. Encrypted credentials and HTTPS reduce some risks but cannot guarantee absolute security.
The existing Android offline candidate has no account, cloud upload or advertising integration. It continues to save progress on the device; uninstalling or clearing data may lose that progress.
Service providers, this page and support
Apple processes sign-in and App Store activity under its own policies. Tencent Cloud hosts our cloud service and may process connection or service information needed to deliver and secure it. Google processes advertising and consent information when those features are used. The current privacy website is hosted on our Tencent Cloud service; an earlier policy version remains on Cloudflare Pages. The hosting provider may process ordinary request information such as IP address and browser information to deliver and secure the page. This page has no analytics scripts, advertising trackers or account sign-in; its Chinese font is served from the same website.
If you email support, the recipient and email provider process your email address, message and any attachments you choose to send to deliver and answer the request. Do not send passwords or sign-in codes. We do not sell game progress or provide a transferable or cash-out reward system. The game is not specifically designed as a children's app; contact us if you believe a child has provided personal information that needs attention.
Publisher: ronchi
Support and data requests: longenchi@gmail.com
Policy changes
We will update this policy and the app's disclosures when the available features or data practices change. Check the version and effective date above. A feature described as development or configuration-dependent is not a promise that it is live in your installed build.
简体中文
本政策适用于 ronchi 发布的 Metal Ball Race（金属球障碍赛）及此隐私政策网页。Android 0.2.1（1）候选版仍为离线版本。iOS 0.3.0 开发版新增可选 Apple 登录、云存档及激励广告。云服务与广告仍依赖配置和测试；本政策不表示这些功能或新版应用已经正式对外发布。微信、抖音及 Web 预览版具有各自的平台行为。
无需账号即可使用本机存档游玩。新版 iOS 在服务完成配置后，可由你选择通过 Apple 登录启用账号云存档。激励广告需要另行主动选择。这些版本均不提供应用内购买或提现奖励。
本机进度与可选 iOS 云存档
游戏在本设备保存关卡进度、积分、碎片、卡片、已解锁皮肤及语言偏好。本机游玩无需 Apple 登录。清除应用数据或卸载可能丢失尚未同步的本机进度。
如果你选择“通过 Apple 登录”启用云存档，游戏会使用 Apple 提供的账号标识与认证凭据识别游戏账号，并通过由腾讯云托管的自有 HTTPS 服务 game1.yiyide.cc 上传或恢复进度。登录流程不申请你的姓名或邮箱，游戏不会获得 Apple 账号密码。
Solana Mobile dApp Store 版本新增可选的钱包登录，通过 Mobile Wallet Adapter 连接钱包，并使用同一 HTTPS 服务提供云存档。登录时发送公钥和一次性登录消息的签名来验证钱包归属，不请求私钥、助记词、交易签名或转账。钱包应用按其自身政策处理连接与签名请求；游戏不持久保存钱包授权令牌。Solana 游戏账号与存档和 Apple 账号分别保存。游戏会话在服务端最长有效 24 小时，在应用内只保留于内存；重启后需重新登录或恢复隔离的离线缓存。Solana 0.4.0 及后续版本提供主动选择的 Google AdMob 激励广告与 UMP 同意管理。测试体力仅保存在本设备，盲盒测试不发放正式碎片。Google 可能处理网络、设备标识（包括可用的广告标识符）、广告互动及诊断数据。适用时可在游戏内查看隐私选项。Solana 0.4.1 候选版使用已配置的 Android 广告位。体力和盲盒加抽奖励需由服务端验证广告回调后发放；广告可用性取决于 Google 审核与库存。钱包登录可用性取决于服务配置与设备验证。
你可以在游戏中选择“删除云端账号”，再使用同一钱包签名，删除游戏账号、云存档与会话。这不会删除钱包或改变链上资产。本机试玩进度仅在你明确选择导入后上传。登录挑战五分钟后过期，过期记录在申请新挑战时清理；验证无论成功或失败均消耗该挑战。钱包签名仅用于验证，不保存在账号数据库中；公钥作为账号标识保留至账号删除。
游戏将最长 24 小时有效的设备会话保存在 iOS 钥匙串中。服务端加密保存 Apple 刷新凭据，以便管理和撤销账号关联。账号关联的云记录包含提供功能所需的进度、物品库存及奖励或同步记录，与本机存档相互独立。上传、下载和冲突处理需要网络连接；仅保存在本机不代表已经完成云备份。
云存档和账号凭据用于登录、备份、恢复、同步、注销账号及防止重复或无效奖励。不要使用他人账号恢复进度。本机和云端进度不一致时，请先查看应用提供的冲突处理选项，再决定是否替换存档。上传失败或等待上传不代表已完成备份。
新版 iOS 激励广告
iOS 开发版接入 Google AdMob 与 Google 用户消息平台（UMP）。开发版本可能显示官方测试广告；测试广告不代表正式广告已经可用。真实广告需要发布者配置并通过审核的广告账号和广告位。
广告会在你主动选择明确说明奖励的入口后显示。游戏请求非个性化广告，关闭 Google 发布者第一方标识，不申请读取广告标识符（IDFA）的权限。这些设置并不表示广告不会处理数据。
Google 广告 SDK 可能处理 IP 地址及据此推断的大致位置、设备或应用标识与技术信息、广告展示和交互、性能或崩溃诊断，以投放和衡量广告、维护服务及防范欺诈。详见 Google SDK 数据披露 与 Google 隐私政策。游戏不会将 Apple 登录标识、邮箱或登录凭据作为广告奖励附加数据发送。
验证奖励时，游戏可能将一次性随机奖励凭证传给 Google，再由 Google 连同广告交易标识、奖励信息和时间戳回传至我们的服务，以关联有效完成的广告与承诺的游戏奖励，并防止重复领取。关闭广告、播放失败或没有可用广告，本身不代表完成奖励验证。不接受广告或追踪权限，也可继续使用游戏提供的免费游玩方式。
适用时，UMP 会在请求广告前显示所在地区的隐私同意消息。应用显示隐私选项入口时，你可以进入查看或修改选择。拒绝广告同意不会删除已有进度。如需举报不适当广告，可通过应用内客服入口反馈，仅提供你愿意分享的信息。
管理与删除数据
你可以通过设备设置清除本机游戏数据，或卸载应用；这并不等同于申请删除账号或云存档。云服务启用并确认你的注销请求后，会立即删除云端个人账号数据、云存档及会话，不会因 Apple 撤销服务暂不可用而推迟删除。同时，服务会尝试撤销 Apple 关联。如果需要重试，仅为撤销操作将最少必要的加密凭据保留在重试队列中，最长七天后清除；不会为了等待 Apple 而保留云端个人资料。应用会提示 Apple 授权撤销仍在等待处理。你也可以在 iOS 的 Apple 账号设置中，找到“通过 Apple 登录”并停止将其用于 Metal Ball Race。仅取消 Apple 授权与删除游戏数据是不同操作。如果无法使用账号入口，请联系客服。
云记录用于提供账号及存档功能，直到通过服务替换或删除。我们不承诺固定备份保留期限或永久可恢复；服务可用性、同步冲突和删除操作都会影响恢复。加密凭据和 HTTPS 可降低部分风险，但不能保证绝对安全。
现有 Android 离线候选版没有账号、云上传或广告集成，仍只在本机保存进度。卸载或清除数据可能丢失该进度。
服务提供方、本网页与客服
Apple 按其政策处理登录与 App Store 活动。腾讯云托管我们的云服务，可能处理提供与保护服务所需的连接或服务信息。使用广告和同意管理时，Google 会处理相关数据。当前隐私网页由腾讯云服务托管，旧版政策仍保留在 Cloudflare Pages。托管服务商可能为提供网页和安全防护处理 IP 地址、浏览器信息等普通请求信息。此网页没有分析脚本、广告追踪或账号登录；中文字体由同一网站提供。
如果你向客服发邮件，收件人和邮箱服务商会为投递及回复请求处理你的邮箱地址、邮件内容和自愿发送的附件。请勿发送密码或登录验证码。游戏不出售游玩进度，不提供可转让或提现的奖励体系。本游戏并非专门面向儿童设计；如果你认为儿童提供了需要处理的个人信息，请联系我们。
发布者：ronchi
客服与数据请求邮箱：longenchi@gmail.com
政策更新
可用功能或数据处理方式变化时，我们会更新本政策与应用披露。请查看顶部版本及生效日期。标注为开发中或依赖配置的功能，并不保证已在你安装的版本中启用。