歡迎您使用 ALOKA Quest（alokaquest.top，以下簡稱「本網站」）。我們深知隱私對您的重要性，並致力於保護您的個人資料與私密紀錄。本隱私權政策將說明我們如何收集、使用、保護及處理您的資訊。

1. 我們收集的資訊與收集目的

為了提供完整、安全的日記紀錄與社群互動服務，我們會收集以下資訊：

• 帳號與授權資料： 當您使用電子郵件註冊，或透過第三方服務（如 Google、GitHub）登入時，我們會收集您的電子郵件地址及第三方平台授權的公開基本資料，僅用於建立與驗證您的帳號。所有密碼均經過安全加密處理。
• 使用者生成的內容： 當您使用本網站的功能進行記錄或互動時，我們會安全地儲存您輸入的文字、日誌與訊息。
• 裝置權限與媒體檔案： 若您使用上傳個人頭像或分享包含圖片的動態等功能，網站可能會要求存取您的裝置相簿或相機權限。我們僅會處理您主動選擇並上傳的檔案，絕不會擅自掃描或存取您裝置中的其他私密內容。
• IP 位址與安全日誌： 當您存取網站時，系統會自動記錄您的網際網路通訊協定 (IP) 位址與基礎存取紀錄。收集 IP 位址除了用於保障社群資訊安全、防範網路詐騙與惡意行為之外，系統也會將您的 IP 位址（或由此衍生的地理位置資訊）展示於您的「個人主頁 (My)」與「雷達 (Radar)」模組中，以增進社群互動的真實性。用於安全防護的系統底層日誌（Log）將會定期自動覆寫或清除，我們不會將其做為歷史追蹤數據永久保留。

2. 核心功能、資料可見性與審查機制

我們充分尊重您的隱私，各核心功能模組的資料分享與可見性規範如下：

• 個人主頁 (My)： 您的專屬個人資料頁面，該頁面將會展示您的 IP 位址資訊。您可以自由設定該頁面的展示狀態（公開展示或私密展示），完全掌控基本資料與 IP 資訊的可見範圍。
• 私密日記與內容版權： 在未進行任何操作的預設狀態下，您所撰寫的日記屬於絕對私密。任何內容僅供您個人檢視、保存與編輯。我們絕不主張擁有您原創內容的著作權。您所撰寫的所有日記與私信內容，其智慧財產權與所有權均完全屬於您個人，我們亦不會將您的私密內容用於訓練人工智慧（AI）或挪作其他商業用途。
• 動態分享 (Moment)： 若您主動選擇將內容分享至 Moment，您可以自由設定瀏覽權限（選擇「向所有人分享」或「僅向好友分享」）。
• 雷達匹配 (Radar)： 系統會根據您在個人資料中主動選擇與添加的「標籤 (Tags)」進行資料匹配，協助您尋找夥伴。請注意，您的 IP 位址資訊將會在此模組中與您的公開資料一同展示。
• 私訊互動 (Messages)： 用於使用者間的即時通訊，私信內容嚴格限制為僅限對話雙方可見。
• 封鎖與隱私隔離機制： 為保障您的社交隱私與免受騷擾的權利，您有權在系統內主動封鎖特定使用者。執行封鎖後，雙方於 Radar、Moment 與 Messages 中的資料與動態將互相隱藏。
• 檢舉與審查豁免： 雖然我們保障您的內容隱私，但若接獲其他使用者檢舉您的內容涉嫌詐騙、濫用、惡意行為或違反社群規範時，為維護平台安全，網站管理員保留調閱並審查被檢舉之特定內容的權利。

3. 資料儲存、跨境傳輸與第三方服務

我們採用業界標準的雲端服務來維持網站的穩定與安全，您的資料會由以下信任的供應商協助處理：

• 後端與資料庫 (Supabase)： 負責安全地加密儲存您的帳號資訊、日記內容及系統數據。
• 網站前端託管 (Netlify)： 負責提供安全、快速的網頁應用程式部署服務。
• 電子郵件派發服務 (Resend)： 僅負責發送帳號驗證、密碼重設等系統基本運作必要之通知信件。
• 跨境傳輸聲明： 由於本網站採用國際雲端服務供應商，您的個人資料可能會被傳輸並儲存於您所在國家或地區以外的伺服器。當您使用本服務時，即表示您同意我們進行此類跨境資料傳輸。

4. 系統通知與無郵件推廣承諾

我們尊重您免受打擾的權利。我們絕不會透過電子郵件向您發送任何商業推廣、行銷廣告或活動訊息。任何與 ALOKA 品牌相關之活動通知或功能推廣，皆僅限於網站內部系統中展示。您的電子郵件地址僅作為帳號登入與重大系統安全通知使用。

5. 使用者權利與資料刪除機制

我們賦予您對個人資料的絕對控制權：

• 查閱、修改與匯出： 您可隨時登入個人主頁查閱或修改個人資訊。我們亦支持您將個人日記內容匯出與備份（資料可攜權）。
• 第三方授權撤銷： 除了在本網站內部刪除帳號外，您亦可隨時前往您的 Google 或 GitHub 帳號的「安全性與授權應用程式」設定頁面，主動撤銷對本網站的存取授權，以徹底切斷第三方資料連結。
• 即時刪除與備份延遲： 當您主動執行刪除操作（無論是刪除單篇日記或註銷帳號），您的資料將從線上主資料庫中立刻移除。然而，基於伺服器災難復原與防護機制，該資料可能在加密的系統冷備份（快照）中保留一小段合理週期後才被物理抹除。
• 違規黑名單保留例外： 若您的帳號因嚴重違反社群規範、涉嫌詐騙或違法行為而遭停權或封鎖，我們有權拒絕您的刪除要求，並保留該帳號的部分識別資訊（如 IP 位址、雜湊化電子郵件）作為系統黑名單，以防止其重複註冊並保護社群安全。
• 閒置帳號保留期限： 為保護資料安全並節約系統資源，若您的帳號連續超過三年未有任何登入紀錄，我們保留在提前以電子郵件通知後，刪除您帳號及相關資料的權利。

6. Cookie 聲明與外部連結免責

• Cookie 聲明： 本網站僅使用維持網站基本運作及安全性所需的「必要性 Cookie」。我們不會使用任何第三方追蹤型 Cookie 來進行廣告推播或商業行為分析。
• 外部連結免責： 本網站的動態或私訊中可能包含由其他使用者提供之外部網站連結。我們無法控制該等外部網站。當您點擊並離開本網站時，本政策將不再適用，我們對此不負任何連帶責任。

7. 法律遵循、資安防護與商業轉讓

• 執法機關披露： 一般情況下，我們不會向第三方分享個人資料。但若面臨法律程序、法院命令、或政府執法機關的合法調查要求時，我們保留依法揭露必要資訊的權利。
• 使用者帳號安全責任： 若因您自身的設備遺失、密碼外洩或第三方授權帳號（如 Google、GitHub）遭盜用，導致您的隱私資料外洩，本網站不負相關連帶賠償責任。請務必妥善保管您的登入憑證。
• 資安與駭客攻擊免責： 我們採用合理的技術手段保障您的資料安全。然而，網際網路環境無法保證百分之百的絕對安全。若因不可抗力或遭駭客惡意攻擊等非我方故意過失之因素導致資料外洩，我們將在知悉後第一時間採取補救措施並通知受影響之使用者，但依法免除由此產生之相關損害賠償責任。
• 品牌轉讓與併購： 若本網站未來涉及合併、收購或資產轉讓，您的個人資料將作為營運資產一併轉移。我們將確保接收方繼續遵守本隱私權政策，並在轉移前發布公告或通知。

8. 未成年人保護聲明

本網站服務並非專為未成年人設計。若您為當地法律規定之未成年人，請務必在您的法定代理人閱讀並同意本政策後，方得使用本服務。

9. 政策的修訂與聯絡方式

• 政策修訂： 我們保留隨時修改本隱私權政策的權利。若有重大變更，我們將透過網站公告通知您。繼續使用本網站服務即視為您同意修改後的政策內容。
• 聯絡我們： 如果您對本政策有任何疑問，或需要行使您的隱私權利，請透過官方信箱與我們聯繫：ethanhan1214@gmail.com

Welcome to ALOKA Quest (alokaquest.top, hereinafter referred to as "this Website" or "the Website"). We deeply understand the importance of privacy to you and are committed to protecting your personal data and private records. This Privacy Policy explains how we collect, use, protect, and process your information.

1. Information We Collect and Purpose of Collection

To provide complete and secure diary recording and social interaction services, we collect the following information:

• Account and Authorization Data: When you register using an email or log in via third-party services (such as Google or GitHub), we collect your email address and the basic public profile authorized by the third-party platform, solely for establishing and verifying your account. All passwords undergo secure encryption.
• User-Generated Content: When you use the Website's features to record or interact, we securely store the text, journals, and messages you input.
• Device Permissions and Media Files: If you use features like uploading a profile picture or sharing a Moment containing images, the Website may request access to your device's photo album or camera permissions. We only process the files you actively select and upload, and we will never scan or access other private content on your device without authorization.
• IP Address and Security Logs: When you access the Website, the system automatically records your Internet Protocol (IP) address and basic access logs. In addition to securing the community and preventing network fraud and malicious activities, the system will also display your IP address (or derived geolocation data) on your "My" (Personal Profile) and "Radar" modules to enhance the authenticity of social interactions. System underlying logs used for security protection will be periodically overwritten or cleared; we do not retain them permanently as historical tracking data.

2. Core Features, Data Visibility, and Review Mechanisms

We fully respect your privacy. The data sharing and visibility rules for each core module are as follows:

• Personal Profile (My): Your exclusive personal profile page, which will display your IP address information. You can freely set the display status of this page (public or private), giving you full control over the visibility of your basic profile and IP information.
• Private Diary and Content Copyright: By default, without any action from you, the diaries you write are absolutely private. Any content is strictly for your personal viewing, saving, and editing. We claim no copyright over your original content. All intellectual property and ownership of the diaries and private messages you write belong entirely to you. We will not use your private content to train artificial intelligence (AI) or misappropriate it for other commercial purposes.
• Moment (Dynamic Sharing): If you actively choose to share content to Moment, you can freely set the viewing permissions (e.g., "Share with everyone" or "Share with friends only").
• Radar Matching: The system will match data based on the "Tags" you actively select and add to your profile to help you find partners. Please note that your IP address information will be displayed alongside your public profile in this module.
• Messages (Private Interactions): Used for real-time communication between users. Private message content is strictly restricted to be visible only to the two communicating parties.
• Blocking and Privacy Isolation Mechanism: To protect your social privacy and your right to be free from harassment, you have the right to actively block specific users within the system. Once blocked, data and dynamics from both parties in Radar, Moment, and Messages will be mutually hidden.
• Reporting and Review Exemption: Although we protect your content's privacy, if we receive reports from other users that your content involves fraud, abuse, malicious behavior, or violates community guidelines, the website administrators reserve the right to access and review the specifically reported content to maintain platform security.

3. Data Storage, Cross-Border Transfer, and Third-Party Services

We utilize industry-standard cloud services to maintain the stability and security of the Website. Your data will be processed by the following trusted providers:

• Backend and Database (Supabase): Responsible for securely encrypting and storing your account information, diary content, and system data.
• Frontend Hosting (Netlify): Responsible for providing secure and fast web application deployment services.
• Email Dispatch Service (Resend): Solely responsible for sending necessary operational notifications, such as account verification and password resets.
• Cross-Border Transfer Statement: As this Website uses international cloud service providers, your personal data may be transferred to and stored on servers outside your country or region. By using this service, you consent to such cross-border data transfers.

4. System Notifications and No-Email Promotion Commitment

We respect your right to remain undisturbed. We will never send you any commercial promotions, marketing advertisements, or event messages via email. Any event notifications or feature promotions related to the ALOKA brand will be strictly displayed within the internal system of the Website. Your email address is used solely for account logins and critical system security notifications.

5. User Rights and Data Deletion Mechanisms

We grant you absolute control over your personal data:

• Access, Modification, and Export: You can log into your profile at any time to view or modify your personal information. We also support exporting and backing up your personal diary content (data portability right).
• Third-Party Authorization Revocation: In addition to deleting your account within the Website, you may also visit the "Security and Authorized Apps" settings page of your Google or GitHub account at any time to actively revoke access to the Website, completely severing third-party data links.
• Immediate Deletion and Backup Delay: When you actively initiate a deletion (whether deleting a single diary entry or canceling your account), your data will be immediately removed from the active master database. However, due to server disaster recovery and protection mechanisms, this data may remain in encrypted system cold backups (snapshots) for a reasonable period before being physically erased.
• Violation Blocklist Retention Exception: If your account is suspended or blocked due to a severe violation of community guidelines, suspected fraud, or illegal activities, we reserve the right to deny your deletion request and retain certain identifying information (such as IP address, hashed email) as a system blocklist to prevent repeated registration and protect community security.
• Inactive Account Retention Period: To protect data security and conserve system resources, if your account has no login activity for over three consecutive years, we reserve the right to delete your account and associated data after providing advance notice via email.

6. Cookie Statement and External Link Disclaimer

• Cookie Statement: This Website only uses "essential cookies" required to maintain basic website operations and security. We will not use any third-party tracking cookies for advertising pushes or commercial behavior analysis.
• External Link Disclaimer: Moments or private messages on this Website may contain external website links provided by other users. We have no control over these external websites. When you click and leave this Website, this policy will no longer apply, and we bear no joint liability.

7. Legal Compliance, Security Protection, and Business Transfers

• Law Enforcement Disclosure: Generally, we will not share personal data with third parties. However, when faced with legal proceedings, court orders, or legitimate investigation requests from government law enforcement agencies, we reserve the right to disclose necessary information in accordance with the law.
• User Account Security Responsibility: We are not liable for any privacy data leaks caused by the loss of your device, password leaks, or the hijacking of your third-party authorized accounts (e.g., Google, GitHub). Please keep your login credentials secure.
• Information Security and Hacker Attack Disclaimer: We employ reasonable technical measures to protect your data security. However, the internet environment cannot guarantee absolute security. In the event of a data breach caused by force majeure or malicious hacker attacks—factors beyond our intentional fault—we will take remedial measures and notify affected users as soon as we become aware, but we are legally exempt from related direct or indirect damage compensation.
• Brand Transfer and Mergers: If this Website is involved in a merger, acquisition, or asset transfer in the future, your personal data will be transferred as operational assets. We will ensure that the receiving party continues to abide by this Privacy Policy and will issue an announcement or notice prior to the transfer.

8. Minors Protection Statement

The services of this Website are not specifically designed for minors. If you are a minor according to local laws, you must only use this service after your parent or legal guardian has read and agreed to this policy.

9. Policy Revisions and Contact Information

• Policy Revisions: We reserve the right to modify this Privacy Policy at any time. In the event of major changes, we will notify you through website announcements. Continued use of this Website's services constitutes your agreement to the modified policy.
• Contact Us: If you have any questions about this policy or need to exercise your privacy rights, please contact us via our official email: ethanhan1214@gmail.com