私隱政策

最後更新　2026 年 9 月 29 日

Quiztal 是一款為中學生設計的答題跑步遊戲。遊玩毋須登入。帳戶屬自選功能，只需帳戶名稱及密碼，不會要求提供電郵地址或電話號碼。遊戲不設廣告，不作任何分析追蹤，亦不使用第三方軟件開發套件（SDK）。

除非你開設帳戶或加入班級，否則遊戲進度只會儲存在你的裝置上。只有在你主動進行下列其中一項操作時，資料才會傳送至我們的伺服器。

儲存在你裝置上的資料

以下資料存放在應用程式或瀏覽器的本機儲存空間。如未開設帳戶或加入班級，這些資料不會上傳，我們亦無法查看。

  • 遊戲進度、最佳成績、星星及掌握程度
  • 你答錯的題目，供錯題重溫之用
  • 你已加入的課程清單及其題目副本，以便離線遊玩
  • 你設定的暱稱
  • 音樂、音效及奔跑速度等設定

刪除應用程式，或在瀏覽器清除本網站的資料，即會永久刪除上述全部資料。

會離開你裝置的資料

以下每一項均須由你按下按鈕才會進行。

  • 開設或登入帳戶。我們會收到你設定的帳戶名稱及密碼。密碼只以加鹽單向雜湊（PBKDF2）形式儲存，我們從不以可讀形式保存密碼。登入期間，每局完結後你的遊戲進度（掌握程度、最佳成績、已收集的寶物、銅錢及造型）會儲存至你的帳戶，以便在其他裝置繼續遊玩；排行榜成績亦會以你的帳戶名稱登錄。
  • 加入班級。我們會收到班級碼、你設定的暱稱及四位數字密碼（以單向雜湊形式儲存）。你在內建課程的遊玩紀錄及進度會儲存至該班級，以便在其他裝置繼續遊玩，任教老師亦可查閱全班成績。
  • 登錄排行榜。我們會收到你的暱稱、分數、距離，以及作答題數與答對題數。
  • 提交課程成績。完成老師建立的課程後，我們會收到你的暱稱及每題的對錯。建立該課程的老師可憑管理密鑰查閱全班統計。
  • 建立課程。我們會收到課程名稱及題目。
  • 舉報課程。我們會收到該課程的課程碼。

如你沒有進行上述任何操作，資料不會離開你的裝置。遊戲本身在飛航模式下亦可完整運作。

帳戶名稱及暱稱

帳戶名稱及暱稱均由你自行設定，不會與任何電郵地址或裝置識別碼連結。請使用自擬名稱，切勿使用真實姓名。

由於帳戶沒有登記電郵，忘記密碼後無法重設。

刪除帳戶

你可隨時在遊戲內刪除帳戶。開啟帳戶面板，按「刪除帳戶」並輸入密碼，你的帳戶、已儲存的進度及排行榜紀錄會即時從我們的伺服器刪除。你裝置上的進度不受影響。

我們不會做的事

  • 不設廣告，亦不使用任何廣告網絡
  • 不作分析追蹤，不使用 Google Analytics 或 Firebase
  • 不使用任何第三方軟件開發套件
  • 不作跨應用程式或網站追蹤，亦不建立用戶資料檔案
  • 不出售、出租或交換任何資料

IP 地址

與所有伺服器一樣，我們的伺服器在處理請求時會看到你的 IP 地址。我們只用它限制短時間內的大量請求，以免服務受到衝擊。IP 地址不會寫入我們的資料庫。

舉報課程時，系統需要分辨五宗舉報是來自五個不同的人，還是同一人按了五次。為此我們使用每日更換的單向雜湊值，而非 IP 地址本身。該雜湊值無法還原，一日之後亦無法再辨認同一部裝置。

資料儲存地點及保存期限

提交的資料儲存於 Cloudflare D1 資料庫，由 Cloudflare 網絡託管。

老師刪除課程或班級時，其題目、所有成績紀錄、所有已儲存的進度及所有舉報會一併刪除。帳戶及其進度會保存至你刪除帳戶為止。排行榜紀錄會保存至我們將其移除，或發布該紀錄的帳戶被刪除為止。

兒童

本遊戲為教育遊戲，主要使用者為中學生。遊戲不會要求亦不會收集任何可識別個人身分的資料。帳戶屬自選且匿名，不涉及電郵、真實姓名、位置、通訊錄、相機或麥克風。

用戶建立的內容

課程題目由老師編寫，並由老師對內容負責。每個已加入的課程均可在應用程式內舉報。同一課程累計五宗舉報後會自動收起，建立者可憑管理密鑰重新開放。我們亦可直接移除任何不當課程。

要求移除資料

如需從排行榜移除某個暱稱，或刪除某課程的成績紀錄，請以電郵聯絡我們，並提供該暱稱或課程碼。我們會在合理時間內處理。

政策修訂

本政策如有修訂，本頁頂部的日期將會更新。

聯絡我們

電郵　privacy@quiztal.com

Privacy Policy

Last updated　29 September 2026

Quiztal is a quiz running game for secondary school students. You can play without signing in. An account is optional: it needs only an account name and a password, and never an email address or phone number. The game contains no advertising, no analytics, and no third-party SDKs.

Unless you create an account or join a class, your progress stays on your own device. Data is sent to our server only when you choose to do one of the things listed below.

Stored on your device

The following is kept in the app's or browser's local storage. Without an account or a class it is never uploaded and we cannot see it.

  • Game progress, best scores, stars and mastery
  • Questions you answered wrong, used for the review mode
  • The list of courses you joined, and a copy of their questions so you can play offline
  • The nickname you chose
  • Settings such as music, sound and running speed

Deleting the app, or clearing this site's data in your browser, erases all of it permanently.

What leaves your device

Each of these requires you to tap a button.

  • Creating or signing in to an account. We receive the account name you chose and your password. The password is stored only as a salted one-way hash (PBKDF2); we never store it in readable form. While you are signed in, your game progress (mastery, best scores, collected items, coins and outfits) is saved to your account after each run so you can continue on another device, and leaderboard scores are posted under your account name.
  • Joining a class. We receive the class code, the nickname you chose and a four-digit PIN (stored as a one-way hash). Your runs on the built-in lessons, and your progress, are saved to the class so you can continue on another device, and your teacher can see the class results.
  • Posting to a leaderboard. We receive your nickname, score, distance, and the number of questions asked and answered correctly.
  • Submitting a course result. After playing a teacher's course, we receive your nickname and whether each question was right or wrong. The teacher who created the course can view the class statistics using their edit key.
  • Creating a course. We receive the course name and the questions.
  • Reporting a course. We receive the course code.

If you do none of these, nothing leaves your device. The game itself runs completely in airplane mode.

Account names and nicknames

You choose your own account name and nickname. They are not linked to any email address or device identifier. Please use a made-up name rather than your real name.

There is no email on file, so a forgotten password cannot be reset.

Deleting your account

You can delete your account at any time from inside the game: open the account panel, tap Delete Account and enter your password. Your account, its saved progress and its leaderboard entries are deleted from our server immediately. Progress on your own device is not affected.

What we do not do

  • No advertising and no ad networks
  • No analytics, no Google Analytics, no Firebase
  • No third-party SDKs of any kind
  • No tracking across apps or websites, and no user profiling
  • We do not sell, rent or trade any data

IP addresses

Our server sees your IP address while handling a request, as any server does. We use it to rate-limit bursts of requests so the service cannot be knocked over. IP addresses are not written to our database.

Reporting a course needs to tell five different people apart from one person tapping five times. For that we use a one-way hash that changes every day, not the IP itself. It cannot be reversed, and after a day the same device is no longer recognisable.

Where data is stored, and for how long

Submitted data is stored in a Cloudflare D1 database, hosted on Cloudflare's network.

When a teacher deletes their course or class, its questions, all result records, all saved progress and all reports are deleted with it. An account and its progress are kept until you delete the account. Leaderboard entries are kept until we remove them, or until the account that posted them is deleted.

Children

This is an educational game whose main users are secondary school students. It neither requests nor collects personally identifiable information. Accounts are optional and anonymous: no email, no real name, no location, no contacts, no camera and no microphone.

User-generated content

Course questions are written by teachers, who are responsible for their content. Every joined course can be reported from inside the app. Five reports on the same course hide it automatically; the person who created it can reopen it with their edit key. We can also remove any inappropriate course directly.

Requesting removal

To remove a nickname from a leaderboard, or the result records of a course, email us at the address below with the nickname or the course code. We will act within a reasonable time.

Changes

If this policy changes, the date at the top of this page will be updated.

Contact

Email　privacy@quiztal.com