《象棋：戰鬥三國》首發版本（v1.0）計畫直接包含完整線上對戰功能。惟截至目前查核日（2026-10-26），Supabase 線上多人連線、雲端匿名帳號建立、遊戲內自助刪除功能、7 天對局清理與 180 天閒置帳號自動清理排程均處於「規劃中（Planned）」階段，尚未正式實作完成。在所有自動清理與匿名帳號刪除功能實際完成並通過驗證之前，絕不宣稱已經上線。
《象棋：戰鬥三國》帳號與資料刪除說明頁
本頁面說明由 Midnight Violet Labs（獨立遊戲與應用程式開發品牌）所開發之《象棋：戰鬥三國》（英文暫定名稱：Xiangqi: Battle of the Three Kingdoms）如何保存您的資料，以及您如何刪除手機本機資料與線上模式之雲端匿名帳號資料。（關於實際負責個人資料處理之營運者資訊，請參閱本遊戲隱私權政策第一節）。
一、本機資料與雲端資料的區別與保存期限規劃
| 資料類別 | 實作狀態 | 包含內容与保存期限規劃 | 刪除方式 |
|---|---|---|---|
| 1. 手機本機資料 (Local Device Data) |
已支援 | 個人終身總場次、各模式勝敗勝率統計、單機 AI 對戰紀錄、三國演義故事與挑戰模式進度、角色外觀與音效設定。 保存期限：存於您手機本機，直到您清除資料或卸載遊戲。 |
直接於手機上解除安裝《象棋：戰鬥三國》，或於手機系統「設定 > 應用程式」中清除本遊戲之儲存空間，即可立即且永久刪除（雲端伺服器並未保存這些資料）。 |
| 2. 雲端對局與房間紀錄 (Cloud Match & Room Logs) |
規劃中 | 好友房間與陌生人自動配對之房間狀態、走步座標與勝負結果。 自動清理規劃：建議於對局結束後保留 7 天即自動刪除或去識別化（進行中棋局除外）。 |
隨對局結束滿 7 天自動清理，或於執行下方「雲端匿名帳號刪除」時一併刪除／解除關聯。 |
| 3. 雲端匿名使用者帳號 (Cloud Anonymous Account) |
規劃中 | 系統透過 Supabase signInAnonymously() 自動建立之匿名 UUID（auth.users.id）與連線 Session。自動清理規劃：建議於最後活動滿 180 天後自動清理刪除（但排除尚有進行中棋局、未結算房間或爭議鎖定等特殊狀況）。 |
透過下方第二節說明之「方式 A：遊戲內自助刪除（主力管道）」或「方式 B：外部信箱申請（備援管道）」刪除（均為規劃中）。 |
二、如何主動刪除雲端匿名帳號與對局資料（規劃中）
依據 Google Play 帳戶刪除規範與 Apple 隱私要求，針對系統自動建立之雲端匿名帳號（Guest / Anonymous Account），我們規劃提供以下兩種刪除管道：
方式 A：於遊戲內直接執行自助刪除（主力建議方式 — 規劃中）
- 在您的手機上開啟《象棋：戰鬥三國》應用程式。
- 前往主畫面之「設定（Settings）」選單中「帳號與隱私」相關頁面（實際選項名稱以正式上線版本介面為準）。
- 點選「刪除雲端匿名帳號與資料」功能並確認執行（規劃中）。
- 驗證與生效方式：系統將直接驗證您手機本機持有的加密連線工作階段（Supabase Auth Session JWT），確認您為該帳號本人後，立即刪除雲端
auth.users匿名帳號紀錄及關聯資料。
方式 B：已解除安裝遊戲時，透過外部客服信箱申請刪除（規劃中）
- 收件信箱：請寄信至 midnightvioletlabs@gmail.com
- 信件主旨：
【資料刪除申請】《象棋：戰鬥三國》雲端匿名帳號刪除 - 服務與處理時效目標：
- 客服首次回覆目標：收到來信後 5 個工作天內。
- 外部資料刪除處理目標：以收到完整驗證資訊後 30 天內 完成處理為規劃目標，實際處理期限須符合您所在地區適用法律之規定。
在線上對戰（好友房間或自動配對）過程中，配對雙方的客戶端可能因同步棋局而獲知對手的公開 User ID (UUID)。如果任何人只要在信中填寫一串公開 UUID 就能申請刪除，惡意玩家將能輕易複製對手的 UUID 並冒名刪除他人帳號。
因此，透過外部信箱申請刪除時，必須具備防偽冒之帳號所有權驗證機制。目前具體的外部驗證技術方案列為「待安全評估方案」（例如評估採用：遊戲內產生之一次性外部刪除申請碼、私密刪除驗證碼，或核對非公開之帳號／連線特徵；暫不將私密刪除驗證碼列為必須立即實作之單一固定功能，待後端架構定案並實裝後，將於本頁面公布確切之信件必填驗證欄位）。
如果我已經解除安裝遊戲，且未留存任何帳號識別或驗證資訊怎麼辦？
- 為防止誤刪其他玩家的正常帳號，在無法核實帳號所有權的情況下，客服人員無法僅憑猜測或單一公開資訊強制刪除特定雲端紀錄。
- 但請您放心，系統規劃有自動到期清理機制（規劃中）：
- 您的本機勝率、場次與故事進度在您解除安裝遊戲的當下已完全從手機清除。
- 已結束之雲端對局與房間紀錄規劃於 7 天後 自動清理。
- 雲端匿名使用者帳號（UUID）在您解除安裝、自最後一次活動起算滿 180 天後（且無進行中棋局等特殊狀況），系統排程將自動予以永久刪除。
The initial release (v1.0) of 《象棋：戰鬥三國》 is planned to include full online multiplayer functionality. However, as of this review date (2026-10-26), Supabase online multiplayer, cloud anonymous account creation, in-app self-service deletion, 7-day match cleanup, and 180-day inactive account cleanup schedules are all in the "Planned" stage and have NOT yet been completed in production. None of these features are claimed as live prior to actual completion and verification.
Account & Data Deletion Instructions — 《象棋：戰鬥三國》 (Xiangqi: Battle of the Three Kingdoms)
This page explains how 《象棋：戰鬥三國》 (Tentative English Title: Xiangqi: Battle of the Three Kingdoms), developed by Midnight Violet Labs (Independent Game & App Developer), stores data and how you can delete both local device data and cloud anonymous account data. (For details regarding the individual operator responsible for data processing, please refer to Section 1 of our Privacy Policy.)
1. Data Categories & Planned Retention Periods
| Data Category | Status | Contents & Planned Retention | How to Delete |
|---|---|---|---|
| 1. Local Device Data | Supported | Lifetime match counts, win/loss statistics across modes, offline AI records, Romance of the Three Kingdoms Story & Challenge progress, visual and audio settings. Retention: Stored on your phone until you clear app storage or uninstall. |
Simply uninstall 《象棋：戰鬥三國》 from your device or clear the app's storage in system settings to immediately and permanently erase all local data. |
| 2. Cloud Match & Room Records | Planned | Room status, move coordinates, and match outcomes for Friend Rooms and Automated Matchmaking. Planned Cleanup: Recommended retention of 7 days after match completion before automatic deletion or de-identification (excluding ongoing matches). |
Automatically purged 7 days after match completion, or deleted/unlinked when you delete your cloud anonymous account. |
| 3. Cloud Anonymous User Account | Planned | Anonymous UUID (auth.users.id) and Auth Sessions automatically created via Supabase signInAnonymously().Planned Cleanup: Recommended automatic cleanup 180 days after last activity (excluding special circumstances such as ongoing matches, unsettled rooms, or dispute/security holds). |
Delete via "Method A: In-App Self-Service Deletion (Primary)" or "Method B: External Email Request (Fallback)" below (both Planned). |
2. How to Proactively Delete Cloud Anonymous Accounts & Data (Planned)
In accordance with Google Play's account deletion requirements and Apple privacy guidelines, we plan to provide two deletion methods for automatically created cloud anonymous accounts:
Method A: Direct In-App Self-Service Deletion (Primary Recommended Method — Planned)
- Open 《象棋：戰鬥三國》 on your mobile device.
- Go to the Settings menu and open the Account & Privacy section (exact menu label subject to the final release UI).
- Tap Delete Cloud Anonymous Account & Data and confirm (Planned).
- Verification & Execution: The backend verifies your device's active, cryptographically signed Supabase Auth Session JWT to confirm you are the genuine account holder, and immediately deletes your cloud
auth.usersrecord and associated data.
Method B: External Email Deletion Request After Uninstalling (Planned)
- Recipient Email: Send an email to midnightvioletlabs@gmail.com
- Email Subject:
[Data Deletion Request] Xiangqi: Battle of the Three Kingdoms Cloud Anonymous Account - Service & Processing Timeframe Targets:
- Target Initial Support Response: Within 5 business days.
- Target Deletion Completion: Planned target of within 30 days after receiving complete verification details, subject to applicable legal requirements in your jurisdiction.
During online matches (Friend Rooms or Automated Matchmaking), matched clients may exchange or observe the opponent's public User ID (UUID) to synchronize gameplay. If anyone could delete an account simply by emailing a raw public UUID, malicious actors could copy an opponent's UUID and submit forged deletion requests to wipe other players' accounts.
Therefore, external email deletion requests must enforce ownership verification principles. The exact external verification mechanism is currently retained as a "Candidate Solution Pending Security Evaluation" (e.g., evaluating a one-time in-app deletion request token, a private deletion verification code, or cross-checking non-public session/account attributes; a private deletion verification code is not mandated as an immediate fixed implementation until the backend architecture is finalized prior to launch).
What If I Already Uninstalled the Game Without Retaining Identification or Verification Details?
- To prevent unauthorized deletion of other players' accounts, our support team cannot forcefully delete a specific cloud record without verifying ownership.
- However, rest assured that our system is planned to include automated expiration and cleanup schedules (Planned):
- Your local win rates, match counts, and story progress were already completely erased from your phone the moment you uninstalled the Game.
- Completed cloud match and room records are planned to be automatically purged after 7 days.
- Once your Anonymous User ID remains inactive for 180 days from your last activity (excluding ongoing matches or special holds), our scheduled cleanup job will automatically and permanently delete the inactive anonymous account.