云映剧场隐私政策

更新日期及生效日期：2026 年 8 月 27 日

“云映剧场”（Yunying Theater）是一款竖屏短剧应用，由 Shanghai Fun Pizza Software Technology Co., Ltd. 提供。我们为账号同步、播放体验、互动、客服、内容安全、广告展示和基础运营处理必要数据。

1. 我们处理的信息

• 账号与标识：您选择短信登录时提供的手机号、验证码的不可逆校验摘要；您选择旧版邮箱账号时提供的邮箱地址和加盐哈希后的密码；以及账号用户 ID、登录会话 token、首次启动时生成的随机游客设备 ID。上述信息用于注册、登录、跨设备同步、会话安全、防止短信滥用和游客状态保存。我们不保存短信验证码明文。
• 使用与互动：播放历史和位置、点赞、收藏、追剧、解锁、签到、任务、金币与 VIP 状态、设置、通知投递游标、广告奖励和相关产品互动。
• 虚拟权益与解锁记录：金币获得与消耗流水、剧集解锁、VIP 兑换/取消和奖励事件。当前版本没有 Apple App 内购买，也不通过真钱出售金币或 VIP。
• 激励广告服务端验证：当某一正式发行变体和所在地区实际开放激励广告时，您主动请求广告后，服务端会签发随机、不透明、一次性票据。票据原文只返回一次并用于广告平台回调验证，不包含手机号、邮箱或原始设备 ID；数据库和交易记录只保存票据及平台交易标识的 SHA-256 不可逆摘要。广告 SDK 的本地完成回调本身不会发放金币或解锁，只有服务端验证完成后才会到账。
• 用户内容与客服：评论、弹幕、内容举报、客服工单、反馈正文以及您选填的联系方式。
• 第一方运营分析：我们使用用户或游客设备标识、播放和互动、虚拟权益流水及评论数据形成汇总或去重指标，用于分析新增用户、活跃设备、留存、解锁、兑换和内容互动效果；不用于跨 App 或跨公司跟踪。
• 通知：Android 在您允许通知后可显示运营通知；iOS 当前公开版本使用 App 内轮询和本地通知。启用后台 APNs 后，iOS 可能注册 APNs 设备 token。
• 广告与诊断（Android）：Android 有两个互斥的发行变体：playGlobal 仅接入 Google Mobile Ads SDK 与 UMP，chinaDomestic 仅接入穿山甲（CSJ）SDK；单个安装包不会在运行时跨变体切换或回落到另一广告网络。只有对应正式资源、用户同意、地区策略和服务端开关均允许时才请求广告；未知地区、网络失败、关闭策略、SDK 或正式代码位不可用时不请求广告。实际启用的广告 SDK 可能处理广告或设备标识、由 IP 推断的粗略位置、广告展示与点击、产品互动、性能和诊断信息，用于投放、同意管理、效果衡量和防滥用。此说明不代表中国大陆广告当前已经可用。
• iOS 广告边界：当前 iOS App Store 版本及待发布的 1.0.5 均关闭广告；1.0.5 不链接或嵌入广告 SDK，不初始化广告服务，也不请求广告或 App Tracking Transparency。未来若启用广告，我们会先更新本政策和商店隐私披露。

2. 使用目的

• 提供短剧播放、剧集解锁、收藏追剧、评论弹幕、多语言字幕和账号同步；
• 处理客服工单、内容举报、违规审核、安全和防滥用；
• 以汇总或去重指标衡量活跃、留存、剧集表现、解锁、虚拟权益兑换与真实互动，改进产品运营；
• 在相应 Android 发行变体、地区策略和服务端开关实际允许时，展示横幅广告及用户主动触发的激励广告，完成服务端验奖、频控、效果衡量和广告同意管理；
• 维护稳定性，定位性能和网络问题。

3. 第三方服务与共享

我们不会出售您的个人信息。为提供服务，我们使用自有后端和 CDN；短信登录由腾讯云短信作为受托服务商处理手机号、短信模板、发送状态和必要的反滥用信息。Android 的 playGlobal 变体可使用 Google Mobile Ads 与 UMP，chinaDomestic 变体可使用穿山甲（CSJ）；是否实际启用仍取决于正式资源、用户同意、地区策略和服务端开关。实际启用的广告服务商可能处理上文列出的广告、标识、粗略位置、互动和诊断信息，且会接收不含直接身份信息的随机一次性验奖票据并将其随签名回调返回。Google 的处理规则详见 Google 隐私政策。除服务提供所必需、用户主动发起或法律要求外，我们不会向其他第三方共享个人数据。

4. 权限与安全

Android 使用网络和通知权限；对应发行变体中的广告 SDK 可能按其实际功能合并广告标识或广告服务权限。App 不申请精确位置、通讯录、读取或发送短信、通话记录、相机、麦克风或存储读取权限。验证码由用户在系统短信 App 中查看后手动输入。数据通过 HTTPS 传输。我们采取访问控制、密码哈希、验证码哈希、持久限流、随机会话 token、不可逆票据/交易摘要和合理的管理措施保护数据。

5. 保留与删除

账号和关联数据在提供服务所需期间保留。用户可在 App 内清除观看历史。已登录用户可在“我的 → 个人资料 → 永久删除账号”中即时删除账号；服务器确认成功后会永久删除手机号或邮箱账号、相关验证码与频控记录、会话、主设备资料、播放/收藏/追剧/解锁/任务、金币/VIP、评论与点赞、反馈工单和通知记录，且无法恢复。

激励广告票据状态记录最多保留 7 天后删除。已完成的广告交易只保留不可逆的票据/平台交易摘要及供应商、客户端平台、回调广告位、奖励用途/数量和时间等最小去标识反欺诈字段，并在发奖后保留 180 天，期满删除；不保存票据原文或平台交易标识原文。

删除账号时，服务端立即删除该账号的协议同意记录和全部广告票据状态记录；已经完成的交易记录会立即标记为去标识，按上述 180 天边界到期删除，且不能再用于识别或恢复账号。卸载后仍可访问 账号与数据删除页面，通过公开客服邮箱申请删除账号或游客数据。除为遵守法律、解决争议或防范欺诈而确有必要且已说明的最少记录外，我们不会在删除后保留关联个人数据。

6. 未成年人

本应用不面向未满 13 周岁的儿童；在适用地区如需更高年龄门槛，以当地法律和商店年龄分级为准。我们不会有意收集儿童个人信息。

7. 联系我们

App 内路径：我的 → 客服。公开客服邮箱：2630281760@qq.com。

8. 政策更新

产品、法律法规或第三方 SDK 发生变化时，我们会更新本页面的日期与内容；重要变化会在 App 或相关页面提示。本次版本更新后，旧版同意不会自动转换为当前同意；已登录用户需要在 App 内重新阅读、主动勾选并点击同意，客户端不会在冷启动或恢复会话时自动代为接受。

Yunying Theater Privacy Policy

Updated and effective: August 27, 2026

Yunying Theater is a vertical short-drama app provided by Shanghai Fun Pizza Software Technology Co., Ltd.

1. Data we process

• Account and identifiers: phone number and irreversible verification-code digest for SMS sign-in; email address and salted password hash for the legacy email option; account user ID, session token, and a random guest device ID. Plaintext SMS codes are not stored.
• Usage and interactions: playback history and position, likes, favorites, follows, unlocks, check-ins, tasks, coins/VIP, settings, notification delivery cursor, ad rewards, and related product interactions.
• Virtual benefits and unlock history: coin earnings and spending, episode unlocks, VIP redemption or cancellation, and reward events. This release has no Apple in-app purchases and does not sell coins or VIP for real money.
• Server-side rewarded-ad verification: when rewarded ads are actually enabled for a formal distribution variant and region, an explicit ad request causes the server to issue a random, opaque, one-time ticket. The raw ticket is returned once for signed provider-callback verification and contains no phone number, email address, or raw device ID. Databases and transaction records store only SHA-256 digests of the ticket and provider transaction identifier. A local SDK completion callback never grants coins or an unlock by itself; the benefit is applied only after server confirmation.
• User content and support: comments, danmaku, content reports, support tickets, feedback text, and optional contact details.
• First-party analytics: we use user or guest device identifiers, playback and interactions, virtual-benefit history, and comments to produce aggregated or deduplicated metrics for new users, active devices, retention, unlocks, redemptions, and content interaction. We do not use them for cross-app or cross-company tracking.
• Notifications: Android can show operational notifications with permission. The current iOS release uses in-app polling and local notifications; an APNs token may be registered only if background APNs is enabled later.
• Android ads and diagnostics: Android has two mutually exclusive distribution variants. playGlobal includes only Google Mobile Ads and UMP; chinaDomestic includes only the CSJ ad SDK. One installed package does not switch or fall back to the other network at runtime. Ads are requested only when formal resources, user consent, regional policy, and server switches all allow them; unknown regions, network errors, a disabled policy, or unavailable SDK/formal placement results in no ad request. An active SDK may process advertising or device identifiers, coarse location inferred from IP, ad views/clicks, product interactions, performance, and diagnostics for delivery, consent, measurement, and abuse prevention. This disclosure does not mean that mainland-China ads are currently available.
• iOS boundary: ads are disabled in the current App Store release and the pending iOS 1.0.5 update. Version 1.0.5 does not link or embed an ad SDK, initialize ad services, request ads, or request App Tracking Transparency.

2. Sharing and security

We do not sell personal data. Tencent Cloud SMS processes phone numbers, message templates, delivery status, and necessary anti-abuse information as our SMS service provider. We use our backend and CDN. The Android playGlobal variant may use Google Mobile Ads/UMP, while chinaDomestic may use CSJ; actual activation still depends on formal resources, consent, regional policy, and server switches. An active ad provider may process the ad, identifier, coarse-location, interaction, and diagnostic data described above and receives a random one-time verification ticket with no direct identity fields. See the Google Privacy Policy. Data is sent over HTTPS; passwords and verification codes are protected with one-way hashes, sessions use random tokens, and persisted ad-ticket/provider-transaction values are irreversible digests.

3. Retention and deletion

Reward-ticket state is kept for no more than 7 days. A completed ad transaction retains only irreversible ticket/provider-transaction digests and minimum de-identified anti-fraud fields—provider, client platform, callback placement, reward purpose/amount, and timestamps—for 180 days after the grant, then it is deleted. Raw tickets and raw provider transaction identifiers are never persisted.

Signed-in users can permanently delete their account in Mine → Profile → Permanently delete account. After server confirmation, the phone or email account, related SMS challenge and rate-limit records, sessions, primary profile, playback/saved/follow/unlock/task state, coins/VIP, comments/likes, support tickets, notification records, legal-consent record, and every ad-ticket state record are deleted and cannot be restored. A previously completed ad transaction is immediately marked de-identified and remains only until the 180-day anti-fraud boundary above expires; it cannot identify or restore the deleted account. Users without the app can request account or guest-data deletion through our public deletion page.

4. Policy updates and renewed consent

After this policy-version update, consent to an older version is not converted automatically. A signed-in user must review the current documents, actively check the consent control, and select agree. The app does not submit acceptance automatically during cold start or session restoration.

5. Contact

In-app: Mine → Support. Email: 2630281760@qq.com.