Privacy Policy
1. Who We Are 1. 我们是谁
Address:
Spicy Koala
LDB Accountants & Advisors Level 1
1-3 Albert Street Blackburn, VIC 3130
Spicy Koala
LDB Accountants & Advisors Level 1
1-3 Albert Street Blackburn, VIC 3130
Country of Incorporation: Australia 注册国家：澳大利亚
Contact: 联系方式： privacy@spicykoalagames.comprivacy@spicykoalagames.com联系方式：Contact:
Data Protection Officer: Not applicable 数据保护官：不适用
SPICY KOALA is the data controller (or, for California purposes, the "business") responsible for the personal information described in this Policy. If you have any questions about this Policy or our data practices, please contact us using the details above. 数据控制者（就加利福尼亚州而言，即为“企业”）。如果您对本政策或我们的数据实践有任何疑问，请通过上述联系方式与我们联系。
2. Scope of This Policy 本政策的适用范围 2.
This Policy applies to information collected through: 本政策适用于通过以下渠道收集的信息：
- Our Site and any subdomains; - 我们的网站及任何子域名；
3.1 Information You Provide Directly 3.1 您直接提供的信息
- Our newsletter and email communications; - 我们的时事通讯和电子邮件通信；
- Contact, support, and feedback forms; - 联系、支持和反馈表单；
- Any social media pages or community channels we directly operate (e.g., our official Discord server, where governed by this Policy rather than Discord's own policy for the underlying platform). - 我们直接运营的任何社交媒体页面或社区频道（例如，我们的官方 Discord 服务器，该服务器受本政策管辖，而非 Discord 针对其底层平台制定的政策）。
3. Information We Collect 3. 我们收集的信息 我们收集的信息
This Policy does **not** apply to third-party platforms that host or sell our games (such as Steam, itch.io, GOG, Epic Games Store, or console storefronts). Those platforms have their own privacy policies governing your purchases, accounts, and payment information — see Section 10. It also does not apply to in-game data collection, which is addressed in the privacy notice specific to each game — see Section 11. 本政策**不**适用于托管或销售我们游戏的第三方平台（如 Steam、itch.io、GOG、Epic Games Store 或主机商店）。这些平台有其各自的隐私政策，用于管理您的购买、账户和支付信息——请参阅第 10 节。本政策也不适用于游戏内的数据收集，相关内容请参阅各游戏特定的隐私声明——请参阅第 11 节。
We only collect what is necessary to respond to your inquiry or send the communications you've requested. 我们仅收集回复您的咨询或发送您所请求的通讯所必需的信息。
3.2 Information Collected Automatically 3.2 自动收集的信息
When you browse our Site, we and our service providers automatically collect certain information via cookies and similar technologies, including: 当您浏览我们的网站时，我们及我们的服务提供商会通过 Cookie 和类似技术自动收集某些信息，包括：
- IP address and approximate location (city/region level) - IP 地址和大致位置（城市/地区级别）
- Browser type, device type, and operating system - 浏览器类型、设备类型和操作系统
- Pages visited, time spent, referring/exit pages, and click activity - 访问页面、停留时间、引荐/退出页面以及点击活动
See **Section 5 (Cookies and Tracking Technologies)** for full details. 请参阅**第 5 节（Cookie 和追踪技术）**以了解完整详情。
3.3 Information from Third-Party Embeds 3.3 来自第三方嵌入式内容的信息
Our Site may include embedded content from third parties, such as: 我们的网站可能包含来自第三方的嵌入式内容，例如：
- **YouTube** video embeds (trailers, devlogs) - **YouTube** 视频嵌入（预告片、开发日志）
- **Discord** server widgets - **Discord** 服务器小组件
- **Steam** widgets or wishlist buttons - **Steam** 小组件或愿望单按钮
When you interact with this embedded content, the relevant third party (YouTube/Google, Discord, Valve, etc.) may collect information directly from your browser according to **their own privacy policies**, independent of us. We do not control and are not responsible for this collection. 当您与这些嵌入式内容互动时，相关的第三方（如 YouTube/Google、Discord、Valve 等）可能会根据**其自身的隐私政策**直接从您的浏览器收集信息，这与我们无关。我们无法控制此类收集行为，也不对此承担任何责任。
3.4 Information We Do Not Collect 3.4 我们不收集的信息
We do not collect payment card details, government ID numbers, or precise geolocation through our Site. Purchases of our games are processed entirely by third-party storefronts (see Section 10). 我们不会通过本网站收集支付卡信息、政府身份证件号码或精确的地理位置信息。我们的游戏购买流程完全由第三方商店处理（详见第 10 节）。
3.5 Aggregated and De-Identified Data 3.5 汇总与去标识化数据
We may create aggregated, anonymized, or de-identified data from the personal information described above (for example, the percentage of visitors who view a particular game page). Once information no longer identifies, and cannot reasonably be used to identify, an individual, it is no longer treated as personal information, and we may use and share it for any business purpose, including analytics and marketing reporting. 我们可能会根据上述个人信息创建汇总、匿名或去标识化的数据（例如，查看特定游戏页面的访客百分比）。一旦信息不再识别且无法合理地用于识别个人，它将不再被视为个人信息，我们可能会将其用于任何商业目的，包括分析和营销报告。
4. How We Use Your Information 4. 我们如何使用您的信息
We use personal information to: 我们使用个人信息用于：
- Respond to contact form submissions and support requests - 回复联系表单提交和支持请求
- Send newsletters, game announcements, and updates (only if you've subscribed) - 发送时事通讯、游戏公告和更新（仅限您已订阅的情况）
- Operate, maintain, secure, and improve the Site - 运营、维护、保护并改进本网站
- Understand aggregate usage trends (via analytics) to improve our games and marketing - 了解汇总的使用趋势（通过分析），以改进我们的游戏和营销
- Measure the effectiveness of our marketing and advertising campaigns - 衡量我们的营销和广告活动的有效性
- Comply with legal obligations and enforce our terms - 遵守法律义务并执行我们的条款
We do **not** sell your personal information to third parties for money, and we do not disclose it to third parties for the third parties' own direct marketing purposes. As described in Section 8, certain advertising/analytics integrations may constitute a "sale" or "sharing" of information under CCPA/CPRA's broad definitions — see Section 9.3 for your opt-out rights. 我们**不会**为了金钱将您的个人信息出售给第三方，也不会为了第三方自身的直接营销目的向其披露您的个人信息。如第 8 节所述，根据 CCPA/CPRA 的广泛定义，某些广告/分析集成可能构成信息的“出售”或“共享”——请参阅第 9.3 节了解您的拒绝权利。
5. Cookies and Tracking Technologies 5. Cookie 和追踪技术
5.1 What Are Cookies? 5.1 什么是 Cookie？
Cookies are small text files placed on your device that allow a website to recognize your browser and remember certain information. We also use similar technologies such as pixels, local storage, and SDKs (collectively referred to as "cookies" in this Policy). Cookie 是放置在您设备上的小型文本文件，允许网站识别您的浏览器并记住特定信息。我们还使用类似的技术，例如像素、本地存储和 SDK（在本政策中统称为“Cookie”）。
5.2 Categories of Cookies We Use 5.2 我们使用的 Cookie 类别
5.3 Cookie Table 5.3 Cookie 示例表
5.4 Your Cookie Choices 5.4 您的 Cookie 选择
- **Cookie banner:** On your first visit, you'll be shown a cookie banner allowing you to accept all, reject non-essential cookies, or set granular preferences by category. EU/UK visitors will see non-essential cookies blocked by default until you opt in, consistent with GDPR/ePrivacy requirements. A "Manage Cookies" (or similarly labeled) link is available at all times, typically in the site footer, so you can review or change your choices after your first visit. - **Cookie 横幅：** 您首次访问时，系统会显示一个 Cookie 横幅，允许您接受所有 Cookie、拒绝非必要 Cookie 或按类别设置详细偏好。根据 GDPR/ePrivacy 要求，欧盟/英国访客的非必要 Cookie 默认处于拦截状态，直到您选择加入。网站页脚通常会始终提供“管理 Cookie”（或类似名称）链接，以便您在首次访问后查看或更改您的选择。
- **Browser controls:** Most browsers let you block or delete cookies via their settings menu. - **浏览器控制：** 大多数浏览器允许您通过设置菜单阻止或删除 Cookie。
- **Analytics opt-out:** [e.g., Google Analytics offers a dedicated browser opt-out add-on.] - **分析退出：** [例如，Google Analytics 提供专用的浏览器退出插件。]
- **Industry opt-out tools:** You can also opt out of interest-based advertising across many networks at once via the [Network Advertising Initiative](https://www.networkadvertising.org/managing/opt_out.asp), the [Digital Advertising Alliance](https://www.aboutads.info/), or, for EU/UK visitors, [Your Online Choices](https://youronlinechoices.eu/). - **行业退出工具：** 您还可以通过 [网络广告促进会 (Network Advertising Initiative)](https://www.networkadvertising.org/managing/opt_out.asp)、[数字广告联盟 (Digital Advertising Alliance)](https://www.aboutads.info/) 或欧盟/英国访客专用的 [Your Online Choices](https://youronlinechoices.eu/)，一次性退出多个网络中的基于兴趣的广告。
- **Do Not Track / Global Privacy Control:** We honor Global Privacy Control (GPC) signals as a valid opt-out request for sale/sharing under CCPA/CPRA where applicable. Most browsers also offer a separate "Do Not Track" (DNT) setting; because there is no accepted industry standard for responding to DNT signals, our Site does not currently respond to them. - **禁止追踪 / 全球隐私控制：** 在适用 CCPA/CPRA 的情况下，我们将“全球隐私控制”（GPC）信号视为有效的销售/共享退出请求。大多数浏览器也提供单独的“禁止追踪”（DNT）设置；由于目前尚无公认的行业标准来响应 DNT 信号，因此我们的网站目前不响应此类信号。
Disabling cookies may affect Site functionality (e.g., embedded video or chat widgets may not load). 禁用 Cookie 可能会影响网站功能（例如，嵌入的视频或聊天插件可能无法加载）。
6. Legal Bases for Processing (GDPR/UK GDPR) 6. 处理的法律依据（GDPR/英国 GDPR）
Where GDPR or UK GDPR applies, we rely on the following legal bases: 在适用 GDPR 或英国 GDPR 的情况下，我们依据以下法律基础进行处理：
You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. 您可以随时撤回同意，但这不会影响撤回前已进行的处理活动的合法性。
7. How We Share Your Information 7. 我们如何共享您的信息
We do not sell personal information for monetary consideration. We may share information with the following categories of recipients: 我们不会为了金钱利益出售个人信息。我们可能会与以下类别的接收方共享信息：
- **Service providers**, such as: - **服务提供商：** 例如：
- Hosting providers (e.g., [insert provider, such as a cloud or web hosting service]); - 托管服务提供商（例如：[插入提供商，如云服务或网络托管服务]）；
- Email/newsletter platforms (e.g., [insert provider, such as Mailchimp]); - 电子邮件/时事通讯平台（例如：[插入提供商，如 Mailchimp]）；
- Analytics providers (e.g., [insert provider, such as Google Analytics or Plausible]); - 分析服务提供商（例如：[插入提供商，如 Google Analytics 或 Plausible]）；
- Payment processors, if we sell merchandise directly (e.g., [insert provider, such as Shopify]). - 支付处理商（如果我们直接销售商品，例如：[插入提供商，如 Shopify]）。
These providers act under contracts requiring them to protect your data and use it only for the purposes we specify. 这些服务提供商均在合同约束下运作，要求其保护您的数据并仅将其用于我们指定的目的。
- **Advertising partners**, where you have consented to advertising cookies, to measure and improve marketing campaigns. - **广告合作伙伴：** 在您同意使用广告 Cookie 的情况下，用于衡量和改进营销活动。
- **Embedded third parties** (YouTube, Discord, Steam), which collect data directly per their own policies when you interact with their embedded content. - **嵌入式第三方：**（YouTube、Discord、Steam），当您与这些嵌入式内容互动时，它们会根据各自的政策直接收集数据。
- **Legal and safety purposes**, where required to comply with law, enforce our terms, or protect the rights, property, or safety of Spicy Koala, our users, or others. - **法律与安全目的：** 在遵守法律、执行我们的条款，或保护 Spicy Koala、我们的用户或其他人的权利、财产或安全时。
- **Business transfers**, such as a merger, acquisition, or sale of assets, where personal information may be transferred as part of that transaction, subject to the recipient's continued obligation to use the data only as disclosed in this Policy. - **业务转让：** 例如合并、收购或资产出售，个人信息可能会作为交易的一部分进行转移，前提是接收方须继续履行仅将数据用于本政策所披露用途的义务。
8. Data Retention 8. 数据保留
We retain personal information only as long as necessary for the purposes described in this Policy: 我们仅在实现本政策所述目的所需的期限内保留个人信息：
- **Contact form/support inquiries:** retained for [e.g., 24 months] after resolution, or as needed for record-keeping. - **联系表单/支持咨询：** 在问题解决后保留 [例如：24 个月]，或根据记录保存的需要进行保留。
- **Newsletter subscriptions:** retained until you unsubscribe. - **时事通讯订阅：** 保留至您取消订阅为止。
- **Analytics data:** retained per our analytics provider's default retention settings (commonly 14–26 months), typically in aggregated or pseudonymized form thereafter. - **分析数据：** 根据我们分析服务提供商的默认保留设置（通常为 14–26 个月）进行保留，此后通常以汇总或去标识化形式处理。
9. Your Privacy Rights 9. 您的隐私权利
9.1 If You Are in the EU/UK (GDPR/UK GDPR) 9.1 如果您身处欧盟/英国 (GDPR/UK GDPR)
You have the right to: 您有权：
- Request erasure ("right to be forgotten") - 请求删除数据（“被遗忘权”）
- Restrict or object to certain processing - 限制或反对特定处理行为
- Withdraw consent at any time - 随时撤回同意
Your local data protection authority is generally the one for the country where you live, work, or where the alleged issue occurred — for example, the ICO in the UK, the IMY in Sweden, the DPC in Ireland, or the CNIL in France. [Insert the authority most relevant to your company's home jurisdiction, and note that EU/UK visitors may instead contact the authority where they live.] 您的当地数据保护机构通常为您居住、工作或涉嫌问题发生地所在的国家/地区的监管机构，例如英国的 ICO、瑞典的 IMY、爱尔兰的 DPC 或法国的 CNIL。[插入与贵公司所在地最相关的监管机构，并注明欧盟/英国访客也可联系其居住地的监管机构。]
9.2 If You Are in California (CCPA/CPRA) 9.2 如果您身处加利福尼亚州 (CCPA/CPRA)
You have the right to: 您有权：
- **Know** what personal information we collect, use, and disclose - **知悉**我们收集、使用和披露了哪些个人信息
- **Delete** personal information we hold about you, subject to certain exceptions - **删除**我们持有的关于您的个人信息（受特定例外情况限制）
- **Correct** inaccurate personal information - **更正**不准确的个人信息
- **Opt out** of the "sale" or "sharing" of personal information (including cross-context behavioral advertising) - **选择拒绝**“出售”或“共享”个人信息（包括跨上下文行为广告）
- **Limit** the use of sensitive personal information (if applicable) - **限制**使用敏感个人信息（如适用）
- Not be discriminated against for exercising these rights - 不会因行使这些权利而受到歧视
**To opt out of sale/sharing:** [Insert link to "Do Not Sell or Share My Personal Information" mechanism, or state that you honor Global Privacy Control signals.] **选择拒绝出售/共享：** [插入“不出售或共享我的个人信息”机制的链接，或声明您支持全球隐私控制 (GPC) 信号。]
To exercise any of these rights, you or your authorized agent may contact us at privacy@spicykoalagames.com. We may need to verify your identity before fulfilling certain requests. An authorized agent must provide signed written authorization from you, or proof of power of attorney, before we will act on their request. 如需行使上述任何权利，您或您的授权代理人可通过 privacy@spicykoalagames.com 与我们联系。在处理某些请求之前，我们可能需要验证您的身份。授权代理人在提出请求前，必须提供由您签署的书面授权书或授权委托书证明。
9.3 Other Jurisdictions 9.3 其他司法管辖区
If you reside elsewhere (e.g., Canada, Brazil, or other regions with applicable privacy laws), you may have similar rights under local law. Contact us and we will address your request in accordance with applicable legal requirements. 如果您居住在其他地区（例如加拿大、巴西或其他有相关隐私法律的地区），您可能根据当地法律享有类似的权利。请联系我们，我们将根据适用的法律要求处理您的请求。
10. Third-Party Platforms and Game Storefronts 10. 第三方平台与游戏商店
If you purchase or download our games through **Steam, Epic Games Store, console storefronts, or mobile app stores**, those platforms — not Spicy Koala— collect and process your payment information, account details, and purchase history under **their own privacy policies**. We encourage you to review: 如果您通过 **Steam、Epic Games Store、主机商店或移动应用商店**购买或下载我们的游戏，这些平台（而非 Spicy Koala）将根据**其各自的隐私政策**收集并处理您的付款信息、账户详情及购买记录。我们建议您查阅：
- https://store.steampowered.com/privacy_agreement - https://store.steampowered.com/privacy_agreement
If a storefront passes us a marketing opt-in you gave at checkout (for example, agreeing to receive news about our games when purchasing through that storefront), we will use that contact information only for the marketing purpose you consented to, in accordance with this Policy. 如果商店平台向我们传递了您在结账时勾选的营销许可（例如，在通过该商店购买时同意接收有关我们游戏的新闻），我们将仅按照本政策的规定，将该联系信息用于您所同意的营销目的。
We may receive limited aggregated or anonymized sales/analytics data from these platforms (e.g., wishlist counts, regional sales figures), which does not identify you personally. 我们可能会从这些平台接收有限的汇总或匿名化的销售/分析数据（例如愿望单数量、区域销售数据），这些数据不会识别您的个人身份。
11. Children's Privacy 11. 儿童隐私
Our Site and games may appeal to a broad audience, including younger players, but our Site itself is **not directed at children under the age of 13** (or the relevant minimum age in your jurisdiction, e.g., 16 in parts of the EU), and we do not knowingly collect personal information directly from children through the Site (e.g., via our newsletter or contact form) without appropriate verifiable parental consent. 我们的网站和游戏可能吸引包括年轻玩家在内的广泛受众，但本网站本身**并非针对 13 岁以下儿童**（或您所在司法管辖区的相关最低年龄，例如欧盟部分地区为 16 岁）设计。在没有获得适当且可验证的家长同意的情况下，我们不会通过本网站（例如，通过我们的时事通讯或联系表单）有意收集儿童的个人信息。
Where we do not have verifiable parental consent, we will only use a child's contact information to: (a) respond once to a request the child has made, after which we delete that information; (b) seek a parent's contact details in order to obtain consent or provide notice; or (c) as otherwise permitted by applicable law. We will never condition a child's use of the Site on the child disclosing more personal information than is reasonably necessary. 在没有获得可验证的家长同意的情况下，我们仅会将儿童的联系信息用于以下目的：(a) 回复儿童提出的一次性请求，之后我们将删除该信息；(b) 获取家长的联系方式以征求同意或提供通知；或 (c) 适用法律允许的其他用途。我们绝不会以要求儿童披露超出合理必要范围的个人信息作为其使用本网站的前提条件。
If you believe a child has provided us personal information without appropriate consent, please contact us at privacy@spicykoalagames.com and we will take steps to delete it. 如果您认为有儿童在未经适当同意的情况下向我们提供了个人信息，请通过 privacy@spicykoalagames.com 联系我们，我们将采取措施将其删除。
Note: any in-game data collection within our published games is governed by the privacy policy specific to that game/platform, which may differ from this Site policy. 注意：我们所发布游戏内的任何数据收集行为均受该游戏/平台特定的隐私政策管辖，其内容可能与本网站政策有所不同。
12. Data Security 12. 数据安全
We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Depending on the system involved, these measures may include access controls, encryption of data in transit (e.g., TLS/SSL on our store and forms), firewalls, and monitoring for unauthorized access. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. 我们采取合理的组织和技术措施，旨在保护个人信息免遭未经授权的访问、篡改、披露或销毁。根据所涉及的系统，这些措施可能包括访问控制、传输中数据加密（例如，我们商店和表单上的 TLS/SSL）、防火墙以及针对未经授权访问的监控。然而，没有任何传输或存储方法是 100% 安全的，因此我们无法保证绝对安全。
13. International Data Transfers 13. 国际数据传输
Your information may be processed in countries other than your own, including [the United States / Country of Hosting], which may have different data protection laws than your jurisdiction. Where required (e.g., for EU/UK personal data transferred internationally), we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms. Details of these safeguards are available on request from the contact in Section 15. 您的信息可能会在您所在国家/地区以外的地方进行处理，包括 [美国/托管国家]，这些地方的数据保护法律可能与您所在的司法管辖区不同。在有要求的情况下（例如，欧盟/英国个人数据进行国际传输时），我们会采取适当的保障措施，如标准合同条款或同等机制。如需了解这些保障措施的详情，请通过第 15 节中的联系方式向我们索取。
14. Changes to This Policy 14. 本政策的变更
We may update this Policy from time to time to reflect changes in our practices or for legal/regulatory reasons. The "Last Updated" date at the top reflects the most recent revision. Material changes will be highlighted on the Site or communicated via email where appropriate. 我们可能会不时更新本政策，以反映我们实践的变化或出于法律/监管原因。页面顶部的“最后更新”日期即为最近一次修订的时间。重大变更将在网站上重点标出，或在适当情况下通过电子邮件通知。
15. Contact Us 15. 联系我们
If you have questions, concerns, or requests regarding this Policy or our data practices, please contact: 如果您对本政策或我们的数据处理方式有任何疑问、顾虑或请求，请通过以下方式联系我们：
Spicy Koala Spicy Koala
Email: privacy@spicykoalagames.comprivacy@spicykoalagames.com电子邮件：
Address:
LDB Accountants & Advisors Level 1
1-3 Albert Street Blackburn, VIC 3130
Australia 地址：
LDB Accountants & Advisors Level 1
1-3 Albert Street Blackburn, VIC 3130
Australia
We aim to respond to all privacy requests within [e.g., 30 days], or sooner where required by applicable law. EU/UK residents may also have the right to lodge a complaint with their local supervisory authority (see Section 9.1). 我们力求在 [例如：30 天] 内回复所有隐私请求，若适用法律有更严格的要求，我们将提前回复。欧盟/英国居民亦有权向当地监管机构提出投诉（详见第 9.1 节）。