隐私政策 / Privacy Policy

1. 适用范围

本隐私政策适用于 MCFUN 及其关联线上服务，包括中文网站 MCFUN、英文网站 MCFUN-CC、中文 Android APP 麦块迷、英文 Android APP MCFUN、英文 iOS APP MCFUN、开放接口、下载跳转页、账号系统、评论反馈、投稿发布、活动页面以及与这些功能直接相关的后台支持服务。

当您访问网页、安装或使用 APP、提交服务器或资源信息、点击下载链接、登录账号、发送反馈或与我们进行其他互动时，即表示您已经阅读并理解本政策。

网站及 APP 开发者说明：武汉极客互维网络科技有限公司是 MCFUN 网站及 APP 的开发者与运营服务主体。

2. 我们可能收集和处理的信息

根据您使用的功能不同，我们可能处理以下信息：

• 账号与身份信息：例如用户名、手机号、邮箱地址、密码加密凭证、登录状态、头像以及您主动提交的其他资料。
• 手机号与短信验证信息：当您使用手机号登录、手机号注册、短信验证码登录、找回或重置密码、绑定或修改手机号时，我们会处理您的手机号码、短信验证码、验证码校验结果以及相关操作日志。
• 微信登录与绑定信息：当您在中文 Android APP 麦块迷或中文网站中主动选择微信登录或绑定微信时，微信 OpenSDK 或微信开放平台网站应用会向我们提供一次性授权码；我们的服务端会使用该授权码换取openid、unionid（如微信提供）及授权结果，用于确认微信身份、建立或维护微信与 MCFUN 账号的绑定关系并完成登录。对于已绑定且已完成手机号注册的账号，您可直接使用微信登录，无需再次注册或验证手机号；对于尚未绑定 MCFUN 账号的微信，我们不会仅凭微信身份创建账号，您仍需完成手机号注册与验证后才能创建并绑定账号。中文网站与中文 Android APP 使用同一微信开放平台账号时，如微信提供相同 unionid，我们会用其识别同一已绑定账号并完成跨端登录。我们不会因此获取您的微信好友、聊天记录或朋友圈内容。AppSecret、access_token 等敏感凭证仅保存在服务端，不会写入 APP 或公开网页。
• 内容与提交信息：例如服务器名称、IP、端口、版本、介绍、文章或社区子分类、标题、正文、封面图、截图、资源下载地址、评论、工单、反馈、举报、搜索关键词与其他您主动发布或编辑的内容。文章和社区内容每次最多可提交 6 张封面图；我们还会处理图片排列顺序，以及文字和图片的审核结论、审核原因、审核状态与图片公开显示状态。
• 设备与日志信息：例如 IP 地址、浏览器类型、操作系统、APP 版本、设备语言、访问时间、崩溃日志、错误日志、页面访问路径、来源页面与基础性能指标。
• 友盟统计、运营分析与推送信息：中文 Android APP 麦块迷使用友盟移动统计 SDK、合规助手 SDK 和消息推送 SDK。在您阅读并同意本隐私政策前，APP 不调用友盟 SDK 的预初始化或正式初始化接口，也不通过该 SDK 收集或上报个人信息；只有在您同意后才会初始化。初始化后，相关 SDK 会根据设备系统版本、权限状态和实际可用范围，通过设备系统接口及网络请求处理设备品牌与型号、操作系统及 APP 版本、应用包名、分发渠道、设备语言、时区、网络类型与 IP 地址，以及IMEI、MAC 地址、Android ID、OpenUDID、GUID、OAID、广告标识符、SIM 卡 IMSI 信息等设备标识，并处理 APP 启动与使用时长、页面访问及功能事件、推送设备标识，以及通知送达、展示、点击等交互记录，用于统计分析、产品优化、安装与卸载趋势分析、反作弊和消息推送。IDFA 仅适用于 iOS 设备，本 Android APP 不处理 IDFA。我们不会为这些功能申请精确位置、通讯录、通话记录、短信或本机电话号码权限。
• 广告与激励交互信息：当您在中文 Android APP 麦块迷中接收开屏广告、首页信息流广告、工具入口插屏广告或资源详情页激励视频广告时，我们及广告技术合作方会处理广告位标识、设备标识信息、广告请求与展示日志、点击/关闭/播放完成状态、奖励发放校验结果以及应用版本、网络环境和用于频次控制、归因统计、反作弊的必要记录。为完成广告投放、监测归因、广告计费、效果统计和反作弊，广告 SDK 还可能在其实际功能和最小化配置允许的范围内处理设备 MAC 地址、软件安装列表以及设备传感器信息。上述信息仅在您于首次隐私提示中点击“同意并继续”后，于广告 SDK 初始化、广告请求、展示、互动及反作弊处理时由 SDK 通过设备系统接口自动收集和使用，适用于中文 Android APP 麦块迷的广告服务。选择“不同意”后，APP 不会初始化广告 SDK，也不会请求或展示广告。
• 通知与消息提醒信息：如果您在中文 APP 中主动授予通知权限，我们会处理您的通知授权状态、站内消息读取状态以及与消息提醒送达相关的必要记录，用于资源上新、评论互动和系统提醒。
• 交易与权益信息：如果您使用会员、赞助、付费功能或兑换权益，我们可能记录订单编号、支付状态、商品类型、到期时间与客服处理记录，但支付卡号等敏感支付数据通常由第三方支付服务商处理。
• Cookie 与本地存储信息：例如登录态、语言偏好、基础安全标识、性能缓存标识及页面功能所需的本地存储数据。

3. 我们如何使用这些信息

• 提供、维护和改进网站、APP、接口、搜索、下载、推荐、账号、发布、审核与客服等功能。
• 对您主动提交的文章与社区标题、正文和图片进行必要的格式转换、存储、自动化或人工内容安全审核；上传图片会在服务端转换为 WebP，文字审核用于确定内容公开、待审或不予发布状态，图片审核则分别决定每张图片能否公开显示。
• 识别和处理垃圾内容、作弊、批量滥用、恶意请求、未授权访问及其他安全风险。
• 保存您的偏好设置，提升页面加载速度、搜索效率、推荐质量与跨端体验一致性。
• 在麦块迷 APP 中按您的主动操作使用相机识别二维码，并在设备本地生成带封面、简介和二维码的分享图片；二维码取景画面和生成的分享图片不会由该功能上传至我们的服务器。
• 在中文 Android APP 麦块迷中统计启动、活跃、页面和功能使用情况，分析安装与卸载趋势、识别异常或作弊流量，并据此改进产品与运营服务。
• 在中文 Android APP 麦块迷中展示开屏广告、首页信息流广告、工具入口插屏广告和资源详情页激励视频广告，并完成广告频次控制、效果统计、奖励校验与反作弊风控。
• 在中文 APP 中，当您主动开启系统通知权限后，通过友盟消息推送服务向您发送资源上新、评论互动和系统提醒，并统计必要的送达、展示和点击结果；您可以随时在设备系统设置中关闭通知权限或关闭相关提醒。
• 处理您的工单、咨询、投诉、举报、内容纠错、版权通知以及其他服务请求。
• 在符合法律法规及平台运营需要的前提下，进行统计分析、故障排查、版本迭代与服务优化。

中文网页端登录/注册页面与麦块迷 APP 登录界面会在提交前提示您阅读并同意隐私政策与服务条款，用于帮助您在注册、登录或继续使用账号功能前了解信息处理规则。

3.1 SDK 收集使用规则与敏感信息边界

中文 Android APP 麦块迷仅在实现对应功能所需的范围内接入第三方 SDK。在您于首次隐私提示中点击“同意并继续”前，APP 不初始化友盟统计与推送 SDK、穿山甲广告 SDK / GroMore 聚合 SDK 或优量汇 SDK，不请求广告，也不加载首页、远程图片等在线内容。点击“同意并继续”后，APP 才会为在线内容、统计分析、消息推送和广告服务初始化相应联网组件与 SDK；选择“不同意”后，APP 不退出，也不会初始化上述 SDK 或发起联网请求，仅显示本地隐私选择页面，您可以之后重新查看并作出选择。各 SDK 的提供方、功能、处理信息种类、处理目的、处理方式、使用场景和隐私政策链接，集中列明于本政策“信息共享、第三方服务与下载跳转”部分。

通讯录：麦块迷 APP 不申请通讯录权限，不读取、保存或上传您的系统通讯录。

设备短信：麦块迷 APP 不申请读取、接收或发送设备短信的权限，不读取设备短信正文。手机号注册、登录、找回密码和账号安全功能仅处理您主动填写的手机号码、手动输入的验证码、验证结果及必要操作日志；验证码短信由服务端委托短信服务商发送。

通话记录：麦块迷 APP 不申请通话记录权限，不读取、保存或上传您的通话记录。

相机与图片选择：仅当您主动点击麦块迷 APP 左侧菜单的“扫码”并同意系统相机授权后，APP 才会调用相机识别二维码。二维码取景画面仅在设备本地实时处理，不保存为照片，也不上传至我们的服务器；您可以随时在系统设置中撤回相机权限。需要上传头像、文章或社区封面、资源图片或截图时，只会在您主动操作后调用系统文件或图片选择器，并将您逐次明确选中的文件上传至服务器进行格式转换、存储与必要审核；不会因此读取未被您选择的其他图片。

如未来新增确需使用上述信息或权限的功能，我们会先更新政策、说明具体目的与使用场景，并在调用前另行征得您的同意。未经您的主动授权，不会启用相关权限。

4. 关于服务器、资源、文章与用户发布内容

如果您提交服务器、资源、文章、评论、截图、封面、下载信息或其他公开展示内容，相关内容可能会在网页、APP、接口或搜索结果中公开显示，供其他用户浏览、搜索、收藏或访问。

登录用户可以向社区及其子分类发布内容。文章和社区发布均可提交最多 6 张封面图并调整顺序；图片原始文件会上传至服务器，随后自动转换为 WebP 供存储和展示。

社区标题、正文与子分类信息可能由后台配置的人工流程或 AI 模型进行内容审核，审核结果可能决定内容直接公开、进入人工复核或不予发布。用于审核的信息包括您提交的标题、正文和社区子分类，以及必要的请求和审核记录。

每张上传图片会独立进行图片审核。图片未通过或需要复核时，该图片不会公开显示，但只要文字内容审核通过，文章仍可能正常发布并显示其他审核通过的图片；图片审核结果不会单独改变文章文字审核结论。

请勿在公开内容中提交身份证号、银行卡号、私人住址、私人联系方式、未授权的他人资料或其他不适合公开披露的信息。您应确保自己对提交内容拥有合法权利，并自行对公开后可能产生的影响负责。

5. Cookie、缓存与同类技术

我们会使用 Cookie、本地存储、会话标识、Redis 页面缓存及其他必要技术来维持登录状态、保存偏好、提升页面加载效率、限制异常请求并支持站点基础功能。

Redis 缓存仅用于加速网页访问与降低服务延迟，不作为业务数据长期存储。业务数据仍以 MySQL 数据库和服务器本地必要文件为准。

您可以通过浏览器或系统设置限制 Cookie，但这可能导致部分网页或 APP 功能无法正常工作。有关更多说明，请参阅我们的 Cookie 政策。

6. 信息共享、第三方服务与下载跳转

除以下情形外，我们不会出售您的个人信息：

• 经您明确授权或主动选择分享。
• 穿山甲广告 SDK / GroMore 聚合 SDK：由北京巨量引擎网络科技有限公司提供，仅在您于首次隐私提示中点击“同意并继续”后，为中文 Android APP 麦块迷提供开屏广告、首页信息流广告、工具入口插屏广告、资源详情页激励视频广告以及广告投放、计费、归因、奖励校验和反作弊服务。SDK 会在初始化以及广告请求、展示、互动和反作弊处理时，通过设备系统接口处理设备品牌与型号、操作系统及 APP 版本、应用包名与进程信息、网络类型与 IP 地址，以及在 SDK 实际功能和最小化配置允许范围内使用的设备标识、软件安装状态、设备传感器信息和广告请求、展示、点击、关闭、播放完成、奖励结果。上述信息的处理目的为广告投放、监测归因、广告计费、效果统计、奖励校验和反作弊，适用范围仅限中文 Android APP 麦块迷的广告服务。选择“不同意”后不会初始化或请求该 SDK。详见《穿山甲广告 SDK 隐私政策》与《穿山甲广告 SDK 合规使用说明》。
• 优量汇 SDK（GDT）：由深圳市腾讯计算机系统有限公司提供，作为 GroMore 聚合广告链路中的广告服务商，仅在您于首次隐私提示中点击“同意并继续”后，于广告 SDK 初始化以及广告请求、展示、互动和反作弊处理时启用。SDK 会在其实际功能和最小化配置允许的范围内，通过设备系统接口处理设备品牌与型号、操作系统及 APP 版本、应用包名与进程信息、网络类型与 IP 地址、设备标识、软件安装状态、设备传感器信息，以及广告展示、点击、关闭和转化事件，用于广告投放、监测归因、广告计费、频次控制、效果统计、奖励校验和反作弊。选择“不同意”后不会初始化或请求该 SDK。详见《优量汇 SDK 隐私保护声明》。
• 友盟移动统计 SDK、合规助手 SDK 与消息推送 SDK：由友盟同欣（北京）科技有限公司提供，为中文 Android APP 麦块迷提供 U-App 使用统计与运营分析、安装和卸载趋势分析、反作弊以及 U-Push 消息推送。在您点击“同意并继续”前，APP 不调用该 SDK 的预初始化或正式初始化接口，也不通过该 SDK 收集或上报个人信息；只有在您点击“同意并继续”后才会执行预初始化、正式初始化及后续信息处理。初始化后，SDK 会根据设备系统版本、权限状态和实际可用范围，通过设备系统接口与网络请求处理设备品牌与型号、操作系统及 APP 版本、应用包名、分发渠道、设备语言、时区、网络类型与 IP 地址，以及 IMEI、MAC 地址、Android ID、OpenUDID、GUID、OAID、广告标识符、SIM 卡 IMSI 信息等设备标识，并处理 APP 启动与使用时长、页面访问与功能事件、推送设备标识，以及通知送达、展示和点击记录。IDFA 仅适用于 iOS 设备，本 Android APP 不处理 IDFA。若您选择“不同意”，APP 不会初始化友盟 SDK，也不会因此退出应用，仅显示本地隐私选择页面。详见《友盟+隐私政策》与《友盟+ SDK 开发者中心》。
• 微信 OpenSDK 与微信开放平台网站应用：由深圳市腾讯计算机系统有限公司提供。仅当您主动选择微信登录或绑定微信时调用，用于判断微信客户端是否可用、唤起微信授权并接收授权结果；可能处理应用包名、微信客户端安装状态、授权状态和一次性授权码。服务端使用一次性授权码确认微信身份，并处理 openid、unionid（如微信提供）、绑定状态和必要的登录记录；中文网站与中文 Android APP 在同一微信开放平台账号下可使用 unionid 识别同一已绑定账号。AppSecret、access_token 不会写入 APP 或公开网页。微信身份不能单独创建 MCFUN 账号，未绑定微信仍需完成手机号注册与验证。详见《微信隐私保护指引》。
• Bilibili 嵌入式播放器：当您在文章中主动点击“在 APP 内播放”时，中文 Android APP 会通过受限 WebView 加载 Bilibili 官方 HTTPS 播放页面，Bilibili 可能处理视频标识、IP 地址、网络与设备环境以及播放交互信息；未点击播放时不会主动加载播放器。详见《哔哩哔哩隐私政策》。
• AI 内容与图片审核服务商：当后台为社区文字审核或相应图片上传场景启用 AI 审核时，我们会将完成审核所必需的标题、正文、社区子分类，或经预处理的低清晰度图片副本，以及必要的请求参数，发送至后台当时配置的 AI 模型接口。服务商可能据此返回通过、拒绝或需人工复核的建议。我们仅将这些信息用于内容安全与审核，不用于广告画像；具体服务商会随后台配置变化，并应按我们与其约定及其隐私规则处理信息。您可以就对自身权益有重大影响的自动化审核结果联系我们要求说明或人工复核。
• 为完成短信验证码发送与校验、支付、统计分析、崩溃排查、内容分发、对象存储、消息提醒送达或基础设施安全而与必要的第三方服务商协作。
• 为遵守法律法规、司法要求、行政命令，或为保护用户、公众、平台及相关权利人的合法权益。

部分服务器、资源或文章会包含第三方下载链接、跳转链接或外部网站地址。这些第三方网站和服务拥有各自独立的隐私政策与数据处理规则，我们无法控制其行为，建议您在访问或下载前自行审阅相关条款。

7. 数据保存期限

我们会在实现本政策所述目的所必需的期限内保存信息，并结合账号状态、内容展示需求、故障排查、安全审计、纠纷处理及法律义务确定具体保存期限。

未通过或等待复核的文章、社区内容、图片、审核结论、审核原因与必要日志可能不会公开显示，但会在内容复核、申诉处理、安全审计、纠纷处置及履行法律义务所必要的期限内继续保存。

当相关信息不再需要时，我们会在合理期限内删除、匿名化处理，或按法律允许的方式进行归档。

8. 数据安全

我们会采取合理的管理、技术与访问控制措施保护信息安全，例如权限隔离、日志审计、基础安全加固、密码加密存储、缓存隔离与异常行为监测。

但互联网传输和电子存储无法保证绝对安全。请您同时妥善保管账号密码、验证码与设备访问权限，并在发现异常时及时联系我们。

9. 儿童与未成年人隐私保护

如果您是未成年人，请在监护人的指导下阅读并使用我们的服务。对于法律要求需要监护人同意的功能，您应在取得相应授权后再进行操作。

不满十四周岁未成年人的个人信息依法属于敏感个人信息。如果涉及儿童个人信息，我们会在适用法律法规、监护人授权或其他合法基础允许的范围内进行处理，并尽量采取更严格的访问控制和最小必要使用原则。

如果监护人认为未成年人在未经适当同意的情况下向我们提供了信息，可以通过站内工单、账号删除入口或本政策列明的联系渠道与我们联系，我们会在核实后协助处理。

10. 您的权利与选择

• 您可以根据产品支持情况访问、修改或删除自己的账号资料、公开内容和部分历史记录。
• 如果自动化文字或图片审核结果对您的内容发布或图片展示产生重大影响，您可以通过站内工单或本政策列明的联系渠道要求说明、提出异议或申请人工复核。
• 您可以通过退出登录、清除 Cookie、本地缓存或卸载 APP 来停止部分本地数据处理。
• 对于无法自行处理的隐私请求，例如账号删除、投诉、版权通知、通知提醒关闭协助或数据更正，您可以通过站内工单、账号删除入口或本政策列明的联系渠道提交申请。

中文网页端账号注销流程：登录账号后，可访问 /account-deletion 或进入 /dashboard/profile 的“危险操作：删除账号”区域，勾选确认项、输入确认内容“删除我的账号”、填写当前密码，并按需选择是否同时删除账号关联数据后提交申请。

中文 APP 账号注销流程：当前中文 APP 与中文网页端使用同一账号体系。若您在中文 APP 中注册或登录了账号，请使用同一账号按照上述中文网页端流程提交注销申请；注销完成后，中文 APP 中对应账号的登录状态、收藏、互动与相关访问权限会同步失效或按本政策所述规则处理。

11. 政策更新

我们可能根据产品迭代、功能变化、法律要求或运营需要更新本隐私政策。当前版本发布、更新并生效于 2026 年 8 月 26 日，已在原有信息类别和未成年人保护条目中，以加粗、增大字号、醒目颜色和下划线突出麦块迷 APP 可能处理的个人敏感信息及高风险信息；此前关于社区发布、图片处理、AI 审核和人工复核等规则继续有效。更新后的版本会发布在本页面，并以页面标注的更新日期为准；如处理目的、方式或个人信息种类发生实质变化，我们会在中文 Android APP 中重新征得您的同意。

12. 联系我们

开发者主体：武汉极客互维网络科技有限公司。隐私请求、投诉举报、内容下架或未成年人信息保护相关申请，已登录用户可通过 /dashboard/ticket_create 提交站内工单。账号删除与账号关联数据处理申请，可通过 /account-deletion 或 /dashboard/profile 提交。您也可以发送邮件至 kejipan@qq.com 联系我们。我们通常会在收到申请后的 15 个工作日内完成核查和处理，法律法规另有要求的除外。

1. Scope

This Privacy Policy applies to MCFUN and its related online services, including the Chinese website MCFUN, the English web experience MCFUN-CC, the Chinese Android app 麦块迷, the English Android app MCFUN, the English iOS app MCFUN, public APIs, download redirect pages, account systems, comments, feedback, content submissions, notifications, campaign pages, and the backend support services directly related to those features.

By visiting the website, installing or using an app, submitting server or resource information, opening download links, signing in, sending feedback, or otherwise interacting with our services, you acknowledge that you have read and understood this policy.

Website and app developer notice: Wuhan Geek Interweave Network Technology Co., Ltd. is the developer and operating entity of the MCFUN website and apps.

2. Information We May Collect and Process

Depending on the features you use, we may process the following categories of information:

• Account and identity information, such as username, phone number, email address, and encrypted password credentials, login status, avatar, and any other profile details you choose to submit.
• Phone and SMS verification information when you choose phone sign-in or registration, SMS-code sign-in, password recovery or reset, or phone-number binding or changes, including the phone number, SMS verification code, and verification result and related operation logs.
• WeChat sign-in and binding information when you actively choose WeChat sign-in or binding in the Chinese website or the Chinese Android app 麦块迷. WeChat may provide a one-time authorization code; our server exchanges it for an openid, unionid when provided by WeChat, and authorization result to confirm your WeChat identity, maintain the account binding, and complete sign-in. A WeChat identity already bound to an account with a verified phone number can sign in directly. We do not create an MCFUN account from a WeChat identity alone: an unbound WeChat identity must complete phone registration and verification before an account can be created and bound. When the Chinese website and Chinese Android app receive the same unionid under the same WeChat Open Platform account, we use it only to recognize the same bound MCFUN account across those services. We do not collect WeChat contacts, chat messages, or Moments content for this feature. AppSecret and access tokens remain on our server and are never written into the app or a public web page.
• Content and submission information, such as server names, IP addresses, ports, versions, descriptions, article or community subcategories, titles, body text, cover images, screenshots, download links, comments, tickets, reports, feedback, search terms, and other content you publish or edit. Article and community submissions may contain up to six cover images. We also process image order, text and image moderation decisions and reasons, review status, and each image's public-visibility status.
• Device and log information, such as IP address, browser type, operating system, app version, device language, access time, crash logs, error logs, page paths, referrers, and baseline performance metrics.
• Umeng analytics, operational-analysis, and push information for the Chinese Android app 麦块迷. Before you read and accept this policy, the app does not call Umeng pre-initialization or formal-initialization interfaces and does not collect or report personal information through the SDK. Initialization occurs only after you accept. Depending on the operating-system version, permission state, and actual availability, the SDKs may then process device brand and model, operating-system and app version, package name, distribution channel, device language, time zone, network type and IP address, device identifiers such as IMEI, MAC address, Android ID, OpenUDID, GUID, OAID, advertising ID, and SIM-card IMSI, app launches and usage duration, page and feature events, push-device identifiers and notification delivery, display, and click records. IDFA applies only to iOS devices and is not processed by this Android app. These data support product analytics, service improvement, install and uninstall trend analysis, anti-fraud, and message delivery. The app does not request precise location, contacts, call-log, SMS, or phone-number permissions for these Umeng features.
• Transaction and entitlement information, such as order numbers, payment status, product type, expiration time, and support records when you use premium, sponsorship, paid, or redeemed features. Sensitive payment card data is generally processed by third-party payment providers rather than stored by us.
• Cookie and local storage information, such as login sessions, language preferences, security identifiers, performance cache markers, and local storage needed for core site functions.

3. How We Use Information

• To provide, maintain, and improve websites, apps, APIs, search, downloads, recommendations, accounts, publishing tools, moderation tools, and support features.
• To convert, store, and perform necessary automated or human safety review on article and community titles, body text, and images you submit. Uploaded images are converted to WebP on our server. Text review determines whether content is public, pending, or not published, while image review separately determines whether each image may be displayed publicly.
• To detect and handle spam, fraud, abuse, malicious traffic, unauthorized access, and other security risks.
• To preserve your preferences and improve loading speed, search quality, recommendation quality, and cross-platform consistency.
• To use the camera only when you actively start QR scanning in 麦块迷 and to generate cover, summary, and QR-code share images locally on your device. Camera frames and generated share images are not uploaded to our server by these features.
• For the Chinese Android app 麦块迷, to analyze launches, active use, pages and feature events, evaluate install and uninstall trends, detect abnormal or fraudulent traffic, and deliver requested notifications.
• To respond to your tickets, questions, complaints, reports, correction requests, copyright notices, and other support needs.
• To perform analytics, troubleshooting, product iteration, and service optimization where permitted by law and needed for platform operations.

3.1 SDK Processing Rules and Sensitive-Information Boundaries

The Chinese Android app 麦块迷 integrates third-party SDKs only to support the corresponding features. Before you read and accept this policy, the app does not initialize Umeng analytics and push, Pangle / GroMore advertising, or GDT advertising SDKs and does not collect or report personal information through them. These SDKs are initialized only after you accept and then process necessary information as described in this policy. If you decline, the app does not initialize these SDKs and exits. Their providers, functions, information categories, purposes, methods, use scenarios, and privacy-policy links are listed in the Information Sharing and Third-Party Services section below.

Contacts: 麦块迷 does not request contacts permissions and does not read, store, or upload your system contacts.

Device SMS: 麦块迷 does not request permissions to read, receive, or send device SMS and does not read SMS message content. Phone registration, sign-in, password recovery, and account-security features process only the phone number and verification code you actively enter, the verification result, and necessary operation logs. Verification messages are sent by an SMS service provider commissioned by our server.

Call logs: 麦块迷 does not request call-log permissions and does not read, store, or upload your call history.

Camera and photo selection: 麦块迷 requests camera access only after you actively tap Scan in the side menu and approve the system permission prompt. QR-code frames are processed in real time on the device, are not saved as photos, and are not uploaded to our server. You can revoke camera permission at any time in system settings. Avatar, article or community cover, resource-image, and screenshot uploads use the system file or photo picker only after your action. Only files you explicitly select are uploaded to our server for conversion, storage, and necessary review; other unselected photos are not read by this process.

If a future feature genuinely requires any of the information or permissions above, we will update this policy, explain the specific purpose and scenario, and separately request your consent before access. The permission will not be enabled without your active authorization.

4. Servers, Resources, Articles, and User-Submitted Content

If you submit servers, resources, articles, comments, screenshots, cover images, download information, or other public content, that content may be displayed on the website, apps, APIs, or search results for other users to browse, search, save, or access.

Signed-in users may publish content to the community and its subcategories. Article and community submissions may include up to six reorderable cover images. Original image files are uploaded to our server and then automatically converted to WebP for storage and display.

Community titles, body text, and subcategory information may be reviewed through a configured human workflow or AI model. The result may cause content to be published, held for human review, or not published. Review processing includes the submitted title, body text, community subcategory, and necessary request and audit records.

Each uploaded image is reviewed independently. An image that fails review or requires further review is not displayed publicly, but an article whose text passes review may still be published with other approved images. Image review alone does not change the article's text-review result.

Please do not include identity numbers, bank account details, private home addresses, private contact information, unauthorized third-party data, or any other information that should not be publicly disclosed. You are responsible for ensuring that you have the rights to the content you submit and for the consequences of making it public.

5. Cookies, Caching, and Similar Technologies

We use cookies, local storage, session identifiers, Redis page caching, and similar technologies to maintain login sessions, preserve preferences, improve page delivery, rate limit abnormal requests, and support essential site functions.

Redis cache is used only to accelerate page delivery and reduce latency. Business data remains sourced from MySQL and necessary local server files.

You can limit cookies through your browser or system settings, but some website or app features may stop working correctly. For more details, please review our Cookie Policy.

6. Information Sharing, Third-Party Services, and Download Redirects

We do not sell your personal information except in the limited situations described below:

• When you give explicit consent or intentionally choose to share information.
• Umeng Mobile Analytics SDK, Compliance Assistant SDK, and Message Push SDK, provided by Umeng Tongxin (Beijing) Technology Co., Ltd., are used only by the Chinese Android app 麦块迷 for U-App analytics and operational analysis, install and uninstall trend analysis, anti-fraud, and U-Push message delivery. Before you read and accept this policy, the app does not call the SDK’s pre-initialization or formal-initialization interfaces and does not collect or report personal information through it. Pre-initialization, formal initialization, and subsequent information processing occur only after you accept. Depending on the operating-system version, permission state, and actual availability, the SDKs may then process device brand and model, operating-system and app version, package name, distribution channel, device language, time zone, network type and IP address, IMEI, MAC address, Android ID, OpenUDID, GUID, OAID, advertising ID, SIM-card IMSI, app launches and usage duration, page and feature events, push-device identifiers, and notification delivery, display, and click records. IDFA applies only to iOS devices and is not processed by this Android app. If you decline, the app does not initialize the SDK and exits. See the Umeng+ Privacy Policy and Umeng+ SDK Developer Center.
• WeChat OpenSDK and the WeChat Open Platform website application, provided by Tencent. They are used only when you actively choose WeChat sign-in or binding, to check WeChat-client availability, open the authorization flow, and receive the authorization result. They may process the application package name, WeChat-client installation status, authorization status, and one-time authorization code. Our server processes the resulting openid, unionid when provided by WeChat, binding status, and necessary sign-in records to identify a bound account; the Chinese website and Chinese Android app may use the same unionid under the same WeChat Open Platform account to recognize the same bound account. A WeChat identity cannot create an MCFUN account on its own and an unbound identity must complete phone registration and verification. AppSecret and access tokens are not written into the app or a public web page. See the WeChat Privacy Protection Guide.
• AI content and image moderation providers. When an AI review model is enabled for community text or a supported image-upload scenario, we send only what is necessary for review to the AI model endpoint configured at that time: the title, body text, community subcategory, or a preprocessed low-detail copy of an image, plus necessary request parameters. The provider may return an approve, reject, or human-review recommendation. We use this information only for content safety and moderation, not advertising profiles. The specific provider may change with our backend configuration and must process information under our agreement with it and its applicable privacy terms. You may contact us for an explanation or human review of an automated result that materially affects your rights.
• When we work with necessary service providers for payments, notifications, analytics, crash diagnostics, content delivery, object storage, or infrastructure security.
• When disclosure is required to comply with law, legal process, government requests, or to protect users, the public, the platform, or rightsholders.

Some servers, resources, or articles include third-party download links, redirects, or external websites. Those third parties operate under their own privacy rules and processing practices, which we do not control. Please review their terms before visiting, downloading, or installing anything.

7. Data Retention

We retain information for as long as needed to fulfill the purposes described in this policy, taking into account account status, public content display needs, troubleshooting, security review, dispute handling, and legal obligations.

Articles, community content, images, moderation decisions and reasons, and necessary logs that fail or await review may remain non-public but be retained for as long as needed for re-review, appeals, security audits, dispute handling, and legal obligations.

When information is no longer necessary, we will delete it, anonymize it, or archive it in a lawful manner within a reasonable period.

8. Data Security

We use reasonable administrative, technical, and access-control safeguards to help protect information, including permission isolation, audit logging, baseline infrastructure hardening, encrypted password storage, cache isolation, and abnormal behavior monitoring.

However, no internet transmission or electronic storage method can be guaranteed to be absolutely secure. Please also protect your account password, verification codes, and device access, and contact us promptly if you notice suspicious activity.

9. Children and Minors

If you are a minor, please use our services under the guidance of a parent or legal guardian. Where the law requires guardian consent for a feature or action, you should obtain that consent before proceeding.

Personal information of children under 14 is sensitive personal information under applicable Chinese law. We process children's personal information only where permitted by applicable law, guardian authorization, or another lawful basis, using stricter access controls and data minimization where appropriate.

If a parent or guardian believes that a minor provided information to us without appropriate authorization, they may contact us through the official contact channels published on the website and we will assist after verification.

10. Your Rights and Choices

• You may be able to access, update, or delete your account details, public submissions, and parts of your history depending on product support and feature availability.
• If an automated text or image moderation result materially affects publication of your content or display of an image, you may request an explanation, object, or ask for human review through a support ticket or the contact methods in this policy.
• You can stop certain local processing by signing out, clearing cookies or local cache, or uninstalling the app.
• For requests that cannot be completed directly by self-service, such as account deletion, complaints, copyright notices, or data correction, please contact us through the official channels published on the website.

11. Policy Updates

We may update this Privacy Policy to reflect product changes, legal requirements, or operational needs. This version was published, updated, and became effective on August 26, 2026. It uses bold text, larger type, a prominent color, and underlining within the existing information-category and child-protection entries to highlight sensitive and elevated-risk information that 麦块迷 may process. The existing rules on community publishing, image processing, AI moderation, and human review remain effective. The latest version will always be posted on this page and identified by the updated date; the Chinese Android app will request consent again when the purposes, methods, or categories of personal information materially change.

12. Contact

If you have questions about this Privacy Policy, personal information handling, takedown requests, or other privacy matters, please contact us through the official contact channels published on the website.