Privacy Policy

Last Updated: October 22, 2026

Preface

Hebei Jianyou Technology Co., Ltd. (hereinafter "we", "us" or the "Company") solemnly undertakes to protect the personal information and privacy of users (hereinafter "users" or "you") of the products and services of Heart of Blaze (collectively, the "Services").

This Privacy Policy covers all personal information collected through our Services, including personal data obtained via Google OAuth sign-in.

When you use the Services, we may collect and use your personal information. Through this Heart of Blaze Privacy Policy (this "Policy"), we explain the rules that apply when we collect and use your personal information, so as to better protect your rights and interests.

Important Notice

This Policy applies to all Services we provide. When you use any individual service, you agree to be protected by this Policy together with the specific privacy terms set out for that service (the "Specific Terms"), in which case the Specific Terms and this Policy both apply to you. Users under the age of 14 are also subject to this Policy and the Rules on the Protection of Children's Personal Information and Guardian Notice. Where the Specific Terms and this Policy contain inconsistent provisions on the same matter, the Specific Terms shall prevail within their scope. Where a particular service does not apply this Policy, that service will expressly state the exclusion in an appropriate manner.

Before using any of the Services, please read this Policy carefully and understand it thoroughly, especially the clauses marked in bold, which you should read with particular attention. Please start using the Services only after you have fully understood and agreed to this Policy. If you do not agree with this Policy, the Services may not operate normally, or may not achieve the results we intend, and you should immediately stop accessing or using the Services.

After reading this Policy, if you have any questions about this Policy or related matters, you may contact us through the channels listed in the "How to Contact Us" section of this Policy, and we will respond as soon as possible.

This Policy will help you understand the following:

  • How we collect and use personal information
  • How we use cookies or similar technologies
  • Personal information we may share, transfer and disclose
  • How we store and protect personal information
  • How you manage your personal information
  • Third-party services
  • Protection of minors
  • Amendments and notices
  • How to contact us
  • Handling Google User Data (Google OAuth Login)

1. How We Collect and Use Personal Information

We collect your personal information mainly so that you and other users can use the Services more easily and satisfactorily. Our goal is to provide all internet users with a safe, interesting and instructive online experience, and this information helps us achieve that goal.

(1) How we obtain your personal information

We collect and obtain your personal information through the following channels:

  • 1. Information you provide. For example: (a) information you provide to us when you register an account for, or use, the Services; (b) information you share with third parties through the Services, and information you store while using the Services.
  • Please note that if you disclose your information in public areas visible to other users of the Services, or in your responses to information uploaded or published by others, that information may be collected and used by others. If you find that others are improperly collecting or using your information, you may contact us through the channels listed in the "How to Contact Us" section of this Policy.
  • 2. Information shared with us by third parties, i.e. shared information about you provided by third parties when they use the Services.
  • 3. Information we obtain about you, i.e. information we collect, aggregate and record when you use the Services, such as log information, location information and device information.

(2) Purposes and types of personal information

Please note that because we offer a range of products and services with different content, the relevant business functions (including the types of personal information they collect) may differ depending on the product or service you choose. Please refer to the product or service you actually use. You also understand and agree that we continuously improve our products and services; as they are iterated, expanded and upgraded, we may launch new services or business functions or re-divide existing functions, and may need to collect new personal information or change the purpose or manner of use of personal information. If we intend to use your personal information for purposes not stated in this Policy, or to collect additional personal information not mentioned here, we will obtain your consent separately through page prompts, interaction flows, website announcements or other methods in accordance with the law. During this process you may contact us through the channels listed in the "How to Contact Us" section, and we will respond as soon as possible.

1. Helping you register and sign in

To provide you with continuous and stable services and to protect the security of your use of the Services, we need you to provide basic registration or sign-in information, including your mobile phone number and email address, and to create your account, username and password. For some individual services, if you only need basic functions such as browsing and searching, you do not need to register as a user or provide the above information.

You may also fill in or supplement additional information during registration, sign-in or later use (for example, your nickname, avatar, gender, place of origin, occupation, education, date of birth and interests), which helps us provide you with a better service experience. If you do not provide this information, it will not affect your use of the basic functions of the Services.

2. Identity verification (where applicable)

Where required by laws, regulations or regulatory requirements, or where necessary for real-name verification, system and service security, or other specific service functions, we may need you to provide real identity information (such as name, ID card, passport, driving licence or household register), biometric information (static or dynamic) and other identity information to complete identity verification. If you do not provide the above information, we will not be able to provide the relevant functions and services.

For the purpose of identity verification, you agree and authorise us to provide, query and verify the above identity information with identity verification institutions (such as personal credit agencies and government departments), either ourselves or through third parties.

Please note that identity information and biometric information are sensitive personal information; please provide them with caution. If you refuse to provide them, you may not be able to obtain the relevant services, but this will not affect the normal use of other functions and services.

3. Keeping basic functions running

When you use the Services, in order to provide basic functions such as browsing and searching, identify abnormal account status, understand product compatibility, ensure the network and operational security of the Services, and maintain the normal operation of those basic functions, we may directly or indirectly collect and store information about the services you use and the way you use them, and associate such information. This information includes:

  • (a) Log information: when you use our services (including in the background), we may automatically collect details of your use of our services and keep them as network logs, such as your login account, search queries, installed applications, IP address, browser type, telecommunications carrier, network environment, language used, date and time of access, browsing history, push notification open records, dwell time, refresh records, posting records, follows, subscriptions, favourites and shares.
  • (b) Device information: when you use our services (including in the background), we may receive and record information about the device you use, such as device model, manufacturer, operating system and version, client version, screen resolution, running memory, device settings, device identifiers (such as Android ID, IDFA, IDFV, OAID, GUID and device serial number), network information (network type and status, Wi-Fi status), hardware and software characteristics, user agent, and information about the device's location (such as IP address, GPS location, and Wi-Fi access points and cell towers that can provide such information). To collect this basic device information, we will request permission to access your device information. We collect this information to provide our basic services and functions; if you refuse to grant such permission, you may be unable to use the Services.
  • (c) Storage information: when you use our services (including in the background), we may read and modify content on your storage card, for example to save screenshots, save data and caches, save media content and files within the application, and read application data cached locally on your device (including images, media content and files).
  • (d) System settings: when you use our services (including in the background), after obtaining your authorisation we may change the necessary settings for the operation of certain functions, such as allowing notifications, allowing storage, and allowing display over other applications.

Please note that device information and log information alone cannot identify a specific natural person. If we combine such non-personal information with other information to identify a specific natural person, or use it together with personal information, it will be treated as personal information during the period of combined use. Unless we have your authorisation or otherwise required by laws and regulations, we will anonymise and de-identify such personal information, and it will be processed and protected as your personal information in accordance with this Policy during that period.

4. Providing interaction and publishing services

When you upload or publish information and engage in related interactions through the Services (for example, posting comments, replying to comments, upvoting, liking articles, publishing status updates, sharing, saving or tipping), we will collect the information you upload, publish or generate, and use your nickname, avatar and published content for display.

Please note that information you publish publicly may contain your personal information or sensitive personal information; please consider carefully before publishing. If the information you publish involves the personal information of others, you must obtain their consent before publishing.

5. Ordering, payment and delivery

  • (a) When you order specific goods or services through the Services, we will generate an order for those goods or services for you through the system. In the ordering process you must at least provide the recipient's personal identity information, name, delivery address, postal code, recipient and contact telephone number, and payment status information. If you refuse to provide such information, we will not be able to complete the relevant delivery service. If you order goods or services for another person through the Services, you need to provide the above information about that actual subscriber, and you must ensure that you have obtained their authorisation and consent before doing so.
  • (b) To display your account's transaction information and ensure transaction security, we will collect information generated during your use of the Services (for example, the goods or services you purchased, the specific order number, order creation time and transaction amount) for display and to help you manage your orders.
  • (c) To complete order payment, deliver goods or services, confirm transaction status, and provide after-sales and dispute resolution services, we will collect your account, order, transaction, payment and logistics information related to transaction progress from the counterparties, payment institutions and logistics companies you selected for the transaction, or share your transaction information with those service providers.

6. Customer service and user response functions

When you contact our customer service or use other user response functions (for example, submitting in-sale or after-sale requests, personal information protection complaints or suggestions, or other customer complaints and requests), we may need you to provide the necessary personal information to match and verify your identity, so as to protect the security of your account and our systems. We may also keep your contact details (those you use when contacting us or otherwise voluntarily provide), your communication and call records and content with us, and other necessary information related to your request, in order to contact you, help resolve your issue, or record how the issue was handled and the outcome.

7. Personal information collected indirectly

Depending on the Services you choose to use, we may obtain relevant information that you have authorised to be shared from affiliates and third-party partners. For example, when you sign in to the Services using an account of a third-party platform, we will obtain, based on your authorisation, relevant information under that third-party account (including username, nickname and avatar, as determined by the scope of your authorisation), and, after you agree to this Policy, bind that third-party account to your account so that you can sign in and use the Services directly through the third-party account. We will collect and use this information in compliance with applicable laws and regulations, in accordance with our agreements with affiliates or third-party partners, and on the premise that we are satisfied that the information was obtained from lawful sources.

8. Providing security safeguards

To improve the security of the services provided by us and our partners, protect the personal and property safety of you, other users or the public from harm, better prevent security risks such as phishing websites, fraud, network vulnerabilities, computer viruses, network attacks and network intrusions, and more accurately identify violations of laws and regulations or of the agreements and rules relating to the Services, we may collect, use or integrate your account information, transaction information, device information, log information, and information lawfully shared by our affiliates and partners with your authorisation, in order to comprehensively assess account and transaction risks, perform identity verification, detect and prevent security incidents, and take necessary recording, auditing, analysis and handling measures in accordance with the law.

9. Device permissions

You understand and agree that some individual services may require you to enable specific access permissions on your device in order to collect and use the information involved. For example:

  • (a) after you enable the storage permission, you allow us to access your storage space so that you can download and save content, or enable related services through caching;
  • (b) after you enable the device information permission, you allow us to obtain your device information as a unique identifier, so as to provide page display, understand product compatibility, identify abnormal status and ensure the network and operational security of the Services;
  • (c) after you enable the photo album and/or camera permission, you can upload or take photos, images and videos to publish information and comments, live stream, or communicate with customer service and provide evidence;
  • (d) after you enable the contacts permission, we can obtain your contacts' information in order to provide friend status queries, invite your friends to use the Services, and share content or products with people you know;
  • (e) after you enable the microphone and related voice permissions, you can use voice functions to interact with our products and others, or contact customer service;
  • (f) after you enable the location permission, we can obtain your location information so that you can interact with nearby friends;
  • (g) after you enable permission for us to read or write your calendar, we can obtain your schedule so as to provide recording, appointment and reminder functions.

Most mobile devices support you in turning off these permissions; please refer to your device provider or manufacturer for the specific method. Please note that enabling any permission means you authorise us to collect and use the relevant information to provide the corresponding service, and closing any permission means you withdraw that authorisation: we will no longer collect or use the relevant information on the basis of that permission, and will not be able to provide the service corresponding to that permission. However, your decision to close a permission will not affect information collection and use carried out previously on the basis of your authorisation.

10. Exceptions where authorisation is not required

Under applicable laws and regulations, we may collect your information without your authorisation or consent in the following circumstances:

  • directly related to national security or national defence security;
  • directly related to public security, public health or major public interests;
  • directly related to criminal investigation, prosecution, trial, enforcement of judgments and similar proceedings;
  • necessary to protect the life, property or other major lawful rights and interests of you or another individual where it is difficult to obtain the individual's consent;
  • the personal information collected has been made public by you yourself;
  • necessary for entering into or performing a contract at your request;
  • collected from lawfully disclosed information, such as lawful news reports or government information disclosure;
  • necessary for lawful news reporting;
  • other circumstances provided by laws and regulations.

11. Note on sensitive personal information

Sensitive personal information means personal information that, if leaked or illegally used, is likely to harm a natural person's human dignity, or endanger personal or property safety. The information you provide or we collect may include sensitive personal information, such as identity card numbers, biometric information (static or dynamic), bank account numbers, communication records and content, property information, movement tracking, accommodation information and transaction information. Please handle sensitive personal information with care. You agree that we may process your sensitive personal information for the purposes and in the manner described in this Policy.

2. How We Use Cookies or Similar Technologies

We or our partners may obtain and use your information through cookies or similar technologies and store that information as log information.

Cookies provide users with a simple and convenient online experience. A cookie is a small amount of data that is sent from a web server to your browser and stored on your computer's hard drive. We use cookies for the benefit of our users: for example, to make the sign-in process faster, you may choose to store your username in a cookie so that signing in to the Services is quicker next time. Cookies help us determine which pages and content you connect to, how much time you spend on particular services, and which of our services you choose.

Cookies enable us to serve you better and faster and improve your experience with the Services. However, you should be able to control whether and how cookies are accepted by your browser. Please refer to the documentation supplied with your browser for more information.

We and third-party partners may collect and use your information through cookies or similar technologies and store that information. We use our own cookies or similar technologies for the following purposes:

  • remembering your identity, for example to recognise you as a registered user, or to store your preferences and other information you provide to us;
  • analysing how you use our services, for example to understand what you do with the Services and which services are most popular.

You may refuse or manage cookies or similar technologies through your browser or user preference mechanisms. Please note that if you disable cookies or similar technologies, we may not be able to provide you with the best possible experience, and some services may not work properly.

3. Personal Information We May Share, Transfer or Disclose

(1) Sharing

We attach great importance to protecting your personal information. Except in the following circumstances, we will not share your personal information with any third party outside the Company without your separate consent:

  • Sharing necessary to provide our services or functions. In some cases we need to share your information with third parties so that our products or services can function and you can use the services you need, including: (a) sharing the corresponding order information and payment amount with third-party payment institutions that provide payment services; (b) sharing order information with third-party merchants and logistics providers; (c) sharing the materials required for real-name verification with real-name verification service providers; (d) other sharing necessary with suppliers, service providers and business partners related to our services or functions.
  • Necessary sharing with some of our partners. In order to carry out necessary and reasonable business smoothly, meet your requirements, perform our obligations or exercise our rights under the relevant user agreements or this Policy, or comply with legal requirements, we may need to share your information with some partners, including: (a) sharing log information and device information with partners that provide data services (such as data statistics and data analysis); (b) sharing statistical data on your use of our products (such as crashes and unexpected exits) with partners that provide product analysis services (such as crash analysis, network performance analysis and domain name resolution optimisation); (c) other necessary sharing with some of our partners.
  • Third-party SDKs. We do not currently integrate any third-party SDK that collects personal information. If we integrate such an SDK in the future, we will disclose the name of the SDK, the name of its provider, the purpose and functional scenario, the types of personal information processed, the processing method and a link to its privacy policy, both in this Policy and in the relevant product or service.
  • Necessary sharing with our affiliates. So that we can provide consistent services under a unified account system, make it easier for you to manage your account, and protect system and account security, your personal information may be shared as necessary between us and our affiliates, including: (a) your account-related information may be shared as necessary within our and our affiliates' products so that, after registering an account with us, you can sign in to some individual services without registering again; (b) your account information, device information and related browsing data reflecting your usage habits and preferences may be shared with our affiliates in order to provide browsing and other service experiences in our and our affiliates' products or services.
  • Other purposes described in Section 1 of this Policy, "How We Collect and Use Personal Information".
  • Performing our obligations or exercising our rights under this Policy or other agreements between you and us.
  • To the extent permitted by laws and regulations, to comply with the law and protect our, our affiliates', partners', your or other users' or the public's interests, property or safety from harm — for example, to prevent fraud and other illegal activities and reduce credit risk — we may exchange information with other companies and organisations. This does not include information sold, rented, shared or otherwise disclosed for profit in breach of the commitments made in this Policy.
  • At your lawful request or with your authorisation and consent.
  • Where provided at the lawful request of your guardian.
  • Where provided in accordance with a separate service agreement you have signed with us (including electronic agreements signed online and the corresponding platform rules) or other legal documents.
  • Where provided for academic research.
  • Where provided for social and public interests in compliance with laws and regulations.

We will share your personal information only for lawful, legitimate, necessary, specific and clearly defined purposes. With the companies, organisations and individuals with whom we share personal information, we sign strict confidentiality agreements and require them to process the information in accordance with our instructions, this Policy and any other relevant confidentiality and security measures.

(2) Transfer

  • As our business continues to develop, we may engage in mergers, acquisitions, asset transfers or similar transactions, and your information may be transferred as part of such transactions. We will require the new holder of your personal information to continue to be bound by this Policy; otherwise we will require that company or organisation to obtain your authorisation and consent again.
  • We will transfer your personal information to a third party after obtaining your explicit consent.

(3) Disclosure

We will disclose your personal information only in the following circumstances and only after adopting security protection measures that meet industry standards:

  • At your request and in the disclosure manner you have expressly agreed to, we will disclose the information you designate.
  • Where we must provide your information in accordance with legal or regulatory requirements or mandatory administrative enforcement or judicial requirements, we may disclose your information in accordance with the required type of information and manner of disclosure. To the extent permitted by laws and regulations, when we receive such a request we require the recipient to produce the corresponding legal documents, such as a subpoena or an investigation letter. We firmly believe that requests for information should be as transparent as possible within the limits permitted by law. We carefully review all requests to ensure that they have a lawful basis and are limited to data that law enforcement authorities are lawfully entitled to obtain for a specific investigative purpose.

(4) Exceptions to prior consent for sharing, transfer and disclosure

In the following circumstances, sharing, transferring or disclosing your information does not require your prior authorisation or consent:

  • directly related to national security or national defence security;
  • directly related to public security, public health or major public interests;
  • directly related to criminal investigation, prosecution, trial, enforcement of judgments and other judicial or administrative enforcement proceedings;
  • necessary to protect the life, property or other major lawful rights and interests of you or another individual where it is difficult to obtain the individual's consent;
  • information you have made public yourself;
  • information collected from lawfully disclosed sources, such as lawful news reports or government information disclosure;
  • related to our performance of obligations prescribed by laws and regulations.

Under applicable law, sharing, transferring or disclosing de-identified personal information, where the recipient cannot restore and re-identify the data subject, is not treated as external sharing, transfer or public disclosure of personal information, and we do not need to notify you separately or obtain your consent for the retention and processing of such data.

4. How We Store and Protect Personal Information

(1) Storage of personal information

Unless otherwise provided by laws, regulations or regulatory authorities, we will store your personal information only for the shortest period necessary for the purposes described in this Policy. If we terminate the services or our operations, we will promptly stop collecting your personal information, notify you in advance as required by applicable laws and regulations, and delete or anonymise your personal information after termination, unless otherwise provided by laws, regulations or regulatory authorities.

Personal information collected and generated in the course of our operations within the People's Republic of China is stored within China, except in the following circumstances:

  • where expressly provided by laws and regulations;
  • with your authorisation and consent;
  • where the Services you use involve cross-border provision and we need to provide your personal information overseas.

In the above circumstances, we will ensure compliance with national laws and regulations and the requirements of the relevant regulatory authorities, and will provide adequate protection for your personal information.

(2) Protection of personal information

We attach great importance to information security, have established a dedicated security team, and take all reasonable and practicable measures to protect your personal information:

1. Data security technical measures

We adopt security protection measures that meet industry standards, including reasonable institutional rules and security technologies, to prevent unauthorised access to, use of or modification of your personal information and to avoid data damage or loss. Our services use a variety of encryption technologies: for example, in some of the Services we use encryption technology (such as SSL) to store your personal information in encrypted form and use isolation technology to segregate it. When personal information is used — for example for display or for relational computation — we use a range of data desensitisation technologies to enhance security during use. We also use strict data access permission controls and multi-factor authentication technologies to protect personal information and prevent improper use of data.

2. Other security measures

We maintain an industry-leading data-centric data security management system built around the data lifecycle, improving the security of the entire system across organisational structure, institutional design, personnel management, product and technology. We manage and standardise the storage and use of personal information through a data classification and grading system, data security management specifications and data security development specifications. We exercise comprehensive security control over data through confidentiality agreements with personnel who have access to information, and through monitoring and auditing mechanisms. We also hold security and privacy protection training courses to strengthen employees' security awareness and their understanding of personal information protection policies and related procedures.

  • We permit only those of our employees and partners who need to know the information to access your personal information, and we have put in place strict access permission controls and monitoring mechanisms for this purpose. We also require everyone who may come into contact with your personal information to fulfil the corresponding confidentiality obligations. Failure to do so may result in legal liability or termination of the cooperation relationship with us.
  • The internet is not an absolutely secure environment, and it cannot be guaranteed that communication with other users through email, instant messaging, social software or other services is fully encrypted. We recommend that you use complex passwords when using such tools and take care to protect your information. When you communicate with third parties or purchase goods and services through the Services, you will inevitably disclose information about yourself — such as contact details or a postal address — to the counterparty or potential counterparty. Please protect your information properly and provide it to others only when necessary.
  • The internet environment is not 100% secure, and we will do our best to ensure the security of the personal information you send to us. If our physical, technical or administrative protection facilities are breached, resulting in unauthorised access to, public disclosure of, tampering with or destruction of personal information and thereby damaging your lawful rights and interests, we will bear the corresponding legal liability.
  • Handling of security incidents. To address risks such as leakage, destruction and loss of personal information, we have established a number of policies defining the classification and grading standards for security incidents and vulnerabilities and the corresponding handling procedures. We have also set up an emergency response team for security incidents, which activates security plans for different incidents in accordance with incident handling specifications, carrying out loss containment, analysis, localisation, remedial measures and, jointly with the relevant authorities, tracing and enforcement. We also organise regular internal training and emergency drills so that our staff master the corresponding emergency handling strategies and procedures.
  • In the unfortunate event of an information security incident, we will, in accordance with the requirements of laws and regulations, promptly inform you of the basic situation and possible impact of the incident, the handling measures we have taken or will take, suggestions for you to prevent and mitigate risks on your own, and remedial measures for you. We will also promptly inform you of the incident by email, letter, telephone, push notification or other means; where it is difficult to inform each data subject individually, we will publish a notice in a reasonable and effective manner. We will also proactively report the handling of the information security incident to the regulatory authorities as required.
  • Please understand that due to technical limitations and the limits of risk prevention, even though we have strengthened our security measures as far as possible, we cannot always guarantee that information is 100% secure. You should be aware that the systems and communication networks you use to access the Services may experience problems caused by circumstances beyond our control.

Please take good care of your account, password and other identity credentials. When you use the Services, we identify you by your account, password and other identity credentials. If you disclose the above information, you may suffer losses and other disadvantages. If you discover that your account, password or other identity credentials may have been, or have been, disclosed, please contact us immediately so that we can take appropriate measures in time to avoid or reduce the relevant losses.

5. How You Manage Your Personal Information

(1) Access, update and deletion

We encourage you to update and amend your personal information so that it is accurate and effective.

If you wish to access, amend or delete some of your information, please use the relevant function pages of the Services, where we provide guidance and settings for these operations. For information collected through cookies or similar technologies, we explain the choice mechanisms available to you in Section 2 of this Policy, "How We Use Cookies or Similar Technologies".

You may also contact us through the channels listed in the "How to Contact Us" section of this Policy and we will handle your request. We will use appropriate technical means or contact channels to enable you to access, update and delete your personal information or other information you provided when using the Services, unless otherwise provided by laws and regulations.

Unless otherwise provided by laws and regulations, when you correct or delete your personal information we may not immediately correct or delete the corresponding information from backup systems, but will do so when the backup is updated.

(2) Public disclosure and sharing

Many of our services allow you to share your information publicly not only with your social network but with all users of the service — for example, information you upload or publish through the Services, your responses to information uploaded or published by others, information you upload or post by email or in public areas of the Services visible to unspecified users, and the location data and log information relating to that information. As long as you do not delete information you have made public or shared, it may remain in the public domain; even if you delete shared information, it may still be independently cached, copied or stored by other users or by third parties outside our control, or retained in the public domain by other users or such third parties. If you disclose or share information through the above channels and this results in a leak of your information, we do not accept liability. We therefore remind you to consider carefully whether to disclose or share your information through these channels.

(3) Account cancellation

We provide a way for you to cancel your account. Subject to the conditions of our terms of service and applicable laws and regulations, you may submit an account cancellation request in the account settings of the Services (in-game: Settings → Account → Delete Account); cancelling an account for some individual services may require you to follow the specific instructions shown on the relevant service page. You may also contact us through the channels listed in the "How to Contact Us" section of this Policy, and we will respond as soon as possible.

After your account is cancelled, we will stop providing all or part of the Services to you and will delete your personal information or anonymise it at your request, unless otherwise provided by laws and regulations.

(4) Changing the scope of your consent

You can always choose whether to disclose personal information to us. Some personal information is necessary to use the Services, but the provision of most other information is up to you. You can change the scope of your authorisation for us to continue collecting information, or withdraw your authorisation, by deleting information, disabling device functions or cancelling your account.

After you withdraw your authorisation, we cannot continue to provide the service corresponding to that authorisation and will no longer process the relevant information. However, your decision to withdraw authorisation will not affect information processing carried out previously on the basis of your authorisation.

(5) Obtaining a copy of your personal information

If you need a copy of your personal information, you may contact us through the channels listed in the "How to Contact Us" section of this Policy. After verifying your identity, we will provide you with a copy of your personal information in our services (including basic profile information and identity information), unless otherwise provided by laws and regulations or agreed in this Policy.

(6) Responding to your requests

For security reasons, you may need to submit a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. We generally do not charge for reasonable requests, but for requests that are repeatedly made or exceed reasonable limits we may charge a reasonable cost-based fee as appropriate. We may refuse requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing new systems or fundamentally changing current practices), pose a risk to the lawful rights and interests of others, or are highly impractical (for example, involving information stored on backup tapes).

In the following circumstances we will not be able to respond to your request:

  • related to our performance of obligations prescribed by laws and regulations;
  • directly related to national security or national defence security;
  • directly related to public security, public health or major public interests;
  • directly related to criminal investigation, prosecution, trial and enforcement of judgments;
  • where we have sufficient evidence that you are acting in bad faith or abusing your rights;
  • necessary to protect the life, property or other major lawful rights and interests of you or another individual where it is difficult to obtain the individual's consent;
  • where responding to your request would seriously harm the lawful rights and interests of you, another individual or an organisation;
  • where trade secrets are involved.

6. Third-Party Services

The Services may integrate with or link to social media or other services provided by third parties (including websites and other forms of service). This includes:

  • you may use a "share" button to share certain content from the Services to a third-party service, or share third-party content within the Services. These functions may collect your information (including log information) and may place cookies on your device in order for the functions to work;
  • we may provide links through the Services that allow you to link to third-party services or websites;
  • other situations where third-party services are integrated. For example, to achieve the purposes stated in this Policy, we may integrate SDKs or similar applications provided by third-party service providers (such as embedded code or plug-ins) in order to provide you with better customer service and user experience. Third-party service providers we integrate fall mainly into the following categories: (a) message push functions, such as push notifications, event reminders and content recommendations; (b) payment-related services, such as order payment, transaction verification, revenue settlement and payment information statistics; (c) obtaining device location permission, device information and log information with your consent; (d) third-party authorisation services, such as signing in with a third-party account and sharing content to third-party products; (e) supporting product function modules, such as live streaming, video playback, voice recognition, AR, intelligent customer service and content storage; (f) optimising product performance, such as improving device networking capability, reducing server costs and hot-fixing functions; (g) account security and product hardening services, such as network monitoring, domain name resolution, anti-hijacking, anti-spam and anti-cheating, and encryption and decryption services.

Some third-party SDKs or similar applications we integrate may collect your personal information. If you use such third-party services within our services, you agree that they will directly collect and process your information. We assess the lawfulness, legitimacy and necessity of such third-party collection of personal information, require these third parties to take protective measures for your personal information, and require strict compliance with applicable laws, regulations and regulatory requirements. If you wish to understand the details of third-party SDKs integrated in a particular service, please visit the relevant service page and review the specific terms and related pages for that service. You may also contact us through the channels listed in the "How to Contact Us" section of this Policy, and we will respond as soon as possible.

The third-party social media and other services described above are operated by the relevant third parties. Your use of such third-party services (including any information you provide to them) is governed by the third party's own terms of service and privacy notices, not by this Policy, and you should read those terms carefully. This Policy applies only to personal information we collect, and does not apply to any third-party services or third-party information usage rules. If you find that these third-party services present risks, we recommend that you stop the relevant operation to protect your lawful rights and interests, and contact us promptly.

7. Protection of Minors

We recommend that any minor obtain the consent of their parents or other guardians (the "Guardian") before participating in online activities. We will protect information relating to minors in accordance with applicable national laws and regulations.

We encourage Guardians to guide minors in using the Services. If you are a minor under the age of 14, please ask your Guardian to read and accept our Rules on the Protection of Children's Personal Information and Guardian Notice together with you, and seek their consent and guidance before using the Services and submitting personal information.

8. Amendments and Notices

To provide you with better services, we may amend the terms of this Policy from time to time in light of updates to the Services and the requirements of laws and regulations; such amendments form part of this Policy. We will publish any changes to this Policy on this page. For material changes, we will also provide a more prominent notice (including website announcements, push notifications, pop-up prompts or other means). Material changes referred to in this Policy include, but are not limited to:

  • a material change in our service model, such as the purposes for which personal information is processed, the types of personal information processed, or the way personal information is used;
  • a material change in our ownership structure, such as a change of owner resulting from business restructuring, bankruptcy or merger;
  • a material change in the main recipients of personal information sharing, transfer or public disclosure;
  • a material change in your rights in relation to personal information processing or the way they are exercised;
  • a material change in the department responsible for personal information security, its contact details or the complaints channel;
  • other circumstances that are important or may materially affect your personal rights and interests.

Special Notice for Google OAuth Users: if we change how we use Google user data obtained via OAuth, we will notify you separately before such changes take effect.

Your satisfaction comes first in any amendment we make. We encourage you to review our privacy policy each time you use the Services.

9. How to Contact Us

We have established a dedicated personal information protection department and will protect your personal information in accordance with this Policy. If you have complaints or reports concerning network information security, or any questions, comments or suggestions about this Policy, our privacy practices or matters relating to your information, please contact our personal information protection officer by email at you.xiao@521qw.com, or by post to: Personal Information Protection Officer, Room 220, Commercial Building, No. 30 Haiyou Street, Yanjiao Development Zone, Sanhe City, Langfang, Hebei Province, China; postcode: 065201.

Generally, we will handle your question, comment or suggestion within fifteen working days after receiving it and verifying your identity. If you are not satisfied with our handling, you may also complain or report to the authorities responsible for personal information protection.

10. Handling Google User Data (Google OAuth Login)

This section specifically describes how our application accesses, uses, stores and shares Google user data obtained through Google OAuth 2.0 login, in compliance with the Google API Services User Data Policy and the Limited Use requirements.

10.1 What Google User Data We Access

When you choose to sign in to Heart of Blaze using your Google Account, with your explicit consent, we access and receive the following data within the scope you grant:

  • Google unique account identifier (sub / openid)
  • Your Google email address
  • Your display name
  • Your Google profile picture

We request only the minimal scopes: openid, email and profile. We do NOT request access to Google Drive, Photos, Calendar, Contacts or any other Google service data.

10.2 How We Use Google User Data

We use Google user data only for these limited purposes:

  • to create your Heart of Blaze game account and link it to your Google identity;
  • to authenticate your identity and complete secure sign-in;
  • to provide account recovery and anti-abuse / fraud prevention;
  • to respond to your customer service support requests;
  • to fulfil legal and regulatory compliance obligations.

We do NOT use Google user data for personalised advertising, marketing or profiling.

10.3 How We Store Google User Data

  • Storage location: servers located within mainland China.
  • Storage security: Google account information is encrypted at rest with industry-standard encryption and isolated separately from regular game log data.
  • Retention period: we keep your Google OAuth identity data only while your Heart of Blaze account remains active.
  • When you delete your Heart of Blaze account (Settings → Account → Delete Account), all stored Google user data linked to your account will be permanently deleted within 15 working days, except where law requires us to retain records.

10.4 Sharing or Disclosure of Google User Data

We will NOT sell, rent, trade, publish or share your Google user data with any third party, affiliate or external business partner, except:

  • where required by binding law, a court order or a mandatory government request;
  • a necessary security investigation for abuse or fraud, under confidentiality controls.

No Google user data is used for training, fine-tuning or improving general-purpose AI or machine learning models. Human staff may view this data only when required to resolve your explicit support ticket or investigate confirmed account abuse incidents.

10.5 Your Controls over Google OAuth Access

  • You may revoke this application's Google permission access at any time via https://myaccount.google.com/permissions.
  • After revocation, you can still log in to Heart of Blaze using other supported login methods.
  • You can delete your Heart of Blaze account and erase all associated Google user data by following the account cancellation process in Section 5(3).
  • This application does NOT use Google APIs to create, generate or distribute AI-generated non-consensual intimate imagery (AI NCI).

10.6 Limited Use Confirmation

Our use of all information received from Google APIs strictly adheres to the Google API Services User Data Policy and the Limited Use requirements.