隐私政策
更新日期： 2026-09-27
折纸旅图重视您的隐私。本政策适用于折纸旅图 Google Play 应用及其配套服务，说明我们处理哪些信息、用途、保存期限和您可以作出的选择。
一、适用范围与联系我们
本政策说明折纸旅图如何处理您在使用地点查询、地图、旅行记录、账号及配套网站服务时的信息。文中“我们”指折纸旅图的服务提供方。您可以随时在 App 内阅读本政策，无需联网。
有关隐私、账号或数据的咨询与请求，请发送邮件至 serendipity_beauty.@163.com。请说明需要处理的事项，并仅提供定位相关记录所需的信息，不要发送密码、验证码或完整旅行记录。
二、保存在设备上的信息
旅行计划、足迹、备注、足迹照片、地图上自建的地点、已下载地点资料和应用偏好保存在设备上，不会因注册账号而自动上传或同步。您可以在 App 内查看、修改、删除记录，以及导出或恢复备份。
照片和备份通过系统选择器读取或保存，应用只访问您选择的文件。应用关闭 Android 自动备份。清除应用数据或卸载会删除应用私有目录中的记录，但您主动导出的文件仍保留在所选位置，需要单独删除。账号头像的上传规则见下文。
三、位置、地图与在线搜索
当您使用“我的位置”或附近地点功能并授予系统权限时，应用获取大致或精确位置，用于显示位置标记和计算距离，不申请后台定位权限。您可以拒绝或在系统设置中撤回定位权限，继续使用手动浏览、地点搜索和记录管理。显示位置标记时，当前地图组件会处理该位置。
加载在线底图需要向地图服务发送浏览区域、缩放级别及 IP 等网络信息；所浏览的区域可能反映您的位置。联网和 Wi-Fi 状态权限用于判断网络状态及地图服务连接。默认底图为 OpenFreeMap，通过 MapLibre Native 显示，使用 OpenStreetMap 数据。
选择腾讯地图时，只有在您阅读说明并明确同意、配置可用 Key 后，才会启用腾讯地图 SDK。该服务处理地图区域、网络、设备、应用及诊断信息，以提供地图、鉴权、安全和故障排查；显示位置时会处理位置标记。您填写的 Key 保存在本机并发送给腾讯鉴权。应用没有集成腾讯定位 SDK。可在“我的 → 地图服务 → 腾讯地图”点击“撤回同意”，切回 OpenFreeMap。撤回不会追溯删除服务商已处理的信息。
在线地点搜索只在您主动提交时发送关键词；单纯键入文字不会发起搜索。使用 OpenFreeMap 时，关键词和网络请求信息发送给 Photon；使用腾讯时发送给腾讯地点搜索服务并附带 Key。地图上长按新建地点时，所选坐标会发送给当前地图服务（Photon 或腾讯）以获取地址；查询失败仍可手动填写，地点名称和手动修改的地址不会随逆地址查询发送。离线文物库搜索不会发送关键词。请勿在搜索框输入密码等无关个人信息。
四、账号、头像与验证邮件
注册账号是自愿的，不注册也可使用本地旅行功能。账号服务处理邮箱、密码验证信息、用户 ID 和登录会话。服务端保存加盐密码哈希，不保存明文密码。验证码用于验证邮箱或重置密码；密码重置会撤销旧登录会话。
您主动保存的昵称和头像会上传到账号服务，用于展示个人资料。头像在设备上缩小并重新编码，原始照片及其元数据不会作为头像上传。头像与仅保存在本机的足迹照片不同。
注册验证和找回密码邮件通过 Resend 发送，其处理收件邮箱、邮件内容及必要的投递信息。您的收件邮箱服务商也会处理这些邮件。
五、内容服务、统计与主动提交
应用通过配套服务获取内容目录、内容包、公告、联系信息和精选路线。下载请求及完成回执包含内容标识、版本、授权凭据和完成状态，用于提供下载、防止滥用和统计成功下载次数。
正式版在本机生成随机安装标识，向服务器发送该标识和应用版本。服务器保存标识的 SHA-256 摘要、版本和时间，用于去重统计安装。该标识不是电话号码、IMEI 或广告 ID，不随应用备份导出，与邮箱账号不绑定。当前没有单独的安装统计关闭开关。
访问在线服务时，服务器和网络基础设施处理 IP 地址、请求路径、时间、响应状态及客户端信息，用于内容传输、诊断和反滥用。
您主动提交点位或联系反馈时，我们处理您提供的地点、坐标、说明、证据、图片及选填昵称、联系邮箱，以审核资料和回复问题。审核通过的地点资料可能加入公开内容库，联系邮箱和提交编号不公开。请仅提供您有权提交的信息。
六、第三方服务与对外提供
OpenFreeMap 由 Hyperknot Software Kft. 提供，MapLibre Native 为开源地图组件，地图数据来自 OpenStreetMap。服务说明与隐私政策：https://openfreemap.org/privacy/ ；数据署名与许可：https://www.openstreetmap.org/copyright 。
腾讯地图 Android SDK 5.10.1 由深圳市腾讯计算机系统有限公司提供。SDK 的具体处理项目与条件见：https://lbs.qq.com/userAgreements/agreements/mapSDK ；腾讯地点搜索服务说明见：https://lbs.qq.com/userAgreements/agreements/privacy 。
Photon 在线搜索由 komoot 提供，服务说明：https://photon.komoot.io/ ；隐私说明：https://www.komoot.com/privacy 。Resend 邮件服务的隐私说明：https://resend.com/legal/privacy-policy 。地图、搜索及邮件服务可能涉及境外网络和数据处理，具体规则由相应服务说明约定。
您主动打开外部导航时，所选目的地名称和坐标会传给对应应用。Google Play 提供应用更新；主动访问外部网站或应用后，其按照自身规则处理数据。我们不出售个人信息，不将上述数据用于个性化广告；超出已说明范围的处理，会另行告知并在需要时征求同意。
七、保存期限与保护措施
本地旅行记录保留至您删除、清除应用数据或卸载。在线邮箱账号、密码哈希、昵称和头像保留至注销或您删除相应资料。验证码有效期为 10 分钟，会话最长为 30 天；过期认证记录由请求处理或每日维护清理。反滥用限流记录覆盖最近 24 小时，过期后清理。
自有 Play 服务的访问及诊断日志、数据库备份最长保留 30 天，通过每日轮转和到期清理执行。备份限制访问，仅用于恢复。注销后的残留备份随保存期限清除；恢复前须核对已完成的删除请求，避免重新启用已删除账号。第三方服务的保存期限以其自身说明为准。
安装标识摘要和下载统计在服务运营、去重及统计所需期间保留，目前不设置统一的自动到期日。点位提交和证据在审核、资料维护及处理争议所需期间保留；您可请求删除其中不再必要的个人信息。
自有接口使用 HTTPS，密码采用独立盐值与密码派生哈希，账号数据库及备份限制访问。我们采取合理措施保护信息，并在发生个人信息安全事件时进行处置及必要通知。
八、您的选择与删除账号
您可管理本地记录和备份、修改昵称和头像、撤回定位权限或腾讯地图同意。删除账号可在 App 的“我的 → 账号”中操作，也可使用网页入口：https://serendipity.beauty/google-play/account-delete.html 。网页支持密码重置，无需重新安装 App。
注销会从在线账号数据库删除邮箱、密码哈希、昵称、头像、登录会话及待处理验证码。本机旅行记录和已导出的备份不会随账号注销自动删除，请按需要单独清理。与账号没有关联的安装统计也不会因注销自动删除。
若无法登录、无法访问邮箱，或希望查阅、更正、复制、删除相关信息，请联系 serendipity_beauty.@163.com。我们会在必要范围内核实记录归属，并协助处理涉及服务提供商的请求。单凭邮箱无法定位与账号不关联的随机安装统计。
已公开分发的地点资料可能存在于历史安装包或其他用户设备中，不能远程抹除全部副本。因安全、争议处理或适用要求需要继续保留特定信息时，我们会说明原因并限制用途。
九、未成年人及政策更新
未成年人请在监护人指导下使用，不要在点位提交、头像或反馈中提供无关儿童信息。监护人可通过上述邮箱联系我们处理相关记录。
信息类型、用途或第三方服务发生重要变化时，我们会更新本政策并在应用内适当提示；需要重新取得同意时会重新征求。阅读本政策或网页更新本身不代表您同意新增的信息处理。
Privacy policy
Updated: 2026-09-27
Zhezhilvtu respects your privacy. This policy applies to the Google Play app and its related services and explains what information is processed, why, how long it is retained and the choices available to you.
1. Scope and contact
This policy explains how Zhezhilvtu handles information when you use place listings, maps, travel records, accounts and related website services. “We” means the service provider of Zhezhilvtu. Both language versions are available inside the app without an internet connection.
For privacy, account or data requests, email serendipity_beauty.@163.com. Describe your request and provide only the information needed to locate the relevant records. Never send passwords, verification codes or your entire travel history.
2. Information on your device
Travel plans, footprints, notes, travel photos, places you add on the map, downloaded place information and preferences stay on your device. Creating an account does not automatically upload or synchronize them. You can view, edit, delete, export and restore local records in the app.
Photos and backups use system pickers, and the app accesses the files you select. Android automatic backup is disabled. Clearing app data or uninstalling removes records in the app’s private storage, but exported files remain in their chosen location and must be deleted separately. Account avatars are described below.
3. Location, maps and online search
When you use your location or nearby places and grant system permission, the app obtains approximate or precise location to display your position and calculate distances. It does not request background location. You can refuse or revoke permission and continue browsing manually, searching places and managing records. The active map component handles your position marker.
Online maps send the viewed area, zoom level and network information such as IP address to the map provider. The viewed area may reflect your location. Network and Wi-Fi state permissions support connectivity checks and map services. The default map is OpenFreeMap, displayed through MapLibre Native using OpenStreetMap data.
Tencent Maps SDK is enabled only after you read the notice, explicitly consent and configure a usable API key. It processes map areas, network, device, app and diagnostic information for maps, authentication, security and troubleshooting, and handles your position marker when shown. Your key is stored locally and sent to Tencent for authentication. We do not integrate Tencent Location SDK. In Profile → Map service → Tencent Maps, choose Withdraw consent to switch to OpenFreeMap. Withdrawal does not erase information already processed by the provider.
Online place search sends keywords only when you submit a search, not while you type. With OpenFreeMap, the keyword and network request information go to Photon. With Tencent, they go to Tencent place search with your API key. When you long-press the map to add a place, the selected coordinates are sent to the active map service (Photon or Tencent) to obtain an address. You can enter an address if lookup fails; the place name and manually edited address are not sent with the reverse lookup. Offline library search does not transmit keywords. Do not enter unrelated personal information such as passwords.
4. Accounts, avatars and verification email
Accounts are optional for local travel features. The account service processes your email, password verification information, user ID and login sessions. We store salted password hashes, not plaintext passwords. Codes verify email ownership or reset passwords; a password reset revokes previous sessions.
Your chosen nickname and avatar are uploaded to display your profile. The avatar is resized and re-encoded on the device; the original photo and its metadata are not uploaded as the avatar. Account avatars are separate from travel photos stored only on your device.
Resend delivers registration and password-reset emails and processes the recipient email address, email content and necessary delivery information. Your email provider also processes these messages.
5. Content services, statistics and submissions
The app retrieves content catalogs, packages, announcements, contact information and featured routes. Download requests and completion receipts contain content identifiers, versions, authorization credentials and completion status to deliver content, prevent abuse and count successful downloads.
Release builds generate a random installation identifier and send it with the app version. The server stores the identifier’s SHA-256 hash, version and timestamp to count unique installations. This is not a phone number, IMEI or advertising ID; it is excluded from app exports and is not linked to your email account. There is currently no separate installation-statistics opt-out.
Servers and network infrastructure process IP addresses, request paths, timestamps, response status and client information for delivery, diagnostics and abuse prevention.
When you voluntarily submit places or feedback, we process the place details, coordinates, descriptions, evidence, images and optional nickname/contact email you provide to review information and respond. Approved place information may enter the public catalog. Contact email and submission IDs are not published. Submit only information you have permission to provide.
6. Third-party services and disclosure
OpenFreeMap is provided by Hyperknot Software Kft.; MapLibre Native is an open-source map component and map data comes from OpenStreetMap. Privacy: https://openfreemap.org/privacy/ . Attribution and licensing: https://www.openstreetmap.org/copyright .
Tencent Maps Android SDK 5.10.1 is provided by Shenzhen Tencent Computer Systems Co., Ltd. Details and conditions of SDK processing: https://lbs.qq.com/userAgreements/agreements/mapSDK . Tencent place-search privacy: https://lbs.qq.com/userAgreements/agreements/privacy .
Photon online search is provided by komoot: https://photon.komoot.io/ ; privacy information: https://www.komoot.com/privacy . Resend email privacy: https://resend.com/legal/privacy-policy . Map, search and email services may involve international networks and data processing, subject to their respective policies.
When you choose external navigation, the destination name and coordinates are passed to the selected app. Google Play provides app updates. External websites and apps follow their own policies. We do not sell personal information or use the information described here for personalized advertising. Processing beyond the disclosed scope will be explained separately, with consent requested where needed.
7. Retention and safeguards
Local travel records remain until you delete them, clear app data or uninstall. Account email, password hash, nickname and avatar remain until account deletion or removal of the relevant profile field. Codes last 10 minutes and sessions up to 30 days. Expired authentication records are removed during request processing or daily maintenance. Abuse-limit records cover 24 hours and are cleaned after expiry.
Our Play service access and diagnostic logs and database backups are retained for no more than 30 days through daily rotation and expiry cleanup. Backups are access-restricted and used only for recovery. Residual deleted-account information expires with backups. Completed deletion requests must be reconciled before restoration to avoid reactivating deleted accounts. Third-party retention follows each provider’s own policy.
Installation identifier hashes and download statistics remain as needed to operate the service, deduplicate counts and maintain statistics, without a uniform automatic expiry. Place submissions and evidence remain as needed for review, maintaining information and resolving disputes. You may request removal of unnecessary personal information.
Our APIs use HTTPS, passwords use independently salted password-derived hashes, and account databases and backups have restricted access. We take reasonable protective measures and respond to personal-information incidents with appropriate action and notices.
8. Your choices and account deletion
You can manage local records and exports, edit your nickname/avatar, and revoke location permission or Tencent Maps consent. Delete your account in Profile → Account, or use https://serendipity.beauty/google-play/account-delete.html . The webpage includes password recovery without reinstalling the app.
Deletion removes your email, password hash, nickname, avatar, sessions and pending codes from the live account database. It does not automatically erase local travel records or exported backups; delete those separately as needed. Unrelated installation statistics are not automatically removed by account deletion.
If you cannot log in or access your email, or wish to access, correct, copy or delete information, contact serendipity_beauty.@163.com. We verify ownership only as necessary and assist with requests involving service providers. An email alone cannot locate random installation statistics that are not linked to an account.
Previously distributed place information may remain in old app packages or other users’ devices and cannot all be remotely erased. If specific information must remain for security, disputes or applicable requirements, we explain the reason and restrict its use.
9. Minors and policy changes
Minors should use the app with guardian guidance. Do not include unrelated children’s information in place submissions, avatars or feedback. Guardians may contact us at the email above about relevant records.
We will update this policy and provide appropriate in-app notice when information types, purposes or providers materially change. Where renewed consent is needed, we will request it. Reading this policy or a webpage update does not itself constitute consent to new processing.