Privacy Policy / 隐私政策
Last updated / 更新日期：2026-09-11
Developer / 开发者：何宇涛
Privacy contact / 隐私联系邮箱：brooklyn509@hotmail.com
Privacy Policy
This policy describes how COLADRAMA (可乐剧场), provided by 何宇涛, processes information when you use our Android application (package com.movie.shaweng.coladrama) and related COLADRAMA websites. Contact us at brooklyn509@hotmail.com about privacy, access, correction or deletion.
1. Information we process
- Account and installation identifiers. The current Android client creates a random installation identifier and sends it to our server to establish a device account. We process account identifiers, session credentials, account-transfer information and language settings to recognise your account, protect access and associate your membership and history. A device account is still an account even if you do not enter a name or email.
- Device and network information. Requests include IP address and user-agent information. We process device model, operating system and browser/WebView versions, app version, language and time zone for compatibility, security and service analysis. Country or region may be supplied by our network infrastructure from the connection; it is approximate, not precise GPS location.
- Viewing and activity. We record the dramas and episodes you play, playback progress and times, favourites, likes, chosen interests, searches, page and button interactions, and notification interactions. These support viewing history, resume playback, recommendations, service operation and statistics.
- Purchases and subscriptions. We process product and plan identifiers, purchase tokens, order references, amount and currency, transaction times, payment and subscription status, renewals, refunds and membership expiry. Google Play processes Android payments. The current client does not ask you to give us your full card number, card security code or Google password. Google Play sends purchase and subscription updates to our server so we can verify and maintain your access.
- Support and diagnostics. When you contact us, we process your message, subject, optional contact details and related account, drama or order information. Playback diagnostics can include the episode, error, source type, playback position, player version and network type. Do not send passwords, complete card details, private keys or purchase tokens in support messages.
- Referrals and campaign information. We process invitation/share tokens, referring campaigns, link parameters and click identifiers when provided. They support attribution and the inviter's assigned library, paywall and language experience, as well as promotion analysis.
2. Purposes and choices
We use information to deliver videos, maintain your account, verify payments, provide membership, restore purchases, handle support, secure the service, measure use and improve recommendations. Selecting interests, providing a contact address and sending feedback are optional. Account identifiers and information needed to fulfil a feature are required for that feature.
Local app storage and website cookies/local storage keep installation, session, language and preference information. Clearing storage or reinstalling can change local identity or remove local settings; it does not itself delete server records or cancel a subscription.
The website offers a choice for optional browser-side marketing measurement. That control does not disable operational server records such as viewing history, security and order verification. Server-side campaign measurement and older app advertising integrations are separate from browser pixels, as described below.
3. Recipients and third-party services
- Service infrastructure: our hosting, network and video delivery providers process requests, IP addresses and technical information needed to deliver and secure the service. Authorised operational personnel handle support and records necessary for their work.
- Payments: Google Play handles Android purchases and subscription management. Where a COLADRAMA website offers Stripe or PayPal checkout, the selected provider processes the payment under its own policy. Those website checkout options are not offered by the current Android client's payment flow.
- Campaign measurement: the service has a Meta Conversions API integration. When its outbound delivery is configured and enabled, it can send events such as first open, paywall view, checkout and episode start, together with IP/user-agent information, available Meta click/cookie identifiers, a hashed account identifier and relevant content or transaction information. A hashed identifier is not necessarily anonymous. Website Meta pixels, where enabled, are loaded after the browser measurement choice allows them. Declining browser pixels does not by itself control the separate server-side integration.
- Legacy Android versions: older versions, including the 1.6.x generation, integrated Google advertising/Firebase and Facebook login, with advertising mediation components such as Pangle, Meta, AppLovin, Vungle, ironSource, LINE and Unity. Depending on the components actually enabled, permissions and your use, those services can process advertising/device identifiers, IP and device information, ad interactions and diagnostics; a third-party sign-in can provide profile or email information you authorise. Android 2.0.3–2.0.5 did not include those SDKs. Starting with 2.0.6 (versionCode 65), the new client integrates Google AdMob and its User Messaging Platform for the app-only limited-free feature; it does not reintroduce the legacy social-login or mediation SDKs.
- Limited-free and advertising: when enabled for your app/account, Google AdMob can process IP-based approximate location, device/advertising identifiers, app interactions and diagnostics for advertising, measurement and fraud prevention. We request ads only when Google’s consent tooling permits requests; non-personalised ads can still process data. Where required, you can reopen “Ad privacy choices” in Account. Rewarded ads require your explicit choice. We record promotion/episode access, opaque reward challenges, signed reward transactions, ad interactions and estimated ad revenue separately from purchase orders. App authenticity verification uses Google Play Integrity (app/version/signature, licence and device-integrity verdicts). Raw integrity tokens are not retained. Native access sessions expire after one hour; routine ad interaction diagnostics are removed after 90 days when scheduled maintenance runs. Reward and unlock records remain for entitlement verification and fraud prevention, or until a verified deletion request is processed. Google handles its own retention under its policy.
- Legal and security purposes: information may be disclosed where required by applicable law or necessary to address fraud, security incidents and disputes. Third-party sites you choose to open apply their own privacy practices.
Related provider policies: Google, Meta, Stripe and PayPal. Provider availability and data use differ between the website, legacy app and current app.
4. Security, storage and retention
The current Android client uses HTTPS for service requests. Access controls, restricted credentials and server-side purchase verification help protect records. No transmission or storage system is completely risk-free. Service providers may process information outside your country; the protections and legal requirements can differ.
Account, viewing and preference information is retained while needed to provide the associated service, or until an applicable deletion request is processed. Support and diagnostic records are kept as needed to investigate the request or fault. Transaction, refund and security records may be retained for accounting, fraud prevention, disputes and applicable legal obligations even after other account data is removed. Retention depends on the record and purpose, rather than one universal period. Contact us for information about retention applicable to your records.
5. Request account and data deletion
You do not need to install or log in to the app to start a request. Email brooklyn509@hotmail.com with the subject “COLADRAMA account and data deletion”. State whether you want the whole account deleted or particular data removed.
If available, include the account ID shown in Account, or a previous support reference, to help us locate your records. If you cannot access your account, describe the situation; we will work with you on proportionate ownership verification. Never send your password or complete payment credentials.
In the app, go to Account → Request data deletion. The request enters a seven-day cancellation window and can be withdrawn from the same area while pending. The displayed scheduled date is a processing schedule, not confirmation that every record has already been deleted. You may also email us to follow up or request assistance.
Deletion covers the account and associated non-required personal data, including viewing history, saved preferences and support data. Records that must be retained for the purposes in section 4 are restricted to those purposes. We can explain applicable exceptions when handling your request. Copies in backups may remain until the relevant backup is rotated out; they are not intended for ordinary active use.
Deleting an account, clearing app data or uninstalling does not cancel Google Play renewal or automatically issue a refund. Manage or cancel renewal in Google Play subscriptions. Cancellation is not a prerequisite for contacting us about deletion.
6. Children, requests and policy updates
The service is not directed to children below the minimum age required by applicable local law. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and address it.
You may contact us about access, correction, deletion, objections or other privacy rights available where you live. We may need limited information to verify that a request concerns your account. We will update this page when our practices change and provide additional notice or obtain consent where required. The date above identifies this revision.
隐私政策
本政策说明何宇涛提供的 COLADRAMA（可乐剧场）Android 应用（包名 com.movie.shaweng.coladrama）及相关网站如何处理信息。隐私咨询、查询、更正和删除请求，请联系 brooklyn509@hotmail.com。
1. 我们处理的信息
- 账号和安装标识：当前 Android 客户端生成随机安装标识并发送到服务器，以建立设备账号。我们处理账号标识、会话凭据、账号迁移信息和语言设置，用于识别账号、保护访问并关联会员和历史记录。即使没有填写姓名或邮箱，设备账号仍然属于账号。
- 设备和网络信息：网络请求包含 IP 地址和 User-Agent 信息。我们处理设备型号、操作系统、浏览器/WebView 版本、应用版本、语言和时区，以支持兼容性、安全和服务分析。网络基础设施可能根据连接提供国家或地区，这是粗略地区信息，并非精确 GPS 位置。
- 观看与使用活动：播放过的短剧和集数、播放进度与时间、收藏、点赞、选择的兴趣、搜索、页面与按钮操作、消息交互，用于观看记录、续播、推荐、服务运营和统计。
- 购买与订阅：商品和方案标识、购买凭证、订单编号、金额与币种、交易时间、支付和订阅状态、续费、退款及会员到期信息。Android 付款由 Google Play 处理。当前客户端不会要求你向我们提供完整银行卡号、安全码或 Google 密码。Google Play 向服务器发送购买和订阅更新，以便我们验单和维护权益。
- 客服与诊断：你提交的消息、主题、选填联系方式及相关账号、短剧或订单信息。播放诊断可包括集数、错误、片源类型、播放位置、播放器版本和网络类型。请勿在反馈中发送密码、完整支付凭据、私钥或购买 token。
- 邀请和推广信息：在链接带有相关信息时，我们处理邀请/分享凭证、来源活动、链接参数和点击标识，用于来源归因、继承邀请人的剧库、付费面板和语言，以及推广分析。
2. 用途与选择
信息用于视频服务、维护账号、支付验证、会员开通、恢复购买、客服、安全、使用统计和推荐改进。选择兴趣、提供联系地址、提交反馈是可选操作；账号标识及完成某项功能所需的信息是该功能运行的必要数据。
App 本地存储及网站 Cookie/本地存储保存安装、会话、语言和偏好信息。清除存储或重新安装可能改变本地身份、移除本地设置，但不会直接删除服务器记录，也不会取消订阅。
网站提供可选的浏览器端营销效果衡量选择。该选择不关闭观看记录、安全和订单验证等服务端业务记录；服务端推广衡量与旧版广告组件独立于浏览器像素，详见下一节。
3. 接收方及第三方服务
- 服务基础设施：托管、网络和视频分发服务商处理提供内容和保障安全所需的请求、IP 地址和技术信息。经授权的运营人员处理其工作所需的客服和业务记录。
- 支付：Android 购买和订阅管理由 Google Play 提供。COLADRAMA 网站如提供 Stripe 或 PayPal 结账，则由所选服务商按其政策处理支付；当前 Android 客户端的付款流程不提供这些网站结账方式。
- 推广衡量：服务端包含 Meta Conversions API 集成。配置并启用对外发送后，可发送首次打开、付费墙浏览、开始结账、剧集起播等事件，以及 IP/User-Agent、可用的 Meta 点击/Cookie 标识、哈希后的账号标识和有关内容或交易信息。哈希标识不当然等于匿名数据。网站 Meta 像素（如启用）在浏览器端允许效果衡量后加载；拒绝浏览器像素并不直接控制独立的服务端集成。
- 旧版 Android：旧版本（包括 1.6.x 系列）集成过 Google 广告/Firebase、Facebook 登录以及 Pangle、Meta、AppLovin、Vungle、ironSource、LINE、Unity 等广告聚合组件。根据实际启用的组件、权限及使用情况，这些服务可以处理广告/设备标识、IP 和设备信息、广告交互和诊断；第三方登录可以提供你授权的资料或邮箱。Android 2.0.3–2.0.5 未集成这些 SDK。从 2.0.6（versionCode 65）开始，新客户端为 App 专属限免功能接入 Google AdMob 及 User Messaging Platform，不重新引入旧版社交登录和广告聚合 SDK。
- 限免与广告：在你的 App／账号启用后，Google AdMob 可处理基于 IP 的概略位置、设备／广告标识、应用交互及诊断信息，用于广告、效果衡量和防欺诈。仅在 Google 同意管理工具允许请求后请求广告；非个性化广告仍可能处理数据。适用时，可从账户页重新打开“广告隐私选项”。激励广告由你主动选择观看。我们分别记录活动／分集权限、不直接包含账号身份的奖励挑战、已验签的奖励交易、广告交互及预估广告收入，不将广告奖励写为购买订单。App 来源验证使用 Google Play Integrity（应用版本／签名、安装许可和设备完整性结论），不保留原始完整性令牌。原生访问会话一小时后失效；计划维护运行时清理超过 90 天的常规广告交互诊断。奖励和解锁记录为权益验证、防欺诈保留，或在核实并处理删除请求时删除。Google 按其自身政策管理保留期限。
- 法律与安全：在适用法律要求，或处理欺诈、安全事件及争议确有必要时，可能披露有关信息。你选择访问的第三方网站适用其自身的隐私规则。
相关服务商政策：Google、Meta、Stripe、PayPal。网站、旧版和当前 App 的服务启用情况及数据使用存在差异。
4. 安全、存储与保留
当前 Android 客户端通过 HTTPS 请求服务。访问控制、受限凭据和服务端验单用于保护相关记录，但任何传输或存储方式都不能保证绝对安全。服务商可能在你所在国家或地区以外处理信息，相应保护和法律要求可能不同。
账号、观看与偏好信息在提供相关服务所需期间保留，或保留至相应删除请求处理完成。客服和诊断记录按处理问题所需保留。交易、退款和安全记录可能为会计、防欺诈、争议处理及适用法律义务而在其他账号数据删除后继续保留，并限制于这些用途。保留期取决于记录及用途，而非所有数据使用同一固定期限；可联系我们了解适用于你的记录的保留情况。
5. 申请删除账号与数据
无需安装 App 或登录即可发起申请。向 brooklyn509@hotmail.com 发送邮件，主题填写“COLADRAMA 账号与数据删除”，说明申请删除整个账号还是特定数据。
如方便，可提供个人中心显示的账号 ID 或以前的客服编号，帮助定位记录。无法访问账号时，请说明情况，我们会与你核实必要的账号归属信息。请勿发送账号密码或完整支付凭据。
App 内入口：个人中心 → 申请删除数据。提交后进入七天的可撤销期，待处理期间可以在同一位置撤销。页面显示的计划日期是处理安排，不表示每项记录已经删除；也可以通过邮件跟进或申请协助。
删除范围包括账号及相关的非必要保留个人数据，如观看历史、保存的偏好和客服数据。因第 4 节所述原因需要保留的记录，仅限于相关用途，我们可在处理申请时说明适用的例外。备份中的副本可能保留至相应备份轮换，不用于普通的日常业务访问。
删除账号、清除 App 数据或卸载应用，不会取消 Google Play 自动续费，也不会自动退款。请在 Google Play 订阅管理 中管理或取消续订。取消订阅不是联系咨询或申请删除的前置条件。
6. 未成年人、权利请求与政策更新
本服务不面向低于当地适用法律规定最低年龄的儿童。如果你认为儿童在未获得适当许可的情况下提供了个人信息，请联系我们调查处理。
你可联系我们行使所在地适用的查询、更正、删除、反对处理等隐私权利。我们可能需要有限信息核实申请属于你的账号。数据处理方式变化时会更新本页，并在需要时另行通知或征求同意。页首日期标识本次修订。