Privacy Policy

Updated September 16, 2026

Fluxvision Play is a recreational cognitive-challenge service operated by Fluxvision. This policy applies to this website, not to third-party services.

Data we process

Guest results and preferences stay in your browser. Accounts store a display name, email, account identifiers, results and settings. Passwords are stored as one-way hashes, never in plaintext.

A custom avatar is optional. Photos are cropped and re-encoded to a small JPEG on your device; the original file and photo metadata are not uploaded. Guest avatars stay locally; signed-in users store the compressed avatar in private account settings for cross-device sync. It is not automatically published as a community avatar or sent to an image-generation service. Choose a preset to replace it; account deletion removes it with your settings.

If Google sign-in is available and you authorize it, we receive your Google identifier, email and verification status, name and profile image. We request only openid, email and profile. We do not access Gmail, contacts, Drive or YouTube content, or receive your Google password. Authorization tokens are encrypted in the database for authentication.

Purpose and storage

We use this data for authentication, private progress synchronization, account linking and abuse prevention. Essential session cookies, IP addresses, browser information and rate-limit records support security. We do not use advertising tracking cookies or sell your personal data. Results are not medical assessments.

Cloudflare hosts the site and account service; the database is configured in its APAC region. Network requests may pass through global infrastructure. Google processes authorization when you use Google sign-in. This may involve international data processing.

Your choices

Account data remains until account deletion. Export results or delete your account in Settings. Deletion removes your account, sessions, links and results from the active database; necessary infrastructure logs and backups follow the service providers' retention processes. We do not promise immediate removal from every backup. Clear guest results in Settings or clear your browser's site data. Signing out does not delete an account.

You may revoke Google access from your Google Account's third-party connections. This does not automatically delete your Fluxvision account. Accounts with the same email are not silently merged: sign in to the existing account and explicitly connect Google.

Contact

Send privacy requests to our official account Instagram @flux.vision77. Never send passwords, verification codes or identity documents. Policy updates are dated here. This service is not directed to children under 13; local age requirements and any required guardian consent apply.

Payments and membership data

Waffo Pancake processes checkout, payment details and receipts. We send your account email, selected product and a random order reference; we do not store card numbers or security codes. We store order identifiers, plan, environment, expiry and refund status to fulfill and reconcile purchases. Notification payloads stay in a server queue until processed, then are cleared while delivery identifiers remain for deduplication. Custom routines and insights belong to your account.

Account deletion removes your routines and detaches local billing records from your account. Detached order and delivery identifiers remain for reconciliation, duplicate protection and refund handling. Waffo Pancake retains its transaction records under its own policies and requirements. Cancel automatic renewal before deleting your account.

社区、奖励与可选提醒 / Community, rewards and optional reminders

社区、积分与提醒功能仅面向18岁以上用户。社区使用独立昵称，不自动公开 Google 姓名或邮箱。发布的留言、回复、点赞数和自愿展示的周榜资料会公开；首次留言审核通过后展示。我们保存打卡、积分流水、奖励与提醒偏好，以履行这些功能。注销会清空本人留言正文并移除个人关联。

Community, rewards and reminders are for adults aged 18+. Community uses a separate nickname and never automatically publishes your Google name or email. Published comments, replies, like counts and opted-in leaderboard entries are public. First comments require moderation. Check-ins, point transactions, rewards and preferences support these features. Account deletion erases your comment text and removes personal associations.

邮件由配置完成的 Resend 服务发送；只在你选择订阅后向该服务提供邮箱、邮件内容。推送服务接收设备订阅端点及提醒内容。可随时在设置关闭，或在邮件中退订。每次最多发送你选定的频率，完成当日打卡后跳过每日提醒。投递记录保存90天，站内回复通知30天。不要在留言中发布个人联系方式。

When configured, Resend receives your email address and message content only for reminders you opt into or verification you request. Push providers receive device subscription endpoints and notification content. Disable reminders in Settings or unsubscribe in an email. Daily reminders are skipped after check-in. Delivery records last 90 days and inbox notices 30 days. Do not post private contact details.

可选统计 / Optional analytics

在你确认已满18岁并主动同意前，不启用可选统计。我们只记录访问、玩法开始/完成、粗粒度国家、语言和设备类别，不记录留言正文、邮箱或完整IP，不录制会话。浏览器随机标识在服务端哈希后保存。自建统计记录保留90天，用于聚合漏斗和回访分析；关闭统计不会删除已经汇总的数据。

Optional analytics starts only after you confirm you are 18+ and opt in. Events include visits, game starts/completions, coarse country, language and device category, not comments, email, full IP or session recordings. Random browser IDs are hashed server-side. First-party events are retained for 90 days for aggregate funnels and return-visit analysis. Turning analytics off does not remove prior aggregates.

配置完成时，Google Analytics 和 Datadog 接收同意后的白名单事件。禁用广告个性化及会话回放；第三方处理和保留适用其政策。IP国家由 Cloudflare 在边缘判断以提供默认语言，本站不为此保存原始IP；手动语言选择优先。所有小游戏均不是医学工具。

When configured, Google Analytics and Datadog receive consented allowlisted events. Advertising personalization and session replay are disabled; their processing and retention follow their policies. Cloudflare's edge country signal sets the default language without this feature storing your raw IP. Manual language selection wins. Games are not medical tools.