MBTI 测评服务隐私政策

中文

一、我们收集的信息

• 你主动提交的信息：头像、昵称、答题选项、邮箱地址、登录资料以及你主动触发的分享或发信操作。
• 支付与订单信息：Stripe Checkout 会向我们返回支付状态、订单金额、Price ID、会话 ID 与支付意图 ID。我们不会在站点内保存完整银行卡信息。
• 技术与安全信息：访问日志、浏览器基础信息、Cookie / 会话令牌、Cloudflare 平台生成的安全与性能日志。
• 结果与权益信息：MBTI 类型、解锁档位、已绑定账号、已认领购买记录，以及结果分享链接对应的公开页面。

二、我们如何使用这些信息

• 生成 MBTI 测评结果，并在你已购买的档位下返回对应的说明内容。
• 处理付款、确认支付状态、记录已购买权益，并避免同一次付费在多个账户间轮流认领使用。
• 提供头像上传、结果图下载、邮件发送、分享链接以及后续账号同步功能。
• 维护服务安全、排查故障、限制滥用、进行必要的运营分析与访问控制。

三、第三方服务与处理者

在你使用 Facebook 或 X 的分享按钮、未来启用 Google / Facebook / X / Apple 登录时，对应平台也会根据它们自己的政策处理相关数据。

四、公开结果与分享

• 结果链接默认可被持有链接的人访问；请不要把包含敏感头像或昵称的结果页公开给不受信任对象。
• 你主动使用分享功能时，结果摘要、昵称以及分享图中的显示信息可能被第三方平台抓取或缓存。
• 管理端可以撤销特定结果链接；撤销后，原链接将不再继续提供访问。

五、邮件与账号

• 如果你选择接收结果邮件，我们会向指定邮箱发送结果链接与分享图片，并记录该发送行为所需的最少信息。
• 邮箱注册用户可使用邮箱与密码登录。未来第三方登录账号在绑定邮箱后，也会适用同类邮件通知与账号权益同步逻辑。
• 发件身份当前为 `MBTI <noreply@mail.jyzc.site>`。

六、保留期限与删除

• 我们会在业务需要、安全审计、支付对账和纠纷处理所需期间内保留相关记录。
• 你公开分享的链接或结果邮件一旦被第三方保存、转发或缓存，我们无法完全控制后续传播。
• 若你需要删除、纠正或限制处理，可通过 `noreply@mail.jyzc.site` 联系；在验证请求主体后，我们会按可行范围处理。

七、敏感用途限制

本服务不是医疗、心理咨询、临床诊断、招聘筛选或教育分流工具。请不要提交你不愿意通过互联网处理的敏感个人信息。

English

1. Information We Collect

• Information you provide directly, including avatar uploads, display name, quiz answers, email address, login credentials, and actions you take to share or email a result.
• Payment and order data returned by Stripe Checkout, such as payment status, amount, Price ID, session ID, and payment intent ID. We do not store full card numbers on the site.
• Technical and security data, including basic browser metadata, cookies or session tokens, access logs, and Cloudflare-generated performance or security logs.
• Assessment result and entitlement records, including MBTI type, unlocked tier, linked account, claimed purchases, and public result-link state.

2. How We Use the Information

• To calculate and deliver MBTI assessment results and the paid report tier you have unlocked.
• To process payments, confirm payment status, assign paid entitlements, and prevent a single purchase from being alternated across multiple accounts.
• To support avatar upload, downloadable result cards, result emails, public share links, and future account synchronization flows.
• To secure the service, debug incidents, limit abuse, and perform minimal operational analysis.

3. Third-Party Processors

• Cloudflare provides hosting, DNS, edge execution, D1, R2, and related security and acceleration services.
• Stripe provides payment processing and settlement.
• If you use social-share buttons, or once third-party sign-in is enabled, those platforms may process data under their own policies.

4. Public Result Links and Sharing

• Anyone with the result link may be able to view the associated result page unless that link is revoked.
• When you intentionally share a result, display name, summary text, and rendered share-card content may be cached or indexed by third parties.
• Administrative tools may revoke a result link and stop future access to it.

5. Email and Accounts

• If you request a result email, we send the result link and share image to the address you specify and keep only the minimum data needed to support that action.
• Email-registered users may sign in with email and password. Third-party sign-in accounts may later bind an email address for the same account and notification flows.
• The current outbound sender identity is `MBTI <noreply@mail.jyzc.site>`.

6. Retention and Requests

• We retain data for operational needs, security review, payment reconciliation, and dispute handling.
• Once a public result link or email is forwarded or cached elsewhere, we cannot fully control downstream copies.
• Requests to delete, correct, or restrict processing can be sent to `noreply@mail.jyzc.site`, subject to identity verification and technical feasibility.

7. Sensitive Use Restriction

This service is not a medical, psychological, diagnostic, hiring, or educational decision tool. Do not submit personal data that you would not want processed through a public internet service.