隐私政策

1. 我们收集什么

• 答题数据：你选择的选项、生成的结果、随机分配的会话标识。
• 订单数据：订单号、金额、支付状态、创建时间。我们不收集卡号，支付由 Stripe 处理。
• 事件日志：页面打开、开始测试、完成测试、点击解锁、支付成功等操作记录，用于改进产品。
• 本地存储：语言偏好、答题进度、会话标识，保存在你的浏览器 localStorage 中。
• 基础设备信息：浏览器类型与语言，由服务器日志自动记录。

我们不要求注册账号，不收集姓名、手机号、身份证号或精确位置。

2. 用途与法律依据

• 履行合同：生成并交付你购买的报告。
• 合法利益：防止欺诈与滥用、排查故障、统计产品使用情况。
• 同意：在你选择加入的情况下发送产品更新（目前没有此类订阅）。

3. 共享给谁

我们只与以下处理者共享必要数据：

• Supabase（数据库，托管于新加坡）
• Vercel（网站托管与函数计算）
• Stripe（支付处理与风控）

我们不出售你的数据，也不用于广告投放。

4. 跨境传输

上述服务商可能在 Singapore、United States、European Union 等地处理数据。我们通过服务商的合同条款与安全措施保护传输中的数据。

5. 保留期限

• 答题与订单数据：24 个月
• 事件日志：12 个月
• 到期后删除或匿名化

5.1 新加坡 PDPA

若新加坡《个人资料保护法》（PDPA）适用于你，我们按其要求收集、使用与披露个人资料，并设有专人负责数据事务，可通过 support@mianzitest.com 联系。

6. 你的权利

你可以要求访问、更正、删除你的数据，或反对我们处理你的数据。发送邮件至 support@mianzitest.com，我们会在 30 天内答复。若你位于欧洲经济区，你还有权向当地监管机构投诉。

7. Cookie 与本地存储

我们只使用必要的本地存储（语言、答题进度、会话标识），不使用广告追踪 Cookie。

8. 未成年人

本服务不面向 16 岁以下儿童。若我们发现收集了此类数据，会尽快删除。

9. 安全

我们使用 HTTPS 传输、最小权限数据库访问与签名校验的支付回调。没有任何系统能保证绝对安全。

10. 变更与联系

政策更新会在本页公告。联系：support@mianzitest.com

Privacy Policy

1. What we collect

• Quiz data: the options you choose, the result generated, and a randomly assigned session identifier.
• Order data: order ID, amount, payment status, timestamps. We do not collect card numbers — payments are handled by Stripe.
• Event logs: page views, quiz start, quiz completion, unlock clicks, successful payment — used to improve the product.
• Local storage: language preference, quiz progress, session ID, stored in your browser’s localStorage.
• Basic device data: browser type and language, recorded automatically in server logs.

We do not require an account and do not collect your name, phone number, national ID, or precise location.

2. Why we use it, and our legal bases

• Performance of a contract: generating and delivering the report you bought.
• Legitimate interests: fraud and abuse prevention, debugging, aggregate usage statistics.
• Consent: product updates, if you opt in (we currently send none).

3. Who we share it with

We share the minimum necessary data with these processors:

• Supabase — database, hosted in Singapore
• Vercel — hosting and serverless functions
• Stripe — payment processing and fraud checks

We do not sell your data and do not use it for advertising.

4. International transfers

These providers may process data in Singapore, the United States, and the European Union. Transfers rely on the providers’ contractual safeguards and security measures.

5. Retention

• Quiz and order data: 24 months
• Event logs: 12 months
• After that, deleted or anonymised

5.1 Singapore PDPA

Where Singapore’s Personal Data Protection Act (PDPA) applies, we collect, use and disclose personal data in accordance with it and have a designated contact for data matters, reachable at support@mianzitest.com.

6. Your rights

You may request access to, correction of, or deletion of your data, or object to processing. Email support@mianzitest.com and we will respond within 30 days. If you are in the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority.

7. Cookies and local storage

We use only essential local storage (language, quiz progress, session ID). We do not use advertising or tracking cookies.

8. Children

The Service is not directed to children under 16. If we learn we have collected such data, we will delete it promptly.

9. Security

We use HTTPS in transit, least-privilege database access, and signature-verified payment callbacks. No system can be guaranteed absolutely secure.

10. Changes and contact

Updates to this policy will be posted on this page. Contact: support@mianzitest.com