私隱政策
最後更新：2026年9月25日
RHPW Limited（以「時空本館 TheTimesLarp」名義經營，下稱「本公司」或「我們」）重視閣下之私隱，並會按照香港《個人資料（私隱）條例》（第486章）收集、使用及保管閣下之個人資料。本政策適用於 app.thetimeslarp.com 及本公司之相關服務。
1. 我們收集的資料
- 帳戶資料：手機號碼、稱呼、性別及密碼（密碼經加密處理後儲存，本公司無法得知閣下之密碼）。
- 報名及遊戲記錄：報名之場次、已參與之劇本、代朋友報名之記錄。
- 會員及交易記錄：會員等級、會員編號、儲值及消費記錄、積分及虛擬物品。
- 社交功能資料：好友名單、公開檔案（稱呼、造型、語錄）、互送之禮物及心意卡。
- 使用數據：隨機產生之裝置識別碼、進入本平台之來源（例如廣告連結標記）、瀏覽器類別，以及頁面使用統計（例如瀏覽過之分頁及功能）。我們不會收集閣下之精確位置。
- 相機：只會在閣下使用「掃描 QR code」功能時開啟，影像只於閣下之裝置上處理，不會上傳。
2. 資料用途
- 建立及管理閣下之帳戶，並以短訊驗證碼核實手機號碼。
- 處理報名、安排成團及角色，並透過 WhatsApp 群組通知場次安排。
- 提供會員、儲值、積分及商店服務，並處理付款。
- 回覆查詢及提供客戶服務。
- 防止濫用、欺詐及保障系統安全。
- 以整體統計方式分析服務使用情況，以改善服務。
本公司 不會出售 閣下之個人資料，亦不會在未取得閣下同意前將其用於直接促銷。
3. 其他玩家可見之資料
閣下之稱呼、性別、造型及公開檔案，會於報名座位、好友及社交功能中向其他玩家顯示。閣下之 手機號碼不會向其他玩家顯示，其他玩家亦無法以手機號碼搜尋閣下，只可使用稱呼或會員編號。
4. 資料之轉移
為提供服務，我們會將必要之資料交予以下服務供應商處理，並只限於提供有關服務之用途：
- Supabase：資料庫及伺服器託管（資料儲存於日本東京之數據中心）。
- Cloudflare：網站託管及圖片儲存。
- Twilio：發送短訊驗證碼（只涉及手機號碼）。
- Airwallex：處理網上付款。付款卡資料由 Airwallex 直接收集及處理，本公司不會接觸或儲存閣下之完整卡號。
- WhatsApp：場次群組之溝通。
除上述情況外，本公司只會在法律要求或為保障本公司及其他人士之合法權益時披露閣下之個人資料。
5. 資料保安
本平台全程以加密連線（HTTPS）傳送資料；密碼經加密處理後儲存；只有獲授權之職員可存取個人資料。
6. 資料保留
閣下之個人資料會於帳戶有效期間保留。帳戶刪除後，本公司會刪除閣下之帳戶資料；惟為符合會計及法律要求，儲值及交易記錄會保留一段合理期間。
7. 本機儲存
本平台會使用瀏覽器之本機儲存（localStorage）記錄登入狀態及介面偏好設定。本平台 不使用 第三方廣告追蹤 cookie。
8. 查閱、更正及刪除資料
閣下有權查閱及更正本公司持有之閣下個人資料，亦可要求刪除帳戶。請以電郵或 WhatsApp 聯絡我們提出要求，本公司會於收到要求後 40 日內回覆。
刪除帳戶：閣下可於本平台（網頁或 app）登入後，前往「我的時空」→「帳戶設定」→「申請刪除帳戶」提出申請；亦可不登入，直接以電郵 thetimeslarp@gmail.com 或 WhatsApp +852 4439 1980 提供登記電話號碼提出申請。本公司會於收到申請後 30 日內完成刪除，刪除範圍包括帳戶資料、積分、造型、收藏、好友及報名記錄；儲值及交易記錄會按第 6 節保留。如帳戶仍有儲值餘額，本公司會先聯絡閣下安排退款。刪除帳戶前，請先使用帳戶內之儲值餘額；儲值餘額之退款安排請參閱退款政策。
9. 政策修改
本公司可不時修改本政策，修改後之版本會於本頁公布並更新上方日期。
10. 聯絡我們
如對本政策或閣下之個人資料有任何查詢，請以電郵 thetimeslarp@gmail.com 或 WhatsApp +852 4439 1980 聯絡我們。
Privacy Policy
Last updated: 25 September 2026
RHPW Limited, trading as "時空本館 TheTimesLarp" ("we", "us"), respects your privacy and collects, uses and keeps personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. This policy applies to app.thetimeslarp.com and our related services.
1. Data we collect
- Account data: mobile number, name, gender and password (stored in hashed form; we cannot see your password).
- Booking and game records: sessions booked, scripts played, bookings made for friends.
- Membership and transactions: membership tier, member ID, top-up and spending records, points and virtual items.
- Social features: friend list, public profile (name, skin, quote), gifts and gift cards exchanged.
- Usage data: a randomly generated device identifier, how you arrived (e.g. ad link tags), browser type and page usage statistics (e.g. tabs and features used). We do not collect your precise location.
- Camera: used only when you choose to scan a QR code. Images are processed on your device and never uploaded.
2. How we use your data
- To create and manage your account and verify your mobile number by SMS code.
- To process bookings, form sessions, assign roles and notify you of arrangements through WhatsApp groups.
- To provide membership, stored value, points and shop services, and to process payments.
- To answer enquiries and provide customer service.
- To prevent abuse and fraud and to keep the system secure.
- To analyse service usage in aggregate in order to improve our service.
We do not sell your personal data and will not use it for direct marketing without your consent.
3. Information visible to other players
Your name, gender, skin and public profile are shown to other players in booking seats, friends and social features. Your mobile number is never shown to other players, and other players cannot search for you by phone number, only by name or member ID.
4. Transfer of data
To provide our service, we share necessary data with the following providers, only for the purpose of providing that service:
- Supabase: database and server hosting (data stored in a data centre in Tokyo, Japan).
- Cloudflare: website hosting and image storage.
- Twilio: sending SMS verification codes (mobile number only).
- Airwallex: processing online payments. Card details are collected and processed directly by Airwallex; we never see or store your full card number.
- WhatsApp: communication in session groups.
Otherwise, we disclose personal data only where required by law or to protect the legitimate rights of ourselves or others.
5. Security
All data is transmitted over encrypted connections (HTTPS); passwords are stored hashed; only authorised staff can access personal data.
6. Retention
We keep your personal data while your account is active. When your account is deleted we delete your account data, except that stored-value and transaction records are kept for a reasonable period to meet accounting and legal requirements.
7. Local storage
The Platform uses your browser's local storage to remember your login and interface preferences. We do not use third-party advertising tracking cookies.
8. Access, correction and deletion
You may request access to or correction of the personal data we hold about you, or request deletion of your account, by contacting us by email or WhatsApp. We will respond within 40 days of receiving your request.
Deleting your account: after logging in to the Platform (web or app), go to “My Universe” → “Account settings” → “Request account deletion”. You can also request deletion without logging in by emailing thetimeslarp@gmail.com or messaging +852 4439 1980 on WhatsApp with your registered phone number. We will complete the deletion within 30 days of your request. This removes your account data, points, avatars, collection, friends and booking records; stored-value and transaction records are kept as described in section 6. If your account still has a stored-value balance, we will contact you first to arrange a refund. Please use any remaining stored-value balance before deleting your account; see the Refund Policy for refunds.
9. Changes to this policy
We may update this policy from time to time. The updated version will be posted on this page with a new date.
10. Contact us
Email thetimeslarp@gmail.com or WhatsApp +852 4439 1980.