隐私政策 · Privacy Policy

生效日期 Effective date: 2026-08-05 ｜ 运营者 Operator: TATASOCCER (tata.best) ｜ 联系 Contact: admin@tata.best

支付与退款由 Creem 作为记录商户处理。Payments and refunds are processed by Creem as Merchant of Record.

中文版

1. 我们是谁

TATASOCCER（www.tata.best，以下简称"本站"）由一位位于中国境内的独立开发者运营，提供基于公开数据的足球赛事 AI 统计分析服务。本站的支付与退款由 Creem 作为记录商户（Merchant of Record）处理。数据保护相关事宜请联系 admin@tata.best。

2. 我们收集哪些信息

你主动提供的：

• 账户信息：邮箱地址、密码（以加盐哈希存储，我们无法还原你的原始密码）、昵称、头像地址。
• 使用 Apple 登录时，Apple 返回的匿名用户标识符。我们不会获取你的 Apple 账户密码。

你使用服务时自动产生的：

• 解读记录：你查询过的比赛、生成的分析文本、语言偏好。
• 额度流水：会员到期时间、剩余次数、每次消耗与充值的记录。
• 订单记录：订单号、商品、金额、支付状态。我们不接触也不存储你的银行卡号、CVV 或任何完整支付凭证。
• 技术日志：IP 地址、浏览器类型、访问时间，用于安全防护与故障排查。

3. Cookie 的使用

本站仅使用一个名为 tata_auth 的必要 Cookie 维持登录状态。它是 HttpOnly 的，JavaScript 无法读取，有效期 7 天。本站不使用广告 Cookie，不做跨站行为追踪。

4. 信息如何被使用

• 验证身份、维持登录、发放和核销你购买的权益。
• 生成并保存你的赛事分析记录，供你随时回看。
• 防范盗刷、滥用和自动化攻击。
• 在你主动联系我们时提供客户支持。

我们不会出售你的个人信息，也不会将其用于第三方广告投放。

5. 我们与谁共享

• Creem（支付服务商，作为记录商户 Merchant of Record）：处理支付与退款，接收你的邮箱和订单信息。你的支付卡信息直接提交给 Creem，本站服务器不经手。
• Vercel（托管服务商）：承载网站与接口运行，处理访问日志。
• AI 模型服务商：生成赛事分析时，我们向模型提供商发送的是比赛数据（球队、赛程、赔率、历史战绩），不包含你的邮箱、姓名或任何可识别你身份的信息。
• Apple：仅在你选择 Apple 登录时参与身份验证。

除上述情形及法律强制要求外，我们不向任何第三方披露你的个人信息。

6. 数据存储与跨境传输

本站服务器与数据库位于中国境外。使用本服务即表示你理解并同意你的账户数据在境外存储和处理。我们通过传输加密（HTTPS）、密码哈希和访问控制保护你的数据。

7. 保存期限

账户信息在账户存续期间保留。订单与交易记录因税务和对账需要保留至少 5 年。你注销账户后，我们将删除或匿名化你的账户信息与解读记录，法律要求保留的交易记录除外。

8. 你的权利

你有权访问、更正、导出或删除你的个人信息，也可以撤回同意并注销账户。发邮件到 admin@tata.best 即可提出，我们将在 30 天内答复。

9. 未成年人

本服务不面向 18 周岁以下人士。如果我们发现未成年人账户，将予以删除。

10. 政策变更

本政策如有实质性修改，我们将更新本页顶部的生效日期，并在站内公告。继续使用服务即视为接受更新后的政策。

English version

1. Who we are

TATASOCCER (www.tata.best, the "Service") is operated by an independent individual developer based in China, providing AI-assisted statistical analysis of football matches based on publicly available data. Payments and refunds are handled by Creem acting as Merchant of Record. For any data protection question, contact admin@tata.best.

2. Information we collect

Information you provide:

• Account data: email address, password (stored only as a salted hash — we cannot recover your plaintext password), nickname, avatar URL.
• If you use Sign in with Apple, the anonymous user identifier Apple returns. We never receive your Apple password.

Information generated through your use:

• Analysis history: matches you queried, generated analysis text, language preference.
• Entitlement records: membership expiry, remaining credits, and every grant or deduction.
• Order records: order number, product, amount, payment status. We never receive or store your card number, CVV, or any full payment credential.
• Technical logs: IP address, browser type and access time, used for security and troubleshooting.

3. Cookies

We use a single strictly necessary cookie, tata_auth, to keep you signed in. It is HttpOnly (not readable by JavaScript) and expires after 7 days. We use no advertising cookies and perform no cross-site tracking.

4. How we use information

• To authenticate you, keep you signed in, and deliver the entitlements you purchased.
• To generate and store your match analysis history so you can revisit it.
• To prevent fraud, abuse and automated attacks.
• To provide customer support when you contact us.

We do not sell your personal information and do not use it for third-party advertising.

5. Who we share with

• Creem (payment provider, acting as Merchant of Record): processes payments and refunds, and receives your email and order details. Your card details are submitted directly to Creem and never touch our servers.
• Vercel (hosting provider): runs the website and API, and processes access logs.
• AI model providers: when generating an analysis we send match data (teams, fixtures, odds, historical results). This never includes your email, name, or any information that identifies you.
• Apple: involved only if you choose Sign in with Apple.

Apart from the above and where legally compelled, we disclose your personal information to no one.

6. Storage and international transfer

Our servers and database are located outside mainland China. By using the Service you understand and agree that your account data is stored and processed outside your country of residence. We protect it with encryption in transit (HTTPS), password hashing and access controls.

7. Retention

Account data is retained while your account exists. Order and transaction records are retained for at least 5 years for tax and accounting purposes. When you close your account we delete or anonymise your account data and analysis history, except for transaction records we are legally required to keep.

8. Your rights

You may access, correct, export or delete your personal information, withdraw consent, and close your account. Email admin@tata.best and we will respond within 30 days.

9. Children

The Service is not directed to anyone under 18. Accounts found to belong to minors will be deleted.

10. Changes

If we make material changes we will update the effective date at the top of this page and post a notice in the app. Continued use constitutes acceptance of the updated policy.