隱私權政策
最後更新：2026-10-25 ｜ 營運者：Lazy Perfumer 懶人調香師 聯絡信箱：lazyperfumer@gmail.com
這是依本站實際運作寫成的範本，上線前請填入營運者資訊，並視需要請專業人士確認。
1. 我們蒐集哪些資料
- 登入資料：使用 Google、LINE、Facebook、Apple 登入時，只取得該平台提供的帳號識別碼與顯示名稱，不取得密碼，也不取得你的聯絡人或貼文。
- Email 帳號：Email 位址，以及加密後的密碼雜湊（我們看不到你的密碼）。設定密碼時，會把密碼雜湊的前 5 碼送到 Have I Been Pwned 比對是否外洩，不會送出完整密碼。
- 你的內容（僅登入會員）：單方精油庫存、保存的配方、上次選擇的用途與安全設定。
- 使用量：每日／每月調配次數，用來執行方案額度。
- 付款：信用卡資料由 Stripe 處理，本站不接觸也不儲存卡號；我們只保存 Stripe 客戶編號、訂閱方案與狀態、週期日期。
- 造訪統計：以匿名識別碼統計造訪人數與次數。
- 網路位址：為了防止濫用（登入嘗試、寄信、訪客額度），會暫時以 IP 位址（或其雜湊）計數，計數資料會在短時間後自動清除。
2. Cookie 與瀏覽器儲存
lp_s：登入狀態（30 天）。lp_st：登入流程的驗證（10 分鐘）。lp_d：訪客每日額度的裝置識別。lp_v：匿名造訪統計識別。- 瀏覽器本機儲存：介面語言、排隊中的調配設定。
3. 資料交給誰
Cloudflare（主機與資料庫）、Google／LINE／Facebook／Apple（你選擇的登入方式）、Stripe（付款）、Resend（寄送 Email）、Cloudflare Turnstile（人機驗證，若啟用）、Google Fonts（載入字型，Google 會看到你的 IP）。我們不出售你的資料，也不用於廣告。
4. 保存與刪除
你可以隨時在網站「方案」頁按「刪除帳號與所有資料」：我們會先終止你的訂閱，再永久刪除帳號、庫存、配方本與付款關聯資料。透過 Facebook 移除應用程式時，也會自動刪除對應帳號。也可以寄信到上方聯絡信箱要求刪除。Stripe 依法需保存的交易紀錄，由 Stripe 依其政策保存。
5. 你的權利
依個人資料保護法，你可以請求查詢、閱覽、複製、補充或更正、停止蒐集處理利用、刪除你的個人資料。請寄信到聯絡信箱，我們會在合理期間內回覆。
6. 兒童
本站不是為未滿 18 歲者設計，我們不會刻意蒐集未成年人的資料。
7. 變更
政策有重大變更時，會更新本頁日期並在網站上提示。
Privacy Policy
Last updated: 2026-10-25 · Operator: Lazy Perfumer · Contact: lazyperfumer@gmail.com
1. What we collect
- Sign-in data: with Google, LINE, Facebook or Apple we only receive the account identifier and display name the platform provides — no password, contacts or posts.
- Email accounts: your email address and a hashed password (we cannot see your password). When you set a password, the first 5 characters of its hash are checked against Have I Been Pwned; the password itself is never sent.
- Your content (signed-in members only): oil stock, saved blends, last-used settings.
- Usage: daily / monthly blend counts, to apply plan quotas.
- Payments: card details are handled by Stripe; we never see or store card numbers. We keep the Stripe customer ID, plan, status and period dates.
- Visit statistics: anonymous identifiers to count visitors and visits.
- Network address: temporarily used (or hashed) to limit abuse such as login attempts, emails and guest quota; these counters expire shortly.
2. Cookies and browser storage
lp_ssign-in (30 days);lp_stsign-in flow check (10 minutes);lp_dguest daily quota device ID;lp_vanonymous visit statistics.- Local storage: interface language and queued blend settings.
3. Who receives data
Cloudflare (hosting, database), Google / LINE / Facebook / Apple (the sign-in you choose), Stripe (payments), Resend (email delivery), Cloudflare Turnstile (human check, if enabled), Google Fonts (font loading; Google sees your IP). We do not sell your data or use it for advertising.
4. Retention and deletion
You can use “Delete account and all data” on the Plans tab at any time: we end your subscription first, then permanently delete your account, stock, recipes and payment links. Removing the app in Facebook settings also deletes the matching account. You can also email us to request deletion. Transaction records that Stripe must keep by law are kept by Stripe under its own policy.
5. Your rights
You may ask to access, copy, correct, restrict or delete your personal data. Email the contact address above and we will reply within a reasonable time.
6. Children
The service is not designed for people under 18 and we do not knowingly collect their data.
7. Changes
If this policy changes materially we will update the date above and show a notice on the site.