XD三國地圖預覽圖 XD三國戰績同步系統 Warcraft III 本機戰績保護與 Google Drive 同步 XD Sanguo Battle Sync — Warcraft III local match-record protection and Google Drive backup

XD三國戰績同步系統隱私權政策 XD Sanguo Battle Sync (XD三國戰績同步系統) Privacy Policy

生效日：2026 年 9 月 2 日 Effective date: 2 September 2026

1. 適用範圍1. Scope of this policy

本政策適用於 XD三國戰績同步系統 Windows 桌面應用程式，以及其官方產品網站 https://xdsanguo.com/。 This policy applies to the XD Sanguo Battle Sync (XD三國戰績同步系統) Windows desktop application and to its official product website at https://xdsanguo.com/.

本網站是純靜態說明網站，沒有登入、會員、表單或後端 API，也不會收集或儲存訪客的個人資料。 The website is a purely static informational site. It has no sign-in, no accounts, no forms and no backend API, and it does not collect or store visitors’ personal data.

2. App 存取的資料2. Data the app accesses

  • 使用者電腦中的 XD三國 .pld 玩家戰績檔。The XD Sanguo .pld player match-record files on the user’s computer.
  • 為同步所需的檔案中繼資料：檔案名稱、大小、修改時間、內容雜湊、同步 generation、manifest 與歷史版本參照。File metadata required for syncing: file name, size, modification time, content hash, sync generation, manifest and references to previous versions.
  • Google OAuth access token 與 refresh token。Google OAuth access tokens and refresh tokens.

App 不要求 Google 帳戶姓名、Email、聯絡人，也不要求一般 Google Drive 檔案或相片的權限。 The app does not request your Google account name, email address or contacts, and does not request access to ordinary Google Drive files or photos.

3. Google 使用者資料用途3. How Google user data is used

本 App 只向 Google 要求下列唯一一個 scope： The app requests exactly one Google OAuth scope:

https://www.googleapis.com/auth/drive.appdata
  • 唯一用途是把使用者選定範圍內的 XD三國戰績備份寫入／讀回使用者自己的 Google Drive appDataFolder，以及管理本 App 建立的備份版本。The only purpose is to write and read back the XD Sanguo match-record backups the user has selected, within the user’s own Google Drive appDataFolder, and to manage the backup versions this app created.
  • 不用於廣告、使用者側寫、信用評估，或與 App 核心功能無關的分析。It is not used for advertising, user profiling, creditworthiness assessment, or any analytics unrelated to the app’s core functionality.
  • 不出售 Google 使用者資料。Google user data is never sold.
  • 不把 Google 使用者資料提供給第三方。Google user data is never provided to third parties.
  • 不使用 Google 使用者資料訓練一般化 AI／ML 模型。Google user data is never used to train generalized AI or machine-learning models.

XD三國戰績同步系統對 Google API 取得之資訊的使用與傳輸，遵守 Google API Services User Data Policy，包含其中的 Limited Use 要求。 XD Sanguo Battle Sync’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. 資料儲存位置4. Where data is stored

完整雲端備份Complete cloud backups
儲存在使用者自己的 Google Drive appDataFolder（隱藏應用程式資料空間）。Stored in the user’s own Google Drive appDataFolder (hidden application data space).
本機設定與本機備份Local settings and local backups
儲存在 %LOCALAPPDATA%\XDSanguoBattleSync。Stored under %LOCALAPPDATA%\XDSanguoBattleSync.
私人電腦模式的 refresh tokenRefresh token in private-computer mode
以 Windows DPAPI（CurrentUser 範圍）加密後儲存於本機。Encrypted with Windows DPAPI (CurrentUser scope) and stored locally.
公用電腦模式的 tokenTokens in shared-computer mode
只存在記憶體中，App 關閉後不保留。Held in memory only, and not retained after the app closes.

作者與本網站沒有保存完整戰績檔、Google token 或 Google 帳戶資料的伺服器。 Neither the author nor this website operates any server that stores complete match-record files, Google tokens or Google account data.

5. 保存期限5. Retention

  • 雲端目前版本會持續保存，直到使用者刪除 Google Drive 中本 App 的隱藏應用程式資料。The current cloud version remains until the user deletes this app’s hidden application data in Google Drive.
  • App 只保留有限數量的歷史同步版本；超出保留範圍且不再被引用的舊物件會被刪除。The app keeps only a limited number of previous sync versions; older objects beyond that window that are no longer referenced are deleted.
  • 本機備份同樣只保留有限數量的近期版本。Local backups likewise keep only a limited number of recent versions.
  • OAuth token 保存至使用者登出、撤銷授權、清除本機資料，或 token 失效為止。OAuth tokens are kept until the user signs out, revokes authorization, clears local data, or the token becomes invalid.

6. 資料分享與傳輸6. Sharing and transfer

  • App 只會在使用者授權後，直接與 Google OAuth 與 Google Drive API 通訊。After the user grants authorization, the app communicates directly with Google OAuth and the Google Drive API, and with nothing else.
  • 不會把完整戰績或 Google 使用者資料傳給作者、廣告商、資料仲介或其他第三方。Complete match records and Google user data are never transmitted to the author, advertisers, data brokers or any other third party.
  • 除非法律要求，不會進行本政策未揭露的傳輸；若未來功能改變，會先更新本政策與 App 內揭露內容。No transfer beyond what this policy discloses will occur unless required by law. If functionality changes in the future, this policy and the in-app disclosures will be updated first.

7. 安全措施7. Security

  • OAuth 流程採用系統瀏覽器、PKCE 與 loopback redirect。The OAuth flow uses the system browser, PKCE and a loopback redirect.
  • 私人電腦模式的 token 以 Windows DPAPI（CurrentUser）保護。Tokens in private-computer mode are protected with Windows DPAPI (CurrentUser).
  • 僅要求最小化的 drive.appdata scope。Only the minimal drive.appdata scope is requested.
  • 雲端物件採不可變版本，並以 manifest 最後提交，降低同步中斷造成資料損壞的風險。Cloud objects are written as immutable versions with the manifest committed last, reducing the risk of data corruption if a sync is interrupted.

沒有任何系統能保證絕對安全。本政策不承諾「絕對安全」或「永不遺失」，請務必自行保留重要資料的其他備份。 No system can be guaranteed to be absolutely secure. This policy makes no promise of “absolute security” or “never losing data”; please keep your own additional backups of anything important.

8. 使用者選擇、撤銷與刪除8. User choices, revocation and deletion

  1. 在 App 中按「登出 Google」，登出並撤銷目前的 token。In the app, choose “Sign out of Google” to sign out and revoke the current token.
  2. 前往 Google 帳戶的第三方存取管理頁，撤銷本 App 的權限。Go to your Google Account third-party access page and revoke this app’s access.
  3. 前往 Google Drive → 設定 → 管理應用程式，找到本 App，選擇刪除隱藏應用程式資料。步驟可參考 Google 官方說明。Go to Google Drive → Settings → Manage apps, find this app, and delete its hidden app data. See Google’s official instructions.
  4. 關閉 App 後刪除 %LOCALAPPDATA%\XDSanguoBattleSync 資料夾，移除本機設定、token 與本機備份。Close the app, then delete the %LOCALAPPDATA%\XDSanguoBattleSync folder to remove local settings, tokens and local backups.

警告：刪除 Google Drive 的隱藏應用程式資料後，該備份可能無法復原。撤銷授權本身不一定等於刪除已存在的雲端備份，兩件事請分別確認。 Warning: once hidden application data is deleted from Google Drive, those backups may be unrecoverable. Revoking authorization does not by itself delete existing cloud backups; please handle the two steps separately.

9. 兒童、政策變更與聯絡方式9. Children, changes and contact

本服務不是特別針對兒童設計，也不會刻意向兒童收集資料。 This service is not directed at children and does not knowingly collect data from children.

本政策如有更新，會公布於同一網址 https://xdsanguo.com/privacy/，並同步更新頁面上方的生效日。若資料用途有實質改變，會先更新本政策與 App 內的揭露內容。 Updates to this policy are published at the same URL, https://xdsanguo.com/privacy/, with the effective date at the top of the page updated accordingly. If the purposes for which data is used change materially, this policy and the in-app disclosures will be updated first.

作者Author
larchrono
聯絡信箱Contact email
soracloudmachine@gmail.com
官方社群Official community
XD三國 Facebook