Privacy Policy

Política de Privacidade deste Software (Edição de leitura conjunta pai/responsável e criança)

Política de Privacidade deste Software (Edição de leitura conjunta pai/responsável e criança)

Last Updated: [March 5, 2025]

Version 1.0

I. Introduction

This software (hereinafter referred to as "we", "us", "this software") is a tool to help parents/guardians rationally manage the use of their children's devices. We are fully aware of the importance of the security of personal information of children (minors under the age of 14) and strictly abide by laws and regulations such as the Cybersecurity Law of the People's Republic of China and the Regulations on the Protection of Children's Personal Information on the Internet. This Privacy Policy explains to you (parent/guardian) and your child how we collect, use, store and protect information. Parents/guardians are advised to read this policy with their children and to ensure that you have given your explicit consent for the use of the Software by children. If you do not agree to any of the contents of this policy, please stop using the software immediately.

This software only collects very little information that is absolutely necessary to achieve the core management functions, and most of the sensitive data (such as screenshots, application usage records) is saved only on the local device by default, and is not automatically uploaded to any server.

II. Types of information we collect and how we process it

2.1 Necessary function data (all stored on the user's local device, we can't get it remotely)

data typeDetailsLocation StoreDo you want to upload the server
Application informationThe name of the application currently running on the managed computer, the process ID, the foreground application, and how long it has been in useManaged computer local hard driveno
Device Operation RecordComputer power-on time, time period during which use is prohibited (such as attempting to power on within the curfew period set by the parent)Managed computer local hard driveno
Network Activity DataA list of forbidden domains/IPs manually set by parents, and a record of device attempts to access these restricted addresses (only the time of the attempted connection, the destination address, not the transmission)Managed computer local hard driveno
screenshotTemporary screenshots generated by the managed computer immediately after the parent initiates the command through the mobile terminal (the screenshots are automatically encrypted and only used for parental viewing and manual deletion)Temporary Memory of Managed Computersno

Special note: The above data is stored entirely by the parent-managed device itself. We do not have the technical means to obtain the above information from your device. To view, parents need to directly read the local data of the device through a local area network or an authorized end-to-end encrypted channel.

2.2 Account and Device Information (stored on the Company's servers for account management and service adaptation)

data typeDetailsPurpose of storageStorage life
Parent's phone informationBind phone number, device model, IP address, emailCreate parent account, receive notifications, password retrieval, device bindingUntil you actively deactivate your account
computer hardware identificationDevice ID (unique anonymous identifier based on hardware generation), operating system version, version number of this softwareIdentify Managed Devices, Push Compatible Updates, Enable Parent-Device BindingDelete within 180 days of account deletion
Connection LogHandshake time between the parent side and the managed device, instruction sending record (excluding content)Troubleshooting, Audit Abnormal ConnectionsScroll for 90 days

The information saved by the above servers is transmitted using industry-standard encryption (TLS 1.2+), and the mobile phone number and mailbox are desensitized when stored.

3. Purpose and Scenario of Data Use

data typeUsage scenariosHow it works
Application informationGenerate daily/weekly usage statistics reports (e.g. “2 hours of gaming today”)After local analysis, a chart is generated. Only when the parent requests through the mobile terminal, it is transmitted to the parent's mobile phone through end-to-end encryption. Our server does not relay this content.
screenshotParents view their child's current screen content remotely (to confirm learning status)Point-to-point encrypted transmission only between the managed device and the parent's phone, without passing through any third-party servers
Network Activity DataGenerate a Blocked Website Attempt Report to help parents optimize their filtering strategiesLocally record the domain name you are trying to access, encrypted transmission to the mobile phone when the parent initiates the request through the mobile phone, excluding the specific browsing content within the website (such as URL parameters, form data)
Device Operation RecordDetermine if the child turned on during the disabled period in violation of the rules, or attempted to shut down the softwareLocal storage, displayed when parents proactively inquire
Account information (phone number, email)Account login, password reset, service change notificationServer storage for account functionality only
Device ID and OS VersionEnsure software compatibility, correct delivery of remote commandsServer storage for binding relationships

IV. Special Commitment to the Protection of Children's Personal Information

Minimal necessity: We do not actively collect sensitive information such as children's location information, contacts, browser history, chat content, etc.

Parental Consent Mechanism: When using this software for the first time, parents must pass the real-name authentication (phone number verification) and actively check to agree to this privacy policy. We do not collect any information directly from children.

Data local priority: All data that may contain children's behavioral characteristics (app usage records, screenshots) is only stored on the managed device by default, and parents need to take the initiative to view it temporarily.

Refusal of commercial exploitation: We will never sell any user data, including anonymized data, to third parties or for personalized advertising.

V. Data Sharing and Disclosure

We do not proactively share your account information or local data on managed devices with any third parties unless:

Obtain your individual express consent;

As required by laws and regulations, such as cooperating with a formal investigation by a judicial authority (we will strictly review the legality of the request and notify you unless prohibited by law);

It is urgently necessary to protect the personal safety of us, you, or others.

VI. Your Rights (Parents and Children)

Access and correction: You can view usage reports for all managed devices and correct account information (such as changing your phone number) from your phone at any time.

Delete data: You can:

Unbind the managed device from the mobile phone, and the device ID and other information saved by the server will be automatically deleted;

Manually uninstall the software on the managed computer, providing the option "Empty all local logs" when uninstalling (checked by default).

Deactivate your account: Submit a request through in-app Account Security - Deactivate your account and we'll delete any account information stored on our servers within 15 business days.

Children's rights: Children can make requests for inquiry, correction or deletion of their personal information through parents or directly through the official mailbox of this software, and we will handle it according to law after verifying the identity of parents.

VII. Data Security Measures

Local data: Screenshots and sensitive configurations are encrypted and stored using AES-256; only this software process can read them.

Transmission security: All data exchanges between parents' mobile phones and managed computers are double encrypted with TLS 1.3 + Pre-Shared Key (PSK) and cannot be decrypted even if transferred via the Internet.

Server security: The account database is encrypted by Alibaba Cloud RDS. Multi-factor authentication (MFA) is required for access, and penetration testing is conducted regularly.

VIII. Changes to the Privacy Policy

In the event of a material change to this policy (such as a new data collection type or change in the purpose for which the data is used), parents will be notified via a prominent in-app pop-up, email, or text message and consent will be obtained again.

IX. Contact Us (Parental Consultation Channel)

If you have any questions, complaints or suggestions about this Privacy Policy, the protection of children's personal information, please contact us at:

E-mail:service@stellarorigin.cn

Official website feedback: https://www.no-game.cn (click “Feedback”)

Support response time: 48 hours within business days