隐私政策
生效日期：2026 年 9 月 26 日 · 最后更新：2026 年 10 月 9 日
一分钟看懂
- 不用注册账号，我们不收集你的姓名、手机号、邮箱或通讯录。
- 聊天、白板、片源链接等房间内容只存在服务器内存里，房间关闭就消失，不写入数据库。
- 语音和屏幕共享不会被录制、不会被保存，通常在设备之间直接连接，这时同房间的人在技术上能看到你的 IP 地址；直连不通时会经过我们的中转服务器转发加密数据，我们无法查看内容。
- 勋章、观影记录、片单、拉黑名单只保存在你自己的手机上。
- 我们不卖数据、不投广告、不接入第三方统计 SDK。
1. 我们是谁
ScreenParty（中文名"一起看电影"，下称"本服务"）由个人开发者 CadeEmber（即 Google Play 上显示的开发者名称）开发和运营，是本政策所称的个人信息处理者 / 数据控制者。
本政策适用于：Android 应用 ScreenParty（包名 com.huitongdesk.screenparty），以及在电脑或手机浏览器中使用的网页版 screenparty.huitongdesk.com。如果以后推出 iOS 版本，我们会在上线前更新本政策。
联系方式：[email protected]
网页版目前提供：看视频同步、聊天、表情、屏幕共享（电脑浏览器）、举报、拉黑、锁房和移出成员。语音聊天、白板、勋章旅程、观影纪念卡和 PRO 订阅目前只在 Android App 中提供；本政策中与这些功能有关的说明只适用于 App。
2. 我们处理哪些信息
我们按"最小必要"原则设计。下表列出了本服务处理的全部数据：
| 数据 | 什么时候产生 | 保存在哪、保存多久 | 用途 |
|---|
| 设备标识符（随机生成的编号） | 首次打开 App / 网页时自动随机生成，不包含任何设备硬件信息 | 保存在你的设备上（网页版关闭标签页即清除）；进入房间时发给服务器，房间关闭即从内存清除。购买了 PRO 的设备除外，见下方"会员记录" | 断线重连时认出"还是你"；识别 PRO 会员 |
| 匿名编号 | 由设备标识符单向计算得出 | 随房间存在于内存中 | 房间里其他人只能看到这个编号，看不到、也推算不出你的设备标识符 |
| 昵称 | 你创建或加入房间时自己填写 | 服务器内存，房间关闭即清除；你的设备上会记住上次用的昵称 | 在成员列表和聊天中显示 |
| 时区（如 Asia/Shanghai） | 进入房间时由设备系统设置自动提供 | 服务器内存，房间关闭即清除；会显示给同房间成员 | 显示"对方那边现在几点"，方便跨时区的朋友 |
| 房间内容：聊天、表情、高光时刻、白板笔画、视频链接、播放进度 | 你在房间里发送或操作时 | 服务器内存，房间里最后一个人离开即清除，不写入数据库。服务器更新重启的那几秒里，除聊天和白板以外的房间信息（昵称、设备标识符、视频链接、播放进度等）会临时写入服务器磁盘，重启后立即读取并删除，超过 2 分钟的残留会被丢弃 | 让房间里所有人实时看到同样的内容 |
| 房间密码 | 房主设置密码时 | 只保存加密哈希值，不保存明文，房间关闭即清除 | 校验加入权限 |
| 举报记录 | 你举报一条消息、一个用户或一个房间时 | 写入服务器上的举报日志：房间号、被举报的消息内容、举报理由、举报人与被举报对象的编号和昵称、时间。保存 12 个月后自动删除。新举报会同时发一封提醒邮件到开发者的工作邮箱（Gmail），方便及时处理 | 人工审核违规行为 |
| 会员记录（仅 PRO 用户） | 你通过 Google Play 购买或恢复 PRO 时 | 服务器保存：设备标识符 + 会员到期时间，会员到期 90 天后自动删除；购买凭证的哈希值（不保存原始凭证）+ 使用该会员的设备标识符及最近使用时间，某台设备 180 天未使用即删除 | 向 Google 核验订阅是否有效；执行"一份会员最多 3 台设备"的规则 |
| 服务器访问日志 | 每次网络请求 | 请求时间、访问的网址（可能包含房间号）、浏览器/系统类型、Cloudflare 节点的 IP 地址（不是你本人的 IP）。保存 14 天后自动删除 | 排查故障、防御攻击 |
| 你的 IP 地址 | 每次连接 | 由 Cloudflare 处理；我们的服务器只在内存中短暂使用（例如防止频繁创建房间），不写入日志或数据库 | 网络传输、防滥用 |
| 语音、屏幕共享的画面和声音 | 只有你主动开启时 | 不被录制、不被保存。通过 WebRTC 加密传输（DTLS-SRTP），通常在设备之间直接连接；直连不通时经过我们的中转服务器（TURN）转发，中转的是加密数据，我们无法查看，也不记录日志 | 实时语音、共享屏幕 |
只保存在你设备上的数据（不上传）
观影旅程（勋章、等级、观影时长等统计）、片单与观影历史、拉黑名单、同意条款的记录、你保存或分享的"观影纪念卡"图片。卸载 App 或清除 App 数据即可全部删除。
我们不收集的
真实姓名、手机号、邮箱、身份证件、通讯录、短信、通话记录、照片（除非你自己保存纪念卡）、精确或大致地理位置、广告标识符、银行卡等支付信息（付款全程由 Google Play 处理）。
3. App 权限说明（Android）
- 麦克风：只在你点"语音"加入语音聊天时使用。没开语音时，App 不会接听任何语音连接，也不会使用麦克风。
- 屏幕共享（录屏）：只有房主主动开启，且每次都要在系统弹窗里确认；共享期间通知栏会一直显示提醒，可以随时停止。
- 通知：用于显示"正在共享屏幕"的常驻提醒。
- 网络、Google Play 结算：连接房间、购买会员。
4. 我们如何使用这些信息
只用于：运行房间和同步播放、识别 PRO 会员、处理举报和违规、保障服务安全与排查故障。
我们不把你的信息用于广告、用户画像、出售或出租，也不用于训练人工智能模型。
5. 谁能看到你的信息
- 同房间的成员：你的昵称、匿名编号、时区、你发送的消息和表情、你画的白板内容；房主可以看到成员列表并移出成员。房间是否为 PRO 房间会显示给所有成员（我们不会显示是谁订阅的，但成员可能据此推知）。开启语音或屏幕共享时，对方设备在技术上可以获得你的 IP 地址。
- 为我们提供服务的第三方（见第 6 条），仅限提供服务所必需的范围。
- 法律要求时：在法律要求或为保护用户安全（例如涉及未成年人的犯罪线索）时，我们可能向有关机关提供必要信息。
我们不会出售你的个人信息，也不会为跨情境行为广告目的"分享"你的个人信息。
6. 第三方服务
以下第三方按各自的隐私政策处理数据，我们无法控制它们的数据处理方式：
- Google Play 结算（仅 Android，购买会员时）：付款由 Google 处理；Google Play 结算库本身会向 Google 发送结算相关的诊断信息。Google 隐私政策
- YouTube 播放器（房主分享 YouTube 链接时）：视频通过 YouTube 官方内嵌播放器加载，YouTube 可能收集观看数据。受 YouTube 服务条款和 Google 隐私政策约束。
- Cloudflare STUN 服务器（开启语音或屏幕共享时）：帮助设备之间找到对方，会看到你的 IP 地址。我们也运行自己的 STUN/中转服务器（同一台美国服务器），不记录日志。
- Cloudflare：网络加速与安全防护，会处理你的 IP 地址等网络请求信息。Cloudflare 隐私政策
- Oracle Cloud：服务器托管（美国弗吉尼亚州）。
- Gmail（Google）：只用于把新举报的提醒邮件发到开发者邮箱。
- Google Fonts、jsDelivr（仅网页版）：加载网页字体和视频播放组件，会收到你的 IP 地址和浏览器信息。
- 你自己打开的视频网站：房主输入的视频链接由视频所在网站直接提供给你的设备，那个网站会看到你的 IP 地址。
7. 保存期限与删除
- 房间内容：房间关闭即清除。
- 服务器访问日志：14 天。
- 举报记录：12 个月。
- 会员记录：会员到期后 90 天；某台设备 180 天未使用即删除该设备记录。
- 设备上的数据：卸载 App 或清除 App 数据即删除；网页版关闭标签页即清除设备标识符。
如何删除服务器上的数据：在 App 首页点"隐私与数据"→"删除我在服务器上的数据"，会立即删除这台设备的会员记录和设备记录，并把你从举报记录中的"举报人"信息里移除。如果你的订阅仍然有效，下次打开 App 时会员会被重新登记，想彻底停止请先在 Google Play 取消订阅。你也可以发邮件给我们，我们会在 30 天内处理。
被举报的违规内容可能在审核期内保留（最长 12 个月），用于处理违规行为和保护其他用户。
8. 未成年人
本服务面向一般用户，不面向 13 周岁以下的儿童（部分国家或地区为 16 周岁，以当地法律为准），也不会有意收集他们的个人信息。未满 18 周岁的用户需在监护人同意下使用。本服务没有公开房间列表，只能通过房主分享的房间号或邀请链接加入。
如果你是家长或监护人，发现孩子在未经同意的情况下使用了本服务，请联系我们，我们会尽快删除相关数据。
9. 你的权利
根据你所在地的法律，你可能享有以下权利：
- 查阅、复制、更正、删除你的个人信息（大部分数据随房间关闭自动删除，服务器上的其余数据可以在 App 内自助删除或发邮件申请）。
- 撤回同意：停止使用本服务、卸载 App 即可；撤回同意不影响撤回之前基于同意进行的处理。
- 欧盟 / 英国用户（GDPR）：我们处理数据的法律依据是：履行与你的服务合同（运行房间、提供会员）；正当利益（安全防护、处理举报、访问日志）；法律义务。你还享有限制处理、反对处理、数据可携带的权利，并可以向所在地的数据保护监管机构投诉。
- 美国用户（如加州 CCPA/CPRA 等州法）：你有权了解、删除、更正我们收集的个人信息；我们不出售、不为定向广告分享个人信息；你行使权利不会受到任何区别对待。
- 中国大陆用户（《个人信息保护法》）：你享有知情权、决定权、查阅复制权、更正补充权、删除权、撤回同意权，以及要求我们解释处理规则的权利。
行使权利请发邮件至 [email protected]，我们会在 30 天内回复。因为本服务没有账号，为了找到属于你的数据，我们可能需要你提供房间号、时间等信息，或引导你使用 App 内的自助删除功能。
10. 数据存放地点与跨境传输
本服务的服务器位于美国弗吉尼亚州（Oracle Cloud），并通过 Cloudflare 的全球网络传输。无论你身在哪里，你的数据都会被传输到美国处理。
中国大陆用户：使用本服务意味着你的昵称、时区、房间内容、设备标识符等个人信息会被传输至境外（美国）处理，境外接收方即本政策第 1 条所列的开发者，处理目的和方式见本政策第 2、4 条，你可以按第 9 条的方式向我们行使权利。App 会在首次使用时单独征求你对跨境传输的同意；如果不同意，请不要使用本服务。
欧盟 / 英国用户：数据会被传输到欧洲经济区以外（美国）处理，该传输是向你提供服务所必需的。
11. 数据安全
- App、网页与服务器之间的通信全部使用 HTTPS / WSS 加密。
- 设备标识符只在你的设备和服务器之间传递，从不展示给其他用户。
- 房间密码只保存哈希值；购买凭证只保存哈希值。
- 语音和屏幕共享使用 WebRTC 标准的 DTLS-SRTP 加密。
- 只有开发者本人可以访问服务器。
任何系统都无法保证绝对安全。如果发生可能影响你的个人信息安全事件，我们会依照适用法律的要求通知你和有关部门。
12. 屏幕共享安全提醒
- 只对你信任的人共享屏幕。房间虽然是邀请制，但邀请链接一旦外泄，陌生人也可能进入。房主可以锁定房间、移出成员。
- 共享时不要打开短信验证码、银行或支付 App、密码管理器等敏感界面。
- 如果有人以任何理由要求你"开启屏幕共享"然后去操作银行或支付 App，这几乎可以肯定是诈骗，请立即停止共享并举报。
13. 政策更新
我们可能会更新本政策，并修改页面顶部的"最后更新"日期。如有重大变更（例如新增收集的数据类型），我们会在 App 内提示你。
开发者：CadeEmber（个人开发者）
邮箱：[email protected]
相关文件：服务条款
Privacy Policy
Effective: September 26, 2026 · Last updated: October 9, 2026
The short version
- No account needed. We don't collect your name, phone number, email, or contacts.
- Room content (chat, whiteboard, video links) lives only in server memory and is gone when the room closes. It is never written to a database.
- Voice and screen sharing are never recorded or stored. They usually connect devices directly, and then other people in the room can technically see your IP address; when a direct connection fails, encrypted data is relayed through our server, which can't read it.
- Badges, watch history, your watch list and your block list stay on your own phone.
- We don't sell data, don't show ads, and use no third-party analytics SDKs.
1. Who we are
ScreenParty (Chinese name "一起看电影", "the Service") is developed and operated by the individual developer CadeEmber (the developer name shown on Google Play), who is the data controller for the purposes of this policy.
This policy covers the Android app ScreenParty (package com.huitongdesk.screenparty) and the web version at screenparty.huitongdesk.com in desktop and mobile browsers. If an iOS version is released, we will update this policy before launch.
Contact: [email protected]
The web version currently offers synced video, chat, reactions, screen sharing (desktop browsers), reporting, blocking, room lock and removing members. Voice chat, the whiteboard, badges/journey, memory cards and the PRO subscription are currently Android-app only; the parts of this policy about those features apply to the app.
2. What we process
We collect as little as possible. This table lists everything the Service processes:
| Data | When | Where it's kept, and for how long | Why |
|---|
| Device identifier (a random ID) | Generated randomly the first time you open the app or site; contains no hardware information | On your device (the web version clears it when you close the tab); sent to the server when you enter a room and removed from memory when the room closes. Except for PRO devices, see "Membership records" | Recognizing you after a reconnect; identifying PRO members |
| Anonymous ID | Derived one-way from the device identifier | In memory for the room's lifetime | It's all other room members see. Your device identifier can't be seen or worked out from it |
| Nickname | Typed by you when creating or joining a room | Server memory, cleared when the room closes; your device remembers your last nickname | Shown in the member list and chat |
| Time zone (e.g. America/New_York) | Provided by your device settings when you enter a room | Server memory, cleared when the room closes; shown to others in the room | Showing "it's 1am for them" to friends in other time zones |
| Room content: chat, reactions, highlights, whiteboard strokes, video links, playback position | When you send or do something in a room | Server memory, cleared when the last person leaves; never written to a database. During the few seconds of a server update restart, room info other than chat and whiteboard (nicknames, device identifiers, video link, playback position, etc.) is briefly written to the server's disk, then read back and deleted as soon as it restarts; anything older than 2 minutes is discarded | Letting everyone in the room see the same thing in real time |
| Room password | When a host sets one | Only a hash, never the plain text; cleared when the room closes | Checking who may join |
| Reports | When you report a message, user or room | Written to the server's report log: room code, reported message text, reason, reporter's and target's IDs and nicknames, time. Deleted automatically after 12 months. New reports are also emailed to the developer's work mailbox (Gmail) so they're handled promptly | Human review of abuse |
| Membership records (PRO only) | When you buy or restore PRO via Google Play | Device identifier + membership expiry, deleted 90 days after the membership ends; a hash of the purchase token (never the token itself) + the device identifiers using that membership and when each was last used, each device removed after 180 days unused | Verifying the subscription with Google; enforcing "up to 3 devices per membership" |
| Server access logs | Every network request | Time, URL requested (may include a room code), browser/OS type, and the IP address of a Cloudflare node (not your own IP). Deleted automatically after 14 days | Troubleshooting and defending against attacks |
| Your IP address | Every connection | Handled by Cloudflare; our server only uses it briefly in memory (e.g. to rate-limit room creation) and never logs or stores it | Delivering traffic; preventing abuse |
| Voice and screen-share audio/video | Only when you turn them on | Never recorded or stored. Encrypted with WebRTC's DTLS-SRTP and usually sent directly between devices; when a direct connection isn't possible it's relayed through our TURN server, which forwards only encrypted data we can't read and keeps no logs | Real-time voice and screen sharing |
Data that stays on your device (never uploaded)
Your journey (badges, level, watch-time stats), watch list and history, block list, your record of accepting the terms, and any memorial-card images you save or share. Uninstalling the app or clearing its data deletes all of it.
What we don't collect
Real name, phone number, email, government ID, contacts, SMS, call logs, photos (unless you save a memorial card yourself), precise or approximate location, advertising ID, or payment card details (Google Play handles all payments).
3. App permissions (Android)
- Microphone: only used after you tap "Voice" to join voice chat. When voice is off, the app answers no voice connections and doesn't use the microphone.
- Screen capture: only when the host turns on screen sharing, confirmed in a system dialog every time; a notification stays visible the whole time and sharing can be stopped at any moment.
- Notifications: for the ongoing "screen sharing" notice.
- Network, Google Play Billing: joining rooms and buying membership.
4. How we use information
Only to run rooms and sync playback, identify PRO members, handle reports and abuse, keep the Service secure, and fix problems.
We do not use your information for advertising or profiling, we do not sell or rent it, and we do not use it to train AI models.
5. Who can see your information
- People in the same room: your nickname, anonymous ID, time zone, the messages and reactions you send, and what you draw on the whiteboard. The host sees the member list and can remove members. Everyone in a room can see whether it's a PRO room (we never show who subscribed, but members may be able to infer it). While you use voice or screen sharing, other devices can technically obtain your IP address.
- Service providers listed in section 6, only as needed to run the Service.
- When the law requires it, or to protect users' safety (for example, evidence of crimes involving minors), we may disclose necessary information to authorities.
We do not sell your personal information and do not "share" it for cross-context behavioral advertising.
6. Third-party services
These services process data under their own privacy policies, which we don't control:
- Google Play Billing (Android, when buying membership): Google processes the payment; the Play Billing library itself sends billing diagnostics to Google. Google Privacy Policy
- YouTube player (when a host shares a YouTube link): videos load in YouTube's official embedded player, and YouTube may collect viewing data. Governed by the YouTube Terms of Service and the Google Privacy Policy.
- Cloudflare STUN server (voice and screen sharing): helps devices find each other and sees your IP address. We also run our own STUN/relay server (on the same US server), which keeps no logs.
- Cloudflare: network delivery and security; processes your IP address and request details. Cloudflare Privacy Policy
- Oracle Cloud: server hosting (Virginia, USA).
- Gmail (Google): only used to email new-report alerts to the developer's mailbox.
- Google Fonts, jsDelivr (web version only): load fonts and the video player library; they receive your IP address and browser details.
- Video sites you watch: a video link the host enters is served straight from that site to your device, and that site sees your IP address.
7. Retention and deletion
- Room content: deleted when the room closes.
- Server access logs: 14 days.
- Reports: 12 months.
- Membership records: 90 days after the membership ends; a device's record is removed after 180 days unused.
- On-device data: deleted when you uninstall or clear app data; the web version clears its device identifier when you close the tab.
Deleting your data from our server: on the app's home screen, tap "Privacy & data" → "Delete my data on the server". This immediately deletes this device's membership and device records and removes you as the reporter from any reports you filed. If your subscription is still active, membership is registered again the next time you open the app, so cancel in Google Play first if you want it gone for good. You can also email us; we respond within 30 days.
Reported content may be kept for up to 12 months while it's reviewed, to deal with abuse and protect other users.
8. Children
The Service is for a general audience and is not directed to children under 13 (16 in some countries, according to local law). We do not knowingly collect their personal information. Users under 18 need a parent's or guardian's permission. There is no public room list; rooms can only be joined with a code or invite link from the host.
If you're a parent or guardian and believe your child used the Service without permission, contact us and we'll delete the relevant data promptly.
9. Your rights
Depending on where you live, you may have the right to:
- Access, copy, correct, or delete your personal information. Most data is deleted automatically when a room closes; the rest can be deleted in the app or by emailing us.
- Withdraw consent by stopping use of the Service and uninstalling the app. This doesn't affect processing that happened before.
- EU/UK (GDPR): our legal bases are performance of our contract with you (running rooms, providing membership), legitimate interests (security, handling reports, access logs), and legal obligations. You also have the rights to restrict or object to processing and to data portability, and you may complain to your local data protection authority.
- US (e.g. California CCPA/CPRA and other state laws): you may know, delete, and correct the personal information we collect. We don't sell or share personal information for targeted advertising, and we won't treat you differently for exercising your rights.
- Mainland China (PIPL): you have the rights to be informed, to decide, to access and copy, to correct and supplement, to delete, to withdraw consent, and to have our processing rules explained.
To exercise your rights, email [email protected]. We respond within 30 days. Because there are no accounts, we may ask for a room code and time to find your data, or point you to the in-app deletion option.
10. Where data is stored and international transfers
Our servers are in Virginia, USA (Oracle Cloud), reached through Cloudflare's global network. Wherever you are, your data is transferred to and processed in the United States.
Users in mainland China: using the Service means your nickname, time zone, room content and device identifier are transferred abroad (to the USA). The overseas recipient is the developer named in section 1; purposes and methods are in sections 2 and 4; you can exercise your rights as described in section 9. The app asks for your separate consent to this transfer on first use; if you don't agree, please don't use the Service.
Users in the EU/UK: your data is transferred outside the European Economic Area (to the USA); the transfer is necessary to provide the Service to you.
11. Security
- All traffic between the app, website and server uses HTTPS/WSS.
- Your device identifier travels only between your device and our server and is never shown to other users.
- Room passwords and purchase tokens are stored only as hashes.
- Voice and screen sharing use WebRTC's standard DTLS-SRTP encryption.
- Only the developer has access to the server.
No system is perfectly secure. If a security incident may affect your personal information, we will notify you and the authorities as applicable law requires.
12. Screen-sharing safety
- Only share your screen with people you trust. Rooms are invite-only, but a leaked invite link lets strangers in. Hosts can lock rooms and remove members.
- Don't open SMS codes, banking or payment apps, or password managers while sharing.
- If someone asks you, for any reason, to turn on screen sharing and then open a banking or payment app, it's almost certainly a scam. Stop sharing and report them.
13. Changes
We may update this policy and change the "Last updated" date at the top. For significant changes, such as new types of data collected, we'll let you know in the app.
14. Contact
Developer: CadeEmber (individual developer)
Email: [email protected]
See also: Terms of Service