1. Scope and your account
Xiangqi members use an ABORRO master account, which may also be used in other ABORRO games or services. Deleting your account in Xiangqi deletes that entire ABORRO master account. It is not simply leaving Xiangqi, disabling sign-in or hiding your results.
Some game features use a guest identifier when you are not signed in. Guest identifiers are separate from member accounts; visits and server operations can still generate records.
2. Information we handle
- Account and authentication: internal account ID, username, nickname, email or phone number you provide, password hashes, sign-in sessions, device and browser information, IP address and enabled account security settings. ABORRO does not need your Apple, Google or WeChat password.
- Third-party sign-in: depending on the service and your authorization, we receive a provider identifier, name or nickname, email (which may be an Apple relay address) and profile image. We retain account links and credentials needed to verify, maintain or revoke authorization. A provider may not send your name or email again on every sign-in.
- Games and personal items: players, standard board coordinates and move history, times, results, statistics, level, Pineapple balance and changes, avatars and inventory, tournament registration, check-in, rankings and certificates. Content you submit during online interactions is handled by the relevant features.
- Visits and diagnostics: while the app is in the foreground, it sends random session and visit IDs, page or module, entry and exit times, and heartbeats. Servers can record IP address, country or region, app/iOS version in the User-Agent, last activity and visit duration. These records support usage statistics, connection troubleshooting and security; random IDs do not make them fully anonymous.
- Cloud computer play: when cloud playing strength is used, the current board position and difficulty are sent to ABORRO's Xiangqi calculation service to obtain a move. Requests also expose ordinary connection information such as IP address. Single-player mode does not mean that all computation takes place on your device.
- On-device information: the app stores language, sound and display preferences, sign-in credentials, necessary personal-data caches and local game records. Account credentials use system secure storage; not every category of local data is uploaded.
3. Why we process information
We use this information to create and authenticate accounts, restore sign-in, provide play and reconnection, synchronize records and statistics, manage avatars and items, run tournaments, process deletion requests, diagnose faults and prevent abuse. Visit records help us understand feature use and service reliability.
The current Xiangqi iOS version does not integrate advertising identifiers or SDKs for advertising tracking across apps. Reading this policy does not constitute consent to Ultra membership, paid subscriptions or product services that have not been introduced. Additional collection purposes or features will be explained separately.
5. Storage and retention
While an account is active, we keep account information, game records, statistics, items and security information needed to provide the services. Local preferences, caches and game records are kept by their respective features. Signing out does not delete the server account.
Closed deletion receipts, including failed requests, are automatically cleared under a 90-day retention rule to confirm outcomes and prevent duplicate execution. After deletion is completed, the receipt contains only internal IDs, times, status, source and hashes, not usernames, sign-in tokens or raw personal profiles. In-progress records remain until processing finishes and may temporarily contain addresses or locators of files awaiting deletion, solely to complete that cleanup. The file plan is cleared when processing completes. Processing records and hashes remain protected information.
To prevent old credentials or legacy compatibility routes from recreating a deleted identity, we also retain a SHA-256 hash of the normalized username and the deletion time, without the plain-text username or account ID. This is separate from the 90-day processing receipt. No automatic expiry is currently set; retention is limited by the continuing need to prevent this legacy identity-restoration risk. It is not an account that can be restored. A hash is not necessarily anonymous, so this is protected as a restricted security record.
The next section describes shared game and tournament records. Ordinary network logs and backups are not promised to be erased immediately together with account deletion, and there is no single automatic deletion interval for them. We determine necessary retention based on recovery, security investigations and applicable legal requirements, restrict access, and delete information or remove identifying details when no longer needed. Contact us below to ask about retention relating to you or submit a request.
6. Delete your entire ABORRO account
Start in the app under Settings → Privacy and Account → Delete Account. The process verifies your current sign-in and asks for confirmation to prevent misuse. Normal deletion does not require a support email first. If the network fails, follow the screen instructions to retry or check the result.
Deletion can take time. If files in associated services still need cleanup, the request remains processing; invalidating sign-in alone does not mean deletion is complete. Rely on the final server result. After a network interruption, you can continue checking the same request.
Once deletion is confirmed as successful, the master account, identity details, credentials and sessions, third-party account links, personal statistics and game wallet, avatars and items are removed from operational account systems. Old sign-in credentials stop working, and the current app clears related account caches and returns to a signed-out state. Other ABORRO services using that account are affected. Signing in again cannot restore deleted personal information, balances or items.
Necessary factual records in shared games and tournaments may remain to preserve opponents' legitimate game records and the structure of pairings and results. The deleted account's direct identity links are removed and replaced with a deletion marker. This does not guarantee that historical facts can never identify someone: a former opponent may still recognize a game. We do not describe this as absolute anonymity.
For an account that used Sign in with Apple, the server requests revocation from Apple when usable authorization credentials are available. If a historical account has no retained token suitable for revocation, we still delete the ABORRO account and show how to stop the app's Apple authorization manually in Apple Account settings. Deleting ABORRO does not delete your Apple, Google or WeChat account.
For guest or on-device data, or visits not directly linked to a member account, contact us below and describe the scope of your request. Do not email passwords, sign-in tokens or Apple authorization credentials.
7. Your choices and requests
Use available account and profile features to view or correct information, or delete your account in the app. You may also email our privacy contact to request access, correction, deletion, information about processing, or other rights available under applicable law. We verify identity in proportion to the request and explain why any part cannot be fulfilled.
You can manage third-party authorization with the relevant provider. Revoking that authorization, uninstalling the app or signing out does not itself replace the ABORRO deletion process. Contact us if you believe a minor has provided personal information without appropriate authorization.
8. Security and network services
We use measures such as HTTPS transport protection, account access controls, password hashing and system secure storage to reduce risks. No network system can guarantee absolute security. Do not share account credentials.
Your network, sign-in providers or other services may process requests in different countries or regions. A Chinese-language website or a company address in China is not a guarantee that all data is processed only in one location. Contact us if you need information about the services involved in a particular request.
9. Contact and policy changes
Operator: 阿菠罗（上海）科技有限公司. Address: 778 Chuangxin West Road, China (Shanghai) Pilot Free Trade Zone, China. Privacy and account-data requests: nanxuezhu@aborro.com.
This page presents the latest published policy. Material changes to information processing will be communicated appropriately, with authorization obtained where needed. The five language pages describe the same scope of processing. Please contact the address above if you notice a translation inconsistency.