Privacy Policy

Yipzo (yipzo.app) is run by Kamran, an individual in Taipei, Taiwan (“we”, “us”). As Taiwan’s Personal Data Protection Act requires, this policy explains what personal data we collect, why, how long we keep it, who else handles it and what your rights are. Last updated 27 October 2026.

Who is responsible

Kamran, who runs Yipzo in Taipei, Taiwan, is responsible for your personal data. Contact: contact@yipzo.app.

What we collect and why

• Your account. Your email address, the name you give (optional), your password stored only as a one-way hash that we cannot read back, your Google account ID if you sign in with Google, your preferred language, and when you joined and last signed in. We use it to run your account, sign you in and email you about your account and your events.
• Events you post. Everything you enter in the event form, its review status and our messages to you. We use it to review your event and, once it is approved, show it on the events page. Your name and email address are never shown there.
• Events you are interested in. When you mark an event Interested, we keep a copy of it (name, dates, place and link) with your account so it shows under My events. Only you can see this list, and you can remove events from it at any time.
• Reports of events that are no longer happening. Anyone can report an event, with or without an account. We keep the event’s details, the note you write (if any) and the time, and email them to the Yipzo team so we can check the listing. If you are signed in, the report is linked to your account.
• Reports of wrong answers in the scooter tests. If you report a written test question or the road test as wrong, we keep which question it was, the note you write (if any), the language you were using and the time, and email them to the Yipzo team so we can check it. Nothing in the report says who you are.
• Scooter road test score sheets. The road test simulator works without giving us anything. If you ask for a copy of your score sheet by email, we keep the address you enter with that score sheet (score, mode, time and deductions), the language you used, the country your connection comes from and when you asked, and we use the address to send the copy. One address gets at most five copies a day.
• News and offers, only if you agree. Only if you tick the box under the score sheet form do we also send you news and offers from Yipzo, such as new road test simulators and licence tips. We record when you agreed and the wording you saw. Every such email has an unsubscribe link (the link at the bottom of the score sheet email works too), and we stop as soon as you use it.
• Sign-in and security data. Random sign-in codes (we keep only their hashes) and your IP address, which counts sign-in attempts, reports and score sheet requests for a short time to stop abuse. Our host, Cloudflare, also keeps short-lived security logs.
• Visit statistics. Google Analytics records the pages you open, the events and game levels you click, words typed into the events search, and your device, browser, approximate location and IP address. We use it to learn what people find useful.

In the terms of Taiwan’s data law, our purposes are 040 marketing (only for news you agreed to), 069 contract and similar relationship affairs, 090 customer management and service, 135 information and communication services, 136 information and database management, and 157 statistics and research analysis. The data is in categories C001 (data identifying individuals) and C035 (leisure activities and interests).

If you don’t give us data

You can browse events, practise for the scooter test and play the card game without giving us anything. To create an account we need your email address and a password (or a Google account); without them you can’t sign up, save events or post events. Your name and a report’s note are optional. Without an email address we can’t send you a score sheet, and news is entirely optional.

Cookies and browser storage

• __Host-yipzo_s keeps you signed in, for up to 60 days, and is removed when you sign out.
• __Host-yipzo_g protects a Google sign-in while it is under way, for 10 minutes.
• Google Analytics cookies (_ga, _ga_…) tell visits apart, for up to 2 years. You can block them in your browser settings or with Google’s opt-out add-on.
• Your theme and language, which events you have reported, the address you used for score sheets, and your card game and scooter test progress are saved only in your browser. We never receive them from there.

Who else handles your data

Service providers process data for us: Cloudflare (hosting, the database of accounts and score sheets, and sending our emails), Google (Google sign-in, if you choose it, and Google Analytics) and, only for people who agreed to news, an email newsletter service that sends it. Their servers may be outside Taiwan, for example in the United States. We do not sell your data or give it to anyone else, unless the law requires it, for example a court order.

How long we keep it

• Your account, your posted events and your Interested list: for as long as your account exists. When you delete your account, we delete them straight away; copies in our host’s backups are gone within 30 days. Reports you sent stay, without your name.
• Reports: for as long as we need them to check the listing or the question.
• A score sheet address and its score sheets: until you ask us to delete them. Agreement to news lasts until you unsubscribe.
• Sign-in links stop working after 48 hours (email confirmation) or 1 hour (password reset), and sign-in sessions after 60 days.
• Google Analytics keeps visit statistics for at most 14 months.
• If we ban an account, we keep it and the reason for as long as the ban is needed.

Your rights

Under Article 3 of Taiwan’s Personal Data Protection Act, you can ask us to:

• tell you what data we have about you, and let you see it;
• give you a copy;
• correct or complete it;
• stop collecting, processing or using it;
• delete it.

You can delete your account yourself under My account, and stop news with the unsubscribe link in any email. For anything else, including deleting a score sheet address, email contact@yipzo.app from the address concerned. We reply to requests to see or copy your data within 15 days, and to requests to correct, stop using or delete it within 30 days. If we need longer, we tell you why and extend only once, by no more than the same period. These requests are free.

Security

Passwords and sign-in codes are stored only as hashes, every connection is encrypted (HTTPS), and only Kamran can see member data. If your data is ever stolen, leaked or changed without permission, we will tell you by email as soon as we can, as the law requires, and report it to the authorities where required.

Children

Yipzo is for a general audience. If you are under 18, ask a parent or guardian before you create an account. The card game’s spicier levels are for adults (18+) only.

Changes

If we change this policy, we update the date at the top. For important changes we also email members.

Contact

contact@yipzo.app · See also our Terms of Use.

Yipzo（yipzo.app）由住在台灣台北的個人 Kamran 經營（以下稱「我們」）。依台灣《個人資料保護法》的規定，本政策說明我們蒐集哪些個人資料、蒐集目的、保存期間、還有誰會處理，以及你的權利。最後更新：2026 年 10 月 27 日。

誰負責你的資料

經營 Yipzo 的 Kamran（台灣台北）負責管理你的個人資料。聯絡方式：contact@yipzo.app。

我們蒐集的資料與目的

• 你的帳號。電子郵件地址、你填寫的名字（可不填）、經單向雜湊處理的密碼（我們無法還原讀取）、使用 Google 登入時的 Google 帳號 ID、偏好語言，以及註冊和最近登入的時間。用於經營你的帳號、讓你登入，以及寄送與你的帳號和活動有關的信件。
• 你刊登的活動。你在活動表單中填寫的所有內容、審核狀態，以及我們給你的訊息。用於審核活動，並在通過後顯示於活動頁。你的名字和電子郵件地址不會顯示在活動頁上。
• 你有興趣的活動。當你把活動標記為「有興趣」，我們會把它的副本（活動名稱、日期、地點和連結）和你的帳號一起保存，讓它出現在「我的活動」中。這份清單只有你看得到，你隨時可以移除。
• 回報活動已不再舉行。任何人都可以回報活動，不需要帳號。我們會保存活動資訊、你寫的備註（如有）和回報時間，並以電子郵件通知 Yipzo 團隊確認。如果你已登入，回報會和你的帳號連結。
• 回報機車考試的答案有誤。如果你回報某一題筆試或路考內容有誤，我們會保存是哪一題、你寫的備註（如有）、你使用的語言和回報時間，並以電子郵件通知 Yipzo 團隊確認。回報內容不會顯示你是誰。
• 機車路考評分表。使用路考模擬器不需要提供任何資料。如果你要我們把評分表寄給你，我們會保存你輸入的電子郵件地址和那份評分表（分數、模式、時間和扣分項目）、你使用的語言、連線所在的國家和索取時間，並用這個地址寄出評分表。同一個地址每天最多收到五份。
• 最新消息和優惠（只在你同意時）。只有在你勾選評分表表單下方的方框時，我們才會寄 Yipzo 的最新消息和優惠給你，例如新的路考模擬器和考照小技巧。我們會記錄你同意的時間和當時看到的文字。每封這類信件都有取消訂閱連結（評分表信件底部的連結也可以使用），你取消後我們會立即停止寄送。
• 登入與安全資料。隨機產生的登入代碼（我們只保存其雜湊值），以及你的 IP 位址（短暫用於計算登入、回報和索取評分表的次數，以防止濫用）。我們的主機服務商 Cloudflare 也會短期保存安全紀錄。
• 造訪統計。Google Analytics 會記錄你開啟的頁面、點選的活動和遊戲關卡、在活動搜尋框輸入的文字，以及你的裝置、瀏覽器、大致位置和 IP 位址。用於了解大家覺得哪些內容有用。

依個人資料保護法的分類，蒐集目的為：〇四〇 行銷（僅限你同意接收的最新消息）；〇六九 契約、類似契約或其他法律關係事務；〇九〇 消費者、客戶管理與服務；一三五 資（通）訊服務；一三六 資（通）訊與資料庫管理；一五七 調查、統計與研究分析。個人資料類別為 C001 辨識個人者及 C035 休閒活動及興趣。

如果你不提供資料

瀏覽活動、練習機車駕照考試和玩卡牌遊戲，都不需要提供任何資料。建立帳號需要電子郵件地址和密碼（或 Google 帳號），不提供就無法註冊、收藏活動或刊登活動。名字和回報的備註可不填。不提供電子郵件地址就無法寄送評分表；最新消息則完全自由選擇。

Cookie 與瀏覽器儲存

• __Host-yipzo_s：讓你保持登入，最長 60 天，登出時刪除。
• __Host-yipzo_g：在 Google 登入進行中保護登入流程，保存 10 分鐘。
• Google Analytics 的 Cookie（_ga、_ga_…）：用來區分不同的造訪，最長 2 年。你可以在瀏覽器設定中封鎖，或使用 Google 的停用外掛程式。
• 你選擇的主題和語言、你回報過哪些活動、你用來索取評分表的地址，以及卡牌遊戲和機車考試的進度，只儲存在你的瀏覽器中，我們不會從那裡取得。

還有誰會處理你的資料

我們委託服務商代為處理資料：Cloudflare（網站主機、帳號和評分表資料庫，以及寄信）、Google（你選擇 Google 登入時，以及 Google Analytics），以及僅針對同意接收最新消息的人，代為寄送的電子報服務。他們的伺服器可能位於台灣以外，例如美國。我們不會出售你的資料，也不會提供給其他任何人，除非法律要求，例如法院命令。

保存期間

• 帳號、你刊登的活動和「有興趣」清單：帳號存在期間都會保存。你刪除帳號時，我們會立即刪除；主機備份中的副本會在 30 天內消失。你送出的回報會保留，但不再連結你的名字。
• 回報：在確認活動資訊或題目所需的期間內保存。
• 評分表的地址和評分表：保存到你要求刪除為止。同意接收最新消息的效力持續到你取消訂閱為止。
• 登入連結在 48 小時（確認電子郵件）或 1 小時（重設密碼）後失效；登入狀態在 60 天後失效。
• Google Analytics 的造訪統計最多保存 14 個月。
• 遭停權的帳號及停權原因，會在停權需要的期間內保存。

你的權利

依《個人資料保護法》第三條，你可以向我們請求：

• 查詢或請求閱覽你的資料；
• 請求製給複製本；
• 請求補充或更正；
• 請求停止蒐集、處理或利用；
• 請求刪除。

你可以在我的帳號自行刪除帳號，也可以用任何一封信中的取消訂閱連結停止接收最新消息。其他請求（包括刪除評分表的地址），請用相關的電子郵件地址寄信至 contact@yipzo.app。查詢、閱覽或製給複製本的請求，我們會在 15 天內回覆；補充、更正、停止利用或刪除的請求，會在 30 天內回覆。如需延長，我們會告知原因，且只延長一次，延長期間不超過原期間。這些請求一律免費。

資料安全

密碼和登入代碼只以雜湊值保存，所有連線都經過加密（HTTPS），而且只有 Kamran 能看到會員資料。若你的資料遭竊取、洩漏或未經授權竄改，我們會依法儘快以電子郵件通知你，並在法律要求時通報主管機關。

未成年人

Yipzo 適合一般大眾。未滿 18 歲者，請先徵得父母或監護人同意再建立帳號。卡牌遊戲較火辣的關卡僅限 18 歲以上的成年人。

政策變更

本政策如有變更，我們會更新頂端的日期；重大變更也會寄信通知會員。

聯絡我們

contact@yipzo.app · 另請參閱使用條款。