最后更新：2026 年 10 月 23 日
Galplay 是在 iPhone 和 iPad 上运行用户自行导入的 Ren'Py、Kirikiri、ONScripter 等引擎视觉小说的播放器。应用不要求账号，没有广告、第三方分析或追踪 SDK；不会把游戏文件、存档或游戏文本上传到 Galplay 的服务器。为提供试用和购买功能，App 会自动与 Galplay 权益服务同步第 7 节所述的 Apple 交易信息；查询公告时会附带第 2 节所述的 App 与设备信息；游玩时会发送第 8 节所述的启动统计（游戏标题、引擎、游玩时长）。只有你主动提交适配需求，或在游戏失败提示中点「确定」时，App 才会把第 6 节所述的信息发送给 Galplay。
以下内容保存在 App 沙盒或你明确选择的外部文件夹中；除第 6 节所述、由你确认发送的游戏名称，以及第 8 节所述的游戏标题与游玩时长外，Galplay 不会把它们上传到自有服务器。你主动使用备份或传输时，文件会送往你选择的位置：
删除 App 会删除其沙盒内的数据；外部文件夹中的文件由你自行管理。
导入的游戏可能按其自身设计联网。
Galplay 仅在下列功能中联网；公告列表、游戏适配表和权益状态（第 7 节）会在打开 App 时自动更新，启动统计（第 8 节）在游玩时自动发送，其他传输、查询与提交由你选择使用：
当你为作品匹配资料时，App 会向以下服务发送你查询的作品名称：
| 服务 | 用途 |
|---|---|
VNDB (api.vndb.org) |
视觉小说资料 |
IGDB (api.igdb.com)，经 Twitch 授权 (id.twitch.tv) |
游戏资料 |
SteamGridDB (steamgriddb.com) |
封面图片 |
查询会向相应服务发送作品名称。这些服务有各自的隐私政策，不受我们控制。
打开 App 后可能从 Galplay 公告服务获取公告，使用 App 当前语言；你点赞时会提交公告编号，不要求账号。已点赞记录只保存在本机，不跨设备同步。
若 App 已从权益服务取得你的 Galplay ID（GP ID，见第 7 节），查询公告时会同时查询发给你的个人消息（例如客服补偿的游玩时间），并附带 GP ID、App 版本、系统版本、设备型号（例如 iPhone17,2）、App Store 地区和 App 语言。服务器为该 GP ID 保存最近一次查询的时间和这些信息，用于客服支持和兼容问题排查；不发送设备标识符或广告标识符。
若你自行配置了 WebDAV 服务器，App 会把存档文件上传到你指定的服务器。服务器地址、用户名与密码保存在你设备的系统钥匙串／偏好存储中，不会发送给我们或任何第三方。数据流向完全由你决定。
启用后，App 会在你的设备上开启一个临时的本地 HTTP 服务，供同一局域网内的浏览器传入游戏或存档文件。关闭传输页面后服务停止，文件不会经此功能上传到 Galplay 的服务器。
若你通过「文件」选择了一个外部文件夹作为备份位置，存档会写入该文件夹。 Galplay 仅在你明确配置、备份、浏览、恢复或删除时访问该文件夹；若文件夹位于 iCloud Drive，后续同步由 iOS 管理。WebDAV 和网盘游戏导入仍在开发中，与现有的 WebDAV 存档备份不同。
App 会从 Galplay 自己的服务（api.galplay.cn 或 galplay.fuckk.me，视你的地区而定）获取游戏适配表。只有在下列两种情况下，App 才会向该服务提交信息：
手动提交适配需求。你在「提交适配需求」中提交时，App 发送你填写的游戏名称、平台和备注。
游戏失败诊断报告。游戏启动或运行失败时，App 会弹出失败提示。只有你每次在提示中点「确定」，App 才会发送这一次失败的诊断报告；点「取消」或关闭提示不会发送任何内容，诊断记录只保留在本机。报告包含：
报告可包含少量最近显示的剧情文本（可能含你设置的游戏内名称）、失败前的关键操作，以及 当时的游戏进度信息，以帮助定位问题；不包含整份游戏脚本、游戏文件、存档、键盘输入流、设备上的绝对文件路径、网址或账号凭据；App 发送前会移除绝对路径、网址和类似密钥的内容；必要的游戏内相对资源名称可能保留。报告也不包含设备标识符或广告标识符。若发送时网络不可用， App 会在本机暂存这份已确认的报告并稍后重试，重试次数有上限。
诊断报告可能附带与该次失败相关的运行日志，发送内容有大小限制，超出部分不会发送；报告在后台发送。
若 App 已从权益服务取得你的 Galplay ID（GP ID，见第 7 节），适配需求和诊断报告会附带它，以便你联系我们时找到对应记录；这些记录因此与你的 GP ID 关联。
提交后，App 会用服务器返回的请求编号查询处理状态和开发者回复；「我的需求」列表只保存在本机。
用途。这些信息只用于排查兼容问题、为游戏增加支持和回复你的请求；不用于广告或追踪，不出售。服务运行在阿里云（中国大陆，深圳）的服务器上，适配需求、诊断报告及其索引、权益记录和启动记录存储在该服务器上，服务器数据的异地备份存放在 Cloudflare 的私有 R2 中。海外地区的请求会先经过 Cloudflare 转发到该服务器，Cloudflare 会处理你的 IP 地址等连接信息以传输请求；除阿里云、Cloudflare 作为托管与传输服务商外，不与第三方共享。Galplay 的数据库不保存 IP 地址。
保留与删除。适配需求和诊断索引保存在服务器上，在删除前会一直保留。如需删除，请发邮件到下方联系地址，写明游戏名称和提交时间（可在「我的需求」中查看）；如有 GP ID 也请一并提供。新版压缩报告保留 180 天后删除；需求记录、索引和旧版报告不因此自动删除。我们会删除对应的需求及其诊断报告。
Galplay 提供 7 天免费试用和 App 内购买（限时通行证与永久解锁）。购买和付款由 Apple 通过 App Store 处理；Galplay 不会收到你的 Apple 账户名称、邮箱或付款信息。
为确认你的使用权益，App 在打开或回到前台、启动游戏、购买和恢复购买时，会把以下信息发送到 Galplay 权益服务（pay.galplay.cn 或 galplay-pay.fuckk.me，视你的地区而定）：
权益服务会通过 Apple 的 App Store Server API 核对这些交易并读取本 App 的购买历史，也会接收 Apple 发送的购买、退款和撤销通知。服务器保存：App Transaction ID、GP ID、试用开始时间及其凭证、本 App 的购买记录（交易编号、商品、购买日期、退款／撤销日期、购买前剩余时长）、早期付费版的购买资格（首次购买日期与版本）、Apple 通知记录，以及客服调整记录（例如补偿时长或永久权益，包括操作原因）。App 中的退款提醒由这些记录生成。
Galplay ID（GP ID）。首次同步时，服务器根据 App Transaction ID 生成一个以 GP- 开头的短编号，显示在 App 中，供你联系我们时提供。它也会附在你之后提交的适配需求和失败诊断报告中（见第 6 节）。
用途。这些信息只用于验证和恢复你的权益、处理退款以及客服支持；不用于广告或追踪，不出售。服务运行在阿里云（中国大陆，深圳）的服务器上，适配需求、诊断报告及其索引、权益记录和启动记录存储在该服务器上，服务器数据的异地备份存放在 Cloudflare 的私有 R2 中。海外地区的请求会先经过 Cloudflare 转发到该服务器，Cloudflare 会处理你的 IP 地址等连接信息以传输请求；除阿里云、Cloudflare 作为托管与传输服务商，以及向 Apple 核对交易外，不与第三方共享。Galplay 的数据库不保存 IP 地址。
保留与删除。权益记录目前没有自动删除期限；为了让你能随时恢复已购权益，会一直保存。如需删除，请发邮件到下方联系地址并提供你的 GP ID，我们会手动删除服务器上对应的记录。删除后，试用和客服调整记录无法恢复；在 Apple 完成的购买仍可通过「恢复购买」重新向 Apple 核对。
若 App 已取得你的 Galplay ID（见第 7 节），每次游戏成功启动（显示出第一个画面）时，App 会向 Galplay 公告服务（api.galplay.cn 或 galplay.fuckk.me，视你的地区而定）发送：
游戏切到后台或结束时，App 再用同一编号发送本次启动在前台游玩的时长。没有 GP ID 时不发送；网络不可用时，App 会在本机暂存这些记录（最多 100 条）并稍后重试。不发送游戏文件、存档、游戏文本、文件路径、设备标识符或广告标识符。App 内没有关闭启动统计的开关。
服务器保存每次启动的记录（引擎、标题、App 版本、开始时间、游玩时长），以及每个 GP ID 的启动次数、最近启动时间和累计游玩时长。
用途。了解各引擎和游戏的实际使用情况，用来安排兼容与优化的优先级；不用于广告或追踪，不出售。服务运行在阿里云（中国大陆，深圳）的服务器上，适配需求、诊断报告及其索引、权益记录和启动记录存储在该服务器上，服务器数据的异地备份存放在 Cloudflare 的私有 R2 中。海外地区的请求会先经过 Cloudflare 转发到该服务器，Cloudflare 会处理你的 IP 地址等连接信息以传输请求；除阿里云、Cloudflare 作为托管与传输服务商外，不与第三方共享。Galplay 的数据库不保存 IP 地址。
保留与删除。每次启动的记录保存 3 年，到期自动删除。每个 GP ID 的启动次数、最近启动时间和累计游玩时长是不含游戏标题的汇总，与第 7 节的权益记录一同保存。如需提前删除，请发邮件到下方联系地址并提供你的 GP ID，我们会删除对应的启动记录和汇总。
除内置示例作品外，Galplay 不提供或分发第三方游戏。你导入的作品由你自行获取，其内容与合规性由你负责。App 会在设备本地检查项目结构与运行所需资源，不会把完整游戏文件上传到 Galplay 的服务器。
Galplay 当前在 App Store 的年龄分级为 4+，应用本身不包含成人游戏内容，也不要求创建账号。用户自行导入的第三方作品可能有不同的适龄要求；家长应根据具体作品判断。
本政策若有更新，会同步修改本页顶部的日期。
如有疑问，请联系：zhongzhyu@gmail.com
Last updated: October 23, 2026
Galplay plays visual novels that you import on your iPhone or iPad, using Ren'Py, Kirikiri, ONScripter, and other engines. The app requires no account and has no ads or third-party analytics or tracking SDKs. It does not upload game files, saves, or game text to Galplay's servers. To provide the trial and purchases, the app automatically syncs the Apple transaction information described in section 7 with Galplay's entitlement service. It sends the app and device information described in section 2 with announcement checks, and the launch statistics described in section 8 (game title, engine, play time) while you play. The app sends the information described in section 6 only when you submit a compatibility request or tap OK in a game failure dialog.
Imported works, saves and in-game settings, library information, preferences, and translations generated on your device stay in the app sandbox or an external folder you explicitly choose. Apart from the game name you choose to send as described in section 6, and the game titles and play time described in section 8, Galplay does not upload them to its own servers. User-selected backups and transfers may send files to the destination you choose. Deleting the app removes sandbox data; you manage files in external folders yourself.
Imported games may connect to the internet according to their own design.
Galplay uses the network only for the functions below. The announcement list, the game compatibility list, and your entitlement status (section 7) refresh when the app opens, and launch statistics (section 8) are sent while you play; other lookups, transfers, and submissions are used at your choice.
1. Metadata and cover art lookups. When you match a work, the app sends the title you are searching for to VNDB (api.vndb.org), IGDB (api.igdb.com, authenticated via id.twitch.tv), and SteamGridDB (steamgriddb.com). The title is sent to the relevant service. These services have their own privacy policies, outside our control.
2. Announcements and likes. The app may request announcements in your app language when it opens. Liking an announcement sends its ID without requiring an account; the liked state stays on this device and does not sync across devices. Once the app has your Galplay ID (GP ID, see section 7), the same check also fetches personal messages for you (such as play time added by support) and includes your GP ID, app version, system version, device model (for example iPhone17,2), App Store country, and app language. The server keeps the time of the latest check and this information for that GP ID for support and compatibility troubleshooting. No device or advertising identifier is sent.
3. WebDAV save backup (optional). If you configure a WebDAV server, save files are uploaded to the server you specify. The address, username, and password are stored on your device and are never sent to us or any third party.
4. Local network game and save transfer (optional). When enabled, the app runs a temporary local HTTP service so a browser on the same network can send game or save files. The service stops when you close the transfer page; this feature does not upload the files to Galplay's servers.
5. External-folder backup (optional). If you pick a folder in Files, saves are written there. Galplay accesses it only when you explicitly configure, back up, browse, restore, or delete. If you choose iCloud Drive, iOS handles subsequent syncing. WebDAV and cloud game import are still in development; this is separate from the available WebDAV save backup feature.
6. Compatibility requests and game failure reports (optional). The app loads the game compatibility list from Galplay's own service (api.galplay.cn or galplay.fuckk.me, depending on your region). It sends information to that service only in these two cases:
The report may include a small amount of recently shown story text (which may contain in-game names you set), the key actions before the failure, and game progress information at that time, to help locate the problem; it does not include the full game script, game files, saves, keyboard input streams, absolute device file paths, URLs, or account credentials; the app removes absolute paths, URLs, and key-like values before sending. Necessary relative resource names inside the game may remain. It also does not include device or advertising identifiers. If the network is unavailable, the app keeps the report you confirmed on the device and retries later, up to a limited number of attempts.
A diagnostic report may include run logs related to that failure, limited in size; it is sent in the background.
If the app has received your Galplay ID (GP ID, see section 7) from the entitlement service, it is attached to requests and reports so that we can find them when you contact us; those records are therefore linked to your GP ID.
After submitting, the app uses the request number returned by the server to check the status and developer reply. The My requests list is stored only on your device.
Use. This information is used only to investigate compatibility problems, add game support, and reply to your request. It is not used for advertising or tracking and is not sold. The service runs on Alibaba Cloud servers in mainland China (Shenzhen). Requests, diagnostic reports and their indexes, entitlement records and launch records are stored on that server, and off-site backups of the server data are kept in private Cloudflare R2. Requests from outside mainland China pass through Cloudflare, which processes connection information such as your IP address to deliver them. Apart from Alibaba Cloud and Cloudflare acting as hosting and transmission providers it is not shared with third parties. Galplay's database does not store IP addresses.
Retention and deletion. New compressed reports are deleted after 180 days. Requests, indexes and legacy reports remain on the server until deleted. To have them deleted, email the address below with the game name and submission time (shown in My requests), plus your GP ID if you have one. We will delete the matching request and its failure report.
7. Trial, purchases, and Galplay ID. Galplay offers a 7-day free trial and in-app purchases (time-limited passes and a permanent unlock). Apple processes purchases and payment through the App Store; Galplay does not receive your Apple account name, email, or payment details.
To confirm your access, when the app opens or returns to the foreground, when you start a game, and when you purchase or restore, the app sends the following to Galplay's entitlement service (pay.galplay.cn or galplay-pay.fuckk.me, depending on your region):
The entitlement service checks these transactions and reads this app's purchase history through Apple's App Store Server API, and receives Apple's purchase, refund, and revocation notifications. The server stores: the App Transaction ID, GP ID, trial start time and its token, this app's purchase records (transaction IDs, products, purchase dates, refund/revocation dates, time remaining before purchase), eligibility from the earlier paid version (original purchase date and version), Apple notification records, and support adjustments (such as added time or a permanent unlock, with the reason). Refund notices in the app are generated from these records.
Galplay ID (GP ID). On the first sync, the server derives a short ID starting with GP- from the App Transaction ID. It is shown in the app so you can give it to us when you contact us, and it is attached to compatibility requests and failure reports you submit later (see section 6).
Use. This information is used only to verify and restore your access, handle refunds, and provide support. It is not used for advertising or tracking and is not sold. The service runs on Alibaba Cloud servers in mainland China (Shenzhen). Requests, diagnostic reports and their indexes, entitlement records and launch records are stored on that server, and off-site backups of the server data are kept in private Cloudflare R2. Requests from outside mainland China pass through Cloudflare, which processes connection information such as your IP address to deliver them. Apart from Alibaba Cloud and Cloudflare acting as hosting and transmission providers, and checking transactions with Apple, it is not shared with third parties. Galplay's database does not store IP addresses.
Retention and deletion. Entitlement records have no automatic deletion period at present and are kept so that you can restore purchased access at any time. To have them deleted, email the address below with your GP ID and we will delete the matching server records manually. After deletion, trial and support-adjustment records cannot be recovered; purchases made through Apple can be checked with Apple again using Restore Purchases.
8. Launch statistics. Once the app has your Galplay ID (see section 7), each time a game launches successfully (shows its first frame), the app sends to the Galplay announcement service (api.galplay.cn or galplay.fuckk.me, depending on your region) a random ID for this launch, your GP ID, the game engine (for example Kirikiri or Ren'Py), the game's full title in your library (only the first 120 characters if longer), and the app version. When the game goes to the background or ends, the app sends the foreground play time of that launch under the same ID. Nothing is sent without a GP ID; when the network is unavailable, the app keeps these records on the device (at most 100) and retries later. No game files, saves, game text, file paths, or device or advertising identifiers are sent. The app has no switch to turn launch statistics off. The server stores each launch (engine, title, app version, start time, play time) and, for each GP ID, the number of launches, the latest launch time, and the total play time.
Use. To understand how engines and games are actually used and set priorities for compatibility and performance work. It is not used for advertising or tracking and is not sold. The service runs on Alibaba Cloud servers in mainland China (Shenzhen). Requests, diagnostic reports and their indexes, entitlement records and launch records are stored on that server, and off-site backups of the server data are kept in private Cloudflare R2. Requests from outside mainland China pass through Cloudflare, which processes connection information such as your IP address to deliver them. Apart from Alibaba Cloud and Cloudflare acting as hosting and transmission providers it is not shared with third parties. Galplay's database does not store IP addresses.
Retention and deletion. Each launch record is kept for 3 years and then deleted automatically. The number of launches, latest launch time, and total play time for each GP ID are totals without game titles and are kept with the entitlement records in section 7. To have them deleted sooner, email the address below with your GP ID and we will delete the matching launch records and totals.
Apart from the bundled sample, Galplay does not provide or distribute third-party games. You obtain and are responsible for imported works. The app checks project structure and required resources locally; it does not upload complete game files to Galplay's servers.
Galplay is currently rated 4+ on the App Store. The app itself does not include adult game content or require an account. Imported third-party works can have different age suitability; parents should assess each work they choose to import.
Updates to this policy are reflected in the date at the top of this page.
zhongzhyu@gmail.com