SwoonLine / privacy
Privacy Policy
Updated September 17, 2026 (revision 3)
1. Who we are and what this policy covers
This policy explains how we handle information for the SwoonLine V3 connected Android app, the website pages that support it, and support communications. SwoonLine V3 offers interactive stories, account-based progress, virtual Diamonds and Google Play purchases. It is intended for people aged 18 or older.
Our Google Play public developer name is Gula. The developer and data controller is Gula, operated by HE LIHUA, Hong Kong SAR, China. Our postal address is Flat 9, 11/F, The Hudson, 11 Davis Street, Hong Kong. Contact us at support@crushlinegame.com for privacy questions, account-deletion requests and player support.
2. Account and sign-in information
Guest sign-in uses an installation identifier to create or restore your SwoonLine account. The app may also establish a separate automatic recovery key using Google Play services Block Store when secure backup is available. This key can help restore the same account after reinstallation; it is distinct from your Support ID and device identifier. Android backup settings and platform availability affect whether restoration succeeds.
Google sign-in is optional. We receive and verify a Google authentication token and the authentication claims it carries, which may include an account identifier and email-related claims. Receiving this token for verification is different from using those details as your game profile. We retain a protected form of Google's account identifier to associate the identity with your SwoonLine account; we do not store the raw Google ID token, email address, name or profile photo as your SwoonLine profile or request your Google password.
We store your SwoonLine account identifier, your chosen nickname and preset avatar, authentication links, session information, your 18+ confirmation, and the versions and times of legal confirmations submitted to our account service; the app also keeps version-specific reading confirmations locally. Linking an eligible Google account from Profile → Account settings preserves your current SwoonLine account. Separate SwoonLine accounts are not automatically merged.
Recovery credentials are randomly generated, account-bound secrets. We retain a cryptographic digest on our server, not their plain-text value. Automatic keys may be backed up through Google's encrypted backup services. Manual codes are shown for you to save outside the app. Credentials expire after one year unless renewed; replacing or revoking a code invalidates the earlier code, and account deletion invalidates the account's recovery credentials. Logging out revokes automatic recovery credentials.
3. Game, purchase and support information
To provide the connected game, we process progress, story and dialogue choices, relationship state, unlocks, achievements, rewards, virtual-Diamond balances and related game records. The app also keeps account-related data and content on your device to support play and resume progress.
Local storage includes account-scoped game progress, pending synchronization records, preferences, legal-reading confirmations, and cached story and interface images or audio. Ordinary story progress can be recorded locally before it is sent to our service. Media caches improve loading and may be reused across sessions; clearing a media cache is different from deleting your connected account or its payment records.
When you purchase Diamonds, Google Play handles the payment. We process the product identifier, purchase token, available order reference, purchase and verification status, Diamond grants, first-purchase bonuses, refund or reversal information, and the related Diamond ledger. A purchase is associated with the SwoonLine account used for that purchase. We do not receive your full payment-card number from Google Play.
During a Google Play purchase, the app sends a pseudonymous account identifier, and a profile identifier where applicable, to Google Play to associate and verify the purchase and help prevent misuse. These identifiers are not your payment-card details or a plain-text Google email address, but they may be linked to account and transaction records and are not anonymous.
We process technical information needed to operate and diagnose the service: app/build version, device manufacturer and model, Android and WebView version, a separate installation reference, network requests, IP addresses, and error or operational logs. An app-scoped Android device identifier may be sent to our server and converted into a keyed pseudonymous device reference; the raw identifier is not retained in support records. Device references help investigate related installations and do not authorize access to an account or wallet. We do not use IMEI, advertising IDs, contacts or precise location for this support system.
Our network edge derives a coarse country or region code from the IP address to apply service-availability and security controls. The connected service is not currently offered in mainland China. This does not use GPS or require Android location permission. Network-derived country information can be inaccurate; contact support if you believe a supported connection has been classified incorrectly.
When you submit a support report, we associate the report and replies with your SwoonLine account, Support ID, submission time, available session/story context and technical diagnostic information. You may choose to attach a screenshot. Staff can view the conversation, relevant retained events and financial records to investigate the issue; other players cannot access your reports. Do not send passwords, recovery codes, authentication tokens or full payment-card details.
4. Usage statistics and service improvement
For accounts using this revision, first-party usage statistics are enabled by the product default after the revised documents are presented and acknowledged. There is no usage-statistics switch in the current app settings. An existing recorded choice to disable analytics is preserved; you may contact support@crushlinegame.com to exercise applicable privacy rights or request that collection be disabled.
Account-linked events help us understand story use and improve reliability. They include sessions, app and content versions, content loading, character and story interactions, choices, media playback, shop and purchase-flow events, structured story feedback, and server-assigned feature or content variations. Events can include timing, completion, failure codes and pseudonymous references. Usage events do not include chat text, recovery secrets or payment credentials and are not anonymous.
A product default is recorded separately from an affirmative user analytics choice. Acknowledging this notice is not described as separate consent to tracking, and it is not a substitute for consent where applicable law requires it. We do not use this data for cross-app advertising or sell it to advertisers or data brokers.
If collection is disabled, stored analytics events, structured analytics feedback and experiment assignments associated with the account are deleted under that control. Account progress, wallet ledgers, support conversations and required operational or financial records are handled separately. Optional screenshots and support messages are sent only when you submit them.
5. Why we use information
We use information to create and secure accounts, save and restore progress, deliver stories and media, provide rewards and purchased Diamonds, verify purchases, prevent duplicate grants and fraud, handle refunds and disputes, investigate errors, comply with applicable obligations, and answer support and deletion requests. Usage statistics support the service-improvement purposes and product-default approach described in section 4.
Required and optional information: account identifiers, authentication information, age confirmation and records needed for a requested game or purchase feature are necessary for those features. Without them we may be unable to create or recover an account, synchronize progress or fulfill a purchase. Google sign-in, support messages and screenshot attachments are optional. Requests concerning usage statistics do not remove purchased entitlements; contact support to discuss applicable privacy choices.
Where the GDPR or a similar requirement to identify a lawful basis applies, we rely on performance of our agreement for account access, requested game functions, progress, purchases and related support; consent for optional usage analytics; applicable legal obligations for records or disclosures those laws require; and legitimate interests, where permitted and after considering your rights, for proportionate service security, fraud prevention and the establishment or defence of legal claims. Reading this policy does not give blanket consent to optional processing. Withdrawing consent does not affect processing lawfully carried out before withdrawal.
We do not sell personal information or use it for advertising. The V3 story app does not ask for access to your contacts, location, camera, microphone or personal photo library to play its stories. Images and voice messages supplied by the game are game content.
6. Service providers and other disclosures
Service providers include Google for optional sign-in, Google Play distribution and payments; Cloudflare for network-edge, DNS and security services; Tencent Cloud, COS and CDN for media and related infrastructure; and the API, database, hosting and email services used to operate SwoonLine and respond to support requests. These providers process information needed for their functions. Google also handles information under its own applicable terms and privacy notices. Google Play services Block Store may store and restore a recovery key through its supported encrypted backup facilities.
Data shared for those functions includes authentication tokens and identifiers used with Google sign-in; purchase, verification and pseudonymous account information used with Google Play; IP addresses, requested resource paths and technical request information handled by our network, hosting and media providers; and the contact details, message and attachments you send through our support email services. Providers receive the information needed for their function rather than unrestricted access to all game or payment records. Their own privacy notices may also apply when they act independently.
Provider notices include Google (https://policies.google.com/privacy), Cloudflare (https://www.cloudflare.com/privacypolicy/), and Tencent Cloud (https://www.tencentcloud.com/document/product/301/17345). You may contact us for further information about the providers relevant to your request.
We may disclose information when required by law or reasonably necessary to protect users, investigate fraud or security incidents, or establish, exercise or defend legal claims. We do not share your information with advertisers or data brokers.
7. Retention and account deletion
We retain your account and connected game data while your account remains open, until you request deletion or it is otherwise deleted under the service rules.
Usage-analytics records are retained for the configured, limited analysis period (currently up to 90 days), or removed earlier following an applicable collection-disable or account-deletion request. This does not remove progress, purchase records or the separate support records described below.
Account deletion removes your connected profile, authentication links, active sessions, progress, choices, unlocks, achievements, account-linked analytics, and the account's spendable Diamond balance and ordinary game records. The app also removes the corresponding account data it manages locally, subject to completing its local cleanup. Uninstalling the app or clearing app storage alone does not delete the server account.
Some payment information remains after account deletion for purchase verification, refunds, fraud prevention, disputes, accounting and other applicable obligations. This includes purchase and order references, verification and reversal status, grant and first-bonus records, and the minimum financial record of Diamond credits, reversals and related adjustments. We remove the direct link to your deleted SwoonLine account. This does not make all payment records anonymous or erase records held independently by Google.
Support conversations and attached screenshots are normally retained for up to 180 days after the conversation's last activity; device-diagnostic records for up to 180 days after their last update, and support access/action audit records for up to 180 days. Recovery credentials expire after one year unless renewed and can be revoked earlier. Necessary financial, operational or dispute records may have different retention periods as described here.
Retention criteria differ by record: account and game records support the open account; usage analytics support the disclosed service-improvement purposes and are subject to applicable privacy requests or account deletion; operational and security logs support diagnosis and investigation; support correspondence supports resolution and follow-up of your request; and retained payment records support verification, reversals, prevention of duplicate claims, disputes and applicable accounting or legal requirements. We assess whether the stated purpose still requires the record rather than treating every category as permanently necessary.
A record retained for a legal obligation or dispute is limited to that purpose for the applicable period. Backup copies, where maintained, may be removed through their normal replacement cycle rather than immediately with a live record; their continued retention remains subject to the same necessity and access restrictions. Restoring a backup must not be used to restore a deleted account for ordinary use. Contact us if you need information about the retention criteria or deletion status for your records.
To request deletion, use Profile → Account settings → Permanently delete account, visit our Delete account page (https://crushlinegame.com/delete-account/), or contact support@crushlinegame.com. The page explains the effects of deletion and how to request it without the app.
8. Security and international processing
We use reasonable administrative and technical safeguards, including TLS/HTTPS for data in transit and access controls for account and payment systems. No service can guarantee absolute security.
The developer operates from Hong Kong SAR, China, and our V3 account and game API infrastructure is hosted in Singapore. Google, network-edge, cloud, media and support providers may process information in additional countries where they operate. Storage, support access and delivery of content do not necessarily occur in the same country.
Where an applicable international-transfer rule requires a particular transfer mechanism or safeguard, the relevant processing must use a legally available arrangement and protect the rights of affected individuals. Contact support@crushlinegame.com to ask about destinations and the safeguards applicable to your information or how to obtain relevant details. Using this app is not, by itself, consent to unrestricted international transfers.
9. Your choices and rights
Depending on where you live and the processing involved, you may have rights to access, correct, delete, restrict, object to or receive a portable copy of certain personal information, withdraw consent, and complain to a competent privacy regulator. Some rights have legal exceptions. A privacy request concerning usage statistics and a request to delete your account have different effects; support can explain the available options.
Send requests to support@crushlinegame.com. Describe the information or right concerned and provide only what is reasonably needed to identify the account. We may ask for proportionate verification of control to avoid disclosing or deleting another person's data. Do not send passwords, sign-in tokens or full payment-card details. We will explain if more information is needed or if a request cannot be fulfilled.
We respond without undue delay and within the period required by applicable law. For requests subject to the GDPR, this is ordinarily within one month of receiving the request; where a permitted extension is necessary, we will notify you within that month and explain why. Other jurisdictions may use different response periods or appeal procedures. We will explain the applicable next steps when responding. You may contact the Hong Kong Privacy Commissioner for Personal Data or, where applicable, the competent authority where you live or work; contacting us first is not a condition of making a regulatory complaint.
10. Age, changes and contact
SwoonLine is intended only for people aged 18 or older. If you believe a person under 18 has provided personal information to us, contact support@crushlinegame.com.
We will identify the effective date and revision of this policy and keep previous versions available. Material changes will be communicated through the app or another appropriate service notice. If a new use requires your consent, we will ask separately before that use begins. The product default described in section 4 applies to this revision; existing recorded opt-out choices are preserved. We do not treat a policy acknowledgement as a separate consent that applicable law requires. Contact support@crushlinegame.com with questions.
Earlier editions
The earlier V1 offline edition keeps its game data on the device. The V2 connected edition has its own account and limited-free service model. The September 2, 2026 policy and service information for those editions remain available below. This V3 update does not erase the earlier terms or promise an automatic transfer of accounts, progress or gems between separate environments.
The September 14, 2026 V3 revision remains available at https://crushlinegame.com/privacy/2026-09-14-r2/. Older app versions may continue using that revision during the rollout; their collection settings are not silently changed by publishing this document.