隱私政策Privacy Policy
椰林科技 Coco-Techs（下稱「本公司」）重視您的隱私。本政策說明本網站如何蒐集、使用與保護資料，並遵循《個人資料保護法》之精神。
Coco-Techs ("we") respects your privacy. This policy explains how this website collects, uses, and protects data, consistent with Taiwan's Personal Data Protection Act (PDPA).
1. 我們蒐集的資料1. What we collect
- 裝置識別碼與到訪次數：您造訪時（opt-out，可隨時拒絕），本網站會建立一組第一方識別碼——以可清除的隨機 UUID（存於 cookie 與 localStorage）為主，並輔以 FingerprintJS（自架）由瀏覽器特徵計算的裝置指紋；用於辨識回訪並累計到訪次數（僅顯示於內部受保護儀表板）。Device identifier & visit count: when you visit (opt-out; you may reject at any time), we create a first-party identifier — primarily a clearable random UUID (stored in a cookie and localStorage), supplemented by a device fingerprint computed in your browser via FingerprintJS (self-hosted) — used to recognise returning visitors and keep a cumulative visit count (shown only on our protected internal dashboard).
- 瀏覽器 / 作業系統 / 裝置類型：由 User-Agent 解析。Browser / OS / device type: parsed from the User-Agent.
- 概略地理位置（國家 / 城市）：由 IP 位址查詢，原始 IP 不予儲存（僅儲存加鹽雜湊值）。Approximate location (country / city): derived from your IP; the raw IP is not stored (only a salted hash).
- 到訪情境：到訪頁面、來源連結（referrer）、語言、時間。Visit context: page path, referrer, language, timestamp.
- 裝置顯示環境：螢幕解析度、色深、像素比（DPR）、瀏覽器視窗大小與方向。Display environment: screen resolution, colour depth, pixel ratio (DPR), browser viewport size and orientation.
- 時區與語言偏好：由瀏覽器設定取得（如 Asia/Taipei、zh-TW）。Timezone & language preferences: read from your browser settings (e.g. Asia/Taipei, zh-TW).
- 來源與行銷參數：來源網站網域（referrer host）與網址中的行銷活動參數（UTM）。Source & campaign parameters: the referring site's host and any marketing-campaign (UTM) parameters in the URL.
- 頁面效能：頁面載入時間等量測，用於改善網站速度。Page performance: page-load timing, used to improve site speed.
- 硬體與系統：CPU 核心數、裝置記憶體、觸控點數、作業平台。Hardware & system: CPU core count, device memory, touch points, platform.
- 顯示卡（GPU）：透過 WebGL 取得的繪圖卡廠商與型號。Graphics (GPU): GPU vendor and model via WebGL.
- 進階裝置指紋：canvas、audio 與字型清單特徵（以雜湊值儲存，不存原始內容）；用於辨識的 visitorId 與 anchor 識別碼本身則以原值（識別碼形式）儲存。Advanced device fingerprint: canvas, audio and font-list signals (stored as a hash, not the raw content); the visitorId and anchor identifiers used for recognition are themselves stored as-is (as identifiers).
- 瀏覽器進階資訊（Client Hints）：架構、位元數、型號、版本。Browser hints (Client Hints): architecture, bitness, model, version.
- 網路資訊：連線類型與概略速度（如 4g／wifi、downlink、rtt）。Network: connection type and approximate speed (e.g. 4g/wifi, downlink, rtt).
- 裝置能力與診斷訊號：cookie 與儲存（localStorage／sessionStorage／IndexedDB）是否可用、資料節省模式、可用螢幕尺寸、像素深度，以及指紋元件的彙總雜湊值等。Device capability & diagnostic signals: whether cookies and storage (localStorage/sessionStorage/IndexedDB) are available, data-saver mode, available screen size, pixel depth, and an aggregate hash of the fingerprint components.
聯絡表單另會蒐集您主動填寫的姓名、單位、信箱、電話與需求，僅用於回覆諮詢，不與上述分析資料串接。
The contact form additionally collects the name, organisation, email, phone, and message you submit — used only to respond to your enquiry and not linked to the analytics data above.
2. 目的與法律依據2. Purpose & legal basis
分析資料用於了解網站流量、改善服務與辨識回訪。本網站採選擇退出（opt-out）機制：您造訪時即預設啟用上述分析；您可隨時於 cookie 橫幅點選「拒絕」，即會停止收集並刪除本次造訪所存的資料，其後不再蒐集。若您的瀏覽器啟用 Do Not Track，則完全不進行上述蒐集。
Analytics data is used to understand traffic, improve the service, and recognise returning visitors. This site uses an opt-out model: analytics is enabled by default when you visit. You may click "Reject" on the cookie banner at any time to stop collection and delete the data stored for your current visit; nothing further is collected afterwards. If your browser sends Do Not Track, none of the above is collected.
3. 使用的技術3. Technologies used
- FingerprintJS（自架）：於您的瀏覽器本機運算，指紋資料僅傳送至本公司伺服器，不傳送給第三方。FingerprintJS (self-hosted): runs locally in your browser; the result is sent only to our own server, not to any third party.
- ALTCHA（自架）：聯絡表單的人機驗證（proof-of-work，不追蹤、無第三方）。ALTCHA (self-hosted): human verification on the contact form (proof-of-work, no tracking, no third party).
- IP 地理位置資料來自 DB-IP（依 CC-BY 授權）。IP geolocation data by DB-IP (CC-BY licensed).
4. 保留與安全4. Retention & security
分析資料預設保留至多 12 個月後自動清除（系統定期執行清除，不僅於重啟時）。資料以最小化原則蒐集、儲存於受存取控制的伺服器，後台儀表板需帳號驗證。分析資料庫僅保存 IP 的金鑰雜湊值、不存原始 IP；網站伺服器的存取日誌可能為了安全與維運用途短暫保留來源 IP，並定期輪替清除。
Analytics data is retained for up to 12 months and then purged (purging runs periodically, not only at restart). Data is minimised, stored on an access-controlled server, and the admin dashboard requires authentication. The analytics database stores only a keyed hash of your IP — never the raw IP; web-server access logs may transiently retain source IPs for security/operations and are rotated.
5. 不轉售、不分享5. No sale, no sharing
我們不販售、不交換您的個人資料，亦不用於跨站廣告追蹤。資料保存於本公司第一方環境。
We do not sell or trade your data, and do not use it for cross-site advertising. Data stays within our first-party environment.
6. 您的權利6. Your rights
您可要求查詢、複製或刪除與您相關的資料，亦可隨時撤回同意（清除瀏覽器 cookie/localStorage，或來信要求）。請來信 hongyenchen@coco-techs.com。
You may request access to, a copy of, or deletion of your data, and may withdraw consent at any time (clear your browser cookies/localStorage, or email us). Contact hongyenchen@coco-techs.com.
7. 聯絡我們7. Contact
椰林科技 Coco-Techs Laboratory · 台灣 · hongyenchen@coco-techs.com
Coco-Techs Laboratory · Taiwan · hongyenchen@coco-techs.com