Privacy policy

Effective 23 October 2026. Applies to the game at playqiyu.com, the public data page at playqiyu.com/data/ and this site, web.playqiyu.com. The Traditional Chinese version is the authoritative text; this translation is provided for convenience.

Wonder Quest Online (Chinese name 奇遇 Online, "the game") is operated from Taiwan by the Wonder Quest Online team ("we"). This policy explains in plain words what data we collect, why we need it, where it lives, how long we keep it and what you can do with it. We handle personal data under Taiwan's Personal Data Protection Act.

1. What we collect

We collect only what the game needs to run and to keep accounts and servers safe.

Account data

• Username (3 to 16 letters, digits or underscores).
• Password: stored only as a salted scrypt hash. We never store or see the password itself.
• Email: given at registration and used for verification codes, account recovery and password resets. Required on the production server.
• Account creation time, last sign-in time and whether deletion is scheduled.
• One-time codes for email verification and password reset: six digits, valid for 15 minutes, stored only as a hash and deleted once used or expired.

Game data

• Characters: name, level, class, appearance, stats, skill bindings, position. Up to three characters per account.
• Inventory, vault and equipment, plus the ledger of item and gold movements.
• Quests, daily and weekly challenges, achievements, titles, collection book, pets and companions.
• Friend list, guild data, party state, exchange orders and trades.
• Mute status and its expiry.

Connection and security data

• IP address and connection times. Used for sign-in lockout (five wrong passwords from the same IP and username within five minutes locks sign-in for five minutes), per-connection packet rate limits, and economy anomaly detection (unusual experience or gold gain rates).
• Security and audit logs: throttled or disconnected connections, administrator commands, account exports and deletions. These logs record the username, character name and IP address.

Chat and reports

• Chat passes through a profanity filter and is relayed to other players in real time. We do not keep a full chat log.
• When a player files a report with /report, we store the reporter's character name and account number, the reported character name, the reason and the reported player's last few chat lines so a moderator can review them.

Closed beta pre-registration on this site

When you pre-register for the closed beta with the form on this site, we store:

• Your email (required), and optionally what you will play on and how you heard about us.
• The page language, the time you signed up and your browser's User-Agent.
• A salted hash of your IP address, used only to stop one source from sending the form in bulk. The IP address itself is not stored.
• The form uses Cloudflare Turnstile to check that a person, not a bot, is sending it: your browser loads Cloudflare's check, which looks at browser signals (no picture puzzles), and when you send the form we pass the check result and your IP address to Cloudflare to confirm it. Cloudflare handles this data under its Turnstile privacy policy and does not use it for advertising.

• Purpose: sending closed beta news (such as beta dates, major updates and the launch) and the closed beta thank-you reward when the official version launches. It is not used for anything else and is not shared with third parties.
• Storage: a Cloudflare D1 database.
• Unsubscribe: every email includes an unsubscribe link, after which we stop sending. You can also write to qiyu@endlesstech.tw to unsubscribe or have your entry deleted.
• Retention: the whole list is deleted within 90 days after the official launch; if you ask us to delete your entry, we do so within 30 days.

2. Signing in with Google or Discord

Besides a username and password you can sign in with a Google or Discord account. The scopes we request are:

• We do not store your display name, avatar or access tokens. The token is used once, at sign-in, to read the data above and is then discarded.
• We never read your contacts, files, server list or anything else, and we never post on your behalf.
• If the provider reports a verified email that matches an existing account with the same verified email, we link the two so you do not end up with a duplicate account.
• Data received from Google is used only to sign you in and identify your account. It is never sold and never used for advertising.

3. Why we collect it

• To run the game: create and sign in to accounts, save progress, let players interact and trade.
• Account security: verify emails, recover accounts, resist password guessing, allow only one connection per account.
• Fairness and anti-cheat: validate packets, rate-limit, detect economy anomalies, handle reports and mutes.
• Support and disputes: answer your questions and investigate reports.
• Closed beta pre-registration: send closed beta news and the closed beta thank-you reward at launch.
• Legal obligations and lawful requests from authorities.

4. What is shown publicly

• Character name, level and class are visible to other players in game and appear on the leaderboards in game and at playqiyu.com/data/ (weekly challenge, Abyss Tower, world boss fights and contributions).
• Guild names, members and notices are visible to other players.
• Exchange prices are published only as per-item aggregates (best bid, best ask, volume), never who placed or filled an order.
• Never published: usernames, emails, IP addresses, third-party sign-in IDs, the item ledger.

5. Where data is stored and who processes it

We do not sell your data to anyone. The following providers process data on our instructions:

Your data is therefore stored and processed outside Taiwan, mainly in Japan. All game connections and web pages are encrypted with TLS.

Beyond these providers we disclose data to third parties only when the law requires it, on a lawful request from a court or authority, or when necessary to protect players and the servers.

6. How long we keep it

• Account and game data: for as long as the account exists.
• Account deletion: after you request deletion in game, the account is scheduled for permanent deletion 30 days later; signing in during those 30 days cancels it. When the time comes we delete the account, third-party sign-in links, codes, all characters (names are released) and their items. The item ledger keeps only a character number that can no longer be tied to a person, for economy statistics and anti-cheat.
• Backups: the database is backed up daily; local backups are kept for 7 days and encrypted off-site backups are deleted automatically after at most 30 days. Deleted data may therefore remain in backups for up to 30 days, during which it is never used to restore individual accounts.
• Codes: deleted after 15 minutes or once used.
• Closed beta pre-registration list: deleted within 90 days after the official launch, or when you ask.
• Server logs (connection IPs, sign-in records, error logs): kept for 90 days, then deleted.
• Reports and security logs: kept until handled and for a reasonable security audit period, at most 90 days, then deleted.

7. Your rights

Under Article 3 of the Personal Data Protection Act you may access, review, copy, supplement or correct your personal data, and ask us to stop processing or to delete it. Most of this you can do yourself in game:

• Export: sign in, open Account on the character screen, expand Data and privacy and choose Export my data. You get a JSON file with your account data (without the password hash), third-party sign-in links, every character's save, items and vault.
• Correct: email and password can be changed on the Account screen. Character names cannot currently be changed.
• Delete: on the same screen enter your current password and choose Delete account. Deletion runs after 30 days; signing in before then cancels it.
• Unlink a third-party sign-in or any other request you cannot complete yourself: email qiyu@endlesstech.tw. We confirm you own the account before acting. We answer access requests within 15 days and handle correction and deletion requests within 30 days; if the law allows an extension we will tell you.

Step-by-step instructions are on the support page.

If you do not provide data: a username and password are required to sign in. Without an email you cannot register on the production server, recover your account or reset your password.

8. How we protect it

• Every connection is encrypted with TLS (HTTPS and WSS).
• Passwords are stored as salted scrypt hashes; codes are stored only as hashes.
• The server exposes only the ports it needs; the database is not reachable from the internet. The host has a firewall and automatic security updates.
• Off-site backups are encrypted with a public key before upload; the private key never lives on the server.
• Only one connection per account at a time; sign-in tokens expire after 24 hours and signing in again invalidates old ones.
• Every administrator command is written to an audit log.

9. Data in your browser and cookies

• The game uses no cookies and runs no advertising or third-party analytics scripts.
• Your sign-in token is kept in the browser's sessionStorage and cleared when the tab closes; the token itself expires after 24 hours.
• Preferences are kept in localStorage on your device only and never sent to the server: language, last username, volume and mute, touch and quality settings, minimap state, hints you have seen, salvage filters and the like.
• This site (web.playqiyu.com) has no JavaScript of its own, sets no cookies and loads no trackers; the home page loads only Cloudflare Turnstile for the pre-registration form. For what the pre-registration form sends, see Closed beta pre-registration. Web fonts come from Google Fonts, so your browser sends a request to Google when it loads them.

10. Minors

If you are under 18, please have your legal guardian (usually a parent) read and agree to this policy and the terms of service before you register. If you are a guardian and believe a minor has given us personal data without consent, contact us and we will delete it.

11. Payments

The game currently has nothing for sale. The cosmetic points used in the shop can only be earned in game, and we collect no payment data. If purchases open later, payment will go through a third-party payment provider and we will never receive or store your card number. We will update this policy and announce the change in game.

12. Changes

When this policy changes materially we announce it in game or on this site and update the effective date above. Continuing to play after a change means you accept the updated policy.