Privacy policy
This policy covers the licensing service used by WMO Tool (Free, Basic, Pro and Ultimate).
遊戲帳戶與本機資料
使用星星之友毋須提供遊戲帳號或密碼。「新增帳戶」是連接本機已開啟的遊戲視窗；角色識別及動作設定在本機處理，不因這項連接而上傳至 WMO Tool 授權伺服器。
自動登入屬選用功能，啟用時遊戲登入資料只儲存在本機，密碼以 Windows 使用者帳戶綁定加密保護；登入時仍需由遊戲交予遊戲服務驗證。WMO Tool 授權伺服器不接收遊戲登入帳密。
Google 登入及授權服務會處理下方列出的會員、裝置及訂閱資料。Discord／Telegram 會收到已啟用的通知內容。這些選用傳送不包含遊戲登入密碼。
程式沒有向遊戲官方提交 WMO Tool 使用名單的功能；資料處理方式不構成官方無法識別工具的保證。
Local game data
Star Friend does not require a game username or password. Adding an account attaches a local running game window; it does not upload game login credentials to the WMO Tool licensing service. Optional recorded login stores game login details locally, protects passwords with Windows user-bound encryption, and supplies those details to the game for authentication. Optional remote dashboards and Discord/Telegram alerts transmit their configured character-status or notification content. These transfers do not contain game login passwords. Google licensing and subscription data are separate, as described below.
Information used
- Google account identifier, verified email, and available display name/profile image after you consent to Google sign-in.
- Product licences, plan/status/dates, seat limits, device activations, entitlement checks, and administrator notes.
- A random installation identifier and user-chosen device label. No disk serial, MAC address, TPM identity, or invasive hardware fingerprint is collected.
- Security and audit timestamps plus privacy-reduced hashes needed to prevent abuse and record administrator licence changes.
- Subscription identifiers, billing status, plan, and payment-event records needed to activate or stop paid access.
How it is used
Information is used only to authenticate accounts, decide product access, enforce device seats, issue bounded offline grants, support customers, prevent abuse, and audit licensing changes. No advertising profile or unrelated product telemetry is added by this licensing system.
Storage and sharing
Licensing records are stored in Cloudflare D1 and protected Worker secrets. Sensitive Windows session material is stored using Windows Credential Manager. Google passwords are never received. The applications and licensing server do not receive or store full card details. Stripe processes payment-method setup, payments, and billing management for direct Stripe subscriptions. Paddle acts as Merchant of Record for subscriptions sold through Paddle. Information is not sold. Google, Cloudflare, and the payment provider used for your subscription process information as needed for sign-in, hosting, security, database, and subscription services. Existing Paddle billing records remain with Paddle; changing the site's payment provider does not automatically transfer your payment method.
Retention and control
Website checkout uses a Secure, HttpOnly, SameSite cookie for up to ten minutes to bind Google sign-in to the initiating browser. It is cleared after successful sign-in or cancellation. Stripe checkout also uses a separate Secure, HttpOnly, SameSite return-session cookie for up to one hour so the browser can check its own setup result. These cookies are not advertising trackers. Session and transient OAuth records expire automatically. Licence, device, billing, referral, and audit records are retained while needed for account administration, fraud prevention, support, and legal obligations. You may sign out, deactivate devices, or request account-data access or deletion, subject to records that must be retained for legitimate security or legal purposes.
Contact
Product support: support@wmotool.com. Do not send passwords or full card details to support.