最後更新：2026 年 10 月 22 日 · English version below
本隱私權政策說明「爆破英文 Blast English」網站（以下簡稱「本服務」，Google 登入畫面顯示的應用程式名稱為「爆破英文｜YouTube 訂閱驗證」）如何存取、使用、分享及保護 Google 使用者資料。
本服務只請求一項權限：https://www.googleapis.com/auth/youtube.readonly（唯讀）。登入後，本服務的伺服器只做兩次查詢：
subscriptions.list，mine=true，並以 forChannelId 限定只查這一個頻道，因此不會取得您的其他訂閱清單）。channels.list，mine=true），只用來判斷登入者是否就是「爆破英文」頻道的擁有者本人（頻道擁有者無法訂閱自己的頻道）。我們不會讀取您的姓名、電子郵件、相片、影片、留言、播放清單、觀看紀錄或其他訂閱。
查詢結果只用來決定是否為您解鎖需要訂閱的練習內容（二模、三模、四模）。查詢完成後，伺服器只在您的瀏覽器留下一個「驗證通過」的 Cookie，內容只有到期時間與防偽簽章，不含任何 Google 資料，24 小時後失效。
本服務對 Google API 所取得資料的使用與傳輸，遵守 Google API Services User Data Policy，包括其中的 Limited Use（有限使用）規定。我們不將 Google 使用者資料用於廣告、不出售、不用於訓練人工智慧模型，也不用於判斷信用或放款資格。
我們不會將 Google 使用者資料分享、出售、轉移或揭露給任何人，包括廣告商、數據分析公司或其他第三方。
唯一經手的服務供應商是網站代管商 Netlify：上述查詢在 Netlify 的伺服器函式中執行，資料只在該次請求的記憶體中處理，不寫入資料庫、檔案或日誌。若日後法律要求揭露，我們也無任何 Google 使用者資料可供提供，因為我們不保存這些資料。
youtube.readonly，無法修改、發布或刪除您的任何 YouTube 內容；以 access_type=online 登入，不取得可長期使用的 refresh token。HttpOnly、Secure、SameSite=Lax，網頁程式無法讀取，只透過 HTTPS 傳送。伺服器端不保留任何 Google 使用者資料，因此沒有需要刪除的資料。驗證 Cookie 24 小時後自動失效，您也可以隨時清除瀏覽器 Cookie。您可隨時到 Google 帳戶的第三方存取權設定 確認或移除本服務的存取權。
本服務的使用者為國中生。本服務不收集姓名、電子郵件或任何可識別個人身分的資料。
若本政策有變更，會更新本頁並修改上方的「最後更新」日期。
如對本政策或您的資料有任何疑問，請來信 0724kaiju@gmail.com，或透過 YouTube 頻道「爆破英文」的社群功能與我們聯絡。
Last updated: October 22, 2026
This policy explains how the "爆破英文 Blast English" website (the "Service"; the OAuth app name shown on the Google sign-in screen is "爆破英文｜YouTube 訂閱驗證") accesses, uses, shares and protects Google user data.
The Service requests a single read-only scope: https://www.googleapis.com/auth/youtube.readonly. After sign-in, our server makes at most two requests:
subscriptions.list with mine=true and forChannelId set to that one channel, so the rest of your subscription list is never retrieved).channels.list with mine=true), used only to check whether the signed-in user is the owner of the "爆破英文" channel, since an owner cannot subscribe to their own channel.We do not read your name, email address, photo, videos, comments, playlists, watch history or other subscriptions.
The result is used only to decide whether to unlock subscriber-only practice content. The server then sets a cookie in your browser that contains only an expiry time and a tamper-proof signature. It contains no Google data and expires after 24 hours.
The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI models, and do not use it to determine credit-worthiness or for lending purposes.
We do not share, sell, transfer or disclose Google user data to anyone, including advertisers, analytics providers or other third parties.
The only service provider involved is our hosting provider, Netlify. The requests above run in a Netlify serverless function, and the data is processed only in memory for the duration of that request. It is never written to a database, file or log. Because we do not keep Google user data, we have none to disclose, including in response to legal requests.
youtube.readonly scope is requested, so the Service cannot modify, publish or delete any YouTube content. Sign-in uses access_type=online, so no long-lived refresh token is issued.HttpOnly, Secure and SameSite=Lax.No Google user data is retained on our servers, so there is nothing to delete. The verification cookie expires after 24 hours, and you can clear it at any time. You can review or remove the Service's access at any time in your Google Account third-party access settings.
The Service is used by junior high school students. It does not collect names, email addresses or any personally identifiable information.
If this policy changes, we will update this page and the "Last updated" date above.
For questions about this policy or your data, email 0724kaiju@gmail.com or contact us through the Community tab of the "爆破英文" YouTube channel.
爆破英文 Blast English · YouTube 頻道