Lantern Pals
Privacy Policy
Read the new Privacy Policy (version 4, applies from 2026-12-30)
AboutUsAgency, Inc. (미국 델라웨어 법인 / Delaware corporation) ("we") processes the personal information of players of the mobile game Lantern Pals ("the game") in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable laws. This policy lists only what the game actually processes; information that is processed only while a particular feature is on is described together with that condition.
The game can be played without signing up or logging in. The game never asks you to enter your name, phone number, email address or other contact details.
Notice of change: this policy (version 3) applies from 2026-11-17; until the day before, the previous policy (version 2) applies. What changes is the pseudonymous statistics records the game server keeps (service statistics, kept for 2 years) and how they are processed, and the app permissions for reward reminders; the pseudonymous statistics records start on that date. The previous policy is available on request.
1. Information we process and how it is collected
The information the game handles falls into the groups below, by where it is stored and who receives it.
| Group | Information | How it is collected |
|---|---|---|
| Always stays on your device (never sent to us) | Display settings (language, text size, reduced motion) and graphics quality, your report settings, an on-device activity log and error log (both capped; the oldest entries are dropped first) and a random install identifier | Saved automatically to your device's storage (local storage, IndexedDB) while you play |
| Game save (stored on your device and, in app versions with the game server, uploaded automatically as cloud save) | Patrol records, currencies and items, heroes and gear, purchase history and withdrawal records, spending totals (this month and in all) and the monthly spending limit you set, rewarded-ad view counts (today's count per placement and the lifetime total), in-game offer records (how often and when each offer was shown, how often you closed or declined offers, consecutive losses and returns after a break), session count and last session time, the age band you chose, sound and vibration settings | Saved automatically to your device's storage while you play. In app versions with the game server, it is uploaded automatically in the background from when you agree to the terms of service, while you are in the lobby and when you leave the app; there is no setting that turns this off (not uploaded once Under 14 is chosen) |
| Our game server (in app versions with the game server: device sign-in, cloud save, transfer codes, account recovery codes, purchase verification) | A random device identifier and a hash of the device's secret, an account identifier, a session token, cloud save data (the whole game save above, including purchase history, spending totals, ad view counts, offer records and age band) and when it was saved, transfer codes and the save copy each one holds, a hash of your recovery code, purchase verification data (store, product ID, transaction ID, receipt token, grant, refund and withdrawal records), the server wallet (gem and coin balances, amounts still owed after a refund, products whose first-purchase bonus you received), records of recent gem and coin spending requests and operator compensation grants (the latest 200 per account: request number, currency and amount, result), salvage draw records (account and device identifiers, request number, banner, currency and amount spent, the random numbers used and the result, pity progress, time) and your IP address | Collected automatically when the game talks to the server |
| Pseudonymous statistics on our game server (in app versions with the game server) | Pseudonymous statistics records: a pseudonym for each day you connect, made with a key used for that day only and then deleted; your install day; app version and platform; the day, product and amount of purchases and refunds (under an account pseudonym). No account or device identifier and no IP address | Recorded automatically by the game server when a device registers, at your first contact with the server each day, and when a purchase, refund or withdrawal is processed |
| Ads (in app versions with ads turned on) | Advertising identifiers (the Android advertising ID; on iOS, the IDFA if you allow tracking) and app-scoped identifiers (the Android app set ID and the iOS IDFV, used even without tracking), IP address and the approximate location estimated from it, device information (model, operating system, language and similar), ad impressions, views and taps, ad-related errors and performance data, and, on Android devices that support the Privacy Sandbox, interest topics worked out on the device | Collected directly inside the app by Google's ad SDK (Google AdMob) |
| App store payments | We never receive your payment method or card details. Apple or Google processes the payment; we receive only the purchase verification data above. Only when we refund you directly (withdrawal from an Apple payment, or a refund after account deletion) do we receive the refund bank account you give us (see 'Support requests'). | Through the app store when you pay |
| The web version and these pages | IP address, browser details (type, version, operating system), the address requested and when | Recorded automatically in the hosting provider's access logs when you open the web version or these pages on our website (pages opened inside the app are bundled with it, so this does not apply to them) |
| Support requests | Your email address, your message, anything you choose to include (the player ID, app version, language and device or browser details that 'Copy support info' in Settings puts on your clipboard), transaction numbers, and proof of guardianship or authority sent by a guardian or representative (please mask any resident registration number), and the bank account for a refund we pay you directly (bank, account number, holder) | When you email us |
The receipt token is used only to check that a payment is genuine and is not stored. Our server software uses your IP address briefly to block excessive requests and does not write it to its own logs. Our hosting provider's network access logs may record your IP address and browser details; they are kept for 3개월 (3 months) and then deleted.
The pseudonymous statistics records are used only to compile service statistics (installs, returning players, and sales and refund totals). Each day's pseudonym is made with a new key for that day, deleted once the day is over, so not even we can recompute a past day's pseudonym from an account identifier. The account pseudonym on purchase and refund records is made with a key only we know, kept apart from the server's data in our host's secret store. We never combine these records with other information to identify anyone, and we do not give them to third parties. The 'Send usage statistics' setting concerns the reports on your device and has nothing to do with these records.
'Send error reports' and 'Send usage statistics' under Settings > More > Privacy & reports are off until you turn them on. Even when they are on, this version has no destination for them, so nothing leaves your device. These two settings cover the reports on your device only: in app versions with the game server, the pseudonymous statistics records the game server keeps (table above) are kept whatever they say (Article 28-2 of the same Act). If we ever start sending them, we will update this policy first. The spending totals, ad view counts, offer records and session count in the game save are game state, separate from these reports: they run game rules such as spending limits, daily ad reward limits and limits on how often offers are shown, and in app versions with the game server they are uploaded with the game save (table above).
2. Why we process it
- Saving your progress and letting you continue on another device (cloud save, transfer codes, account recovery codes)
- Running the game's rules: daily limits on ad rewards, and choosing in-game offers and limiting how often they are shown (done on your device)
- Verifying and delivering paid purchases, handling withdrawals and refunds, and preventing receipt reuse and fraudulent payments
- Service statistics: installs, returning players, and sales and refunds totalled by day and by product (compiled only from the game server's pseudonymous statistics records)
- Protecting minors (a monthly spending cap of ₩70,000 for players under 19, hiding some products and cumulative-spending events, limiting personalised ads)
- Serving rewarded ads and preventing ad fraud (by the ad network)
- Serving the web version and these pages, keeping the service secure, blocking excessive requests, and handling outages and errors
- Answering support requests and resolving disputes
We do not use personal information for marketing or advertising beyond these purposes. If a purpose changes, we will tell you in advance and obtain any consent the law requires.
3. Legal basis for processing
As Article 22(3) of the Personal Information Protection Act requires, we list the information we process without your consent, with its legal basis, separately from the information we process with your consent. Information that always stays on your device is never sent to us.
| Information | Legal basis | Consent |
|---|---|---|
| Device sign-in and cloud save on the game server (device and account identifiers, the device secret's hash, session token, cloud save data), transfer codes and account recovery codes | Performing our agreement with you (Article 15(1)4 of the Act) | Not asked |
| Purchase verification, grant, withdrawal and refund records | Performing our agreement (Article 15(1)4) and the statutory duty to keep records (Article 15(1)2; Article 6 of the Act on Consumer Protection in Electronic Commerce and Article 6 of its Enforcement Decree) | Not asked |
| Account deletion records | Performing our agreement (Article 15(1)4: refunding paid gems left at account deletion under the Terms) | Not asked |
| Salvage draw records | Performing our agreement, legal record-keeping, and our legitimate interest in answering disputes about random items (Article 15(1)(ii), (iv) and (vi) of the same Act) | Not asked |
| Pseudonymous statistics records (daily pseudonym, install day, app version and platform, products and amounts of purchases and refunds, account pseudonym) | Processing pseudonymised information to compile statistics (Article 28-2(1) of the same Act) and our legitimate interest in running the service (Article 15(1)(vi)) | Not asked |
| The IP address used briefly to block excessive requests, and the hosting provider's access logs | Our legitimate interest in keeping the service secure (Article 15(1)6) | Not asked |
| Support requests and proof documents | Acting on your request (Article 15(1)4) and keeping dispute records (Article 15(1)2; Article 6 of the same Decree) | Not asked |
| Information the ad SDK collects, and personalised ads (in app versions with ads turned on) | Collection by the ad SDK is processing that Google, as the ad network, does directly inside the app; we do not receive or keep that information. What we do (requesting the rewarded ad you chose and, from the age band you chose, asking for personalised or non-personalised ads, child-directed handling and an ad rating) rests on acting on your request and on our legitimate interest in funding a free game with ads (Article 15(1)(iv) and (vi) of the same Act). Personalised ads are requested only for players who chose 19 or older; on iOS they follow your tracking choice, where the law requires consent for ads (the European Economic Area, the United Kingdom and similar) your choice on Google's consent form, and they stop when you turn on 'Turn off personalised ads' in Settings. | Not asked (personalised ads follow your iOS tracking choice and Google's consent form where required; refuse them at any time with 'Turn off personalised ads' in Settings or by deleting your advertising ID) |
4. How long we keep it
| Information | Retention |
|---|---|
| Information on your device (what always stays there, and the game save on the device) | Until you delete the app or clear the site data in your browser (we have no access to information on your device) |
| Device and account identifiers, cloud save data, the server wallet, the recovery code hash | Until you delete your account in the app or ask us to delete them. Creating a new recovery code deletes the old code's hash at once. Records of gem and coin spending requests and compensation grants keep only the latest 200 per account; each new request removes the oldest. |
| Transfer codes and their save copies | A code works once within 24 hours of being created. When a code is used, replaced by a new one, or looked up after it expires, its save copy is deleted and only whether it was used remains. |
| Purchase verification, grant, withdrawal and refund records | 5 years (records of contracts and withdrawals and of payments and supply under Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce). They are kept separately for this period even if you ask us to delete your data. So that a store charge is never granted twice, its transaction id and the random account identifier it went to are kept while the service runs (the payment details are destroyed after 5 years). |
| Account deletion records (account identifier, time of deletion, purchase, grant, refund and withdrawal records, paid gems left per purchase, free gem and coin balances) | 5 years (the same period as purchase records). Used only to answer refund requests for the paid gems left and to stop other devices linked to the account from using the deleted account again. The deletion mark that stops that reuse (account identifier and deletion time only) is kept while the service runs. |
| Salvage draw records | 5 years (to answer disputes and damage claims about random-item results and odds, and the same period as the payment and supply records under Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce). They are kept apart, unchanged, for this period even if you ask for deletion or delete your account. |
| Pseudonymous statistics records (a daily pseudonym made with a key used for that day only, install day, app version and platform, the day, product and amount of purchases and refunds, account pseudonym) | 2 years. They hold no account identifier, so deleting your account does not remove them separately; they are destroyed after 2 years. |
| Support and dispute records | 3 years (records of consumer complaints and dispute resolution under the same Decree). Proof of guardianship or authority is destroyed as soon as it has been checked; only the fact that it was checked is recorded. |
| Our server software's logs (request path, result and duration, events such as an account being created or a refund notice being handled, the message of an error during processing and, if a stored wallet is found damaged, that account's identifier; no IP address, token, request body or query string) | 3개월 (3 months) |
| Access logs (IP address, browser details, the address requested and when, kept by our server's front proxy and the hosting provider) | 3개월 (3 months) |
| Records of our staff accessing server data (server logins, management actions such as compensation grants) | 2 years (Article 8 of the Standards for Personal Information Security Measures) |
| Information collected by the ad network | As set by Google's retention policy (policies.google.com). |
5. How we destroy it
- We destroy information without delay once its retention period ends or its purpose has been achieved. Information the law requires us to keep (purchase and withdrawal records and similar) is kept apart from other data for the required period and then destroyed.
- Electronic files on the server are deleted so they cannot be restored. Copies left in backups are removed within 14일 (14 days).
- We do not keep personal information on paper.
- We cannot delete information stored on your device; it is removed when you delete the app or clear the site data. Delete account in app versions with the game server also erases the game save on the device.
6. Sharing with third parties
We do not hand over the personal information we keep on our server to third parties, except where a law specifically requires it or an investigative authority requests it under the procedure the law sets.
The information below, however, is passed directly to a third party, or collected directly by one, inside the app while you play. The recipient, purpose, information, retention, your right to refuse and what refusing means are as follows.
| Recipient | Purpose | Information | Retention | Refusing, and what it means |
|---|---|---|---|---|
| Google LLC (Google AdMob, in app versions with ads turned on) | Serving and measuring ads, personalised ads for players who chose 19 or older, and preventing ad fraud | Advertising and app-scoped identifiers, IP address and approximate location, device information, ad activity and ad-related diagnostics (the Ads row under 'Information we process'), and the request settings we attach from the age band you chose (child-directed and under-age-of-consent tags, ad content rating, personalised or not; the age band itself is not sent) | As set by Google's retention policy | Turning on 'Turn off personalised ads' in Settings, refusing tracking or deleting the advertising ID stops personalised ads. The game has no setting that stops the ad SDK's collection itself; if you do not want it, the only way is not to use an app version with ads turned on. |
The identifiers, device and activity information the ad SDK collects are collected directly by Google inside the app, as the ad network, under its own privacy policy; the only thing we pass to Google is the ad request settings set from your chosen age band and settings (table above). Following the Personal Information Protection Commission's policy on behavioural information for personalised ads, we list separately in the table above what third parties collect in this app. The value passed to the app store is part of the payment check we entrust to the app store that processes your payment (outsourcing under Article 26 of the same Act; the overseas transfer rests on Article 28-8(1)(iii)), and only an irreversibly transformed value is used, to check payments (see 'Processors'). Neither rests on consent, so there is no separate consent step, and no legal guardian's consent is collected for children under 14. Players who chose 'Under 14' get only non-personalised, child-directed ad requests.
7. Processors
| Processor | Task |
|---|---|
| Railway Corp. (Singapore region) | Running the game server (storing cloud saves, recovery codes, purchase verification records, server wallets, salvage draw records and pseudonymous statistics records) |
| Vercel Inc. | Serving the web version and these pages (access logs: IP address, browser details) |
| Apple Inc. or Google LLC (the app store you pay through) | Processing in-app payments and checking them (the irreversibly transformed account value) |
When we use a processor, our contract sets out what is needed to keep the information safe, and we supervise the processor. If a processor changes, we will update this policy.
Apple and Google, which process payments, act as our processors only for the irreversibly transformed account value they receive to check payments; they handle everything else, such as payment details, under their own privacy policies. Google, which serves ads, is not our processor and handles information under its own policy (see 'Sharing with third parties').
We use only providers that receive your information (our hosting provider and Google AdMob) that protect it at least as well as this policy promises. Each provider's privacy policy is on its website (Google's at policies.google.com).
8. Processing pseudonymised information
| Item | Details |
|---|---|
| Purpose and basis | Compiling service statistics (installs, returning players, and sales and refund totals by day and by product), as processing pseudonymised information to compile statistics (Article 28-2(1) of the Personal Information Protection Act) |
| Items | Pseudonymous statistics records: a daily pseudonym (made with a key used for that day only and then deleted), install day, app version and platform, the day, product and amount of purchases and refunds, an account pseudonym. No account or device identifier and no IP address |
| Retention | 2 years, then destroyed |
| Third parties and processors | Not given to third parties. Stored by Railway Corp. (Singapore region), which runs the game server ('Processors', 'Transfers abroad') |
| Additional information kept apart, and safeguards | The key that makes account pseudonyms (the additional information) is kept apart from the records, in our host's secret store, and only we use it; the key of each day's pseudonyms is deleted once the day is over. We never process them to identify anyone, and if information that could do so arises we stop and delete it (Article 28-5 of the same Act) |
| Processing record | We keep a record of the purpose, items, use and retention of the pseudonymised information (Article 28-4(2) of the same Act) |
9. Transfers abroad
| Recipient | Country | Information | When and how | Purpose and retention | Contact |
|---|---|---|---|---|---|
| Google LLC (Google AdMob) | The United States and other countries where Google runs data centres | Advertising and app-scoped identifiers, IP address, device information, ad activity, ad-related diagnostics, and the ad request settings set from your age band | Sent over the network while you use an app version with ads, when ads are prepared and shown | Serving and measuring ads and preventing ad fraud; as set by Google's retention policy | 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy enquiries: support.google.com/policies |
| Apple Inc. or Google LLC (the app store you pay through) | The United States | A one-way transformed value of your account identifier | Sent over the network through the app store's payment system when you pay | Checking payments and stopping receipt reuse; as set by the app store's retention policy | Apple: One Apple Park Way, Cupertino, CA 95014, USA (apple.com/legal/privacy/contact). Google: as above |
| Vercel Inc. | The United States and other countries where Vercel runs servers | Access logs of the web version and these pages (IP address, browser details) | Sent over the network when you open our website | Serving the website; as under 'How long we keep it' | 440 N Barranca Ave #4133, Covina, CA 91723, USA. Privacy enquiries: privacy@vercel.com |
| Railway Corp. | Singapore | What the game server processes (device and account identifiers and access data (the device secret's hash, session token, IP address), cloud saves, the recovery code's hash, purchase records, the server wallet, salvage draw records, pseudonymous statistics records) | Sent over an encrypted connection whenever the app talks to the game server (device registration, cloud save, payment checks, salvage) | Running the game server (as under 'Processors'); as under 'How long we keep it' | 548 Market St PMB 68956, San Francisco, CA 94104, USA. Privacy enquiries: privacy@railway.com |
The first row (Google ads) is information Google collects directly inside the app, not something we transfer, but it is listed so you can see it. Transfers to the app store and to our hosting provider are processing and storage entrusted to them to perform our agreement with you, made by publishing these details in this policy (Article 28-8(1)(iii)(a) of the same Act).
The game server is in Singapore, so the information it processes is transferred to and stored in Singapore as in the table above. In app versions with ads, the ad SDK may talk to Google while you play, even if you do not watch an ad, so that ads are ready in advance.
How to refuse, and what happens: turning on 'Turn off personalised ads' in Settings, refusing tracking for the app or deleting your advertising identifier stops personalised ads (see 'Personalised ads and behavioural information'). App-scoped identifiers and the other information are still used for ad measurement, frequency capping and fraud prevention, and the game has no setting that stops the ad SDK's network traffic itself. If you do not want the web version's and these pages' access logs transferred, read these pages inside the app. If you do not want the value passed to the app store, you cannot buy paid products. The transfer to the game server is needed for cloud save and for checking and delivering payments and cannot be turned off on its own; if you do not want it, use 'Delete account' in Settings to erase the game server's data and stop using the app (records the law requires us to keep are as under 'How long we keep it'). Either way, you can still play and watch rewarded ads.
10. Personalised ads and behavioural information
- The game offers rewarded ads that you choose to watch. Google AdMob serves them; we do not collect behavioural information for advertising ourselves. The rewarded-ad view counts in the game save are used only for the daily reward limits and are never given to the ad network.
- The behavioural information collected is ad impressions, views and taps, the advertising identifier and app-scoped identifiers (the Android app set ID and the iOS IDFV), IP address and device information. The ad SDK collects it automatically while you use the app, for serving and measuring ads, frequency capping, fraud prevention and, under the conditions below, personalised ads. Retention is as set by Google's policy.
- Personalised ads are requested only for players who chose the '19 or older' age band. If you have not chosen a band or chose one under 19, only non-personalised ads are requested, and choosing 'Under 14' also requests child-directed treatment. Ad content is limited to the T (teen) rating for adults and G (general audiences) for everyone else.
- On iOS, players who chose '19 or older' are asked once whether to allow tracking, the first time a personalised ad would be requested. If you do not allow it, only non-personalised ads are requested. Players under 19, or who have not chosen a band, are never asked.
- Where the law requires consent for ads, such as the European Economic Area and the United Kingdom, Google's consent form is shown before ads are requested. If you do not allow ads, an in-game card is shown instead of a Google ad and you still receive the reward. The form is not shown to players under 14 or who have not chosen a band.
- In the game, turning on 'Turn off personalised ads' under Settings > More > Privacy & reports makes every ad request on this device non-personalised (it shows for players who chose 19 or older, in apps with ads on). On iOS, you can turn off tracking for the app in Settings > Privacy & Security > Tracking. On Android, you can delete or reset your advertising ID in Settings > Security & privacy > Privacy > Ads (on some devices, Settings > Google > Ads). Refusing stops personalised ads, non-personalised ads are shown instead, and you can still play and watch rewarded ads. App-scoped identifiers and the other information are still used for ad measurement, frequency capping and fraud prevention.
- On Android devices that support it, the ad SDK may use the Android Privacy Sandbox (interest topics worked out on the device from app use, and ad measurement). You can turn this off in Settings > Security & privacy > Privacy > Ads > Ad privacy (names vary by device).
- In-game offers: on your device, the game chooses in-game product offers from your progress and play records (wins, rank, first purchase, consecutive losses, returning after a break, how often you closed or declined offers), limits how often they are shown per day and per session, and shows fewer on a day you have declined several in a row. These records are part of the game save, so app versions with the game server upload them with it; the game server stores the save as it is without analysing its contents (the only statistics it keeps are the pseudonymous statistics records under 'Information we process and how it is collected'), and none of it is given to the ad network. Players under 19 are not shown some products or cumulative-spending events, and players under 19 or who have not chosen an age band are never shown an offer after a losing or winning streak.
- Google's advertising policies are at policies.google.com/technologies/ads.
11. Automatic collection tools and how to refuse them
- The game does not use web cookies. It stores your progress and settings in your device's storage (local storage, IndexedDB) and, in the web version, keeps game files in the browser cache so they need not be downloaded again. In app versions with the game server, the game save among them (including purchase history and spending totals, ad view counts and offer records, age band and sound and vibration settings) is uploaded automatically as cloud save from when you agree to the terms of service (once Under 14 is chosen it is not uploaded and stays on the device), and there is no setting that turns this off. Everything else (display settings, report settings, the on-device activity and error logs, the install identifier) stays on your device.
- You can block or clear site data in your browser settings, but your progress may then not be saved or may be lost. In the app, deleting the app removes it all.
- If your device's backup (Android Auto Backup, iCloud Backup) is on, the operating system may include the app's saved data in your backup. Google or Apple keeps that backup in your account; we have no access to it.
- For the advertising identifier, see 'Personalised ads and behavioural information'.
12. App permissions
The game does not ask for permission to access information stored on your device or device features such as contacts, photos, location, camera, microphone or call history. The permissions the game uses are below.
| Permission | Use | Type |
|---|---|---|
| Internet, network state | Ads, payments and cloud save | Required (granted at install) |
| Vibration | Haptic feedback (can be turned off in Settings) | Required (granted at install) |
| In-app billing (Google Play Billing) | Paid purchases | Required (granted at install) |
| Advertising ID (Android) | Serving ads | Required (granted at install; can be deleted in device settings) |
| Android ad services (Privacy Sandbox: ad ID, topics, attribution) | Serving and measuring ads (on devices that support it) | Required (granted at install; can be turned off under ad privacy in device settings) |
| Keep awake, foreground service (Android) | Short background tasks of the Android job scheduler the ad SDK uses, and briefly waking the device to show a scheduled reward reminder | Required (granted at install) |
| App Tracking Transparency (iOS) | Whether the advertising identifier may be used for personalised ads | Optional (asked once, only if you chose 19 or older; refusing does not limit the game) |
| Notifications (Android 13 and later, iOS) | Reward reminders (a full Night Post, the Daily Supply, a new Rookie Seven Nights day); never scheduled between 9 pm and 8 am | Optional (asked once, only after you choose 'Notify me' in the game's own question; refusing does not limit the game; can be turned off under Settings > Game > Reward reminders) |
| Receive boot completed (Android) | Scheduling reward reminders again after the device restarts (used only if reminders are on) | Required (granted at install) |
13. Children under 14
- The game asks for your age band once (on first launch, right after you agree to the terms; on a device that agreed to the terms before, before your first purchase, in the lobby after your first successful patrol, or before a lobby ad). Nothing is preselected, and a chosen band can never be changed to an older one.
- If you choose 'Under 14', the on-device activity and error logs are not kept and the install identifier is deleted. Ads are requested only as non-personalised, child-directed, G-rated ads.
- If you choose a band under 19, a monthly spending cap of ₩70,000 applies, some products and cumulative-spending events are hidden, and personalised ads are not requested. Until a band is chosen, cumulative-spending screens treat you as a minor.
- We never ask children under 14 for their name or contact details. In app versions with the game server, once 'Under 14' is chosen the game save is not uploaded and stays on the device (a copy is kept for 24 hours only when you create a transfer code yourself), and a save already uploaded is deleted from the server. The game server then processes only what device registration, a recovery code you create yourself, checking and delivering payments, withdrawals and refunds, salvage draws, service statistics and the records the law requires us to keep need (device and account identifiers and access data (the device secret's hash, session token, IP address), the recovery code's hash, purchase records, the server wallet, salvage draw records, pseudonymous statistics records). This processing rests on legal obligations, on performing our agreement with you, on our legitimate interest in answering disputes about random items and in running the service (Article 15(1)(ii), (iv) and (vi) of the same Act) and on processing pseudonymised information to compile statistics (Article 28-2(1)), not on consent, so no legal guardian's consent under Article 22-2(1) of the Personal Information Protection Act is collected. Children's purchases go through the app store's parental approval (Apple's Ask to Buy, Google Family Link).
- A legal guardian may ask to see, correct, delete or stop the processing of a child's personal information, and may cancel purchases made without the guardian's consent (terms of service).
14. Your rights and how to exercise them
- You (or, for a child under 14, the legal guardian) may at any time ask to see, correct or delete your personal information, to stop its processing, or to withdraw consent. You may also ask through a representative, who must show proof of authority (please mask any resident registration number).
- In app versions with the game server, Delete account under Settings > More > Privacy & reports erases your information on the server (cloud save, server wallet, transfer and recovery codes, this device's registration) and the game save on this device at once. Other devices linked to the account get a new account when they next connect, and the game save left on such a device is erased only by deleting the account on it. Display settings, report consent and the Turn off personalised ads choice stay on the device.
- Send your request to support@aboutusforyou.com. Please include the player ID shown under Settings > More > Support so we can find your information on the server. You cannot see the player ID after deleting the app, so note it down first.
- We will tell you the outcome within 10 days of receiving your request. Information the law requires us to keep (purchase and withdrawal records and similar) is kept for the required period even if you ask us to delete it, and we will tell you why.
- Deleting your information on the server removes your cloud save, recovery code and server wallet (gem and coin balances), and cannot be undone. Information on your device is removed when you delete the app. If you keep using an app version with the game server, the next visit to the lobby creates a new anonymous account and uploads the game save on your device again; if you do not want that, delete the app before you send the request.
- You can turn error reports and usage statistics off at any time under Settings > More > Privacy & reports. These settings concern the reports on your device; the game server's pseudonymous statistics records are processed apart from them (Article 28-2 of the same Act).
15. How we protect it
- Encryption in transit: the game talks to the server only over HTTPS.
- Protecting secrets: we store only hashes of the device secret and the recovery code, never the values themselves, and session tokens are signed and expire after a set time.
- Integrity checks: save data stored on the server carries a seal that reveals tampering or damage, and a copy that fails the check is set aside and never served.
- Minimal logging: our server software's logs contain no IP addresses, tokens, request bodies or query strings (an account identifier only when a stored wallet is found damaged; the hosting provider's access logs are as under 'How long we keep it'), and the on-device error log strips email addresses and long runs of digits or characters.
- Access control: server secrets are kept in the host's secret store, not in the source code, and as few people as possible can access server data. Request limits per account and per address block unauthorised access attempts.
- Organisational measures: as few people as possible handle personal information, and processing is reviewed regularly.
16. What we do not process
We do not process sensitive information or unique identifiers such as resident registration numbers, and we process pseudonymised information only as the pseudonymous statistics records described under 'Processing pseudonymised information'. If proof of guardianship or authority shows a resident registration number, please mask it before sending. We make no fully automated decisions that significantly affect your rights or obligations. The spending caps and ad limits tied to age bands are protections that follow the age band you chose yourself.
17. Privacy officer
For questions, complaints or remedies about how we process personal information, please contact us below. We will answer and act without delay.
| Item | Details |
|---|---|
| Privacy officer | 강신호 (Sinho Kang, AboutUsAgency, Inc.) |
| Contact | 010-9219-7862 |
| support@aboutusforyou.com |
18. Other ways to seek help
If you need to report or get advice about a privacy infringement, you can contact the following bodies in Korea.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
19. Changes to this policy
This policy applies from 2026-11-17 and is published under Settings > More > Terms and information in the game and on this page of our website (https://dusk-patrol.vercel.app). When we change it, we will announce the change in the game and on this page at least 7 days before it takes effect (30 days for changes that matter to your rights). Earlier versions are available on request.