1. Information We Process and How We Collect It
| Category | Information | Collection |
|---|---|---|
| Account and game data | Guest account and backend member identifiers; game progress; stage records; currencies, items and nodes; summon, upgrade and deck data; codex, mission, attendance and season progress; mail and reward claim records. | Generated when the app starts, a guest account signs in, and the service is used. |
| Service usage and analytics | Service timestamps, app version, synchronization state, errors, feature events such as stage start/end, summons, upgrades and advertising outcomes, and records used to address abuse. | Generated automatically by the app and backend. |
| Device and network data | Operating system, device type and model, language, app version, IP address, and network, performance and error diagnostics. | Generated automatically when connecting to the service or when third-party SDKs operate. |
| Advertising data | Approximate location derived from IP address; product interactions such as app launches, taps and video views; advertising ID, app set ID and similar device or account identifiers; ad requests, impressions, completed views, rewards and ad unit ID. | Processed automatically through Google Mobile Ads and the User Messaging Platform SDK. |
| Server-side ad reward verification | Backend member identifier, ad placement, request identifier, Google ad transaction identifier, ad unit, reward item and amount, callback timestamp and verification result. | Transferred between Google and the Operator's verification service after an eligible ad view. |
| Purchases and restoration | Product ID, app marketplace, transaction identifier, purchase token or receipt, validation result, purchase or restoration status, and entitlement grant record. | Generated and transferred during purchases or restoration through Google Play or the Apple App Store. |
| Support inquiries | Email address, inquiry content, attachments and response history. | Provided directly when a user contacts the Operator by email. |
| Policy website access | IP address, browser and device information, access time and similar logs required to operate GitHub Pages. | May be processed automatically by GitHub when this page is accessed. |
The Operator does not directly require a name, telephone number, postal address, contact list, photo, video, precise location or raw payment-card details as a condition of playing the game. Information processed separately by an app marketplace is subject to that marketplace's privacy policy.
2. Purposes of Processing
- Create and authenticate guest accounts and save, restore and synchronize game progress.
- Provide game content, codex, missions, attendance, seasons, mail and rewards.
- Confirm purchases, validate receipts, deliver products, restore entitlements and prevent duplicate grants.
- Monitor service stability, diagnose errors, improve quality and prepare usage statistics.
- Detect and respond to data manipulation, duplicate rewards, payment abuse and other unauthorized activity.
- Provide rewarded and interstitial ads, manage privacy choices, measure advertising and verify rewards.
- Respond to inquiries, rights requests, complaints and disputes.
3. Retention
| Information | Retention Period |
|---|---|
| Account, game progress and operational analytics | Until an account/server-data deletion request is completed or the service ends. |
| Ad reward verification and abuse-response records | Three years from processing or the end of the response action; longer if necessary to resolve an ongoing dispute. |
| Support and privacy-rights requests | Three years after completion or until a related dispute is resolved. |
| Contract, withdrawal, payment and supply records | Five years where required by applicable law. |
| Consumer complaint and dispute records | Three years where required by applicable law. |
| Information controlled by advertising providers, app marketplaces or web hosts | As specified by each provider's policy, contract and applicable law. |
Information is deleted without undue delay when its retention period expires or its purpose has been fulfilled. Information that must be retained by law is segregated and used only for the legally required purpose and period.
4. Third-Party Disclosure
The Operator does not disclose personal information to third parties except with the user's separate consent or as permitted or required by law. Where Google, Apple or advertising technology providers independently process information during advertising or marketplace purchases, their own policies and the privacy choices presented in the service apply.
5. Service Providers
| Provider | Services | Retention |
|---|---|---|
| AFI Inc. (BACKND) | Guest authentication; game servers and databases; storage and synchronization of game progress and analytics; mail, notices and server time; support for marketplace receipt validation. | Until account deletion, completion of the service purpose or termination of the service agreement. |
| Google LLC | Advertising privacy choices; ad delivery and measurement; diagnostics and ad-fraud prevention; Android marketplace purchases and restoration. | As specified by Google's policies, contracts or applicable law. |
| Apple Inc. | iOS marketplace purchases, restoration and receipt processing. | As specified by Apple's policies, contracts or applicable law. |
| Cloudflare, Inc. | Rewarded-ad verification endpoint, duplicate-transaction database, security and access logs. | Until completion of the service purpose or termination of the service agreement; the Operator's verification ledger follows Section 3. |
| GitHub, Inc. | Static hosting of this Privacy Policy and related security and access logs. | As specified by GitHub's policies, contracts or applicable law. |
The Operator uses appropriate contractual and administrative measures intended to ensure that service providers process personal information securely. Material changes to providers or delegated services will be disclosed through this Policy.
6. International Transfers
Information may be transferred internationally when providing advertising, marketplace purchases, ad reward verification and this policy website.
| Recipient | Destination | Information and Purpose | Timing and Method | Retention |
|---|---|---|---|---|
| Google LLC and Google advertising technology providers | United States and countries where relevant service data centers are located. | Advertising data, consent state and Android purchase data for ad delivery, measurement, fraud prevention and purchase processing. | Encrypted network transfer when consent is checked, an ad is requested or completed, or a purchase occurs. | As specified by the relevant provider's policies, contracts and applicable law. |
| Apple Inc. | United States and countries where Apple data centers are located. | iOS purchase and restoration data for purchase processing, receipt confirmation and fraud prevention. | Encrypted network transfer during iOS purchase or restoration. | As specified by Apple's policies, contracts and applicable law. |
| Cloudflare, Inc. | United States and countries where Cloudflare's global infrastructure is located. | Ad reward verification information, IP address and security logs for signature verification, duplicate-reward prevention and service security. | Encrypted network transfer when an ad completes or verification status is checked. | As described in Section 3 and Cloudflare's policy. |
| GitHub, Inc. | United States and countries where GitHub infrastructure is located. | Policy website access information for page delivery and security. | Encrypted network transfer when this page is accessed. | As specified by GitHub's policies, contracts and applicable law. |
Users may decline or withdraw relevant consent or privacy choices. Refusing advertising-related transfers may limit advertising features; refusing marketplace processing prevents purchase and restoration features. Users who do not wish to access this hosted page may review the document inside the app. Availability of core game functions depends on the technical necessity of the relevant processing and applicable law.
7. Your Rights and How to Exercise Them
- Subject to applicable law, you may request access, correction, deletion, restriction or suspension of processing, or withdraw consent.
- Submit requests to v8redlinestudio@gmail.com. The Operator may verify your identity and any legal limitations before responding.
- Uninstalling the app may remove only local device data. Guest account and game data stored on a server may remain; send a separate email request to delete server data.
- Where required, use “Ad Privacy Choices” in the app settings to review or change advertising choices.
- A parent or legal guardian may exercise rights on behalf of a child where provided by applicable law.
8. Deletion
Personal information is deleted without undue delay after the applicable retention period or purpose ends. Electronic files are deleted using methods intended to prevent practical restoration or reproduction. Paper records, if any, are shredded or incinerated. Information retained under law is segregated and not used for unrelated purposes.
9. Security Measures
The Operator applies reasonable technical and organizational safeguards, including least-privilege access, protection of authentication information, encryption in transit, duplicate transaction controls, access and error log review, security updates, data minimization and service-provider management.
10. Automatic Collection and Advertising Identifiers
The service and third-party SDKs may use device identifiers and similar technologies for service delivery, diagnostics, usage statistics and advertising. Google Mobile Ads may process IP address, product interactions, diagnostic data, advertising ID, app set ID and similar device or account identifiers.
You can reset or delete an advertising identifier or limit personalized advertising through Android or iOS privacy and advertising settings. In regions where advertising consent is required, choices can be changed using “Ad Privacy Choices” inside the service.
References: Google Mobile Ads SDK data disclosure and Google Privacy Policy.
11. Children's Privacy
The service is not directed primarily to children under 14. The Operator does not knowingly process information that requires parental consent without obtaining that consent. If the Operator learns that such information was processed without valid consent, it will take reasonable steps to verify the circumstances and delete the information without undue delay.
12. Privacy Contact
- Privacy and Complaints Contact Department: Customer Support
- Representative: Hyerin Seok (석혜린)
- Operator: V8REDLINE STUDIO
- Business Registration Number: 230-16-03012
- Address: 59, Dodeokgongwon-ro, Gwangmyeong-si, Gyeonggi-do, Republic of Korea
- Email: v8redlinestudio@gmail.com
Use this contact for questions about personal information, privacy rights and remedies.
13. Complaints and Regulatory Remedies
Users may also seek assistance from the following Korean authorities:
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: +82-1833-6972, www.kopico.go.kr
- Personal Information Protection Commission: www.pipc.go.kr
- Korean National Police Cyber Crime Reporting System: 182, ecrm.police.go.kr
You may also contact the data protection authority in the country or region where you live, where available under applicable law.
14. Changes to This Policy
The Operator will announce the effective date and material changes through the service or this page at least seven days before a change takes effect. Material changes affecting user rights will be announced at least 30 days in advance, and separate consent will be obtained where required by law.
- Published: August 8, 2026
- Effective: August 12, 2026
This English version is provided for convenience. If it conflicts with the Korean version, the Korean version governs to the extent permitted by applicable law.