1. Information and purposes
We process information needed to operate the game, link and recover accounts, save progress, verify purchases and rewards, prevent abuse, and answer support requests.
- Accounts: guest or linked user identifiers, account information such as provider identifiers and email supplied by Google or Apple sign-in, and authentication sessions. We do not collect your social account password.
- Game data: device or installation identifiers, save revisions, progress, generals, relics, currency, formations, preferences, gameplay, rewards, and growth transactions. Guest records may also be processed by the server before you link a social account.
- Boss trials and rankings: attempts, damage, elapsed time, loadouts, and achievement times. Game records shown in rankings may be visible to other players. Email addresses and authentication tokens are not published in rankings.
- Purchases: product, order, and transaction identifiers, purchase tokens or signed transaction information, and grant or restoration records. Google Play and Apple process payments; we do not directly collect full payment card or bank account numbers.
- Connections and support: IP addresses and request or error records associated with server access, device, platform and app version, and email, messages or attachments you choose to send to support.
2. Ads and your choices
The game offers optional rewarded ads. Google Mobile Ads (AdMob) and the User Messaging Platform (UMP) may process IP addresses, ad or device identifiers, diagnostics and performance data, and ad impressions or interactions for ad delivery, measurement, fraud prevention, and consent management. An IP address may indicate an approximate location.
Where required, we present privacy choices. Personalized ads depend on your permitted purposes, region, and device settings. iOS tracking permission (ATT) is requested separately. If you decline tracking or personalization, we request non-personalized or limited ads so rewarded ads can remain available. Availability depends on inventory and connectivity.
For reward verification, we send a game account identifier, request identifier, and ad placement information to Google's server-side verification service, rather than a name or email. Our server verifies reward confirmation, transaction and timing records to prevent duplicate grants.
Where privacy choices can be changed, an entry is provided in game settings. You can also manage tracking permission and advertising identifiers in your device settings. Declining personalization does not stop all processing needed for ad delivery and security.
3. Notifications and permissions
Notifications are local reminders scheduled on your device with permission. Manage them in the game or operating system settings. We do not use FCM server push or push tokens for this feature.
The game does not request access to contacts, text messages, your photo library, camera, microphone, or precise location. Materials you voluntarily attach to a support request are used to handle that request.
4. Legal grounds and optional features
Depending on applicable law, processing may rely on consent, performance of our service contract, legitimate interests in security and preventing abuse, or legal obligations. Advertising consent is managed separately from information necessary to operate accounts and transactions.
You can decline optional personalization and notifications. Refusing processing necessary for a feature or requesting deletion may prevent that feature from working or make progress unrecoverable.
5. Providers and international processing
We use Supabase for authentication, databases and server functions; Google and Apple for sign-in and app purchases; and Google Mobile Ads and UMP for advertising and consent. Providers handle information needed for those functions. Their own policies also apply to services they operate independently.
Information may be processed outside South Korea or your country, depending on provider infrastructure and your location. The categories involved are the account, game, purchase, advertising, and connection information described above, transmitted over secure connections during use. See the provider policies below for their safeguards, or contact support about international processing and deletion.
We do not sell personal information for money. Permitted personalized advertising may constitute targeted advertising or sharing under some regional laws; you can exercise applicable choices through the consent form and settings. Disclosure may also be required by law or necessary to protect rights and safety.
6. Retention and deletion
Local saves may remain until you clear app data or uninstall the game. Operating system backups may retain copies. Uninstalling alone does not delete your server account or records.
Account and progress information is retained to provide the service or until your account deletion request is processed. Connection, fraud prevention, and support records are retained as needed for their purposes and then deleted or de-identified. Purchase or dispute records subject to legal retention duties may be kept separately for the required period.
Server backups and records independently managed by providers are subject to their retention and recovery policies. When handling a deletion request, we explain what can be removed and why any records must be retained. Local account recovery backups can be removed by clearing app data.
7. Your rights and account deletion
Depending on applicable law, you may request access, correction, deletion, restriction, objection, consent withdrawal, or a copy of your data. Contact support; we will verify ownership using the minimum necessary information and explain the outcome and any retention exception. You may also complain to your local privacy authority.
See the account and data deletion page for instructions. Signing out, clearing local data, and uninstalling are different from deleting server data. Never send passwords, verification codes, authentication tokens, or full card numbers.
8. Children
The game is not primarily designed for young children. Users who require parental consent under local law must have the necessary consent and meet marketplace age requirements. A parent or guardian who believes information was processed without required consent can contact support so we can investigate and take appropriate action, including deletion.
9. Security
We use reasonable technical and organizational measures, including encrypted connections, account access controls, authentication checks, and duplicate transaction prevention. Please also protect your linked social accounts and device.
10. Contact and changes
Operator and privacy contact: Rose100 (로즈백), representative Chung-ho Yoo (유충호). Our support email is shown below.
We may update this policy when game features, providers, or laws change. Significant changes will be announced in the game or on the official website, with an updated effective date.