Privacy Policy
Dev.K Studio ("we", "us", "the Company") is committed to protecting the privacy and rights of our users. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with applicable laws, including the Personal Information Protection Act (PIPA) of the Republic of Korea.
1. Purpose of Processing Personal Information
We process personal information for the following purposes only. Information will not be used for any purpose other than those listed, and if the purpose changes, we will obtain separate consent as required by Article 18 of PIPA.
- Account Management: User identification, authentication, account maintenance, and prevention of fraudulent use
- Service Delivery: Providing game content, saving and syncing game progress, age verification
- Payment Processing: In-app purchase (IAP) processing, refunds, dispute resolution, payment records
- Customer Support: Handling inquiries and complaints, notifying users of outcomes
- Service Improvement & Analytics: Developing new features, analyzing usage statistics, traffic measurement
- Marketing & Advertising (with separate consent): Promotional information, personalized experiences
- Legal Compliance & Dispute Resolution: Fraud investigation, compliance with legal obligations
2. Information We Collect
a. Account Registration & Service Use (Required)
- Platform identifiers (Google Play account ID, Apple ID, or other social login identifiers)
- Email address (automatically collected via Firebase Authentication when using Google Sign-in)
- Nickname (entered by user)
- In-game user identifier (GID) issued by the Company
b. Automatically Collected
- Device information: OS type and version, device model, device identifier, advertising identifier (AAID/IDFA)
- Access logs: IP address, access timestamps, service usage history, abnormal activity records
- Gameplay data: character information, inventory, progress, statistics
c. Payment
- Payment platform transaction identifiers (issued by Google Play or App Store)
- Transaction timestamp, amount, product information
We do not collect payment instrument information such as credit card numbers or bank account details. These are processed exclusively by the respective payment platforms (Google, Apple).
d. Customer Inquiries
- Email address, inquiry content, attachments (provided directly by user)
e. In-Game Communication (When Applicable)
- Chat message content (global chat, guild chat, 1:1 whisper)
- Send timestamp and recipient information
- Reported messages and reasons (when reported by users)
- Block lists (when set by users)
Chat messages are used solely for service operation, dispute resolution, and fraud prevention. They are automatically deleted 90 days after sending. Reported messages are retained for up to 1 year after processing. Retained data is never used for marketing or analytics purposes.
3. Retention and Use Period
We process and retain personal information within the period stipulated by relevant laws or the consent of the data subject.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account Information | Until account deletion | Terms of Service |
| Records of Fraudulent Use | 90 days after deletion | Fraud prevention |
| Contract & Withdrawal Records | 5 years | E-Commerce Act |
| Payment & Service Delivery Records | 5 years | E-Commerce Act |
| Consumer Complaints & Dispute Records | 3 years | E-Commerce Act |
| Advertising Records | 6 months | E-Commerce Act |
| Website Access Logs (IP, etc.) | 3 months | Communications Privacy Act |
| Chat Messages | 90 days | Operations, dispute resolution, fraud prevention |
| Reported Chat Messages | 1 year | Review and recurrence prevention |
4. Third-Party Disclosure
We process your personal information within the scope described in this Policy and disclose it to third parties only when required by Articles 17 and 18 of PIPA — for example, with your prior consent or under specific legal obligations.
We currently do not share user personal information with third parties, except in the following cases:
- When the user has given prior consent
- When required by law or by a lawful request from investigative authorities
5. Outsourcing / Service Providers
We outsource certain personal information processing tasks to the following service providers to deliver our services:
| Provider | Purpose | Country |
|---|---|---|
| Google LLC | Firebase (analytics, push notifications), Google Play billing, cloud infrastructure | United States |
| Apple Inc. | App Store in-app billing | United States |
| NHN Cloud | Server hosting and operations | Republic of Korea |
When entering into outsourcing contracts, we specify obligations regarding the prohibition of using personal information for purposes other than the outsourced tasks, technical and managerial safeguards, restrictions on re-outsourcing, supervision, and liability — in accordance with Article 26 of PIPA.
6. Your Rights and How to Exercise Them
You may exercise the following rights regarding your personal information at any time:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion
- Request suspension of processing
You may exercise these rights by contacting us via email or through the in-game customer support. We will respond without delay.
If you request correction or deletion, we will not use or disclose the relevant personal information until the request is completed.
7. Data Destruction
We destroy personal information without delay once the retention period has expired or the purpose of processing has been achieved.
Destruction Procedure
Information provided by users is moved to a separate database after the purpose has been fulfilled, and is destroyed after a predetermined period in accordance with our internal policy and applicable laws — or destroyed immediately.
Destruction Method
- Electronic files: deleted using technical methods that prevent recovery.
- Paper records: shredded or incinerated.
8. Security Measures
Pursuant to Article 29 of PIPA, we implement the following technical, managerial, and physical measures to ensure the safety of personal information:
- Managerial Measures: Internal management plan, regular employee training
- Technical Measures: Access controls for personal information systems, encryption of unique identifiers, security software
- Physical Measures: Access controls for server rooms and archives
- Transmission Security: HTTPS (TLS) encryption in transit
9. Automatic Data Collection and How to Opt Out
a. Advertising Identifiers (AAID/IDFA)
We may collect advertising identifiers for personalized advertising and service analysis. You can disable or reset these identifiers in your device settings:
- Android: Settings → Google → Ads → Reset / Delete Advertising ID
- iOS: Settings → Privacy & Security → Tracking → Allow Apps to Request to Track
b. Analytics
We use Google Firebase Analytics to collect aggregated usage statistics. This data is processed in anonymized form and is used solely for service improvement.
10. Data Protection Officer
We have designated a Data Protection Officer responsible for overseeing personal information processing and handling related complaints and remedies:
You may contact the Data Protection Officer regarding any inquiries, complaints, or remedies related to personal information. We will respond and resolve issues without delay.
11. Remedies for Infringement of Rights
For dispute resolution or consultation regarding personal information infringement, you may contact the following organizations:
- Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
- Privacy Infringement Report Center (KISA): 118 / privacy.kisa.or.kr
- Supreme Prosecutors' Office Cybercrime Unit: 1301 / www.spo.go.kr
- National Police Agency Cybercrime Unit: 182 / ecrm.cyber.go.kr
12. Children's Privacy
When collecting personal information from children under the age of 14, we obtain consent from a legal guardian. Our games are rated 12+ by GRAC (Korea Game Rating and Administration Committee), and registration by children under 14 is not allowed.
Legal guardians may request access, correction, deletion, or suspension of processing of their child's personal information. We will take the necessary actions without delay.
13. Changes to This Policy
This Privacy Policy is effective as of the date listed above. If we make changes due to changes in laws or our policies, we will announce the changes at least 7 days before they take effect. For changes that significantly affect user rights or obligations, we will provide at least 30 days' notice.
Change History
- v1.0 (May 12, 2026): Initial publication