🔒

Privacy Policy

Effective: 2026-05-11

on-boarding (the "Service") takes user privacy seriously. This policy explains what personal data we collect, how we use it, how long we keep it, and the rights you have over your data.

1. Data we collect

Social sign-in (Google / Kakao / Discord): email (when provided), display name, profile picture URL, and the provider's account identifier
Anonymous play: the nickname you enter
Auto-generated identifier: a unique player ID stored in browser localStorage to recognize returning sessions
Gameplay data: room codes you join, seat order, in-game state changes, chat messages, friend relationships, badges, and achievements
Technical data: connection IP (kept temporarily for abuse prevention), browser User-Agent, and on the mobile app, device identifiers including the advertising ID

2. How we use it

Identify users and match them into games
Provide per-user features like friends and favorites
Power core features such as chat and live game state
Operate the service, prevent abuse, and improve the product through aggregate analytics
Comply with legal obligations where applicable

3. Retention and deletion

Room and game state are deleted automatically when a room ends or goes unused for a period of time.
Account data can be deleted by the user at any time from Settings → Danger zone → Delete account in the app and on the web. On request, profile, friends, badges, achievements, and game history are removed in one operation, in-app, with no separate request flow.
Data we are legally required to retain is kept only for the mandated period and then deleted.

4. Third-party sharing

We do not share your personal data with third parties except where required by law.

5. Processors

We use the following service providers to operate on-boarding. None of them use your data for their own purposes.

Supabase Inc. — auth, database, and realtime (Seoul region)
Vercel Inc. — web hosting and CDN
Google LLC — Google OAuth sign-in
Kakao Corp. — Kakao OAuth sign-in
Discord Inc. — Discord OAuth sign-in

6. Ads and advertising partners

We may show ads on some pages to cover operating costs. Our advertising partners may use cookies or device identifiers to identify ads, limit frequency, and serve interest-based ads.

Google LLC — Google AdSense
Kakao Corp. — Kakao AdFit
Ezoic Inc. — Ezoic Ads

You can opt out of interest-based ads in your browser settings or through each partner's ad settings page.

7. Cookies and local storage

We use browser cookies and localStorage to maintain login sessions and recognize returning visits. You can disable these in your browser settings, but some features may stop working if you do.

8. Your rights

You can request access to, correction of, deletion of, or restriction on processing of your personal data at any time. Reach us through thecontact pageor the email below.

9. Privacy contact

For privacy-related questions, contact us at:

Email: ftkem2003@gmail.com

10. Security measures

All traffic is encrypted in transit using HTTPS (TLS).
Authentication tokens are stored securely and can be revoked promptly if exposure is detected.
The database enforces per-user access via Row Level Security (RLS). We do not store passwords or payment data.
Admin console access is gated by two-factor authentication and scoped roles.

11. Children under 14

In line with Article 22 of the Korean Personal Information Protection Act, the Service does not knowingly collect or use personal data from children under the age of 14. If we become aware that an account belongs to a child under 14, we will delete it immediately. Guardians who discover that a minor in their care has signed up may contact us at the email above and we will erase the data without delay.

12. Changes to this policy

If we change this policy, we will post the changes and the new effective date at the top of this page or via an in-product notice.

Last updated: 2026-05-11