Privacy Policy
Upcoming revision: this document will be revised from 2026-11-16. Until then, the current text below applies. Preview the revised text
Correction (2026-10-29): of the purposes we announced would be added from Nov 1, we will not carry out per-member usage analysis; only aggregated per-game statistics take effect. We also correct the transfer to our overseas reseller (Xsolla) from "outsourcing of processing" to "provision to a third party (abroad)", and add the recipients' contacts and the timing and method of transfers abroad.
Amendment: from 2026-11-01, aggregated per-game statistics to improve the service are added to the purposes of game play and score records (used only as aggregates that cannot identify individuals; no new information is collected; retention periods are unchanged).
Amendment: from 2026-11-01, provision of personal information to a third party abroad (our overseas reseller Xsolla) and additional information for users in the EEA, the UK and Switzerland (GDPR) are added.
Full English translation is in progress. The Korean version is the reference text. Summary:
- We collect only: the ID number from Google (sub) or Kakao (member number), your nickname, an age band (teen/adult) with the month you become an adult (teens only), your country, and security logs (actions and IP, kept 90 days).
- We do not collect your email, name, photo, phone number or date of birth. Google is asked for the openid scope only; Kakao for no consent items. Login tokens are discarded after verification.
- Birth year and month are used once to compute the age band and are not stored. If you are below the age of consent, nothing about your login is kept.
- Cookies are essential only (session, login state). No tracking or advertising cookies.
- On account deletion, your login IDs and nickname are deleted. A one-way hash of the login ID is kept for 1 year to prevent welcome-coin abuse. Coin ledger records are kept pseudonymized.
- Servers and database are operated by Fly.io and Supabase in Tokyo, Japan (transfer abroad).
- Transfers abroad: to Fly.io, Inc. (contact: compliance@fly.io) and Supabase, Inc. (contact: privacy@supabase.com) in the Tokyo region, and to Google LLC (USA etc., contact: https://support.google.com/policies?p=privpol_privts) — whenever you use the service, over the internet. Transfers to Google happen only (1) when you log in with Google (to verify the login) and (2) when we send notification emails to developers who submit games (Google Workspace). Information of general users who log in only with Kakao is not transferred to Google.
- From 2026-10-21: in multiplayer, an anonymous player number, display name, country, connection status and emotes are held in the relay server's memory only and deleted when the room closes. IP addresses are held in memory for up to 10 minutes to block room-code guessing and are not logged.
- From 2026-10-24: developers (19+) who submit games give a display name, a contact email, whether they are an individual or a business (and the business name), and their agreement to the developer terms. The email is used only to contact them about submissions and payouts, and review notices are sent through Google Workspace (USA). Developers receive totals only, never players' personal information.
- From 2026-11-01: aggregated per-game statistics to improve the service (per-game progress, clear rates, drop-off points, etc. — used only as aggregates that cannot identify individuals, and shared externally only as aggregate statistics)
- From 2026-10-24: if you first arrive through a developer's referral link, we record your player number, that developer, the game and the time, to share revenue with that developer for 12 months. A short-lived cookie (ga_ref, 30 minutes) holds the referral code until your guest session is created. The record is deleted 13 months after your first visit.
- From 2026-11-01 (provision to a third party abroad): we provide Xsolla, Inc. (USA, contact: data.protection@xsolla.com), which sells coins to members outside Korea and processes their payments as the seller, with a payment member number we create (pseudonymous), your country, the order details (product, amount, order number) and your display language — over the internet when a member outside Korea buys. Xsolla keeps them as set out in its privacy policy and applicable law. If you do not use overseas payment, nothing is provided, but you cannot buy paid coins from outside Korea. Information Xsolla collects directly during checkout (such as email and payment method) is governed by Xsolla's privacy policy.
Additional information for users in the European Economic Area (EEA), the UK and Switzerland (GDPR) — from 2026-11-01
- Controller: Red Gorilla Inc. (주식회사 레드고릴라), contact official@oraksilo.com.
- Legal bases: performance of a contract (account, coins, purchases and use of games); legitimate interests (security, fraud prevention, displaying rankings and statistics to improve the service — limited to the minimum after weighing them against your interests); legal obligation (keeping transaction records).
- Your rights: access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with the supervisory authority of the country where you live (in the UK, the ICO). Send requests to the contact above; we reply within one month (if we need to extend this, we tell you why).
- International transfers: our servers are in Japan (a country with an EU and UK adequacy decision). Transfers to our processors in the USA (Fly.io, Supabase, Google) rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms; provision to Xsolla (an independent controller) is a transfer necessary to perform the sales contract.
- Children: anyone below the age of digital consent in their country of residence cannot create an account (guest play only; no personally identifying information is collected).
- Retention periods and the information we process are as set out in the tables above. We do not make decisions that produce legal effects by automated means (profiling).