Privacy Policy
Summary — The Service collects only the minimum information needed to operate the games and prevent cheating. We use it for analytics and advertising, nothing more. You may access, correct, or delete your data at any time, and everything is removed within 24 hours of account withdrawal.
1. Information We Collect
- Member information (SnackPlay): Device-based guest identifier, nickname, profile image URL.
- Gameplay data (SnackPlay): Score, difficulty, combo, accuracy, playtime, Daily Challenge / Guild / Event participation.
- Anti-cheat data (SnackPlay): Deterministic timing signatures, input checksums, idempotency keys — solely to detect score tampering and macro abuse.
- Device information: Model, OS / app version, language settings.
- Push tokens: FCM·APNs tokens when you opt in to SnackPlay notifications. PaletteWeather uses on-device local notifications only and does not transmit push tokens to any server.
- Advertising identifier: AdMob advertising ID (Android Advertising ID / Apple IDFA). Not collected when disabled in OS settings. On iOS, the identifier is only collected after App Tracking Transparency (ATT) consent; EU/EEA users can revoke consent at any time via AdMob's User Messaging Platform (UMP).
- Location (PaletteWeather): GPS coordinates (used once for a weather lookup, then discarded; not stored on servers).
- Saved cities (PaletteWeather): Cities you bookmark (name and coordinates) are stored on your device only and are not transmitted externally.
2. How We Use Information
- Identifying users and delivering the Service (guest identification, session refresh).
- Computing game records, rankings, and statistics; operating Daily Challenge / Guild / Event systems.
- Detecting and blocking cheating.
- Sending notifications (SnackPlay attendance/missions/friends/events plus PaletteWeather local weather alerts; promotional notifications are prohibited).
- Displaying AdMob ads and validating ad-watch rewards (SnackPlay shows banner, rewarded, interstitial, and app-open ads; PaletteWeather shows banner and native ads).
- Quality analytics via Firebase Analytics·Crashlytics (personally identifying information is masked).
3. Retention Periods
| Item | Retention |
|---|
| Member information & gameplay data | Deleted within 24 hours of withdrawal (up to 30 days if abuse is suspected, then auto-deleted) |
| Anonymized statistics | May be retained to preserve global-ranking integrity |
| Firebase analytics / crash logs | Anonymized and retained up to 90 days |
| PaletteWeather location | Discarded immediately after lookup (not stored) |
| SnackPlay push tokens | Deleted immediately when notifications are disabled or the account is closed |
4. Your Rights
After identity verification, users may exercise the following rights.
- Access / correction: Edit your profile (nickname, profile image) in-app, or request by email.
- Data portability: Provided in a common format such as JSON within 30 days upon email request.
- Deletion: Via "Settings → Delete Account" or API call; processed within 24 hours.
- Ad / notification opt-out: Disable anytime via OS settings or in-app notification settings.
5. Third-Party Processing
We do not share personal information with third parties except as required by law. The following processors handle limited tasks on our behalf, and we remain responsible for the processed information.
| Processor | Entrusted Work | Country |
|---|
| Google LLC (Firebase / AdMob) | Analytics·Crashlytics·Performance·Remote Config·Cloud Messaging·advertising | USA |
| Self-operated server (gwangy.com) | Game data / member information storage; weather-lookup relay | Republic of Korea |
| Open-Meteo | Weather, air quality, and place-name search (coordinate-based lookup) | Germany |
| MET Norway | Weather fallback (coordinate-based lookup) | Norway |
6. Security
- All API traffic is encrypted with TLS 1.2 or higher.
- Session management based on refresh-token rotation.
- Tokens and sensitive information are stored in secure keystores (Android Keystore·iOS Keychain).
- Score tampering is blocked via anti-cheat signature verification.
- Logs and crash reports automatically mask PII (email·token·UUID).
7. Children Under 14
The Service is intended for users aged 14 and older. Users under 14 require consent from a legal guardian; data collected without consent is deleted immediately upon discovery.
8. Changes and Contact
This Policy may be updated due to legal or service changes. Material changes will be announced at least 7 days (or 30 days for changes adverse to users) before they take effect in-app or on this page.
This Service is operated by an individual developer, who personally serves as the data protection contact. · Email gwangy.claw@gmail.com