TtukTtak NyangPrivacy Policy
LEON CORP CORE ("we") processes the personal information of players of the mobile game "TtukTtak Nyang: Idle Cat Forge" (뚝딱냥 : 고양이 대장간 키우기 방치형 RPG, the "Game", Android package / iOS bundle ID com.leoncorpcore.purrsmith) in accordance with the Korean Personal Information Protection Act and other applicable laws. This policy applies only to this Game. If this English version differs from the Korean version, the Korean version prevails.
1. Information we process, purposes and retention
| Information | Purpose | Retention |
|---|---|---|
| Anonymous account ID (Firebase Anonymous Auth UID), member number (10 characters starting with PS-) | Identify accounts without sign-up; rankings, arena and mail rewards; customer support | Until the account is deleted |
| Cloud save (only if you link an account): the identifier of the linked Google or Apple account (Google includes the email address; we do not receive an email from Apple), your full game progress (encrypted save), save time and device type | Restore your progress with the same account after changing or reinstalling | Until you unlink or delete the account |
| Nickname, power and gear score, mercenary/gear lineup shown in the arena, arena score | Rankings and arena (visible to other players) | Until the account is deleted (an old nickname is released immediately when changed) |
| Gameplay logs: progress, currency/gem changes and their reasons, crafting/battle/enhance/refine results, tutorial progress, session times and lengths, app version, progress at the moment of each event | Improving the game, balancing, finding difficult spots and drop-off points, preventing cheating | Raw logs auto-deleted after 90 days; daily totals kept only in non-identifiable aggregate form |
| Player summary: current progress, balances, gem earn/spend ledger, total purchase amount, owned products, tamper-detection records, first/last seen times | Customer support, automated fair-play checks, retention statistics | Until the account is deleted |
| Purchase records: product ID, price, store order number, purchase token (receipt), verification result, refund/cancellation status | Verifying purchases, preventing duplicate grants, receipt reuse and refund abuse, restoring purchases | 5 years (Korean Act on Consumer Protection in Electronic Commerce) |
| Ad records: ad placement, whether the ad was completed | Granting ad rewards, operating ads | Raw logs 90 days |
| Fair-play records: suspicious signals (sudden power/gold jumps, suspected clock tampering, refunds), reason/evidence/time of restrictions | Fair competitive content, handling appeals | Until the account is deleted |
| Support requests: email address, message, member number/app version/device model/OS added automatically to the email | Answering and resolving inquiries | 3 years (consumer complaint and dispute records under the E-Commerce Act) |
We do not collect your name, phone number, address, location, contacts or photos. We receive your email address only if you email us. Game notifications are scheduled on your device, not sent from our servers. Your game progress itself is stored on your device; only the information above is sent to our servers.
Advertising (Unity LevelPlay, Unity Ads)
The Game offers rewarded ads. When ads are loaded or shown, our ad partners (Unity LevelPlay, Unity Ads and their mediated ad networks) directly collect your advertising ID (Android: Google Advertising ID · iPhone: IDFA, only if you tap 'Allow' on the App Tracking Transparency prompt), IP address, device information such as model, OS and language, and ad impression/click data to serve ads, cap frequency, measure performance and prevent ad fraud. We do not receive or store your advertising ID. You can reset or delete your advertising ID or opt out of personalized ads in your device settings (Android: Settings → Google → Ads; iPhone: Settings → Privacy & Security → Tracking), and you can play without watching rewarded ads. See the Unity Privacy Policy.
IP addresses and access logs
When the app talks to our servers, your IP address may appear in Google Cloud access and security logs. These are used only for security and troubleshooting, are deleted under Google's retention policies, and we do not link IP addresses to game records.
2. Processors and international transfers
| Recipient | Purpose | Country / location | When and how |
|---|---|---|---|
| Google LLC (Firebase Authentication, Cloud Firestore, Cloud Functions) | Anonymous sign-in, storing game records, server checks and purchase verification | Game data: Republic of Korea (Google Cloud Seoul region asia-northeast3) · Sign-in system: Google data centers incl. the USA | Sent over the network while you use the app (encrypted) |
| Unity Technologies (Unity LevelPlay, Unity Ads and mediated ad networks) | Serving and measuring rewarded ads, ad fraud prevention | Servers of each provider incl. the USA | Sent directly by the ad SDK when ads are loaded or shown |
| Google Play | Payment processing, receipt verification, Google account linking | Google data centers incl. the USA | Handled by the store at purchase or linking |
| Apple Inc. (App Store, Sign in with Apple) | Payment processing, receipt verification, Apple account linking | Apple data centers incl. the USA | Handled by Apple at purchase or linking |
The transferred items are the relevant items in table 1 and are kept for the same periods. Policies: Google Privacy Policy · Unity Privacy Policy. The transfer to Firebase is required for online features (rankings, arena, mail, purchase verification); to refuse it, stop using the Game or ask us to delete your account. Transfers to ad partners can be limited by deleting your advertising ID or turning off personalized ads.
3. Deletion
When a retention period ends or you ask for deletion, we delete the information without delay (within 7 days of a request) in a way that cannot be recovered. Purchase and support records kept by law are stored separately and deleted when their period ends.
4. Your rights
You (or a legal guardian for children under 14) may ask to access, correct, delete or stop processing your information at any time. Use Settings → Contact Us → Write email in the Game (your member number is filled in automatically) or email support@leoncorpcore.com with your member number; we respond within 7 days. For account deletion see Account & Data Deletion — you can request it by email even after uninstalling the Game.
5. Automated decisions (competitive content restrictions)
To keep competition fair, our server restricts access to competitive content (rankings, arena, weekly rewards) without human involvement when it detects: tampering with on-device data, a gem balance that does not match the gem ledger, negative balances, unverified purchases or reused receipts, (when enabled) using products after a refund, or arena gear beyond your progress. Solo play remains available. You may ask for an explanation or appeal (support@leoncorpcore.com, include your member number), and a person will review the decision and tell you the result.
6. Children
Purchases by players under 14 require a legal guardian's consent, and purchases made without consent may be cancelled on request. Guardians may request access to or deletion of a child's information as described above.
7. Security measures
- All server communication is encrypted (HTTPS)
- Access rules: players can write only their own records; gameplay and purchase logs are written only by the server
- Administrator access limited to designated admin accounts, with an audit log
- On-device data encryption and tamper checks
8. Privacy officer and contact
Privacy officer: CEO, LEON CORP CORE · support@leoncorpcore.com
You may also contact the Korean Personal Information Infringement Report Center (privacy.kisa.or.kr, +82-118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, +82-1833-6972).
9. Changes
We will announce changes on this page and in the Game at least 7 days before they take effect (30 days for changes unfavorable to you).