Privacy PolicyLITE

1. Information We Collect

1.1 Platform Account Identifier

When you sign in through Apple Game Center (iOS) or Google Play Games Services (Android), we receive a pseudonymous account identifier (a platform-specific ID) and your player nickname. We do not receive your real name, email address, or phone number.

1.2 Gameplay Data (Leaderboard)

The following gameplay data is sent to our server to enable the global leaderboard:

• In-game nickname
• Class, race, difficulty
• Run statistics (turn count, play time, XP/GP/UP scores, total score)
• Active skill IDs (JSON)
• Season number, run ID, record date

1.3 Advertising Identifier (IDFA / AAID)

For ad delivery and measurement, our ad SDK may access your device's advertising identifier:

• iOS: IDFA — only after you grant permission via Apple's App Tracking Transparency (ATT) prompt. If you decline, personalized ads are disabled and only contextual (non-personalized) ads may be shown.
• Android: Google Advertising ID (AAID) — subject to your device's "Opt out of Ads Personalization" setting.

1.4 Analytics & Crash Reporting (Firebase)

We use two Google Firebase services to understand app usage and fix crashes. These are provided by Google as SDKs embedded in the app:

• Firebase Analytics — collects anonymous usage events (e.g., stage progression, ad interactions, session duration), a pseudonymous Firebase Instance ID, approximate (country-level) location derived from IP, device model, OS version, and app version. Used to understand gameplay patterns and improve the game.
• Firebase Crashlytics — collects crash reports including stack traces, device model, OS version, memory state, and a Crashlytics Installation UUID. Used solely to diagnose and fix crashes. No personally identifiable information is collected.

Both services are governed by Google's privacy policy: firebase.google.com/support/privacy.

1.5 Other Device Information (Ads)

Our advertising SDK (Google AdMob) may additionally collect device model, OS version, general region (country-level), IP address, and app version for ad serving and fraud prevention.

1.6 Server Access Logs

Our game server records standard web-server access logs (IP address, request path, timestamp, response code) for security monitoring. Retained for 14 days.

1.7 What We Do NOT Collect

• We do not collect your precise GPS location.
• We do not collect your contacts, photos, microphone, or camera.
• We do not collect your real name, email, or phone number.

2. Advertising (IDFA / ATT / UMP)

2.1 Ad Networks

We use the following third-party advertising service(s) to serve ads in the App:

• Google AdMob — for banner, interstitial, and rewarded ads. AdMob's privacy policy: policies.google.com/privacy

2.2 App Tracking Transparency (ATT) — iOS

On iOS 14.5 and later, Apple requires apps to request permission before accessing the IDFA for tracking purposes. When you first launch LITE (or at an appropriate moment), you will see Apple's system prompt:

"Allow Dungeon Tracer LITE to track your activity across other companies' apps and websites?"

• If you select "Allow" — personalized ads may be shown based on your IDFA.
• If you select "Ask App Not to Track" — only contextual (non-personalized) ads are shown. No IDFA is read.

You can change this choice any time in iOS Settings → Privacy & Security → Tracking.

2.3 EU/EEA/UK Consent — Google UMP

If you are located in the European Economic Area, United Kingdom, or Switzerland, we use Google's User Messaging Platform (UMP) to obtain your consent before serving personalized ads, in compliance with GDPR and the ePrivacy Directive. You can manage or withdraw your consent at any time via the in-app "Privacy Options" menu.

2.4 California (CCPA/CPRA) "Sale / Sharing" Notice

Under California law, serving personalized ads based on advertising identifiers may be considered "sharing" or "sale" of personal information. We honor opt-out requests. California residents can opt out of personalized ads by:

• Declining the ATT prompt on iOS (equivalent opt-out)
• Enabling "Opt out of Ads Personalization" in Android settings
• Emailing us at smilejsu82@gmail.com with subject "Do Not Sell / Share My Personal Information"

3. How We Use Your Information

• Operate the seasonal global leaderboard
• Deliver and measure advertisements (personalized if consented, otherwise non-personalized)
• Prevent cheating, ad fraud, and abuse
• Respond to your support inquiries
• Analyze crashes and improve stability

4. Legal Basis for Processing (GDPR)

If you are in the EEA or UK, we process your personal data on the following legal bases:

• Performance of contract (Art. 6(1)(b)) — operating the game and leaderboard.
• Consent (Art. 6(1)(a)) — for personalized advertising and associated tracking identifiers (collected via Google UMP).
• Legitimate interest (Art. 6(1)(f)) — for security logs, anti-cheat, and ad fraud prevention.

5. Third-Party Services

• Apple Game Center (iOS) — sign-in & leaderboard. Apple Privacy Policy
• Google Play Games Services (Android) — sign-in & leaderboard. Google Privacy Policy
• Google AdMob — ad delivery and measurement. AdMob Ad Policies
• Google UMP (User Messaging Platform) — consent management (EEA/UK).
• Google Firebase Analytics — anonymous usage events (e.g., stage progression, ad interactions) and a Firebase Instance ID, for analytics purposes. Firebase Privacy & Security
• Google Firebase Crashlytics — crash reports, device model, OS version, and stack traces, for the purpose of improving app stability. No personally identifiable information is collected. Firebase Privacy & Security
• Server hosting — Vultr, Republic of Korea.

6. Data Retention

• Platform account ID & nickname: retained while your account is active.
• Leaderboard scores: current + previous season.
• Server access logs: 14 days.
• Advertising identifiers (IDFA / AAID): retained by AdMob per Google's data retention policies (not stored on our servers).
• Firebase Analytics / Crashlytics data: retained by Google per Firebase's default retention (typically 2 months to 14 months, configurable). Not stored on our servers.
• Support email: up to 2 years, or until earlier deletion request.

7. Your Rights

You have the following rights regarding your personal data:

• Access — request a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — delete your account and associated data.
• Restriction & Objection — limit or stop processing.
• Data portability — receive your data in machine-readable format.
• Withdraw consent — at any time (affects personalized ads via UMP settings).
• Opt out of personalized advertising — via ATT (iOS), device settings (Android), or email request.
• Lodge a complaint with your local data protection authority.

7.1 Account Deletion

Email smilejsu82@gmail.com with subject "LITE Account Deletion Request" and include your in-game nickname. We process the deletion within 30 days and send confirmation. Leaderboard entries tied to the account are anonymized.

8. Children's Privacy

Dungeon Tracer LITE is not directed at children. We do not knowingly collect personal information from children under the applicable age of digital consent (13 in the US per COPPA, 14 in Korea per PIPA, 16 in the EU per GDPR). Because LITE shows ads, we specifically do not serve personalized ads to users we know to be under these ages. If you believe a child has provided us personal information without parental consent, contact us for prompt deletion.

9. International Transfers

Our game server is in the Republic of Korea. Your gameplay data is processed there. Our advertising partner Google AdMob processes data globally under the Google Ads Data Processing Terms and applicable Standard Contractual Clauses for EEA/UK transfers.

10. Data Security

We protect your data with industry-standard measures: HTTPS/TLS 1.2+ transmission, JWT authentication, rate limiting, IP-based abuse protection, and automated intrusion detection. No system is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be noted at the top with an updated date. Continued use after changes constitutes acceptance.

12. Contact Us