Privacy Policy

1. Information We Collect

1.1 Platform Account Identifier

When you sign in through Apple Game Center (iOS) or Google Play Games Services (Android), we receive a pseudonymous account identifier (a platform-specific ID) and your player nickname. We do not receive your real name, email address, or phone number.

1.2 Gameplay Data (Leaderboard)

The following gameplay data is sent to our server to enable the global leaderboard:

• In-game nickname
• Class and race selection, difficulty
• Run statistics (turn count, play time, XP/GP/UP scores, total score)
• Active skill IDs (JSON)
• Compressed run log (used for replay and anti-cheat)
• Season number, run ID, record date

1.3 Cloud Save (Optional)

If you choose to enable cloud save, your local game progress data (tutorial flags, unlocked classes, session metadata) is uploaded to our server as a JSON snapshot. This allows you to restore progress on a new device. Cloud save is optional and associated only with your platform account ID.

1.4 Device & Diagnostic Information

When you contact us for support, we may collect device model, OS version, and app version that you voluntarily provide. We do not collect this automatically.

1.5 Server Access Logs

Our game server records standard web-server access logs (IP address, request path, timestamp, response code) for security monitoring and abuse prevention. These logs are automatically rotated and retained for 14 days.

1.6 What We Do NOT Collect

• We do not use IDFA, advertising identifiers, or tracking technologies.
• We do not integrate advertising SDKs (no AdMob, no Unity Ads, no Meta Audience Network, etc.).
• We do not integrate third-party analytics SDKs (no Firebase Analytics, no Flurry, no AppsFlyer, etc.).
• We do not collect your precise location, contacts, photos, microphone, or camera.

2. How We Use Your Information

The collected information is used strictly to:

• Save your game progress and sync it across your devices
• Operate the seasonal global leaderboard
• Prevent cheating and abuse (anti-tampering of scores)
• Respond to your support inquiries
• Improve stability by analyzing issue reports you voluntarily submit

We do not use your data for advertising, marketing profiling, or sale to third parties.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

• Performance of contract (Art. 6(1)(b) GDPR) — to save your progress, run the leaderboard, and provide the service you requested when installing the App.
• Legitimate interest (Art. 6(1)(f) GDPR) — for security logs and anti-cheat, balanced against your rights.
• Consent (Art. 6(1)(a) GDPR) — where you voluntarily submit diagnostic information via email.

4. Third-Party Services

We only use the minimum third-party platforms required to operate the game:

• Apple Game Center (iOS) — sign-in and leaderboard integration. Governed by Apple's Privacy Policy.
• Google Play Games Services (Android) — sign-in and leaderboard integration. Governed by Google's Privacy Policy.
• Server hosting — our game server is operated on Vultr infrastructure located in the Republic of Korea.

We do not share your data with third parties for advertising or marketing purposes.

5. Data Retention

• Platform account ID & nickname: retained while your account is active. Deleted upon request.
• Leaderboard scores: retained for the current and the previous season (for historical leaderboards). Old seasons are archived or deleted.
• Run logs: retained for 90 days for anti-cheat verification, then deleted.
• Server access logs: 14 days.
• Support email correspondence: up to 2 years for reference, unless you request earlier deletion.

6. International Data Transfers

If you access the App from outside the Republic of Korea, your data will be transferred to and processed on our server located in Korea. For users in the EEA/UK, we rely on appropriate safeguards (such as your explicit performance-of-contract basis) for such transfers.

7. Your Rights

Subject to your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure ("right to be forgotten") — request deletion of your account and associated data.
• Restriction & Objection — ask us to limit or stop certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent — at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

7.1 Account Deletion

To delete your account and all associated personal data, email us at smilejsu82@gmail.com with the subject line "Account Deletion Request" and include your in-game nickname. We will process the deletion within 30 days and send you a confirmation email. Leaderboard entries tied to the account will be anonymized.

7.2 California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information. To exercise any right, contact us at the email above.

8. Children's Privacy

Dungeon Tracer is not directed at children. We do not knowingly collect personal information from:

• Children under 13 (United States, per COPPA)
• Children under 14 (Republic of Korea, per Personal Information Protection Act)
• Children under 16 (European Union, or the applicable lower age set by each EU Member State, per GDPR)

If we become aware that we have collected such data without verified parental consent, we will delete it promptly. Parents who believe their child has provided us with personal information can contact us.

9. Cookies and Website Tracking

Our website (dungeontracer.com) does not use analytics cookies or advertising trackers. The website does load Google Fonts from fonts.googleapis.com and fonts.gstatic.com; this connection transmits your IP address to Google under Google's privacy policy. No identifiers are stored locally on your browser by us.

10. Data Security

We protect your data with industry-standard measures: HTTPS/TLS 1.2+ for all transmissions, encrypted-at-rest storage, JWT-based authentication, rate limiting, IP-based abuse protection, and automated intrusion detection (fail2ban). However, no method of transmission or storage is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted at the top of this page with an updated date. Continued use of the App after such changes constitutes acceptance. For substantive changes affecting how we process personal data, we will provide notice within the App where feasible.

12. Contact Us