Puffchip Games (the “Company”, “we”) develops and operates mobile game apps (the “Service”). This Privacy Policy explains how personal information is collected, used, shared and kept in the course of using the Service, in compliance with applicable laws such as Korea’s Personal Information Protection Act (PIPA). It has been written with the GDPR (EU General Data Protection Regulation), the CCPA (California Consumer Privacy Act) and PIPA in mind.

This Policy applies to all mobile games operated by Puffchip Games and distributed through Google Play and the Apple App Store, and to related services. By using the Service you are deemed to agree to this Policy.

Our games use the third-party services below (some of them may be used in only some games).

• Advertising: Google AdMob (including rewarded ads, and the UMP consent management)
• Analytics and error collection: Firebase Analytics, Firebase Crashlytics
• Sign-in and cloud save: Google Play Games Services (Android)
• Payments: Google Play Billing, Apple App Store in-app purchase

In the iOS version we do not request App Tracking Transparency (ATT) permission and do not access the IDFA, so ads are served as non-personalized.

We process the items below. Most information is collected automatically through third-party services (Google AdMob, Firebase, Google Play Games Services); some items may apply to only some games.

We do not directly collect directly identifying personal information such as name, email address or phone number.

Collection methods

• Automatic collection: the SDKs (Firebase, AdMob) automatically collect device and usage information when the app runs.
• Ad interaction: AdMob records interaction data when you click or watch an ad.
• In-app purchases: transaction information is processed through Google Play Billing (Android) or Apple App Store in-app purchase (iOS). Payment details are handled directly by Google or Apple; we do not have access to them.
• Play Games sign-in and cloud save: when you sign in to Play Games, Google Play Games Services provides a player ID, and in games that support cloud save, game progress is saved to your Google account through Saved Games.

• Providing the Service: operating game features, sign-in, cloud save, granting purchased items and delivering the user experience
• Serving ads: showing relevant ads (personalized or non-personalized; non-personalized on iOS)
• Analytics and improvement: analyzing usage patterns, improving features, fixing bugs
• Preventing fraud and cheating: detecting and blocking abnormal usage patterns
• Legal compliance: keeping records and responding to legal requests as required by law

We do not use personal information for purposes other than those above, and will take the measures required by law if the purposes change.

Personal data of EU/EEA users is processed on the following legal bases.

• Consent (Art. 6(1)(a)): at first launch of ad-supported games we collect explicit consent for personalized ads (GAID-based) through a consent dialog (Google UMP). Consent can be withdrawn at any time.
• Performance of a contract (Art. 6(1)(b)): where necessary to provide the game service and process in-app purchases.
• Legitimate interests (Art. 6(1)(f)): maintaining service security, preventing fraud, serving non-personalized ads, and error analysis. This processing is balanced against your fundamental rights.
• Legal obligation (Art. 6(1)(c)): record-keeping duties under applicable law.

Personal information is deleted without delay once the purpose of processing is achieved. Retention by third-party services follows their own policies.

We do not provide or share collected information with third parties except in the following cases.

• Service providers: Google AdMob (ads), Firebase (analytics/crash reporting), Google Play Games Services (sign-in/cloud save), Google Play and Apple App Store (in-app purchases) — shared only to the extent necessary to operate the Service
• Legal requests: court orders, requests under law, or where necessary to protect legal rights
• Business transfer: in a merger, acquisition or asset sale — users will be notified in advance

Third-party privacy policies

• Google AdMob Privacy Policy
• Firebase (Google) Privacy
• Google Play Games Services (Google Privacy Policy)
• Apple (App Store in-app purchase) Privacy Policy
• Google Play Terms of Service

To operate the Service, we entrust processing of or transfer personal information overseas as follows.

Timing and method: transmitted over the network from time to time while you use the app. To refuse transfer, stop using the app or contact the officer below; some features may be limited as a result.

Google AdMob, Firebase and Google Play Games Services operate servers in many countries including the United States, so some information may be transferred outside the EU/EEA. Google ensures an adequate level of protection through EU Standard Contractual Clauses (SCC) (GDPR Art. 46). In Korea, we give notice of overseas transfer under Article 28-8 of PIPA; the destination country is the United States and the recipient is Google LLC. See Google’s data protection framework for details.

• Procedure: personal information whose retention period has expired or whose purpose has been achieved is destroyed without delay. Information that must be kept by law is stored separately for the required period and then destroyed.
• Method: information in electronic files is deleted in a way that cannot be recovered. Information held by third-party services (Google, Apple) follows those services’ deletion procedures.
• Data stored on the device is deleted immediately when the app is uninstalled.

You may at any time request access to, correction, deletion, or suspension of processing of your personal information by emailing the privacy officer (puffchipgames.dev@gmail.com); we respond within 30 days.

Users residing in the EU/EEA have the following rights.

• Right of access (Art. 15): request a copy of the personal data collected
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data
• Right to erasure / to be forgotten (Art. 17): request deletion under certain conditions
• Right to restriction (Art. 18): request temporary restriction of processing
• Right to data portability (Art. 20): request your data in a structured format
• Right to object (Art. 21): object to processing based on legitimate interests
• Right to withdraw consent: you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

• How to withdraw consent (Android): Device Settings → Privacy → Ads → “Opt out of Ads Personalization”, reset the ad consent in the app settings, or contact us by email
• Deleting Play Games data: you can delete your Play Games profile and Saved Games data from the Play Games app or Google account settings.
• Deleting analytics data (Firebase Analytics): email puffchipgames.dev@gmail.com to request deletion.
• iOS: you can opt out by changing the relevant option in iOS Settings.

To provide personalized ads and analyze the Service, we automatically collect usage information through the advertising ID and SDKs (Google AdMob, Firebase).

• Android: you can refuse via Device Settings → Privacy (Google) → Ads → “Opt out of Ads Personalization” or by deleting the advertising ID, and you can choose in the consent dialog (Google UMP) shown at first launch. You can still use the Service, but ads will be non-personalized.
• iOS: we do not request ATT permission or access the IDFA, and ads are non-personalized. You can change tracking-related options in device settings.

We apply industry-standard technical and administrative security measures to protect collected information, and operate the Service in a way that does not collect directly identifying personal information. Third-party services (Google, Apple) protect data with their own security infrastructure.

However, transmission over the internet and electronic storage cannot be guaranteed to be 100% secure. If you find a security vulnerability, please tell us right away.

The Service is not directed to children under 13 (under 16 in the EU/EEA), and we do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has used the Service and personal information has been collected, please contact us immediately at the address below and we will promptly delete it.

Push notifications: The apps currently do not provide push notifications. If notifications are added later, you can opt out at any time in your device’s notification settings.

In-app purchases: In-app purchases are processed through Google Play Billing on Android and Apple App Store in-app purchase on iOS. Payment details such as card numbers are handled directly by Google or Apple; we do not access or store them. Purchase history and refunds are handled under Google Play and Apple App Store policies.

We designate the following privacy officer and contact point to oversee personal information processing and handle related complaints and remedies.

• Operator: Puffchip Games
• Email: puffchipgames.dev@gmail.com
• Response time: within 30 days (business days)

Data subjects may apply for dispute resolution or consultation to the following bodies for remedies against infringement of personal information.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office: 1301
• National Police Agency: 182

Users residing in the EU/EEA have the right to lodge a complaint with the supervisory authority of their country of residence (GDPR Art. 77). We encourage you to contact us first, but you may also contact the authority directly. List of EU supervisory authorities (EDPB Member List)

This Policy may change due to legal changes, service changes or other reasons. For material changes we will notify you through an in-app notice or by updating the effective date on this page. Continued use of the Service after a change means you agree to the revised Policy.

• Announced and effective: October 22, 2026