Privacy Policy
DongDong Game Studio ("Company") values the privacy of users of the mobile game "Cat Tavern" ("Game") and complies with the Personal Information Protection Act and other applicable laws. This policy explains what information the Company collects and processes while providing the Game, and how it protects that information.
1. Information We Collect and How
The Game is designed to be played anonymously without a separate sign-up. However, when you use features such as cloud save, account linking, ads, or purchases, the following information is collected or processed automatically or at your choice.
| Category | Items collected / processed | When / how |
|---|---|---|
| Guest (anonymous) login | Anonymous authentication identifier (Firebase anonymous UID) | Generated automatically on first launch |
| Account linking (optional) — Google | Google account email & display name, Google Play Games player ID, authorization code (serverAuthCode) / tokens | When you choose to link a Google account |
| Account linking (optional) — Apple | Apple user identifier, email (may include private relay email), display name, authentication tokens / codes | When you choose to link an Apple account |
| Cloud save (optional) | Game progress data (currency, progress, settings, etc.) and identifier (UID) mapping | When you use the cloud save feature |
| Remote configuration | Device / instance identifier (e.g., Firebase Installation ID, for config fetch) | Automatically on launch |
| Advertising | Advertising identifier (Android Advertising ID / Apple IDFA), device & network info, IP address, IP-based approximate location (country/region), tracking consent (ATT) status, ad interaction records | Automatically when ads are shown |
| Payments | Purchase receipt, transaction ID, purchase token, purchase history | On in-app purchase |
| Game services | Player ID, achievements & scores (leaderboard) data | When using achievements / leaderboards |
| Usage analytics (Firebase Analytics) | App usage / event logs (sessions, ad views, purchases, progress events, etc.), device model · OS · app version, instance identifier | Automatically on launch |
| Crash diagnostics (Firebase Crashlytics) | Crash logs, device / OS info, diagnostic logs | Automatically when an error occurs |
- The Game is anonymous by default. Directly contactable account information such as email and display name is not collected unless you choose to link an account. However, the anonymous UID, advertising identifier, IP address, and device / instance identifiers may be treated as personal information (online identifiers) in the course of providing the service.
- The authentication codes / tokens used for account linking (serverAuthCode, Google/Apple authentication tokens) are processed only temporarily to confirm account linking and are not stored after authentication completes.
- Actual payment instrument details (card numbers, etc.) are handled by Google Play and the Apple App Store; the Company does not store them.
Information stored on your device (local storage)
The following is stored on your device (PlayerPrefs) by default:
- Settings (language, volume, etc.), game progress data, and the ad-removal purchase flag.
However, if you use cloud save or account linking, your game progress data is transmitted to and stored in Firebase Firestore for cross-device synchronization.
2. Purposes of Processing
The Company uses the collected information only for the following purposes:
- User identification via anonymous authentication and optional account (Google/Apple) linking
- Cloud storage and cross-device synchronization of game progress data
- Service configuration / operation through remote settings
- Display, frequency control, and effectiveness measurement of in-app ads
- In-app payment processing, receipt verification, and refund / customer support
- Provision of game services such as achievements and leaderboards
- Quality improvement through service usage analysis
- Crash diagnostics, service stability, and prevention of abuse
3. Retention and Use Period
The Company retains information for the periods below and then destroys it. For data stored by the processors (Section 5) on their own infrastructure, the processor's retention policy also applies.
| Type of information | Retention period / criteria |
|---|---|
| Anonymous UID, account linking info, cloud save data | Until you request deletion or reset the cloud save data |
| Payment / transaction records | The period required by law (e.g., 5 years for payment and supply-of-goods records under e-commerce law) |
| Usage analytics logs (Firebase Analytics) | Until the purpose is achieved, or per the processor's retention policy (default up to 14 months) |
| Crash diagnostic logs (Firebase Crashlytics) | Until the purpose is achieved, or per the processor's retention policy (around 90 days) |
| Advertising logs (AdMob) | Destroyed without delay after the purpose is achieved or per the processor's (Google) retention policy |
4. Provision to Third Parties
The Company does not provide your personal information to third parties without your separate consent, except in the following cases:
- Where there is a legal basis, or where an investigative authority requests it through lawful procedures
- Where a processor processes the information under the delegation / cross-border transfer described in Section 5
In addition, some SDKs included in the Game (in particular Google AdMob) may have Google directly collect and process advertising identifiers, device information, IP addresses, etc., as an independent controller for the purposes of ad delivery, measurement, and fraud prevention. See each processor's privacy policy (links in Section 5) for details.
5. Delegation of Processing and Cross-Border Transfer
To provide the service, the Company delegates the processing of personal information as follows. Because the processors operate servers abroad, the information is transferred overseas. Transfers occur via the network at the time each feature is used.
| Recipient (processor) | Country | Items transferred | Purpose | Retention / use period |
|---|---|---|---|---|
| Google LLC (Firebase Auth/Firestore) | USA | Anonymous UID, account info, game progress data | Authentication, cloud save / sync | Per Section 3 |
| Google LLC (Firebase Remote Config) | USA | Device / instance identifier (FID) | Provision of remote settings | Per Section 3 |
| Google LLC (Firebase Analytics) | USA | Usage / event logs, device & instance identifiers | Usage analysis / quality improvement | Up to 14 months |
| Google LLC (Firebase Crashlytics) | USA | Crash logs, device / OS info | Crash diagnostics / stability | Around 90 days |
| Google LLC (AdMob) | USA | Advertising identifier, device info, IP, approximate location | Ad delivery / measurement / fraud prevention | Per processor policy |
| Google LLC (Play Games) | USA | Play Games player ID, achievements & scores, auth code | Game services, Google account linking | Per Section 3 |
| Google LLC (Google Play billing) | USA | Receipt, transaction ID, purchase token, purchase history | Android in-app payment processing | Per Section 3 (legal retention) |
| Apple Inc. (Sign in with Apple) | USA | Apple user identifier, email (incl. relay), display name, auth tokens | Apple account link authentication | Per Section 3 |
| Apple Inc. (App Store / Game Center) | USA | Receipt, transaction ID, purchase history, player ID | iOS in-app payment & game services (planned) | Per Section 3 (legal retention) |
- Processors' privacy policies: Google/Firebase · Play · AdMob https://policies.google.com/privacy (ads: https://policies.google.com/technologies/ads) / Apple https://www.apple.com/legal/privacy
- You may refuse the cross-border transfer, but in that case the relevant features (cloud save, account linking, the free ad-supported service, etc.) may be restricted. Refusals and inquiries can be submitted to the contact in Section 11.
6. Personalized Ads and Advertising Identifiers
- The Game shows ads through Google AdMob and may use advertising identifiers to optimize ads.
- The Game does not request precise location permission based on GPS, Wi-Fi, or cell towers. The ad SDK may estimate only an approximate location at the country/region level using the IP address.
- On iOS, consent is requested under the App Tracking Transparency (ATT) framework; depending on your choice, use of the advertising identifier (IDFA) is restricted.
- In the European Economic Area (EEA), the UK, etc., consent for advertising / data processing is obtained via the Google User Messaging Platform (UMP).
- You can reset the advertising identifier or opt out of personalized ads in your device settings.
- Android: Settings > Privacy > Ads
- iOS: Settings > Privacy & Security > Tracking
7. Your Rights and How to Exercise Them
- You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information.
- Account and data deletion: You can request deletion via the in-game menu [Settings > Account > Delete account and cloud data], the account deletion request page (https://dongdonggs.com/en/games/cat-tavern/delete-account), or via the contact below (support@dongdonggs.com). Unlinking an account only disconnects the login link; deletion of cloud save data is processed upon a separate deletion request.
- Upon receiving a request, the Company processes it without delay in accordance with applicable law.
8. Children Under 14
- The Game targets general users and is not directed to children under 14. The Company does not knowingly collect personal information from children under 14.
- For children under 14, personalized ads are configured not to be served, in accordance with applicable law and Google / Apple policies.
- If the Company becomes aware that a child's personal information has been collected, it deletes the information without delay.
9. Notice for EEA / UK Users (GDPR)
For EEA / UK users, the Company processes information as follows:
- Legal bases for processing: performance of a contract to provide the service (cloud save, account linking, payments); your consent for personalized ads, etc.; legitimate interests for service stability and fraud prevention; and compliance with legal obligations.
- Your rights: you have the rights of access, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent. Withdrawal of consent affects only future processing.
- Right to lodge a complaint: you may lodge a complaint with your local data protection supervisory authority.
- Transfer safeguards: transfers to the USA, etc., rely on lawful safeguards such as the EU Standard Contractual Clauses (SCC) or the EU-US Data Privacy Framework (DPF).
10. Destruction and Security Measures
- When the retention period expires or the purpose is achieved, the Company destroys the information without delay; electronic files are permanently deleted in an unrecoverable manner.
- The Company applies reasonable safeguards, including encryption in transit (HTTPS/TLS), access control, and the use of trusted cloud infrastructure (Google Firebase).
11. Privacy Officer and Contact
For inquiries, complaints, or exercising your rights regarding the processing of personal information, please contact:
- Company: DongDong Game Studio
- Representative: Lee Mingyu
- Business registration number: 713-07-02796
- Business address: 3-203, 91 Simgok-ro, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea
- Privacy officer: Lee Mingyu
- Contact email: support@dongdonggs.com
12. Remedies for Infringement
If you need to report or consult on a privacy violation, you may contact the following Korean agencies:
- Personal Information Infringement Report Center: 118 / privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
- Supreme Prosecutors' Office Cyber Investigation: 1301 / www.spo.go.kr
- National Police Agency Cyber Bureau: 182 / ecrm.cyber.go.kr
13. Changes to This Policy
If this policy changes, the Company will announce the changes on this page; for material changes, notice is given at least 7 days before the effective date.
- Announced: 2026-06-22
- Effective: 2026-06-22