Privacy Policy
K-POP Word Puzzle | Effective and last updated: July 23, 2026
com.hangulmatch) is an offline-friendly Korean word puzzle developed by the K-POP Word Puzzle developer ("we," "us," or "our"). The app does not require a developer account and does not sell personal information. Players may optionally connect a Google Play Games profile for achievements, leaderboards, and cloud save. The app does not collect names, email addresses, phone numbers, contacts, precise location, camera data, or microphone recordings on our own servers.
1. Information handled by the app
| Information | How and why it is used | Where it goes |
|---|---|---|
| Game and study data | Tour progress, settings, difficulty, learned words, collection cards, boosters, fan points, and purchase entitlements are used to provide the game. | Stored locally on the device. If the player connects Google Play Games, selected progress is also stored through Google Play Games Saved Games. |
| Google Play Games data | An optional Play Games player identifier and display name support platform authentication. Achievement status, fan-point and Blitz scores, and a merged copy of tour, study, collection, booster, and fan progress support achievements, leaderboards, and cloud restore. Google Play Games may also process service-usage analytics and SDK diagnostics to operate and improve the service. | Processed by Google Play Games under the player's Google account. The developer does not copy the player identifier or cloud-save payload to a developer-operated server. |
| Limited product analytics | Event name, event time, app version, game mode, experiment variant, a short non-personal challenge ID, platform, and a numeric gameplay value such as clear time are used to understand challenge and sharing features. | Sent over HTTPS to our Cloudflare-hosted service and stored for up to 90 days. No account ID, advertising ID, name, or email is included in these events. |
| Firebase product measurement | Google Analytics for Firebase measures first opens, sessions, puzzle completions, 1/3/5-clear activation milestones, gameplay performance, and impression-level advertising revenue. The app does not send learned-word text, challenge codes, names, contact details, or message content in these events. | Processed by Google. Firebase may process an app-instance identifier and device or app information according to Google's SDK disclosures and the user's consent state. |
| Advertising data | When advertising is enabled, ad providers may process IP-derived approximate location, personal or device identifiers, advertising ID, device and app information, ad views and taps, app activity, diagnostics, fraud-prevention signals, and purchase history for advertising, measurement, analytics, app functionality, security, fraud prevention, and legal compliance. | Processed by Unity LevelPlay, ironSource Ads, Unity Ads, Meta Audience Network, and Google AdMob bidding as described below. |
| Purchase data | Product identifiers, entitlement status, and a limited set of purchase tokens are used to deliver purchases and prevent duplicate rewards. | Google Play processes the payment. The app stores entitlement records locally and does not receive payment-card details. |
2. Advertising and privacy choices
The app may show user-initiated rewarded ads and occasional interstitial ads at natural breaks after gameplay. Unity LevelPlay mediates ads from ironSource Ads, Unity Ads, Meta Audience Network, and Google AdMob bidding.
Google's User Messaging Platform (UMP) refreshes consent information at app launch. Firebase initializes before UMP so that, when consent mode is enabled in AdMob, UMP can communicate applicable choices for analytics storage, advertising storage, ad user data, and ad personalization. In regions where a privacy message is required, advertising does not initialize until UMP reports that ads may be requested. The certified message offers the choices configured in AdMob, and required privacy choices can be reopened from the app's Settings screen. Limited or non-personalized ads may still require basic device, network, security, and contextual information to deliver and measure an ad.
Provider details: Unity Privacy Policy, Meta Privacy Policy, and Google Privacy Policy.
3. Product analytics and hosting
Our first-party analytics service records only the limited event fields listed above. The app keeps at most 100 undelivered events in a local retry queue. Successfully received events are deleted from our analytics database after no more than 90 days.
Firebase Analytics events are processed by Google for product measurement, retention reporting, attribution, and advertising-revenue analysis. Retention follows the Google Analytics property setting. We use the shortest setting that still supports the stated 30-day cohort analysis.
Cloudflare hosts the privacy site, challenge landing pages, and analytics endpoint. Like other internet infrastructure providers, Cloudflare may automatically process IP addresses and request metadata to transmit traffic, maintain security, and prevent abuse. See the Cloudflare Privacy Policy.
4. Google Play Games and purchases
Google Play Games sign-in is optional and is managed by Google. When connected, the app uses Google Play Games Services for achievements, leaderboards, and Saved Games. Google may process player identity, service-usage analytics, and SDK diagnostics under its privacy policy. Cloud save merges progress earned on either device so that higher tour, star, collection, study, and fan progress is not intentionally removed. Purchase entitlements and advertising-removal status are not trusted from the cloud-save file and continue to use Google Play Billing restoration.
Optional digital purchases are processed by Google Play Billing. Google processes payment and transaction information under its own terms. We do not receive or store credit card, debit card, or bank account numbers. See the Google Privacy Policy.
5. Screen recording and sharing
Screen recording starts only after the user taps REC and approves Android's MediaProjection system prompt. A visible foreground-service notification is shown while recording. Recordings are stored in the app-specific Movies directory, contain no microphone audio, and are not uploaded by us.
When the user chooses Share, the app creates a challenge link, result image, or encouragement card and opens the Android share sheet. The user chooses the destination. Data sent to the selected third-party app is then governed by that service's privacy policy.
6. Permissions
- Internet and network state: Google Play Games, advertising, Google Play Billing, challenge links, install attribution, and limited analytics.
- Advertising ID and attribution APIs: advertising, measurement, and fraud prevention when ads are enabled.
- Foreground service and MediaProjection: user-initiated screen recording only.
- Notifications: the recording-in-progress foreground-service notification on supported Android versions.
- Vibration: optional gameplay haptics.
The app does not request precise location, contacts, camera, microphone, broad photo or file access, phone, or SMS permission.
7. Legal bases and international processing
Where applicable, we rely on consent for personalized advertising; performance of the requested service for gameplay, optional Google Play Games features, purchases, recording, and sharing; and legitimate interests for limited product analytics, security, debugging, and fraud prevention. Users may disconnect or manage Play Games through Google settings and may withdraw an advertising choice in Settings. Service providers may process information in countries other than the user's country and use safeguards required by applicable law.
8. Retention, deletion, and privacy rights
Local game data and recordings can be removed by clearing app storage, deleting the recording, or uninstalling the app. Google Play Games profile, achievement, leaderboard, and Saved Games data can be managed or deleted through the player's Google Play Games and Google Account controls. First-party Cloudflare analytics events are retained for up to 90 days. Firebase Analytics is retained according to the Google Analytics property setting and uses an app-instance identifier rather than a developer account. Clearing app data or uninstalling resets the local app instance. We may be unable to identify a particular first-party event unless the requester supplies a challenge ID and approximate date.
Users may ask to access, correct, delete, restrict, or object to applicable processing by emailing us. Advertising providers handle requests concerning information they control through their privacy tools. Instructions are also available on our Data Deletion page.
9. Children
The app is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect names, contact details, or account profiles from children. If you believe a child has provided personal information through an external contact or sharing service, contact us so we can investigate.
10. Security
We use HTTPS in transit, minimize analytics fields, limit local queues, and apply retention controls. No method of transmission or storage is completely secure, but we use reasonable safeguards appropriate to the information handled.
11. Changes and contact
We may update this policy when features, providers, or legal requirements change. The effective date above will be revised when changes are published.
Privacy contact: K-POP Word Puzzle developer
commuten@gmail.com