SweetPulse (“we”, “us”) operates the mobile game GoStopPang(쿵짝 화투팡, the “Service”). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the rights you have. The Service can be played without signing in; account information is collected only if you choose to sign in to use online rankings.
1. Information we collect
| Category | Items |
|---|---|
| Account (optional) | Email (Google sign-in) and nickname — only if you sign in to use online rankings |
| Automatically collected | Device OS, app version, device language, country/region code (estimated from IP), anonymous user identifier |
| Service usage | Per-song scores and accuracy, online ranking records, in-game fruit currency balance, progress |
| Advertising identifier | AAID/IDFA — only with your consent (iOS App Tracking Transparency, UMP). If you decline, only non-personalized ads are served. |
| Purchase data | Apple App Store / Google Play transaction ID and purchase receipt. Payment instrument details are handled by Apple/Google directly and not stored by us. |
2. How we use information
- Running the game, saving scores, and providing per-song online leaderboards
- Identifying signed-in users and displaying nicknames
- Processing in-app purchases (fruit packs) and server-side receipt verification
- Serving personalized or non-personalized advertising
- Preventing abuse, validating scores, and maintaining service integrity
- Complying with legal obligations and handling disputes
3. Children
The Service is not directed primarily to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we delete it promptly. Ads may be served as non-personalized depending on device settings and consent state. We aim to comply with COPPA, GDPR-K, and the Korean Personal Information Protection Act.
4. Retention
| Data | Retention period |
|---|---|
| Account & ranking data | Until account deletion or a deletion request. All personal data is destroyed within 30 days of a request. |
| E-commerce records | 5 years, as required by the Korean Act on Consumer Protection in Electronic Commerce. |
| Abuse-prevention logs | Up to 1 year for fraud prevention. |
5. Sub-processors & international transfers
We rely on the following providers to operate the Service. They process personal data only as necessary to perform their services for us.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database, sign-in authentication, ranking storage | United States |
| Google LLC (AdMob) | Ad serving and measurement | United States |
| Apple Inc., Google LLC | In-app purchase processing | United States |
For users in the EEA/UK, transfers are made under appropriate safeguards (e.g., the European Commission’s Standard Contractual Clauses where applicable). The categories of data transferred are listed in Section 1.
6. Your rights
Subject to local law (GDPR, CCPA, the Korean PIPA, etc.) you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Receive your data in a portable format (data portability)
- Withdraw consent at any time, where processing is based on consent
To delete your account and all personal data, or to exercise any other right, contact us at developer@sweetpulsegames.com. We will respond within 30 days. Data of anonymous (not signed-in) users is stored on the device and can be removed by deleting the app or via device settings.
7. Security
- TLS/HTTPS encryption in transit
- Row-level security (RLS) at the database layer
- Server-side validation of sensitive game data such as scores
- Least-privilege access
- Regular security reviews and dependency patching
8. Advertising identifiers
We display ads via Google AdMob. On iOS we use the IDFA for personalized advertising only if you grant App Tracking Transparency consent; otherwise non-personalized ads are shown. On Android you can reset or opt out of the advertising ID in your device settings. In the EEA/UK, consent is collected via a consent management platform (UMP).
9. Cookies & similar technologies
As a mobile application, the Service does not use traditional web cookies. We store authentication tokens and game progress in the device’s storage to maintain your session.
10. Contact
| Company | SweetPulse |
| Privacy Officer | Representative, SweetPulse |
| developer@sweetpulsegames.com |
11. Changes to this Policy
If we make material changes to this Policy, we will notify you on this page at least 7 days before the changes take effect (30 days for changes that materially affect your rights).