Privacy Policy

Version 1.1 · Takes effect 22 October 2026

This policy was written in Korean. If the two versions differ, the Korean version prevails. Read the Korean version.

This document is not yet in effect. It applies from 22 October 2026. Until then the current version 1.0 applies.

What changes — paid items and advertising are being introduced. We will process purchase records and an advertising identifier, and linking an external account (such as Google) becomes available. Everything that changed is listed in section 14.

Payments and ads arrive in an app update after this policy takes effect. Before that update, neither purchase records nor advertising identifiers are processed.

majunolja ("the studio") handles your information carefully and follows the Personal Information Protection Act of the Republic of Korea. This policy applies to GEMPIRE ("the service").

The service does not ask for your real name, email address, or phone number. There is no sign-up step. An account is created from an identifier generated on your device the first time you open the app. Even if you link an external account, we do not store its email address.

1. What we collect

1.1 Stored on our servers

AreaItems
AccountDevice identifier, account identifier, nickname, avatar, language, join time, last seen time, app version
Linked accountIf you link an external account, the opaque identifier that provider gives us
MatchesMatch results (seat, rank, points, card and noble counts), rating and its changes, match replays
ProgressExperience, games, wins, streaks, achievement progress, owned items
PurchasesIf you buy something: store, product identifier, transaction identifier, amount paid, verification time, refund time
SafetyReports (reporter, target, reason), block lists
SessionAuthentication tokens and their expiry

Linking an account does not store your email. The provider sends one, but all we need to join the accounts is the opaque identifier, so we receive the rest and discard it.

We never receive payment instrument details. Card numbers and the like are handled by the store; we receive only the transaction identifier and the product.

1.2 Processed for advertising

While ads are shown in the service, an advertising identifier is passed to the ad provider. The studio does not store it.

There are two ways to turn ads off.

1.3 Stored only on your device

Display, sound, accessibility and gameplay settings, tutorial progress, and the values used to pace how often ads appear stay on your device and are never sent to our servers. They are removed when you uninstall the app.

1.4 Sent but not stored

We do not store IP addresses. To limit excessive requests we count them in memory for a short window and forget them afterwards. They are never written to disk or to logs.

1.5 What we never collect

Email addresses, real names, phone numbers, postal addresses, dates of birth, location, contacts, photos, voice, and payment instrument details.

2. How we collect it

Information is generated automatically as you open the app and play. Your nickname and avatar are values you enter or choose. Linking an account and making a purchase happen only when you start them yourself.

3. Why we use it

We do not use it for marketing and we do not sell personal information.

4. How long we keep it

ItemPeriod
Account, rating, progress, owned itemsUntil the account is deleted
Match replays30 days (kept longer if subject to a report)
Reports1 year
Authentication tokens30 days
Backups30 days
Match resultsKept in anonymised form (section 7)
Payment and supply records5 years — Korean e-commerce law
Consumer complaint and dispute records3 years — Korean e-commerce law

Purchase records survive account deletion. We cannot erase them while the law requires them to be kept. In that case they are held separately from the account and used only for the purpose the law prescribes.

5. Sharing with third parties

We do not sell personal information. Information is passed on in the following cases.

RecipientWhatWhy
Google (ads)Advertising identifier, device and app informationServing and measuring ads
Google (payments)Purchase request detailsProcessing payment and verifying receipts

We comply with lawful requests from authorities where required by law.

6. Processors

ProcessorPurposeLocation
Amazon Web ServicesHosting and storageRepublic of Korea (Seoul)
GooglePayment processing · ad servingOutside Korea

Service data is stored in Korea. Payment and advertising are processed outside Korea through Google's infrastructure.

7. Deletion

When you delete your account:

Deletion cannot be undone. The links to your device and external account are removed, so opening the app again on the same device, or with the same external account, creates a new account. Previous results, rating, achievements and owned items cannot be restored.

Items you purchased are lost too, with no refund. A purchase record held by the app store cannot restore a deleted account.

8. Your rights

You may request access, correction, deletion, or suspension of processing at any time.

We respond within 10 days of receiving a request. A legal representative may make a request on your behalf.

9. Security

10. Children

Where we process the information of a child under 14, we obtain consent from a legal representative. The service collects no real names or contact details.

A purchase requires the consent of a legal representative. A payment made by a minor without that consent may be cancelled.

Ads are restricted to the general audience content rating.

11. Privacy officer

Name백민경
Contactmonicanb12@gmail.com

12. Where to get help

In Korea you may contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr) or the Privacy Infringement Report Centre (118, privacy.kisa.or.kr).

13. Changes to this policy

We announce changes on this page 7 days before they take effect, and 30 days before if the change is unfavourable to users. Earlier versions remain available.

14. What changed from version 1.0

SectionChange
1.1Added linked-account identifier and purchase records
1.2New — advertising identifier and how to opt out
1.5Removed "advertising identifiers" from what we never collect
3Added purchases and advertising to the purposes
4Added statutory retention periods (5 years, 3 years)
5Changed "we do not share" to passed to Google
6Added Google as a processor · noted processing outside Korea
7Added the statutory exception for purchase records; stated that owned items are lost with no refund
8Added the in-app deletion path and opting out of personalised ads
9Added server-side receipt verification
10Added consent for minors' purchases and the ad content rating limit