Privacy Policy

1. Who holds your data

NUGANUGA (테스트 운영 · 사업자 정보 등록 전), at 사업장 주소 미등록 (테스트 배포), is the controller of the personal data described here. Contact us at legal@nuganuga.com about anything on this page.

2. What we collect, and why

The service is built to need very little. We do not track you across other websites ourselves, we build no profile of you, and we sell nothing about you to anyone. Google’s advertising may use Google’s own profile of you — only where you have allowed personalised ads, and never fed by anything we hold about you.

Account: a provider identifier, and an email address if you sign in with Google. A guest account has neither — just an identifier we generated. Legal basis: performance of the contract between us.

Profile: your username, display name, avatar seed, country code and, if you write one, a bio. Legal basis: performance of the contract.

Play: for each run, the game, the score, how long it took, the country the request came from, the device category (phone, tablet, desktop) and the events the game recorded so the score can be verified. Legal basis: performance of the contract, and our legitimate interest in a leaderboard that is not fraudulent.

Product analytics: how the service is used — page views, game impressions, starts, finishes, retries, shares, challenge plays, searches, favourites, sign-ins, settings changes and Creator actions — tied to your account identifier, in our own database. Search terms are stored; the prompts you write in the AI Creator are not part of analytics. Legal basis: legitimate interest in understanding whether the product works.

Google Analytics: the same events, sent to Google Analytics 4 with your IP address truncated, so we can see how the site is used in aggregate. Google Analytics only stores cookies on your device if you allow it in the cookie banner; without that it receives cookieless pings that cannot be tied to you across visits. Legal basis: your consent, where the law requires it; legitimate interest elsewhere.

Advertising: ads on the home page and on game pages are served by Google AdSense. Google may use cookies and identifiers to show ads and measure them, and personalises them only where you have allowed it — through the cookie banner, or through Google’s own consent message in the EEA, the UK and Switzerland. We record ad impressions and clicks by placement and country in our own database, without any identifier of yours. Legal basis: your consent for personalised ads; legitimate interest for non-personalised ones.

Creators: everything above, plus your games, the prompts you gave the AI Creator, and the revenue attributable to your games. Legal basis: performance of the contract and our legal obligation to keep financial records.

3. What we do not collect

We do not collect your real name, your address, your phone number or your date of birth. We do not store payment card details; where payouts require bank or tax details, those are handled by the payment provider and not by us.

The games themselves cannot reach the network. They run in a sandbox with no outbound connections, so a game cannot send anything about you anywhere — including to its own creator.

4. Cookies

Two cookies are necessary and always set: one holds your session so you stay signed in, and one remembers the interface language you chose.

Google Analytics and Google AdSense set their own cookies (such as _ga and Google’s advertising cookies) only if you allow them in the cookie banner. Your choice is kept in your browser and you can change it at any time from “Cookie settings” in the footer. If you decline, the site works exactly the same; analytics becomes cookieless and ads are not personalised.

5. Who else sees it

Infrastructure providers that host the service, under contract and only to run it.

Google, for analytics and advertising as described above. Google acts under its own privacy policy for the data it collects through its services; we do not send Google your account, your email or your scores.

The AI provider that generates games, which receives the prompt you typed and nothing about your account. Prompts are not used to train that provider’s models.

Authorities, where we are legally required to disclose something, and only that.

6. How long we keep it

Account and profile data: until you erase your account.

Scores, sessions and replays: for as long as the game is on the platform, because they are the leaderboard.

Product analytics events: 24 months.

Audit and moderation records: 24 months.

Financial records, including revenue lines and payouts: 5 years, or longer where tax law requires it.

7. Your rights

You can ask for a copy of your data, correct it, restrict or object to processing, or have it erased. The first two are buttons in your account settings; for the rest, write to legal@nuganuga.com and we will answer within 30 days.

Export gives you a JSON file with your account, profile, creator record, games, scores, challenges, favourites, reviews, reports and earnings.

If you are in the EEA or the UK you may complain to your data protection authority. If you are in Korea you may complain to the Personal Information Protection Commission.

8. What erasing your account actually does

Erasure removes you, not the record of a competition other people took part in. We think it is better to say exactly where that line is than to imply a clean delete that would quietly damage other players.

Removed immediately: your email address and provider identifier, your display name, bio and avatar, your reviews, your favourites, the text of any reports you filed and the link between those reports and you, and every signed-in session.

Kept, with nothing identifying attached: your scores and the leaderboard entries built from them, because removing them would silently change the standings of everyone who played against you; games you published, which other people play and have their own scores in; and the revenue ledger, which we are legally required to keep.

After erasure your profile shows an anonymous handle that is not derived from anything about you, and it is no longer public. You cannot sign back in, and we cannot restore the account.

If you want a game you published taken down as well, unpublish it before erasing your account, or ask us at legal@nuganuga.com.

9. Where your data is

The service runs in 대한민국 (Republic of Korea). Where a provider processes data elsewhere, that transfer is covered by standard contractual clauses.

10. Children

The service is not directed at children under 14. If we learn that an account belongs to a child under 14 without parental consent, we erase it.

11. Changes

If this policy changes materially we will show the change here and notify account holders before it takes effect. The date at the top is the date of the current version.