madalang (the “Company”) values your privacy and complies with the Personal Information Protection Act of the Republic of Korea and related laws. This policy applies to the mobile game services and the website (madalang.com) provided by the Company (collectively, the “Service”).
1. Personal Information We Collect and How We Collect It
The Company does not use third-party analytics tools (such as Google Analytics) to collect website visit information; that information is stored only on the Company’s own servers.
You can reset or delete your advertising identifier at any time in your device settings (Android: Settings › Google › Ads; iOS: Settings › Privacy & Security › Tracking), which limits the personalisation of the ads you see.
The Company does not knowingly collect personal information from children under the age of 14. The Service is intended for users aged 14 and over.
2. Purposes of Collection and Use
- Providing the Service, authenticating users and managing accounts
- Saving game data and synchronising it across devices
- Serving in-game advertising (AdMob)
- Improving the Service and diagnosing errors
- Analysing website visit statistics (visitor counts, popular pages, referral sources)
- Detecting and blocking abuse and abnormal access, and maintaining the stability of the Service
- Meeting obligations under applicable law
Where the UK GDPR or the EU GDPR applies to you, the Company relies on the following legal bases: performance of a contract (providing the Service, account management and game data storage); your consent (personalised advertising); legitimate interests (security, abuse prevention, error diagnosis and service improvement); and compliance with legal obligations.
3. Retention and Use Periods
4. Disclosure to Third Parties
The Company does not disclose your personal information to third parties without your consent, except in the following cases.
- Where you have consented (authentication information is passed to Google when you link a Google account)
- Where disclosure is required by law
5. Processors
For details about this processor, please see the Google Privacy Policy.
6. International Transfers
The Company is based in the Republic of Korea, and account information, game data and access logs are stored on servers located in the Republic of Korea. If you use the Service from outside Korea, your personal information is therefore transferred to and processed in Korea.
For users in the United Kingdom and the European Economic Area, the Republic of Korea is recognised as providing an adequate level of data protection under adequacy decisions, so no additional transfer safeguards are required for transfers to Korea.
In addition, because the Service uses Google services (authentication and advertising), some personal information may be processed on servers in the United States and other countries. Those transfers are governed by the Google Privacy Policy.
7. Your Rights and How to Exercise Them
You may exercise the following rights at any time.
- Request access to, correction of, or deletion of your personal information
- Request restriction of, or object to, the processing of your personal information
- Request a copy of your personal information in a portable format
- Withdraw consent you have given, at any time, without affecting processing carried out before the withdrawal
- Delete your account (through the in-game account deletion function, or by contacting the address below)
To exercise these rights, contact us at the address in section 9 and we will act without undue delay.
If you are in the United Kingdom or the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority — in the United Kingdom, the Information Commissioner’s Office (ico.org.uk).
8. Destruction of Personal Information
Personal information is destroyed without delay once the retention period has elapsed or the purpose of collection has been achieved.
- Electronic files: permanently deleted in a manner that prevents recovery
- Website visit IP addresses and game sign-in IP addresses: deleted by an automated process 90 days after collection, after which they cannot be recovered. The sign-in records themselves are retained for security auditing.
- Other records: not applicable
9. Contact
For any question about this policy or about how your personal information is handled, email zzzzz955@gmail.com.
Users in the Republic of Korea may also report privacy concerns to the following authorities.
- Personal Information Protection Commission: privacy.go.kr / 182
- Privacy Infringement Report Center: privacy.kisa.or.kr / 118
10. Changes to This Policy
This policy may be amended following changes in law, policy or the Service. We will announce any change within the Service or on this page.