Privacy Policy
놀게임즈(Noll games), referred to below as “Noll games” or “we,” explains how we process personal data for NollPang and customer support. This policy distinguishes account and gameplay processing, advertising and analytics, and visits to this information website.
1. Who we are
- Business / 상호
- 놀게임즈(Noll games)
- Business registration
- 395-40-00428
- Mail-order business report
- 2026-의정부송산-0004
- Reporting authority
- Head of Songsan 3-dong, Uijeongbu-si (의정부시 송산3동장)
- Business address
- Room 204, 2F, 119 Dongil-ro, Uijeongbu-si, Gyeonggi-do, 11726, Republic of Korea
- Service operations lead
- Ju-hyeok Jang (장주혁)
- Customer support
- master@ewenter.co.kr
- Website
- ewenter.github.io
Contact the privacy staff in Section 10 to ask questions or exercise your rights. The service operations lead and the privacy officer have different responsibilities.
2. Data, purposes and collection
Swipe or scroll the table sideways to see all columns.
| When / category | Data processed | Purpose |
|---|---|---|
| Starting the game, signing in or linking an account | Service account identifier (UID), guest status, sign-in provider and provider account identifier, authentication tokens; email and profile name supplied by Google or Apple, where provided. | Authentication, linking, access control and recovery support |
| Gameplay and rankings | Nickname, stages, scores, rank, characters, parts, items, virtual balances, reward/purchase fulfilment records and activity times | Saving progress, rankings, delivering rewards and purchases, preventing abuse and duplicate delivery |
| Purchases, restoration and refunds | Store/product IDs, order/transaction IDs, purchase tokens and receipt verification data, status, time, price/currency where supplied by the store, delivery/refund records | Verification, fulfilment, restoration, support, refunds and legally required records |
| Support and rights requests | Reply email, UID/nickname, messages and attachments, relevant order ID and minimal account-verification information where necessary | Resolving requests, identifying the account, rights handling and dispute resolution |
| App, server and diagnostics | IP address, OS, device model, app version, language, installation/app-instance identifiers, request/error/crash logs and diagnostic device state | Connectivity, reliability, fault investigation and security |
| Usage analytics | App-instance and analytics account identifiers, device/app information, access, stage, click, reward and purchase events, approximate region derived from IP | Understanding and improving game quality, difficulty and feature use |
| Ad requests, impressions and engagement | Advertising identifier where available, IP/device/app information, requests, impressions, clicks, reward events and privacy-choice signals | Ad delivery, frequency management, measurement, fraud prevention and rewards |
Data comes from your input, authentication providers and stores, and the operation of the app, servers and SDKs. We do not directly ask you to enter your full payment-card number or your Google/Apple account password. Do not send national identification numbers, passwords, verification codes or full card numbers in support messages.
Guest accounts currently use an account identifier issued by our authentication service. We do not promise that a device identifier alone creates an account or that reinstalling the app will always recover the same account.
3. Grounds for processing and choices
We process account, progress, purchase and support data as necessary to perform the service contract. We retain legally required transaction records to meet legal obligations. Security and fault handling are limited to what is necessary for safe service operation. Where separate consent is required, processing relies on that consent.
Reading this policy or accepting the Terms of Service does not by itself constitute blanket consent to processing that requires separate consent. We provide the required notice and obtain any required consent when purposes change or additional consent is needed.
Linking a Google or Apple account is a choice. Without processing necessary account and game data, we may be unable to provide the corresponding online service. Section 7 describes advertising, analytics and how to request restrictions.
4. Retention and deletion
Swipe or scroll the table sideways to see all columns.
| Data | Retention criteria |
|---|---|
| Account, gameplay and authentication data | For the period of account use; deleted without undue delay after a verified withdrawal/deletion request or fulfilment of the purpose. Legally required records are separated and retained as below. |
| Contracts, withdrawal of purchase, payment and supply records | 5 years for records subject to Korean electronic-commerce recordkeeping law |
| Consumer complaints and disputes | 3 years for the applicable consumer-protection records |
| Advertising/representation records | 6 months for the applicable electronic-commerce records |
| Ordinary support inquiries | Deleted when the inquiry-handling purpose is complete. Transaction or consumer-dispute records follow the legal periods above. |
| Analytics and ad records | Processed for the period necessary for the purpose and the relevant service retention settings; deleted or anonymized on completion of the purpose or a valid deletion request. Resetting an ad ID does not itself delete previously stored records. |
| Crash diagnostics | Firebase Crashlytics states that crash data and related identifiers are retained for 90 days before removal from live and backup systems begins. |
| Authentication, infrastructure and backups | Provider removal may take additional time after we initiate deletion. Firebase Authentication states that associated authentication data is removed from live and backup systems within 180 days after deletion is initiated. |
Legally retained records are access-restricted and used only for the retention purpose. We delete electronic records using methods intended to prevent recovery; paper records, if used, are shredded or otherwise securely destroyed. Records are destroyed without undue delay when the applicable period ends.
See Firebase privacy and security information and each provider’s policy for SDK retention and deletion cycles.
5. Providers, processing and disclosure
We use external services for cloud authentication, storage, server execution and diagnostics. Advertising, sign-in and app-store providers may also act as separate controllers for purposes necessary to provide their own services.
Swipe or scroll the table sideways to see all columns.
| Provider | Service / role | More information |
|---|---|---|
| Google LLC / Firebase and Google Cloud | Outsourced account authentication, game storage, server operations and crash/error diagnostics | Processing, retention and subprocessors |
| Google LLC / Google Analytics | App usage analytics | Google Privacy Policy |
| Google LLC / AdMob; Unity Technologies / Unity Ads | Advertising, measurement, fraud prevention and privacy choices | Google partner services · Unity Privacy Policy |
| Google / Google Play and Google sign-in; Apple / App Store and Sign in with Apple | Account linking selected by you, store payments, purchase verification and refunds | Google · Apple |
| GitHub, Inc. / GitHub Pages | Hosting and handling requests to this information website | GitHub Privacy Statement |
Other players can see your nickname, score and rank in public rankings. Email addresses and purchase evidence are not displayed in those rankings. Do not use a nickname containing contact details or information you do not want to make public.
We do not otherwise disclose personal data to third parties without a lawful basis. Where a separate disclosure requires consent, we identify the recipient, purpose, data and retention period and obtain the required consent. We may respond to lawful court or public-authority requests within the limits of applicable law.
6. International processing
The service uses overseas cloud services and SDKs. The current game database and server region is the United States, and Firebase Authentication also operates in the United States. This does not mean that every external provider processes all data only in that country.
Swipe or scroll the table sideways to see all columns.
| Recipient and contact route | Data and purpose | Location, timing, method and retention |
|---|---|---|
| Google LLC / Firebase and Google Cloud Privacy contact and processing information | Account/authentication, gameplay, purchase verification, access and diagnostic data; authentication, storage, operation and diagnostics | Game database/servers and Firebase Authentication: United States. Sent over encrypted networks during sign-in, play, purchases and diagnostics. Section 4 and provider deletion/backup cycles apply. |
| Google LLC / Analytics and AdMob Privacy contact and locations | Analytics/ad identifiers, IP/device information, activity/ad events and choice signals; analytics, ads and security | United States and global facilities identified by Google. Transferred when analytics/ads operate; retained under purpose, deletion-request and service-specific criteria. |
| Unity Technologies / Unity Ads Privacy contact and international transfers | Ad identifiers, IP/device/ad-engagement information and choice signals; advertising, measurement and fraud prevention | United States and international locations disclosed by Unity. Transferred when ads operate; subject to necessary advertising-service retention and provider deletion criteria. |
| Google / Apple Google · Apple | Chosen sign-in and transaction information; authentication, purchases and refunds | United States and other locations disclosed by the provider. Transferred when you use the selected sign-in/store service; subject to provider contractual and legal retention. |
| GitHub, Inc. Privacy contact and international transfers | IP, browser information, request time and page; policy-page delivery and security | United States and facilities disclosed by GitHub. Sent by HTTPS when visiting a page; provider web-service retention applies. |
For overseas processing or storage necessary to perform the service contract, we rely on the applicable statutory basis only where its conditions are satisfied. Advertising or other processing requiring separate consent or another transfer basis follows those requirements. We do not classify all overseas transfers as mandatory.
Contact master@ewenter.co.kr about international transfers, objections or restrictions. Refusing necessary overseas authentication and game storage may prevent us from providing the corresponding online game functions. Contact us about your choices for advertising, analytics and optional account linking.
7. Advertising, analytics, local storage and choices
The app uses Google Analytics to analyze events and may provide ads through AdMob and Unity Ads. The current app configuration does not enable ad-personalization permission signals. Identifiers or device data may still be processed for ad delivery, measurement, frequency control and security.
- Where presented for your region and service configuration, use Google’s ad privacy-choice screen. You can also follow privacy-choice links within ads.
- On Android, use the advertising settings under Google/privacy in device settings to delete or reset your advertising ID where supported. Menu names vary by OS version.
- On iOS, manage tracking permission in Settings > Privacy & Security > Tracking. Availability of an advertising ID depends on OS permissions.
- To withdraw analytics consent, request restriction or ask for deletion of existing analytics/ad data, email master@ewenter.co.kr. Staff will verify the account and explain the scope and handling of the request.
The app may store sign-in state, language, audio preferences and choice settings on your device. Clearing device storage can affect settings and guest access; it is not the same as deleting server-side account or purchase records.
These legal-information pages contain no advertising or visitor-analytics scripts or tracking cookies added by Noll games. GitHub, the hosting provider, may process IP addresses and other web request data under its own policy.
8. Your rights and account deletion
You can request access, correction, deletion, restriction and withdrawal of consent, including through an authorized representative. Contact master@ewenter.co.kr; Settings > Customer Support in the app opens the same email contact.
Account deletion is handled by staff after an email request. See account and data deletion instructions. Use the subject “NollPang account deletion request” and send your UID (view/copy in Settings), nickname and reply email if available. You can still contact us if you cannot find your UID.
After checking account ownership and the scope of the request, we act without undue delay within applicable legal time limits and explain the result or reasons for any restriction. Verification is limited to what is necessary; we do not ask for passwords or verification codes.
Deletion covers the service account and linked progress, rankings and owned content. Legally required transaction/dispute records are separated and retained under Section 4. Backups and SDKs may require additional deletion cycles. If a legal exception restricts a right, we explain the basis and reason.
Uninstalling or signing out does not delete the server account. Deleting the NollPang account does not delete your Google or Apple account. Progress and items may not be recoverable after deletion, but we do not make privacy rights conditional on purchases or waiver of refund rights. Statutory refund rights remain protected.
9. Children and security
The current service is not intended for children under 14. If we learn that a child’s data has been processed without the required legal basis, we take appropriate verification, deletion or other protective action. Parents/guardians can contact support. Higher local age or parental-consent requirements continue to apply where relevant.
We apply safeguards such as encrypted service connections, authenticated access controls and restricted access to personal data. You may ask staff to review concerns about automated game rewards, rankings or abuse checks.
10. Privacy contacts and complaints
Swipe or scroll the table sideways to see all columns.
| Role | Name | Contact |
|---|---|---|
| Privacy officer | Sangwook Park (박상욱), Privacy Protection Team | master@ewenter.co.kr |
| Privacy contact and rights requests | Junsik Park (박준식), Privacy Protection Team | master@ewenter.co.kr |
| Service operations lead | Ju-hyeok Jang (장주혁) | master@ewenter.co.kr |
In Korea, you may also contact the Personal Information Infringement Report Center (118 within Korea) or the Personal Information Dispute Mediation Committee (1833-6972). This does not limit your right to complain to the privacy authority in your country.
11. Changes and previous policy
Published: 2026-10-08. Scheduled effective date: 2026-11-07. This revision updates the business name, business/contact details, account/advertising/diagnostic descriptions, email deletion process and rights information. A trading-name change alone does not mean personal data has been transferred to a different business.
We announce changes, reasons and effective dates in advance through accessible channels such as this website. Material privacy changes receive sufficient notice, and we obtain separate consent where required. New processing scope is not applied retroactively to existing users without required notice and consent.