Privacy Policy

We process personal information for the purposes below. Personal information is not used for any purpose other than those stated, and if a purpose changes we will take the necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Providing the game service
   • Storing, restoring and synchronizing game progress across devices (cloud save)
   • Integrating platform game services (Google Play Games, Apple Game Center) such as leaderboards and achievements
   • Connecting players and managing sessions for cooperative play (Co-op)
   • Delivering in-game information such as notices and patch notes
2. Managing purchases of paid content
   • Confirming in-app purchases made through app stores (Apple App Store, Google Play, Toss) and delivering content
   • Server-side verification and restoration of purchases, fraud prevention, and handling refund inquiries
3. Improving quality and stability
   • Diagnosing errors and crashes and fixing bugs
   • Analyzing gameplay statistics for balancing, feature improvement and planning new content
   • Detecting abnormal use (cheats, emulators, etc.) and keeping the Service stable
4. Serving advertisements
   • Displaying rewarded, interstitial and banner ads and granting rewards for watching ads
   • Measuring ad impressions and clicks and preventing click fraud
5. Responding to customer inquiries
   • Receiving, verifying and responding to support requests, bug reports, refund requests and privacy-related requests

We do not operate a membership sign-up process (email/password or social login) and do not collect your name, date of birth, phone number or location. The personal information processed to provide the Service is as follows.

“Optional” items are processed only when you use the corresponding feature (platform sign-in, cloud save, co-op, purchases, inquiries); basic gameplay is not restricted if you do not use them. We do not directly collect or store payment instrument details such as card or bank account numbers — these are handled by the app store operators under their own policies.

We process and retain personal information within the retention period required by law or agreed to at the time of collection. The retention periods are as follows.

Game progress is stored on your device by default; game data of users who do not use cloud save is not kept on our servers. Deleting the game deletes the data stored on your device.

We process personal information only within the scope set out in Article 1 and provide it to third parties only where permitted by Articles 17 and 18 of the Personal Information Protection Act, such as with your consent or where a special provision of law applies.

We do not currently provide personal information to third parties. The cases below are instances where platform operators process your personal information under the agreement you have directly entered into with them; we receive only the minimum information needed to provide the Service.

• App installation and in-app purchases through the Apple App Store, Google Play and Toss — each store’s privacy policy applies.
• Google Play Games and Apple Game Center sign-in, leaderboards and achievements — scores and achievements you submit may be visible to other users under the platform’s policies.
• Cooperative play — when connecting directly (peer-to-peer) with another player’s device, network connection information such as your IP address may be transmitted to that player.

To provide the Service smoothly we entrust certain processing to the service providers below. In accordance with Article 26 of the Personal Information Protection Act, our agreements with these providers prohibit processing beyond the entrusted purpose and set out technical and organizational safeguards, restrictions on sub-processing, supervision, and liability, and we supervise that they process personal information safely.

If the entrusted work or the processor changes, we will disclose the change without delay through this Privacy Policy.

To provide the Service, personal information is transferred to (entrusted to and stored by) processors located outside the Republic of Korea as set out below. Transfers use encrypted connections (TLS) in accordance with each provider’s security policies. Pursuant to Article 28-8 of the Personal Information Protection Act, we disclose the following.

You may refuse the cross-border transfer of your personal information. However, because these transfers are essential to running, saving, advertising in and diagnosing the game, refusing may limit the corresponding feature or the Service as a whole. Requests and inquiries regarding cross-border transfers can be made to the Privacy Officer in Article 13.

1. We destroy personal information without delay when it is no longer needed — for example when the retention period has elapsed or the purpose of processing has been achieved.
2. Where personal information must continue to be preserved under other laws after the agreed retention period has elapsed or the purpose has been achieved, it is moved to a separate database or storage location.
3. Procedure: personal information subject to destruction is identified and destroyed with the approval of the Privacy Officer.
4. Method: electronic files are deleted using technical methods that make recovery impossible; paper records are shredded or incinerated.

1. You may at any time request access to, correction or deletion of, or suspension of processing of your personal information, and withdraw consent.
2. Requests can be made by email (contact@fervorlab.com); we will act without delay (within 10 days of the request). To verify your identity we may ask for additional information such as the identifier shown in the in-game settings screen or a purchase receipt.
3. Rights may be exercised through a legal representative or an authorized agent. In that case a power of attorney in the form prescribed by the Korean Personal Information Protection Commission (Form No. 11 of the Notice on Methods of Processing Personal Information) must be submitted.
4. Requests for access or suspension of processing may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act, and deletion cannot be requested where other laws designate the information as subject to collection.
5. We verify that the person making the request is the data subject or a legitimate representative.

Given the nature of the Service, you can also take the following actions yourself.

• Delete on-device data: uninstalling the game deletes the game data and anonymous authentication information stored on your device.
• Delete cloud save data and the anonymous account: email contact@fervorlab.com and we will delete the cloud save data and anonymous authentication account stored on our servers. Game progress cannot be restored after deletion. See the Account & Data Deletion guide (fervorlab.com/en/delete-account) for the full procedure.
• Platform game service data: profiles, scores and achievements stored in Google Play Games or Apple Game Center can be managed or deleted in the respective platform settings (Google Account settings, Apple ID settings).
• Personalized ads and advertising identifiers: as described in Article 12, you can reset or delete your advertising identifier or limit personalized ads in your device settings.
• Usage analytics: the analytics ID is one-way hashed so we cannot directly identify you from it; nevertheless, if you wish, email contact@fervorlab.com and we will request deletion of analytics data linked to that identifier.

1. We are aware that the consent of a legal representative is required to collect personal information from children under 14, and we do not collect information that directly identifies a child, such as name or contact details, in the course of the Service.
2. Children under 14 must use the Service with the consent of a legal representative, and purchases of paid content require the legal representative’s consent through features such as the app store’s parental approval.
3. If we learn that personal information of a child under 14 has been collected without the consent of a legal representative, we will destroy it without delay. Legal representatives may request access to, correction or deletion of, or suspension of processing of the child’s personal information using the contact details in Article 13.

In accordance with Article 29 of the Personal Information Protection Act, we take the following measures to keep personal information secure.

• Organizational measures
  • Minimizing the number of people handling personal information and designating a Privacy Officer to manage and supervise processing
  • Imposing contractual protection obligations on processors and supervising them
• Technical measures
  • Encryption (TLS) on all network transmissions
  • Access-control rules on the cloud database (Firestore Security Rules) — users can access only their own data
  • One-way hashing (SHA-256) of user identifiers used for analytics and error diagnostics, and blocking transmission of directly identifying information such as email addresses and phone numbers
  • Server-side verification of paid content purchases and use of short-lived tokens
  • Least-privilege access to operational systems and service consoles, with multi-factor authentication
• Physical measures
  • Cloud infrastructure holding personal information is operated in data centers with the processors’ access controls and security certifications (ISO 27001, SOC 2, etc.)

1. Game apps: the game apps do not use cookies. Game progress, anonymous authentication information and analytics/sync data awaiting transmission are stored in the app’s private storage on your device and are deleted when the app is uninstalled. Software development kits (SDKs) for analytics, advertising and error diagnostics automatically collect the information listed in Article 2.
2. Toss mini-app edition: information needed to run the game — settings, session statistics, selected character — is stored in browser local storage and in storage provided by the Toss app.
3. Website (tailbound.xyz): Google Analytics cookies (such as _ga) are used for visit statistics. You can refuse or delete cookies in your browser settings (Settings › Privacy and security › Cookies) and can opt out of Google Analytics with the browser add-on at tools.google.com/dlpage/gaoptout. Refusing cookies does not limit use of the website.
4. Website (fervorlab.com): no cookies or analytics tools are used.

To serve in-game ads, we allow an advertising provider to collect and process behavioral information as follows.

We do not provide directly identifying information such as your name or contact details to the advertising provider for personalized advertising, and we do not collect behavioral information for personalized advertising from children we know to be under 14.

You can block or allow personalized ads as follows. If you block personalized ads, non-personalized ads will still be shown.

• Android: Settings › Google › Ads › “Opt out of Ads Personalization” or “Delete advertising ID”
• iOS: Settings › Privacy & Security › Tracking › turn off “Allow Apps to Request to Track”; Settings › Privacy & Security › Apple Advertising › turn off “Personalized Ads”
• Google Account: change your ad personalization settings at myadcenter.google.com

We have designated the following Privacy Officer, who is responsible for overall personal information processing and for handling complaints and remedying harm related to the processing of personal information.

You may direct any inquiries, complaints or requests for remedy regarding personal information arising from your use of the Service to the Privacy Officer. We will respond and act without delay.

To obtain relief from infringement of personal information, you may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, and other bodies. For other reports or consultations regarding personal information infringement, please contact the following organizations.

• Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118 / privacy.kisa.or.kr
• Supreme Prosecutors’ Office, Cyber Investigation Division: 1301 / www.spo.go.kr
• Korean National Police Agency, Cyber Bureau: 182 / ecrm.police.go.kr

A person whose rights or interests are infringed by a disposition or omission of the head of a public institution in response to a request under Articles 35 (access), 36 (correction and deletion) or 37 (suspension of processing) of the Personal Information Protection Act may file an administrative appeal under the Administrative Appeals Act (Central Administrative Appeals Commission: 110 / www.simpan.go.kr).

1. This Privacy Policy takes effect on September 1, 2026.
2. If the Policy is added to, deleted from or amended due to changes in law, policy or the Service, we will announce the changes on our website (fervorlab.com/privacy) at least 7 days before they take effect. For material changes affecting your rights — such as changes to the items collected or the purposes of use — we will give at least 30 days’ notice.
3. Previous versions can be found in the revision history below.