Moebius Stairs — Privacy Policy
Korean users: the Korean version (개인정보처리방침) governs. For all other users, this English version governs if translations differ, except where local law requires otherwise.
Last updated: 2026-09-30 · Effective: 2026-09-30
1. Who we are
Moebius Stairs (the "Game") is operated by JINEUNHA ("we", "us"), a sole proprietorship registered in the Republic of Korea. - Address: provided on request by email - Privacy contact (also acting as our privacy officer): JINEUNHA — ssangyongtt@gmail.com - EU/UK representative: not appointed (the Game is not offered in the EU or UK at launch)
We are the controller of the personal data described in this policy.
2. Data we collect
| Category | Data | Why | Source |
|---|---|---|---|
| Account & sign-in | Account identifier from the sign-in provider you choose (Google, Apple, or — in Korea — Kakao or Naver). If you allow it: display name, profile picture, and email (Apple may give us a private relay address) | Create and restore your account, save progress, answer support requests (email) | Sign-in provider |
| Gameplay | In-game nickname, chosen character, game records (stages, stars, best scores, duel results, ghost replays), currency and item balances | Provide the Game, match duel opponents, prevent cheating | Created while you play |
| Friends & rankings | Friends you add with a friend code (in Korea, optionally Kakao friends who also play), per-stage scores, weekly/monthly ranks, country (store country or device region) | Friend and global leaderboards, cheers, duel requests, ranking rewards | Created while you play |
| Purchases | Store transaction ID, product, purchase time, refund status | Deliver purchases, handle refunds and disputes | App Store / Google Play, RevenueCat |
| Notifications | Push token, whether you agreed to promotional notifications and when | Send game notifications and (if you agree) promotional ones | Your device |
| Age band | An age band (e.g. "under 13", "13–17", "18+") derived from the birth year and month you enter; we do not store your birth date on our servers | Apply age-appropriate settings required by law | You |
| Service improvement | App usage events (screens, match summaries), device model, OS and app version, crash logs | Balance difficulty, fix bugs, statistics | Firebase Analytics, Crashlytics |
| Korea only — guardian consent | Guardian's email address and consent time (for users under 14 in Korea) | Obtain guardian consent | Guardian |
We do not collect advertising identifiers (IDFA/AAID), precise location, contacts, photos, microphone or camera data, phone numbers, postal addresses, or government IDs. We do not show ads and do not track you across other apps or websites.
Other players can see your nickname, profile picture (or character face) and scores on friend lists and leaderboards. For players under 18, your nickname is partly hidden on public (national/global) leaderboards and shown in full only to friends.
3. Why we use your data and our legal bases
| Purpose | Legal basis (EEA/UK GDPR, Brazil LGPD and similar laws) |
|---|---|
| Providing the Game, your account, saves, friends, leaderboards, purchases | Performance of a contract (our Terms) |
| Cheat and fraud prevention, security, crash logs | Legitimate interests (keeping the Game fair and working). In the EEA, UK and Switzerland, crash logs are collected only if you allow usage statistics |
| Usage statistics (Firebase Analytics) | Consent in the EEA, UK and Switzerland (asked on first launch; off until you agree). Elsewhere: legitimate interests, and you can turn it off in Settings → "Send usage statistics" |
| Promotional notifications | Consent (you can withdraw any time in Settings → Notifications) |
| Keeping purchase records required by law | Legal obligation |
| Age band and child protections | Legal obligation |
4. Who processes your data for us
We do not sell or rent your personal data and do not share it with third parties for their own purposes. We use these service providers (processors), who process data only on our instructions: | Provider | Country | Data | Purpose | |---|---|---|---| | Supabase, Inc. | Servers in the Republic of Korea (Seoul, AWS ap-northeast-2) | Account identifier, game records, currency | Game database | | Google LLC (Firebase) | United States and other countries | Usage events, device info, crash logs, push token | Statistics, crash analysis, push delivery | | RevenueCat, Inc. | United States | Transaction ID, product, in-app user ID | Purchase validation and delivery | | Resend, Inc. | United States | Guardian email (Korea only) | Sending guardian consent emails | | Apple Inc., Google LLC (stores and sign-in) | United States | Purchase and sign-in data | Payments and sign-in you choose to use |
We may disclose data if required by law or to protect rights and safety.
5. International transfers
We operate from the Republic of Korea, and our providers are in Korea and the United States. When you use the Game from another country, your data is transferred there. - EEA/UK/Switzerland: transfers to Korea rely on the European Commission's adequacy decision for the Republic of Korea (and the UK's equivalent adequacy regulations). Transfers to the United States rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified (e.g. Google), or on Standard Contractual Clauses. - Japan: by agreeing on the sign-up screen, you consent to the provision of your personal data to the recipients above located in the Republic of Korea and the United States. Information about those countries' data protection systems is published by Japan's Personal Information Protection Commission. - Other countries: we protect transferred data with contracts and the safeguards described in this policy. You can ask us for more information or a copy of the safeguards using the contact in section 1.
6. How long we keep data
- Account data and game records: until you delete your account. We do not delete inactive accounts automatically.
- Nickname change history (old and new nickname, time): kept for 90 days after each change to handle abuse reports, then deleted automatically. Kakao profile photos are not stored on our servers; they are fetched from Kakao each time and shown only to your Kakao friends.
- Deleting your account (Settings → Delete account, or by email) erases your data without delay, except records we must keep by law:
- Purchase and payment records: 5 years (Korean E-Commerce Act)
- Consumer complaint and dispute records: 3 years
- Access logs: 3 months
- Usage statistics in Firebase Analytics: 14 months.
- Guardian emails (Korea): deleted if consent is not confirmed within 5 days, and after the consent record is made.
- "Local play" mode data stays only on your device.
7. Children
- The Game is rated for general audiences but is not directed at children under 13. On first launch we ask for your birth year and month.
- If you are below the age of digital consent in your country — 13 in most countries (including the United States), 13–16 in EEA countries depending on national law, 14 in Korea — you can only play in "local play" mode: no account, no server saves, no leaderboards or duels, no purchases, and no analytics, crash reporting or push tokens. We therefore do not knowingly collect personal information from children under that age. (The Korea-only guardian consent process in section 2 is the exception.)
- If you believe we have collected data from a child without the required consent, contact us and we will delete it.
- We do not sell paid random ("loot box") items, and we do not profile or target advertising at children or teenagers.
8. Your rights
Depending on where you live, you have the right to: access your data and receive a copy (portability); correct it; delete it; restrict or object to processing; withdraw consent at any time (without affecting earlier processing); and complain to a supervisory authority. - How: most controls are in the Game (Settings → Send usage statistics / Notifications / Delete account). For everything else, email ssangyongtt@gmail.com with your in-game ID (Settings → "Copy my ID"). We reply within 10 days and no later than the deadline set by your local law. - EEA/UK: you can complain to your local data protection authority (or the UK ICO). - Brazil: you can also contact the ANPD. You have the rights in Art. 18 LGPD, including confirmation of processing and information about sharing. - Japan: you can request disclosure, correction, suspension of use and information about third-party provision records. - Korea: see the Korean policy (KISA 118, PIPC dispute mediation).
California residents (CCPA/CPRA)
- In the last 12 months we collected the categories in section 2: identifiers, commercial information (purchases), internet or other electronic network activity (gameplay and usage events), and inferences limited to the age band. Sources and purposes are described above.
- We do not sell or share personal information (as defined by the CCPA) and do not use sensitive personal information for inferring characteristics.
- You have the right to know, delete and correct your personal information and not to be discriminated against for exercising these rights. You may use an authorized agent. We verify requests using your in-game ID.
9. Security
Encryption in transit (HTTPS/TLS), row-level security and least-privilege access on our database, two-factor authentication on administrator accounts, and a written data retention and security policy.
10. Changes
We will announce changes in the Game at least 7 days before they take effect (30 days for changes that reduce your rights). Where the law requires, we will ask for your consent again.
11. Contact
JINEUNHA · provided on request by email · ssangyongtt@gmail.com