Privacy Policy
Effective: October 22, 2026 · Previous version (October 21, 2026)
PUNGPUNGSTUDI (“the developer”) explains here how the mobile game Rumble Alley (com.pungpungstudi.ghostpaws, “the game”) handles personal information. This policy applies to the Rumble Alley version of the app, which replaces the earlier game Ghost Paws in the same app. While you use the earlier Ghost Paws version, the previous version of this policy applies.
Summary: on first launch the game asks you to accept the Terms of Service and this Privacy Policy and to confirm that you are 14 or older, and you start with Google, Apple (iPhone) or as a guest. Progress is saved on the device first and backed up to the game server (GameStack). The game does not ask for your name, phone number or address and does not receive payment details. Game-improvement analytics run only if you agree.
1. Information we process and why
Information needed to play is processed to perform our agreement with you; optional items are processed only with your consent.
| Information | Purpose |
|---|---|
| Guest ID (a random value created on this installation, not a hardware ID), player ID, sign-in session | Identifying the account, keeping you signed in |
| If you use Google or Apple sign-in: the provider's account identifier and sign-in tokens. A Google sign-in token may contain your Google account email address. Apple sign-in does not request your name or email; on account deletion a one-time authorization code is sent to the server to revoke the link. We never receive passwords. | Verifying sign-in, linking guest progress to the account, revoking the link on deletion |
| Progress backup: stages and battle records, in-game currency such as fish and gems, cards, companions, relics, talents, costumes, dyes, weapon skins, missions, codex and achievements, your chosen cat and outfit, an installation identifier and save revision | Restoring progress after reinstalling or changing devices, telling save conflicts apart |
| Rankings: display name (the default plus four characters) and best stage, weekly boss damage and power scores | Showing rankings. Display names and scores are visible to other players |
| Gems and purchases: paid and free gem balances and grant/spend records; purchase verification data (store name, product ID, transaction ID, purchase token or transaction data issued by the store, purchase and refund status) | Verifying payments, delivering products, preventing duplicate grants, restoring purchases, handling refunds |
| Rewarded ad records: the kind of ad reward, daily counts and the last delivery check | Delivering rewards and enforcing daily limits |
| Access records: IP address, request time, path and result, and error information left by handling requests | Handling connections, security, troubleshooting |
| Support email: the sender, recipient and reply-to addresses and names, subject, body, attached images, time received, and our replies | Handling questions and deletion requests, resolving disputes |
| (Optional) Game-improvement analytics: app instance identifier, device, OS and app information, approximate region, and gameplay events such as screen changes, tutorial progress, battle results, currency, draws, shop and ad use | Finding where players leave and tuning difficulty and usability, only with consent |
Kept only on this device and not sent to the server: the start screen's consent record (14-or-older confirmation, the accepted versions and date, the hunt alert answer) and language, sound and vibration settings. The game does not request precise location (GPS) permission.
2. Advertising
The game shows only rewarded ads that you choose to watch. It uses Google AdMob and the Google User Messaging Platform (UMP). Google may process your IP address (approximate location), device, OS and app information, device or advertising identifiers depending on platform settings and consent, and ad impressions, views and interactions to serve ads, cap frequency, prevent fraud, measure performance and diagnose errors.
- For every player the game applies the settings for users under the age of consent and child-directed treatment, and requests non-personalized ads.
- The game does not request Apple App Tracking Transparency permission and does not track players with advertising identifiers.
- Where required, UMP shows a privacy choices screen, which you can reopen from Settings → Ad privacy choices.
- The developer does not send player IDs to Google. Details: Google Privacy Policy
3. Game-improvement analytics (Firebase Analytics, optional)
Only if you check “[Optional] Help improve the game” on the start screen does the game send the analytics information in section 1 to Google Firebase Analytics. It never sends names, email addresses, player IDs, receipts or text you typed, and advertising identifier collection and ad personalization are turned off. You can play without agreeing and change your choice at any time under Settings → Game analytics. If you withdraw consent or delete your account, sending stops and the waiting data and app instance identifier on the device are reset. Data already sent to Google is deleted according to the retention periods below. About Google Analytics data
4. In-app purchases
Gem purchases are processed by Google Play or the Apple App Store, and each store's policies apply to payment, taxes and refunds. The developer processes the purchase information in section 1 to verify payments and deliver products, and never receives payment details such as card numbers.
5. Retention and deletion
| Information | Retention |
|---|---|
| Account, sign-in links, sessions, progress backup, rankings, gem balances | Until account deletion. Deleted without delay when you delete your account |
| Server recovery copies | 30 days from creation. Copies that include a deleted account are destroyed within those 30 days too |
| Account deletion records (references for handling repeat requests and questions) | 90 days; the de-identified outcome for 1 year |
| Operation records (the kind, operator and time of operator actions) | 1 year |
| Records of contracts and withdrawals, payments and delivery (purchase verification data, duplicate-grant protection values) | 5 years (Korea's Act on the Consumer Protection in Electronic Commerce) |
| Consumer complaint and dispute records (support messages) | 3 years (the same act) |
| Support email originals (kept by the mail service RevBell) | 1 year from receipt; attached images 90 days. Dispute records that must be kept for 3 years are kept separately by the developer |
| Access records | According to the log retention of the server infrastructure provider (Railway); currently 7 days on our plan |
| Game-improvement analytics (optional) | Events 2 months; user-level data 14 months (restarting with new activity). Aggregated reports may remain separately |
Information whose retention period has ended or whose purpose is fulfilled is destroyed without delay. Electronic files are deleted so they cannot be recovered, and personal information is never printed on paper. Information kept under law is used only for that purpose and kept separately.
6. Processors and transfers abroad
The following companies process information to run the game. Because the servers are outside Korea, information is transferred abroad over the network (HTTPS) while you use the game (support email: when you send it).
| Recipient · country · contact | Information | Purpose | Retention |
|---|---|---|---|
| Railway Corporation · United States (server region California) · Railway Privacy Policy | Account, sign-in links, progress backup, rankings, gem and purchase records, rewarded ad records, access records | Hosting and database of the developer-run game server (GameStack) | As in section 5 |
| Google LLC · United States and others · Google Privacy Policy | Ad information (section 2), game-improvement analytics (section 3, optional), Google sign-in, Google Play payments | Ads, analytics, sign-in, payments | Section 5 and Google's policies |
| Apple Inc. · United States and others · Apple Privacy Policy | Apple sign-in, App Store payments | Sign-in, payments | Apple's policies |
| Jaemin Song (operator of RevBell) · email stored on servers of Cloudflare, Inc. (United States; storage region not published) · RevBell Privacy Policy | Support email (section 1) | Receiving and storing support email (pungpungstudi@hello-support.com) and sending our replies | 1 year from receipt; attached images 90 days |
Analytics are not sent if you do not agree or turn them off in Settings. Support email is transferred only if you send it; without it you cannot contact us by email, but the game is not limited. The transfer to the game server is necessary for sign-in, backups, rankings and purchases; if you do not want it, you can stop using the game and delete your account, in which case you cannot use the game.
7. Your rights
You may ask to access, correct, delete or stop processing your personal information and withdraw consent. In the game you can use Settings → Game analytics (analytics consent), Ad privacy choices, Hunt alerts and Settings → Account → Delete account; for anything else, email us below. A legal representative or someone you authorize may also make a request. We act without delay and, for correction or deletion requests, tell you the result, or the reason for refusal and how to object, within 10 days of receipt. To request account deletion without the app, see Account and data deletion requests.
8. Children under 14
The game is for players aged 14 and older, and the start screen asks you to confirm your age. If we learn that personal information of a child under 14 was processed, we delete it without delay. A parent or guardian can ask us by email to delete a child's account and information.
9. Security measures
- Administrative: only the developer can access personal information.
- Technical: communication with the server is encrypted with HTTPS, server management secrets are never included in the app, access to account data is limited to what is needed, and operator actions are recorded.
- Physical: the servers run in the infrastructure provider's data centers, and the developer does not print personal information.
10. Privacy officer
Privacy officer: 풍재현 (PUNGPUNGSTUDI) · Email pungpungstudi@hello-support.com
11. Remedies
For advice or remedies about a privacy infringement, you can contact these Korean agencies.
- Personal Information Infringement Report Center: privacy.kisa.or.kr · 118 (in Korea)
- Personal Information Dispute Mediation Committee: www.kopico.go.kr · 1833-6972
- Supreme Prosecutors' Office: www.spo.go.kr · 1301 (in Korea)
- Korean National Police Agency: ecrm.police.go.kr · 182 (in Korea)
12. Changes
If this policy changes, we announce the effective date and the changes on this page and in the game, and ask for consent again at game start for important changes. The previous version is available at the link above.