Privacy Policy
Effective and last updated: October 13, 2026
PUNGPUNGSTUDI (“we”) explains how the mobile game WASD Squad (WASD 키우기, com.pungpungstudi.pendoku, the “Game”) handles personal information. From version 2.0.0 this app replaces the earlier game Pengudoku; this policy applies to WASD Squad.
Summary: On first launch you choose a supported Google or Apple sign-in, or guest play, and the Game keeps your progress on the device and on our game server (GameStack). The Game never asks you to type a name, email address or phone number. Linking a Google or Apple account and using chat, friends or guilds are optional; when you use them, that information is stored on the server. The Game shows rewarded ads (Google AdMob) and uses Firebase (crash reporting, usage analytics where allowed, remote configuration, push notifications). Payments are handled by the Apple and Google stores. Promotional notifications, such as events and coupons, are sent only if you are 14 or older and opt in. You can delete your account from Settings → Delete account.
1. Information we process and why
We process the information needed to play the Game to perform our agreement with you, and optional items such as promotional notifications only with your consent.
Start consent record
- The version and date of the terms and privacy policy you agreed to, and whether you opted in to promotional and night notifications, with the dates of each opt-in and opt-out. Kept only on this device.
- Purpose: confirming your agreement, telling you the result of each opt-in or opt-out, and checking your notification choice every two years.
Guest account
- A random installation ID created by the app (not a hardware identifier), a player ID, a nickname (“WASD Player” by default; changeable in Settings once a Google or Apple account is linked) and login session tokens.
- Purpose: identifying your account, keeping you signed in, saving and restoring progress.
Game progress and cloud save
- Your whole save: stages and battle records, in-game currencies such as gold and forge tickets, gear, pets, skills, costumes, quest and dungeon records, and game settings.
- Purpose: the save is written on the device first and backed up to the server, to protect your progress and to prevent abuse.
Server currency and purchases
- Diamond and draw ticket (pet, skill, keycap) balances and grant/spend history, and battle progress values used to calculate server-granted play rewards (reached and cleared stage, battle time, defeated enemies and similar).
- Purchase verification data: store name, product ID, transaction ID, the store’s signed transaction or purchase token, and purchase/refund status.
- When you buy, an identifier for your player or account-bound purchase request is attached to the store order to verify the purchase and prevent duplicate grants.
- Purpose: verifying payments, delivering items, restoring purchases and handling refunds. We never receive card numbers or other payment details.
Rankings
- Best stage and battle power scores with your nickname. They are submitted automatically and are visible to other players.
Community (optional)
- Available only after you accept the community rules and usage conditions.
- Plaza, 1:1 and guild chat messages; friend code, friends list and requests; guild name, description and join requests; block list.
- Reports: the reason, a copy of the reported message and the reported player ID.
- Your nickname and messages are visible to the people you talk with, your guild members or other players in the plaza.
- Purpose: providing chat, friends and guilds, handling reports and restricting abuse.
Account linking (optional)
- On Android you can link Google, and on iPhone Google or Apple, to the same player. The app sends the sign-in token and, for Apple, a one-time authorization code so the server can revoke the link when the account is deleted.
- The app does not ask you to type your name or email address. A Google sign-in token may contain your Google account email address, which the server stores to identify the linked account. Apple sign-in requests no name or email scope.
Notifications, coupons and mail
- A Firebase Cloud Messaging device token for push notifications, registered with the game server.
- Promotional notifications (optional, age 14 or older): only if you opt in, this device is subscribed to the Firebase Cloud Messaging topics for promotional notifications (9 PM–8 AM needs a separate opt-in). You can turn them off at any time in Settings → Promo alerts.
- Coupon codes you enter and your mailbox claim history.
2. Ads and consent
The Game shows only rewarded ads that you choose to watch; there are no interstitial or banner ads. We use Google AdMob and the Google User Messaging Platform (UMP). Google and its ad partners may process the following to serve ads, cap frequency, prevent fraud, measure performance and diagnose errors:
- IP address and approximate location derived from it
- Device identifiers, including the advertising ID or app-scoped identifiers
- Device, operating system, app version and network information
- Ad impressions, completed views, taps, consent status and diagnostics
Where required, UMP shows a privacy choices form, which you can reopen from Settings → Ad privacy. The Game does not request Apple App Tracking Transparency permission and does not use the IDFA. Personalized advertising and publisher first-party identifiers are disabled. We do not send your player ID to AdMob.
3. Firebase
- Crashlytics (crash reporting): crash logs and diagnostics such as device, OS and app version, to fix errors. Your player ID is attached only when usage analytics below is allowed.
- Analytics (usage analytics): off at install, and turned on only when the ad consent check (UMP) allows it or where no consent is required. It may process an app instance ID, device and app information, approximate region, app usage events and your player ID.
- Remote Config: fetches operating settings such as the latest version; an app-scoped installation ID and app/OS version may be processed.
- Cloud Messaging: creates a push token that is registered with the game server; a device that opts in to promotional notifications is subscribed to their topics.
4. In-app purchases
Purchases such as diamonds, the monthly pass, costumes and Remove Ads are processed by the Apple App Store or Google Play, whose policies govern payment, taxes and refunds. We process the purchase information in section 1 to verify payments and deliver items.
5. Retention and deletion
Account information, cloud saves, currency and purchase records and community data are kept while your account exists. Settings → Delete account (confirmed twice) asks the game server to delete your account and the data it owns, and removes the save and sign-in data from your device. Payment and refund records that laws or store policies require us to keep, and the minimum records needed to prevent abuse, may be kept for the required period. Information processed by Google, Apple and Firebase is kept under their own policies. The start consent record stays on this device and is removed when you delete the app; the device is unsubscribed from the promotional notification topics when you opt out.
Linked Google and Apple accounts can request deletion in the app. Apple may require signing in again with the same account. If you cannot access the app, use the deletion request on the support page.
Community retention settings are 14 days for realtime evidence, 180 days for direct and guild messages, and 365 days after resolution for reports. Pending reports remain until handled. Deletion can remove account-owned data earlier. To prevent replaying purchases after account deletion, one-way transaction hashes and audit records with personal metadata removed may remain; no automatic expiry is currently configured for these records. Minimum authentication material for pending store completion or Apple token revocation is retained until that work completes, then removed. Apple and Google retain their own store records under their policies.
Information whose retention period has ended, or that you ask us to delete, is destroyed without delay. Electronic files are deleted so that they cannot be restored, and we do not keep personal information on paper.
6. Service providers and international transfers
The following services process information to run the Game. Their servers may be outside your country, so information may be transferred abroad over the network while you use the app.
- Railway Corporation (United States, servers in the western US · contact: Railway Privacy Policy): hosting and database for our game server (GameStack). It stores account, cloud save, server currency, rankings, chat/friends/guilds, push registration and purchase verification data. Kept until the account is deleted.
- Google LLC (United States and elsewhere): AdMob, Firebase, Google Play billing, Google sign-in. Google Privacy Policy
- Apple Inc. (United States and elsewhere): App Store payments, Sign in with Apple. Apple Privacy Policy
7. Your rights
You can ask to access, correct, delete or restrict the processing of your information. In the Game you can change your nickname, open ad privacy choices, turn off promotional notifications and delete your account; for anything else, contact us below with your nickname and friend code so we can identify the account.
8. Children
Chat, friends and guilds are available only after the community rules and usage conditions are accepted, and only players 14 or older can opt in to promotional notifications. Parents and guardians can ask us to delete a child’s account and data.
9. Security
Communication with the server is encrypted with HTTPS, server administration keys are never shipped in the app, and access to account data is limited to what is needed.
10. Changes and contact
We post changes on this page with the effective date. Privacy officer: Jaehyun Pung (PUNGPUNGSTUDI) · pungpungstudi@hello-support.com
11. Remedies in Korea
If you are in Korea and need advice or relief for a privacy infringement, you can also contact:
- Personal Information Infringement Report Center: privacy.kisa.or.kr · 118
- Personal Information Dispute Mediation Committee: www.kopico.go.kr · 1833-6972
- Supreme Prosecutors’ Office: www.spo.go.kr · 1301
- Korean National Police Agency: ecrm.police.go.kr · 182