Privacy Policy

RabbitHole Studio Inc. and its affiliated entities (collectively, ‘RabbitHole Studio’ or ‘we’) respects the privacy rights of our online users and is committed to protecting the personal information collected about or provided by you. We have adopted this Online Privacy Policy (‘Privacy Policy’) to explain how we collect, store, manage, and use the personal information you provide in connection with our services (the ‘Service’).

Please note that this Privacy Policy applies only to information submitted to and collected by RabbitHole Studio through our App & Web Services on the following platforms (collectively, the ‘platforms’ or ‘Serviced Platforms’): Facebook Web/Canvas Games, Facebook Pages, Apple iOS App Store, Google Play Store, and Amazon App Store. This Privacy Policy does not apply to information that may be collected offline. Furthermore, it applies solely to our Service and not to websites maintained by other companies or organizations to which we may provide links. Once you leave our Service and access such third-party websites, this Privacy Policy no longer applies. Therefore, we are not responsible for the content or activities on those sites.

By using and accessing the Service provided by RabbitHole Studio, you signify your acceptance of this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service. We reserve the right to make changes to this Privacy Policy. If we make any material changes, we will notify you by updating the Privacy Policy and, if necessary, provide you with additional options regarding such changes. Please check this Privacy Policy periodically to ensure that you are aware of any updates. Your continued use of the Service constitutes your acceptance of any changes.

Information Collected

To provide you with the best experience while using the Service, RabbitHole Studio may collect information about you from your account on serviced platforms, but only if you voluntarily provide it, and in accordance with the policies and terms of those platforms. Additionally, we may collect information from you through your participation in message boards on the Service, when you email our customer service team with a question, or when you purchase a virtual product of any kind. We may also ask you for personal information (such as your name or email address) if you choose to sign up for specific services we offer, such as a newsletter or reminder service. In all such cases, the information you provide will not be disclosed to third parties and will be used solely to deliver the Service.

The types of personal information collected in connection with the above activities may vary depending on the activity. The information requested may include: (i) your name, (ii) mailing address, (iii) telephone number, (iv) email address, (v) credit card and billing information (for online purchases), and (vi) information identifying your friends.

For certain activities, RabbitHole Studio may also request non-personal information, such as: (i) your age or date of birth, (ii) your gender, (iii) your game and platform preferences, (iv) information about the hardware you own and/or games you have recently purchased, (v) your favorite quotes, websites, friend information, and fan pages, and (vi) other game-related information (collectively referred to as “demographic information”). If demographic information is collected for an activity that also requires personal information, RabbitHole Studio may combine it with your personal information.

You may provide us with another person’s email address to invite them to participate in the Service. RabbitHole Studio may, but is not obligated to, use this information to contact the person about joining the Service—and will do so only with your express permission in all cases.

Third-Party Analytics & Attribution (AppsFlyer)

• We use AppsFlyer, a third-party analytics and attribution platform, to help us analyze app performance, advertising effectiveness, and user engagement. AppsFlyer may automatically collect and process certain information when users interact with our applications or when advertising identifiers (such as IDFA or GAID) are used.
• AppsFlyer may collect data related to app installation history, advertising identifiers (IDFA/GAID), in-app activities and purchase events, device information (including operating system version, device model, and partially anonymized IP address), and advertising performance metrics such as impressions, clicks, and attribution data.
• AppsFlyer may retain raw user-level data for up to 13 months for analytics and attribution purposes. Aggregated or anonymized data that cannot be used to identify an individual may be retained for up to 5 years for service improvement, compliance, and statistical analysis. After the expiration of the applicable retention period, the data will be permanently deleted, anonymized, or securely archived in accordance with relevant legal requirements.

Additional Information Provided by Platform Providers

Some parts of our Service may allow login through third-party social networks or authentication services such as Facebook, Google, or Apple. These services may authenticate your identity and offer the option to share certain personal information with us. This may include your name, email address, user ID associated with the third party, profile picture, and—in the case of Facebook—the names and avatars of your Facebook friends who are already playing our games. The information we receive depends on the privacy settings you have configured on the respective third-party platform, as well as that platform’s own policies.

Even if you log in via Facebook, we cannot post to your page without your permission, and we do not receive information about your Facebook friends who are not playing our games. If you do not wish your Facebook friends to view your gameplay activity, you can disconnect your Facebook account from our games and update the app permissions in your Facebook settings. For more information, please refer to Facebook’s Privacy Policy: https://www.facebook.com/privacy/policy

Use of Information Collected

RabbitHole Studio will only use the personal information collected from you or from the serviced platforms for the operation of the Service, in accordance with the policies and terms of the serviced platforms. RabbitHole Studio does not rent, lease, loan, sell, voluntarily distribute, or redistribute your personal information to any unaffiliated third parties. RabbitHole Studio may use your email address or other personal information to send you newsletters, marketing or advertising materials, or service announcements that inform you about updates to our Privacy Policy, changes in pricing, modifications to our online service or customer service policies, and other related service updates. RabbitHole Studio will not voluntarily disclose this personal information to unaffiliated third parties for any other purpose.

Information collected either directly from you or from the serviced platforms is used solely for the operation of the Service. For example, personal and/or demographic information collected through one of the activities described above may be used for our internal demographic studies so that we can continuously improve the online products and services we provide and better meet your needs. Additionally, we may use information that we collect to ensure that users who are cheating are excluded and to enforce our rights under our Terms of Service. Regardless of the method used to collect information or how that information is used, we will only collect information deemed reasonably necessary to fulfill your online requests and our legitimate business objectives, and such information will not be provided to any third parties.

Consistent with RabbitHole Studio’s Copyright and Intellectual Property Policy, and at its sole discretion, we reserve the right to remove any of your personal information or content from the Service if we receive a notice of intellectual property infringement or other complaint.

Retention and use period of personal information

In principle, after the purpose of collecting and using personal information has been fulfilled, the information is destroyed without delay. (However, the company retains personal information for 15 days after a membership withdrawal request in order to minimize damage caused by account theft.) In addition, if it is necessary to retain information for a certain period of time in accordance with applicable laws, the company will store the personal information separately as prescribed by law and will never use this information for any other purpose.

• Records on display/advertising : 6 months (Act on Consumer Protection in Electronic Commerce, etc.)
• Records on contract or withdrawal of subscription : 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• Records on payment and supply of goods : 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• Records on consumer complaints or dispute handling : 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
• Records on website visits : 3 months (Communications Secret Protection Act)

Personal information destruction procedure and method

1. The company destroys personal information without delay when it is no longer needed, such as upon the expiration of the personal information retention period or the fulfillment of the purpose for which it was collected.
2. When the company receives personal information from a third party, it provides notification of the details and retains the right to request the suspension of personal information processing in accordance with Article 37 of the Personal Information Protection Act. However, if you request the suspension of personal information processing, you may no longer be able to use the company’s services. Requests to suspend the processing of personal information may be submitted via support@rabbithole-studios.io. In addition, personal information provided based on the separate consent of the data subject is destroyed without delay once the agreed retention period has expired or the purpose of use has been fulfilled.
3. The procedure and method of destroying personal information are as follows:
   • a. Destruction procedure: Information entered by users during membership registration, etc., is destroyed once the intended purpose has been achieved (after a 15-day grace period following a withdrawal request), in accordance with internal policies and for other reasons related to information protection under relevant laws (see “Retention and Use Period”). After being stored for a specified period, the information is destroyed.
   • b. Destruction method: Personal information stored in electronic file format is destroyed so that the records cannot be restored. Personal information recorded on paper is either shredded or incinerated.

Data Subjects’ Rights in European Countries

If you are a player or user located in the European Countries, you have the following rights with respect to your information:

1. You can access or request the deletion of your information by submitting a request through the Contact Us link within our applications or by sending an email directly to our support team at support@rabbithole-studios.io.
2. You can correct or update your information through the settings within our applications or by emailing our support team at support@rabbithole-studios.io.
3. You may object to processing of your information.
4. You may ask us to restrict processing of your information.
5. You may request portability of your information through the Contact Us link in any of our applications or by emailing our support team at support@rabbithole-studios.io.
6. You can opt in or opt out of marketing communications we send you by following the provided instructions.
7. If we have collected and processed your information based on your consent, you may withdraw that consent at any time through the settings in our applications or by requesting this change via the Contact Us link or email. Withdrawing your consent will not affect the lawfulness of any processing carried out prior to your withdrawal, nor will it affect processing that is based on legal grounds other than consent.
8. You have the right to lodge a complaint with a data protection authority regarding our collection and use of your information.

Accessing and Deleting Personal Information held by RabbitHole Studio

You can request a copy of your game account data or ask for its deletion by submitting a request through the application itself or by contacting our support team. To review and update personal data in certain games, please visit the Settings section within the respective application. We will retain certain records when necessary, such as for legal or accounting purposes. We may also retain data in order to exercise, defend, or establish our legal rights.

Warning Note about Message Boards

Please note that whenever you share personal information in public areas, such as message boards within our service, that information may be collected and used by individuals you do not know. While we strive to protect users who choose to participate in these spaces, we cannot guarantee the security or privacy of any information you post, and you acknowledge and accept this risk.

Other Disclosure of Your Personal Information

Notwithstanding any other terms of this Privacy Policy, we may disclose personal information in the good faith belief that such disclosure is required by law. This may include, but is not limited to, disclosure to law enforcement or other government officials in connection with investigations into fraud, intellectual property infringements, or other illegal activities that may expose you or us to legal liability. In addition, in the event of a merger, acquisition, reorganization, bankruptcy, or other similar event, customer information may be transferred to RabbitHole Studio’s successor or assignee, if permitted by and carried out in accordance with applicable law.

We may also share aggregate information about visitors to our Service. For example, we might state that the audience for a particular game title is X% female and Y% male. This data is used to customize the content and advertising of our Service to deliver a better experience for our users. It may also help us tailor our products and services to better meet customer needs.

We may send advertisements to your web browser, directly or indirectly, when you visit our Service. However, we may allow other companies, known as third-party ad servers, to serve advertisements within our Service. This Privacy Policy does not apply to, and we cannot control the activities of, these other companies. If you want to prevent a third-party ad server from sending or reading cookies on your computer, you must visit that company’s website individually and opt out.

Not Providing Information

If you choose not to submit personal information when requested, you may not be able to use many of the features offered by the Service.

Passive Means of Information Collection (Cookies, IP addresses, etc.)

• Cookies : We may use cookies in the operation of the Service. A ‘cookie’ is a small piece of record-keeping information that websites often store on a user’s computer. Cookies are typically used to quickly identify a user’s device and to ‘remember’ details about the user’s visit. For example, we may use cookies to keep track of your preferences, username, and password. Information contained in a cookie may be linked to your personal information for this purpose. You can disable cookies or set your browser to alert you when cookies are being sent to your device; however, doing so may affect your ability to use many of the features of the Service.
• IP Addresses : An Internet Protocol (IP) address is a number used by computers on the network to identify your device each time you connect to the Internet. Although we do not generally collect IP addresses, we may collect and use your IP address when we believe it is necessary to protect our Service, websites, customers, or others. If you use the Service, we may also collect other unique identifiers associated with your device on the network.
• Log Files : Other information that may be passively collected by RabbitHole Studio includes log files—files that record website activity, such as the number of ‘hits’ a particular webpage receives (also known as ‘navigational data’). These entries are generated anonymously and enable us to gather statistics about users’ browsing habits, assess overall website activity, track interest in advertised content, and maintain website security. We also use log file entries for internal marketing and demographic studies to continuously improve the online services we provide. Log files are used internally only and may be combined with data collected via cookies to help us understand aggregate behavior patterns of registered users.
• Privacy Policy and Third Party Web Sites, Links, Advertisements and Services : You should be aware that while using our Service, you may be directed to other sites beyond our control and for which we are not responsible. Additionally, third parties may provide advertisements or offer other products and services while you are using our Service. These third parties may receive your IP address or use other technologies such as cookies, web beacons, and similar tools. By using the Service, you consent to such use of your personal information by third parties, which is subject to their respective privacy policies. You should review the privacy policies of these third parties for more detailed information.

Privacy Rights

To protect customers’ personal information and address complaints related to privacy, the company has designated the following individual as the Data Protection Officer:

Users may report any personal information-related complaints that arise while using the company’s services to the Data Protection Officer. The company will provide prompt and adequate responses to such reports.

If you need to report or consult about other personal information infringement, please contact the organizations below:

1. Personal Information Infringement Report Center (privacy.kisa.or.kr / ☎ 118 without an area code)
2. Cyber Investigation Division, Supreme Prosecutors’ Office (spo.go.kr / ☎ 1301 without an area code)
3. National Police Agency Cyber Crime Reporting System (ecrm.cyber.go.kr / ☎ 182 without an area code)
4. Personal Information Dispute Mediation Committee (kopico.go.kr / ☎ 1833-6972 without an area code)

Children’s Privacy

Our services are not directed at children under the age of 13 (or under the age of 16 for children in European countries). Children are not permitted to use these services, and we do not knowingly collect any personal information from them. For games that are not directed at children but may nonetheless appeal to them, we take additional steps to limit access to these services based on the user’s age.

If you are a child, please ask your parent(s) or guardian(s) for permission before using or playing on the service. If you have not obtained permission from your parent(s) or guardian(s), you should not use our service. No user under the age of 13 may provide any personal data. If we find that we have collected personal data from a child under the age of 13, we will delete the data as quickly as possible. If you are a parent or legal guardian of a child under the age of 13 (or under 16 in certain jurisdictions in the European Union) who uses our game, and you have concerns regarding the service, or wish to review, modify, or delete information collected from your child, you may contact us at support@rabbithole-studios.io.