Privacy Policy
Node Brothers processes information only as needed to provide the game, link accounts, save to the cloud, send push notifications, maintain security and verify purchases. The current iOS app does not track users using advertising identifiers or serve personalized advertising.
1. Information and purposes
Account login: Unique Google or Apple user identifiers and authentication results are used to identify accounts, sign in and save to the cloud. ID tokens are verified only during authentication and are not stored in our database. We do not collect passwords. To provide sign-in, the Google Sign-In SDK may process the name, email address and phone number (if available) registered with Google, user and device identifiers, approximate location and SDK usage information.
Game usage: Account ID, nickname, progress, stages, battle and currency records, inventory, equipment, currency, rewards, settings, platform, app version, synchronization records and integrity checks are used for saving, recovery and abuse prevention.
Android device identifiers: For abuse investigations and account security, the app-scoped Android identifier (ANDROID_ID) is hashed on the server and stored with the device model, operating system version and integrity-check records. The original identifier is not retained in our database or logs and is not used for advertising tracking. Device resets or user-profile changes may change the identifier.
Device and notification information: An app-generated installation identifier, Firebase Cloud Messaging registration token, APNs token, device model, operating system version, language, time zone, app identifier and version, and notification preferences are used to deliver notifications, unregister devices, protect account sessions and diagnose problems.
Connection and diagnostic information: Connection time, IP address, client platform and version, errors and integrity-check results are used for rate limiting, security, abuse prevention and troubleshooting. IP addresses used for rate limiting are processed only in server memory for a limited period and are not saved in the game account database.
Toss mini-app device information: Device identifiers provided by the Toss mini-app environment are stored in an access-restricted server database to distinguish devices, assist with support inquiries, diagnose problems and prevent abuse.
Google Play purchases: Product IDs, Google Play order IDs, purchase tokens, amounts and currencies, purchase status, and purchase and processing times are used to verify payments, deliver items, prevent duplicate delivery and abuse, and handle refunds and disputes. We do not collect card numbers, bank account numbers or Google Play payment passwords.
Customer support: If you contact us, your email address, inquiry and handling records are used to respond and resolve disputes.
2. Third-party services and international processing
We use Apple (Sign in with Apple), Google (Google Sign-In, Firebase Cloud Messaging and Google Play payment verification), Supabase (database) and Vercel (API hosting). Information is transmitted over encrypted networks and may be processed in countries where these providers operate infrastructure. Google Sign-In and Firebase SDKs may process information needed for login, notifications and SDK quality analysis; they are not currently used for advertising tracking. Please also consult Apple’s and Google’s privacy policies.
3. Retention and deletion
Account and game data: Access stops immediately upon an account deletion request, and data is permanently deleted after 7 days. Before deletion, you can sign in with the same account to cancel the request.
Device and notification information: On notification unregistration, account deletion or token invalidation, information is deleted or no longer used to send notifications. Information processed by third parties is subject to their retention policies.
Payment and transaction records: Only product, order, payment and delivery records required by applicable law are retained separately from account data for up to 5 years from the transaction date, then destroyed.
Consumer complaints and disputes: Records are retained for up to 3 years after resolution, then destroyed.
Android device identifiers and integrity-check records: Used for abuse investigations and account security and deleted with the account. Records older than 90 days are cleaned up during collection processing.
Other information: Deleted without delay when its purpose is fulfilled or consent is withdrawn. Electronic files are deleted irrecoverably. Legally retained information is not used for service usage or advertising purposes.
4. Your rights
You can request account deletion under Account · Privacy in game settings. If you cannot use the app, request deletion by email following the web account deletion instructions.
5. Children
This game is not designed for children under 13. If information belonging to a child under 13 is identified, it is deleted without delay.
6. Controller and contact
Controller and privacy officer: Jeong Dong-seok (정동석), Node Brothers (노드브라더스). Email: admin@nodebrothers.com. Telephone: +82-70-8064-5835. Address: Room 302-S287, 7, Yonggu-daero 2790beon-gil, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea (Jukjeon-dong).
7. Changes to this policy
If this policy changes due to changes in law or the service, we will announce the effective date and changes in the game or on this page.