- Effective date: November 1, 2026 (adds reporting and blocking; previous version: October 28, 2026)
- Operator: Dudungsil Games (두둥실게임즈; Representative Park Hayoung, Business Registration No. 576-33-01542, Republic of Korea)
- Contact: [email protected]
Dudungsil Games ("we") operates the mobile game Hexpedition (Korean title 육목 원정대, the "Game"). This policy explains what information the Game handles, why, when it is deleted, and what you can do about it. If this translation differs from the Korean version, the Korean version prevails.
1. Information we handle
| Category | Items | When |
|---|---|---|
| On your device only | Game progress (stage records, bag, Stone Guide, settings, name and portrait) | Always. Never sent to our servers |
| Online matches (Friend Match, Ranked) | Guest identifier and access token (the server stores only a hash of the token), name, portrait, device type (Android/iOS), match records (bag, moves, result), IP address | When you start an online match |
| Ranked sign-in | Account identifier (a random uid issued by Firebase), sign-in method (Google Play Games or Game Center), rating, wins/losses, rank, match history, season reward claims | When you sign in for Ranked |
| Reports and blocks | Identifier of the person who reports or blocks (account uid if signed in, otherwise the guest identifier), the other player's public identifier (a random value made by our server) and the name shown at the time, report reason, time, match room ID | When you report or block another player |
| Rewarded ads (processed by ad providers) | Advertising identifier (Android advertising ID; on iOS we do not ask for tracking permission and do not use the IDFA), IP address and approximate location derived from it, device, OS and app information, ad views and interactions, diagnostics, ad consent status | When you tap an ad button to watch an ad |
| App usage analytics (Google Analytics for Firebase) | App instance ID (a random value created per install), gameplay usage (screens viewed, match starts and results, special stones used, ad button and shop use, settings changes), device type, OS and app version, country, language and approximate region inferred from IP (the IP address itself is not stored) | While you play |
We do not collect your real name, email address, phone number, postal address, location, contacts, photos or payment information. When you sign in, Google or Apple verifies your Google Play Games or Game Center account; we receive only the uid above.
2. Why we use it
- Connecting online matches, recognizing you when you reconnect, and judging the game
- Ranked ratings, leaderboard, match history and season rewards
- Investigating bugs and preventing cheating (by replaying the same game)
- Handling reports, hiding offensive names, and keeping blocked players apart
- Handling server outages
- Serving rewarded ads and granting the reward (only when you watch the ad to the end), preventing ad fraud
- Improving the Game: statistics on which stages are hard, where players stop, and how special stones, products and ads are used
We do not use the information we receive (the online match and Ranked items in section 1) for advertising or marketing. App usage analytics is used only to improve the Game, never for advertising, and does not collect the advertising ID or IDFV. What ad providers process for rewarded ads is listed in section 4.
3. How long we keep it
| Item | Retention |
|---|---|
| Account, rating, season rewards | Until you delete your account; deleted immediately |
| Guest identifier | Until you delete your account or ask us to delete it |
| Report and block records | Until you delete your account (a block is deleted as soon as you remove it). Records of names hidden after reports are also deleted when the account is deleted |
| Match records | Deleted automatically after 90 days. Ranked results stay in your opponents' history, but the deleted account's identifier and name are removed |
| Server operation logs (including IP addresses) | 30 days |
| Backups | Made daily and deleted after 7 days (deleted data disappears from backups after this period) |
| App usage analytics | Deleted automatically after 14 months |
4. Service providers and international transfers
We use the services below. We do not sell your information or provide it for advertising.
| Recipient | Purpose | Items | Country | When / how | Retention |
|---|---|---|---|---|---|
| Oracle Corporation (Oracle Cloud) | Game server hosting | Online match, Ranked, report and block items in section 1 | Japan (Osaka) | Sent over the network when you play online | As in section 3 |
| Google LLC (Firebase Authentication, Google Play Games) | Ranked sign-in verification | Play Games account verification data, Firebase uid | United States and other Google data centers | When you sign in | Per Google's policy |
| Apple Inc. (Game Center) | Ranked sign-in verification (iOS) | Game Center account verification data | United States and others | When you sign in | Per Apple's policy |
| Google LLC (Google AdMob) | Serving rewarded ads | Rewarded ad items in section 1 | United States and other Google data centers | Sent over the network when you watch an ad | Per Google's policy |
| Google LLC (Google Analytics for Firebase) | App usage analytics | App usage analytics items in section 1 | United States and other Google data centers | Sent over the network while you play | 14 months |
| ironSource Ltd. / Unity Technologies (Unity LevelPlay, only when AdMob has no ad) | Serving rewarded ads | Rewarded ad items in section 1 | Israel, United States and others | Sent over the network when you watch an ad | Per Unity's policy |
If you do not want your information transferred abroad, do not use online matches or Ranked. Story, vs AI and the rest of the Game remain fully playable.
5. Your rights
- Delete your account: Settings › Delete Account in the Game deletes it right away. If you have already removed the Game, email [email protected] with the platform you signed in with and your in-game name, and we will delete it after confirming.
- Manage blocks: See and remove the players you blocked in Settings › Blocked in the Game.
- Ad choices: You can play without watching ads. On Android you can delete or reset your advertising ID in device Settings › Google › Ads. Where ad consent is required (EEA, UK and others), you choose on the consent screen at first launch and can change it any time in Settings › Ad privacy choices in the Game. Your choice is also passed to Unity LevelPlay.
- App usage analytics: When you delete your account, this device's analytics ID is replaced so later data is not linked to earlier data. Removing the Game stops all sending.
- You can ask to access, correct, delete or stop the processing of your information. We reply without delay, within 10 days at the latest.
- Users in the EEA and the UK have rights under the GDPR (access, rectification, erasure, restriction, portability, objection) and may lodge a complaint with a supervisory authority. Our legal bases are performance of a contract (online matches and Ranked) and legitimate interests (preventing cheating, investigating bugs).
- California users: we do not sell or share (for cross-context behavioral advertising) personal information.
6. Children
The Game is not directed at children. Online matches exchange only names and have no chat. Names are filtered for offensive words, and offensive names can be reported or blocked. If we learn that information from a child under 14 (under 13 in some countries) was collected without a parent's consent, we will delete it.
7. Beta testing
If you installed the Game through TestFlight or Google Play testing, Apple or Google may pass installation and usage records, crash reports and feedback you send to us under their terms. We use this only to fix bugs and improve the Game, and delete it when the beta ends.
8. Security
Connections to our server are encrypted (TLS). Access tokens are stored only as hashes. Only operators with keys can access the server.
9. Changes
We will announce changes in the Game or on this page 7 days before they take effect (30 days for changes unfavorable to you).
10. Contact
Privacy officer: Park Hayoung (Representative, Dudungsil Games), [email protected]