Cash Cow Privacy Policy
This English version is a translation provided for convenience. If it differs from the Korean version, the Korean version prevails.
Hot Blood (the "Company") processes users' personal information in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable laws while providing the mobile game "Cash Cow" (the "Service"). This policy explains what information we process, why, for how long, and what rights you have.
1. Information we process and why
| Item | How it is collected | Purpose | Retention |
|---|---|---|---|
| Device account identifier (a randomly generated ID), nickname, featured badge | Created automatically when the app first starts · entered by you | Keeping practice and match records, showing you on rivals' screens and the leaderboard | Until the account is deleted |
| Sign-in information: Google or Apple account identifier, email address (if provided) | When you sign in for "Duel" (via Google Firebase Authentication) | Verifying your account, keeping your coins and skins when you change devices | Until the account is deleted |
| Sign-in information (email verification): email address | When you choose "Continue with email" — no password; we verify you with a one-time code sent to that address | Verifying your account, keeping your coins and skins when you change devices | Until the account is deleted (one-time codes expire after 10 minutes or once used; the server keeps only a hash, in memory) |
| Consent records (document, version, language and time of consent) | Automatically when you agree | Proof of consent | Until the account is deleted (or for any longer period required by law) |
| Match records (input logs, score, win/loss, rating) | Automatically during matches | Verifying results (preventing cheating), calculating rankings and ratings, settling coins | Until the account is deleted |
| Support inquiries, a reply email address (optional), app version and device type | When you contact us | Answering inquiries, fixing errors | 3 years after the reply (the record-keeping period for consumer complaints and disputes under the Act on the Consumer Protection in Electronic Commerce) or until the account is deleted, whichever comes first |
| Usage statistics (app launches, screen views, match start and end, matchmaking results, skins bought) | Google Firebase Analytics | Improving the Service, adjusting difficulty and balance | Google's default retention period (14 months) |
| Error logs (crash information, device model, OS version) | Google Firebase Crashlytics | Fixing errors | Google's default retention period (90 days) |
| Advertising identifier (ADID · IDFA) | Google AdMob (with your consent) | Serving ads, confirming rewarded-ad rewards | According to Google's policies |
- We do not collect resident registration numbers, real names, phone numbers, addresses or location information.
- On iOS, the advertising identifier is used for personalized ads only if you choose "Allow Tracking"; in regions that require consent, such as Europe, only if you consent.
- Practice mode can be used without signing in; in that case only the device account identifier is used.
2. Outsourcing and overseas transfer
| Recipient | Task entrusted | Country and method of transfer | Retention |
|---|---|---|---|
| Google LLC (Firebase Authentication · Analytics · Crashlytics · Hosting, AdMob) | Sign-in verification, usage statistics and error logs, hosting the policy and terms pages, serving ads | Google data centers in the United States and elsewhere · sent over the network while you use the app | The retention periods in section 1 |
| Apple Inc. (Sign in with Apple) | Apple sign-in verification | United States · sent over the network when you sign in | Until the account is deleted |
| 【Server hosting provider — to be added once the public server is chosen】 | Storing match server and account data | 【Country】 | Until the account is deleted |
The Company does not provide your personal information to third parties other than the outsourcing above, except when required by law, such as a request from an investigative authority.
3. Your rights and how to exercise them
- You can delete your account, match records and inquiry records at any time from Profile → Delete account in the app. Coins and skins cannot be restored after deletion.
- You can request to view or correct your information (you can change your nickname in the app yourself).
- You can turn off ad tracking in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads · Privacy).
If you cannot use the app, you can request deletion by email to the address in section 6 (account deletion guide: delete-account-en.html).
4. Children under 14
Only users aged 14 or older can sign up for "Duel". The Company does not knowingly collect personal information from children under 14, and if we learn that a child under 14 has signed up, we delete that account and its information without delay.
5. Security measures
- Encryption in transit (TLS), minimum server access rights, restricted access to administrator screens.
- The device account secret is kept only on the device; the server stores only its hash.
- The server re-runs the input logs to verify match results (preventing tampering).
6. Privacy officer and contact
| Item | Details |
|---|---|
| Privacy officer | Kangho Lee (CEO) |
| dooully@hblood.co.kr | |
| Phone | +82 70-7666-9768 |
| In-app inquiries | Profile → Help · Contact us |
You may also report or seek advice on privacy violations to the Personal Information Infringement Report Center (privacy.kisa.or.kr · 118 in Korea) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr · 1833-6972).
7. Business information
Hot Blood (핫블러드) · CEO Kangho Lee · Business registration number 288-08-00800 · Mail-order business registration number 2024-경기하남-0182 (Hanam-si, Gyeonggi-do) · 201, 54-1 Gambuk-ro, Hanam-si, Gyeonggi-do (Gamil-dong), Republic of Korea · +82 70-7666-9768 · dooully@hblood.co.kr
8. Changes to this policy
If this policy changes, we will announce it in the app and on this page 7 days before it takes effect (30 days for changes unfavorable to users). For important changes, we will ask for your consent again when you enter "Duel".
9. Effective date
This policy applies from 【launch date】.