Legal
Privacy Policy
This document is a practical soft-launch draft for Gunners. It is not legal advice. Policies may be updated as the service matures; the effective date above will change when we publish a revision.
1. Introduction
This Privacy Policy explains how Gunners (package ID com.slt.gunners ) collects, uses, stores, and shares personal information when you use the mobile game and related online features (the “Service”).
By creating an account, signing in, or otherwise using online features, you acknowledge this Policy. Offline bot training may still generate limited diagnostic events if crash or performance tooling is active on your device.
2. Controller / personal information controller
The personal information controller (operator) for Gunners is DJ.H (Do Jin-hyeon) .
Privacy requests: cmjh951330@gmail.com
During soft launch the Service is operated as an independent soft-launch product. We do not operate a separate corporate privacy office; the operator email above is the primary contact channel.
3. Information we collect
Depending on how you use Gunners, we may process the categories below. Exact fields can vary by sign-in provider and device platform.
| Category | Examples | Notes |
|---|---|---|
| Account | Firebase Auth UID; email if the provider supplies it; display name; photo URL; auth provider type (e.g. Google, Apple, anonymous/email where enabled) | Required to sign in and sync your profile across devices. |
| Game profile | XP, level, kills, deaths, match counts, leaderboard ranking fields, selected character preferences, display nickname in-game | Stored primarily in Supabase-backed profile / leaderboard tables linked to your auth UID. |
| Safety | Block list entries; player reports; related matchId or session identifiers when a report is filed | Used for moderation, abuse investigation, and protecting other players. |
| Device / push | FCM device token; approximate OS / platform; app build or version identifiers | Enables optional push notifications (e.g. match or service notices) and support triage. |
| Diagnostics | Firebase Crashlytics crash stacks; Performance traces; Analytics events; App Check attestation signals | Helps us find crashes, measure performance, understand feature usage at an aggregate level, and harden the client against abuse. |
| Multiplayer session | Colyseus room/session identifiers; ephemeral realtime state (position, combat events, lobby membership, share codes for custom rooms) | Needed to run 3v3 quick match and custom rooms. Session state is typically short-lived on the game server. |
| Infrastructure logs | IP address, connection metadata, and standard server access logs generated by hosting / reverse-proxy infrastructure | Collected automatically by network infrastructure for security, abuse prevention, and reliability—not used for advertising profiles. |
We do NOT collect
- Payment card details, in-app purchase receipts managed as our own billing ledger, or a coins/shop economy (Gunners soft launch has no coins shop).
- Precise GPS / continuous location tracking.
- Device contacts or address book.
- Camera or microphone content (the game does not request camera/mic for gameplay).
- Health, fitness, or biometric templates.
4. How we collect
- Directly from you — when you sign in, set a display name, create or join custom rooms, block or report a player, or contact support.
- Automatically from the app — gameplay progression, match results, diagnostic SDKs (Crashlytics, Performance, Analytics, App Check), and push-token registration.
- From authentication providers — identity assertions (UID, email/name/photo when provided) via Firebase Auth.
- From multiplayer infrastructure — ephemeral Colyseus session traffic required to synchronize matches.
- From hosting logs — IP and connection metadata recorded by servers and gateways.
5. Purpose of use
We use personal information to:
- Provide and operate the Service, including account sign-in and profile sync.
- Run online 3v3 quick matchmaking and private custom rooms (share-code lobbies).
- Support bot training and local/offline practice modes, and record progression where applicable.
- Maintain leaderboards, XP/level progress, and match history summaries.
- Enforce fair play: detect or investigate cheating, griefing, abuse, and Terms violations; process blocks and reports.
- Send optional push notifications related to the Service (where you grant permission).
- Diagnose crashes, improve performance and stability, and secure the client with App Check.
- Respond to support requests and communicate service-critical notices.
We do not sell personal information for marketing or advertising networks. Soft-launch analytics are used to operate and improve Gunners, not to build third-party ad profiles.
6. Legal basis / processing grounds
Where GDPR or similar frameworks apply, we typically rely on: (a) performance of a contract — providing matchmaking, accounts, and core gameplay you request; (b) legitimate interests — security, fraud/cheat prevention, crash diagnostics, and service improvement, balanced against your rights; and (c) consent — where required for optional push notifications or certain analytics preferences on your platform.
Under Korean personal information law, we process information as necessary to provide the Service you use, to fulfill statutory obligations, and—where required—based on your consent for optional features.
7. Retention periods
- Account & game profile — retained while your account remains active. If you request deletion, we delete or anonymize profile data within a reasonable period unless law requires longer retention.
- Blocks & reports — kept as needed for safety investigations and to prevent repeat abuse (typically up to 1–3 years, or shorter if no longer needed).
- Device tokens — removed or rotated when the app unregisters the token, you reinstall, or the token expires.
- Diagnostics (Crashlytics / Performance / Analytics) — retained according to the Firebase product defaults and our project settings, generally for operational troubleshooting windows measured in weeks to months.
- Multiplayer session state — ephemeral; cleared when the room ends or shortly thereafter on the Colyseus server.
- Infrastructure logs — retained for security and reliability (commonly 30–90 days unless an incident requires longer review).
8. Sharing & processors
We do not sell personal information. We share data with processors and infrastructure providers only as needed to run Gunners:
- Google Firebase — Authentication, Crashlytics, Performance Monitoring, Analytics, Cloud Messaging (FCM), App Check.
- Supabase — database hosting for profiles, leaderboards, match history, notifications metadata, blocks/reports, and related APIs.
- Colyseus game server on our VPS — realtime multiplayer rooms for 3v3 and custom matches.
- App stores / OS vendors — may process install, update, and permission-related data under their own policies when you download Gunners.
We may disclose information if required by law, regulation, lawful process, or to protect the rights, safety, or integrity of players, the operator, or the Service (for example, responding to a valid legal request).
9. International transfers
Firebase, Supabase, and related cloud infrastructure may process data in data centers outside your country (including the United States or other regions chosen by those providers). By using online features you understand that your information may be transferred internationally for Service operation.
Our Colyseus VPS may also be hosted in a region selected for latency and reliability for soft-launch players. We apply contractual and technical safeguards available from our providers where applicable.
10. Security
We implement reasonable technical and organizational measures appropriate to a soft-launch indie service, including: authenticated API access, RLS / access controls on database tables where configured, TLS for network traffic in transit, App Check to reduce unauthorized client abuse, and least-privilege operator access to production systems.
No method of transmission or storage is 100% secure. Please use strong account credentials with your sign-in provider and report suspected compromise to our support email promptly.
11. Your rights
Subject to applicable law, you may request:
- Access — confirmation of whether we process your personal information and a copy of key account/profile data we hold.
- Correction — updates to inaccurate profile information (some fields can also be edited in-app).
- Deletion — erasure or anonymization of account-linked personal data, subject to legal retention needs and safety logs.
- Withdrawal — withdraw consent for optional processing (e.g. disable push permissions in OS settings) without affecting processing that is necessary to provide core online play you still request.
To exercise these rights, email cmjh951330@gmail.com from the address associated with your account when possible, and describe your request. We may need to verify your identity before acting.
Account deletion: open Settings → DELETE ACCOUNT in the app for immediate self-service deletion, or use our
Delete Account page (email request also accepted; verified requests within about 30 days).
12. Children
Gunners is not directed to children under 14 (or under the minimum digital consent age in your jurisdiction, if higher). We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us and we will take reasonable steps to delete it.
13. Cookies / web
This marketing / legal landing site stores your language preference in localStorage (key: gunners_lang). We do not set advertising tracking cookies on these pages for third-party ad networks.
The mobile app itself uses platform SDKs described above (Firebase, etc.), which may store identifiers on the device according to those SDKs’ documentation and your OS privacy settings.
14. Changes
We may update this Policy as features, processors, or legal requirements change. Material updates will be reflected by revising the effective date on this page and, where appropriate, in-app or store listing notices. Continued use of the Service after an update constitutes acceptance of the revised Policy to the extent permitted by law.
15. Contact
Operator: DJ.H (Do Jin-hyeon)
Privacy & support email: cmjh951330@gmail.com
App: Gunners (com.slt.gunners)
16. California / EEA note
If you are in California, the EEA, UK, or another region with specific privacy rights, you may have rights to access, correct, delete, or restrict certain processing, and to object to processing based on legitimate interests. Soft launch Gunners does not sell personal information as defined under the CCPA/CPRA. To exercise rights, email us at the address above; we will respond within the timelines required by applicable law where it applies. This short note is not a full GDPR/CCPA treatise.