Information and purposes
We use account and installation identifiers, Apple sign-in links when used, game progress, virtual-currency ledgers, and purchase, refund and ad-reward records to operate accounts, synchronize progress, process grants and refunds, and prevent abuse. Support correspondence includes the email address and content you send. Do not send payment card numbers to the app server.
Advertising and tracking choices
Google Mobile Ads may process device identifiers, ad and app interactions, approximate location inferred from IP addresses, and crash and performance diagnostics for advertising and analytics. After any required regional consent flow (UMP), iOS tracking permission is requested if your choice is not yet determined. If allowed, personalized ads may use IDFA. If denied, the app is configured to disable personalization and the publisher first-party identifier. You can still use the game and rewarded-ad features without allowing tracking, although ad availability depends on inventory and consent status. Change this app's choice in iPhone Settings > Privacy & Security > Tracking.
Starting with version 1.0.2, non-rewarded interstitial ads may appear during gameplay in addition to optional rewarded ads. Ticket purchases grant seven days without these interstitials on that device. Advertising data processing and privacy choices follow the Google advertising description above.
Account deletion
Request deletion in Settings > Account > Delete Account. After the server confirms deletion, the app clears login links and authentication sessions, unlinks the installation identifier from the account, and forfeits remaining tickets and undos. The current attempt is detached. Completed stages, best stars, preferences such as language and sound, and the board layout may remain on the device. We do not guarantee recovery of the deleted account’s server records or merging them into a new account. Apple-linked accounts require Apple reconfirmation. Some pseudonymous identifiers and purchase or reward records remain under the retention rules below; deletion does not erase every record immediately.
Retention and disposal
Expired or revoked authentication sessions, nonces and account-switch tickets are eligible for cleanup after 7 days. Deleted-account game progress is eligible after 30 days from the deletion request. Raw server-side verification (SSV) callback text is cleared after 30 days from receipt; ad-session and SSV callback rows are eligible after 180 days from creation or receipt. The implementation deletes non-payment currency ledger entries, device and grant records, wallets, daily allocations, deletion-processing records and remaining related records in periodic cleanup after 180 days from the account deletion request. Deleted accounts with no paid records are also removed. Where paid records remain, a pseudonymous account identifier is retained to link the transactions. Pseudonymization does not make the records fully anonymous. Minimum evidence of paid contracts, withdrawals, payments, ticket supply and refunds follows a five-year rule under Article 6 of Korea’s e-commerce enforcement decree. Purchase records are eligible for cleanup five calendar years after the latest grant, completion or refund processing for that purchase. Paid-currency ledger entries and transaction-linked store notifications use their individual creation or receipt date. Store notifications unrelated to a transaction are eligible after 180 days. Login or account deletion does not restart every record’s clock; free-currency, ad records and notification text are not all extended to five years. Consumer complaint/dispute records are managed for three years after closure. For an actual proceeding or investigation requiring further preservation, specific records, reasons and end conditions are recorded and records disposed of when the purpose ends. Expired electronic records are irrecoverably deleted and paper shredded. Statutorily retained records of deleted accounts are separated from service-use records with restricted access.
Providers, international processing and backups
The selected Neon database is in AWS Singapore; its verified point-in-time restore history is six hours. The project currently has zero additional snapshots, no snapshot schedule and no separate periodic dump job in its deployment configuration. The operating rule is not to create an additional long-term backup. This does not mean every provider replica, security log or unverified manual copy disappears after six hours. If recovery occurs, previously received deletion requests must be reapplied.
Requests and changes
Contact the email above for access, correction, deletion, restriction, consent withdrawal or international-processing inquiries. Requests are handled following identity verification, applicable law and retention obligations; restrictions will be explained. Data is processed as necessary for accounts, requested features and legal obligations; consent-based advertising follows the choices provided. Do not send passwords, verification codes, card numbers or complete receipts. We use access restrictions, transport encryption, authentication and retention controls. Changes are announced here with an effective date.
Audience
Lumi Sort serves a general audience and is not designed as a children-only app. The App Store’s 4+ content rating does not establish a separate minimum service age. This document does not impose a 14+ restriction. Children’s personal information and consent are addressed under applicable law.
Providers and international processing
During service use, account/sync information is transmitted over encrypted connections to Cloudflare and Neon. Database retention follows the preceding section. Refusing necessary server processing or requesting deletion may prevent account, sync and currency features. Optional Apple sign-in, purchases and Google ads communicate with those providers. Tracking permission can be withdrawn in iPhone Settings; refusing tracking alone does not block the game. Contact mso0504@naver.com about international processing or privacy rights. Contractual safeguards do not replace applicable notice or consent requirements.
Cloudflare, Inc.
Server requests/security: account and installation IDs, game/currency, reward and purchase requests, and IP/connection information. Its global network is used; this configuration does not fix processing to one country. Retention follows service necessity and contract-end criteria in its DPA.
Cloudflare, Inc. — Privacy / Terms
Neon, LLC / Databricks, Inc.
Database storage/recovery: account, progress, transaction and reward records. Database region: Singapore. Support access and subprocessors are governed separately; processing is not guaranteed to occur only there. App retention and applicable contractual deletion criteria apply.
Neon, LLC / Databricks, Inc. — Privacy / Terms
Apple
Optional sign-in/purchases: account/device, authentication and transaction information. Apple generally describes US storage, with regional affiliates involved. Retention depends on the purpose and legal obligations.
Google LLC
Optional rewarded ads, non-rewarded interstitials from version 1.0.2, measurement and fraud prevention: advertising/device identifiers, IP-derived approximate location, interactions and diagnostics. Processing may use global servers including the US; item-specific deletion, anonymization and legal-retention criteria follow Google’s policy.
Official references
Change history
2026-10-27 · Added version-specific information for non-rewarded interstitials and the seven-day ticket-purchase exemption from version 1.0.2.
2026-10-25 · After first publication, updated for deployment of five-calendar-year paid-record cleanup and 180-day non-transaction notification cleanup. Complaint/dispute records follow a three-year post-closure operating rule. Deployment verification is not confirmation that the scheduled purge has run.