Privacy Policy

1. General Principles

JUNNIE Games (“we,” “us,” or “our”) provides the mobile game Tiny Factory and processes personal data only to the extent necessary to operate the service. When a processing purpose is fulfilled or a retention period expires, we delete the relevant data unless applicable law requires separate retention.

Tiny Factory does not directly ask users to provide health or medical data, financial account or credit information, contacts, photos or videos, audio, files, or precise location data.

2. Data We Process

Order-linked usage evidence consists of minimum records that allocate purchased currency to activities using the server’s first-in, first-out (FIFO) accounting method. Chest rewards and manager types involved in later activities may be referenced; these records do not trace an individual card’s unique lineage from acquisition through upgrades or synthesis. We do not make long-term copies of an entire game save or every action ledger for transaction evidence. A review response token is different from a purchase token and is processed on the server with restricted access.

The Google Mobile Ads, Unity Ads, and ironSource advertising SDKs may automatically collect the advertising and device information listed above or share it with advertising partners to deliver and measure ads and prevent abuse. Users can manage personalized and non-personalized advertising and exercise applicable regional privacy choices through the app’s consent flow and privacy settings.

3. Purposes of Processing

• Create game accounts, authenticate users, link accounts, and recover accounts after a device change
• Save and synchronize game progress, resolve conflicts, and restore cloud save data
• Verify in-app products and subscriptions; deliver and confirm claims of mailbox rewards; process restorations, withdrawals, refunds, cancellations, and expirations; confirm order-linked delivery and usage evidence; review necessary recovery and shortfalls; and respond to Google Play refund and chargeback review requests
• Deliver rewarded ads selected by users and prevent duplicate rewards
• Deliver personalized or non-personalized ads, measure ad performance, and manage ad frequency
• Maintain service stability, analyze errors, and prevent security threats and abuse
• Handle customer inquiries, requests to exercise privacy rights, and disputes

4. Retention Periods

Records retained as required by law and records used to prevent payment fraud are kept separately from ordinary account data, with access restricted. When the applicable retention period expires, electronic data is deleted using methods designed to prevent recovery.

Scope of transaction evidence and calculation of retention periods

The statutory periods above follow Article 6 of the Korean Act on Consumer Protection in Electronic Commerce and Article 6 of its Enforcement Decree. We publish the following operational rules for calculating those periods. Using actual completion of dispute handling as the starting event is an operational rule stated here.

• Contract, payment, and supply records are calculated separately for five years from each verified actual event date. Records of withdrawal, cancellation, or refund are calculated separately for five years from the verified actual date of that event. Supply evidence includes minimum records of actual delivery or claim of purchased rewards or application of immediately applied benefits.
• Consumer complaint and dispute records are calculated for three years from actual completion of handling. Submitting a review preference or receiving a successful API response does not by itself mean a dispute has ended.
• Display and advertising records are calculated for six months from the verified actual event date. This period does not prescribe a single retention period for all advertising SDK activity records.
• Years and months are calculated using the calendar in Korea Standard Time (Asia/Seoul), including leap years and month ends. Records are processed for deletion by category after the final day of the retention period. Account deletion, copying or viewing evidence, and receiving the same event again do not restart an existing event’s period.

Order evidence includes only delivery, claim, usage allocation, reward result, recovery and handling records, and restricted order or account links necessary to confirm purchase or supply performance or handle an actual refund or dispute. We do not retain all game logs for a blanket five-year period. Records with different legal grounds and periods are deleted in a manner designed to prevent recovery, or reduced to necessary fields, when the applicable category’s period expires.

Deleting an account continues to delete ordinary game progress and save data. Transaction evidence subject to legal retention is stored separately with restricted access. For an actual ongoing dispute or another lawful preservation need, we manage a reason and review date for a hold on only the relevant minimum records. Submission or an unconfirmed status alone does not justify indefinite retention. When the hold is no longer needed, we check the remaining statutory period and process the records accordingly. Linkable account hashes are subject to the same access restrictions and retention and deletion controls.

Service records needed while an account remains active

Separately from copies kept for statutory transaction evidence, we retain the minimum order-to-account link, original purchase records and currency records supporting current rights and balances for the account’s lifetime, to verify purchase rights, maintain currency consistency and prevent duplicate delivery. Minimum metadata identifying the original event, its verified time, the retention calculation and event integrity may also remain for this period to prevent duplicate processing or arbitrary restarts of the retention clock. This does not mean that expired copies of transaction amounts and detailed usage evidence are retained in full.

On account deletion, ordinary service records and the original account link are deleted. Transaction evidence needed for the remaining statutory period is separately managed with the original UID link removed. Order information, restricted links and retention-control metadata retained after deletion are also processed for removal when their applicable basis and retention period end.

Separate retention of operator access records

To prevent misuse of personal data and review access and downloads, we separately manage minimum access records, including the operator identifier, access or work time, access-location information, a restricted reference identifying the affected data subject, the work performed and its result. These records are separate from transaction evidence and do not contain passwords, authentication secrets, raw review response tokens or an entire game save.

Under Article 8 of Korea’s Standards for Safeguarding Personal Information, these access records are retained for one year from the access or work event. A minimum of two years applies if the system processes personal information of at least 50,000 data subjects, processes legally defined sensitive or unique-identification information, or the Company is a facilities-based telecommunications operator covered by that Article. Years are calculated using the Korea Standard Time calendar and the final day of the period. Account deletion or expiry of order evidence does not shorten this separate security minimum. Minimum access records are also processed for deletion when their retention period and necessary security purpose end.

5. Processors and External Services

We use SDKs and services provided by the companies listed below. Depending on the service, a provider may process data independently or on our behalf as a processor.

For more information, see the Google Privacy Policy, Firebase Privacy and Security, and Unity Game Player and App User Privacy Policy. Approved partners of each advertising network may also participate in ad delivery.

6. International Transfer of Personal Data

We transfer personal data to the overseas providers listed below for processing and storage only to the extent necessary to provide the service. Processing performed by Cloud Functions in the Seoul region takes place in South Korea and is therefore not included in the international transfers listed below.

Users may refuse an international transfer by deleting their account in the app or submitting an international transfer refusal request to Support. If a user refuses an international transfer, we cannot provide features that require the transfer, including Firebase account authentication, Google Play account linking, purchase verification, and advertising. Account deletion may result in the deletion of account information, including cloud save data and unused in-game currency.

Changing your advertising consent in the app’s privacy settings allows you to choose whether your personal data is used for personalized advertising and related processing. This choice does not constitute a refusal of all international transfers. Even if you do not consent to personalized advertising, your IP address, device data, and ad interaction data may still be processed to deliver non-personalized or limited ads, maintain security, and prevent fraud.

When responding to a Google Play refund or chargeback review, we may send Google the order’s review response token, the operator’s refund preference and confirmation of whether sample content was provided, and usage percentages and summaries of usage times, quantities and purposes supported by the records, over an encrypted connection. We do not send an entire game save or the user’s full manager-card inventory as part of a review response.

7. Your Rights and How to Exercise Them

• In the app, go to Settings → Social Account Linking → Delete Account to delete your Firebase Authentication account, cloud save data, and on-device save data.
• If you cannot access the app, see the Account Deletion page for instructions on submitting a request.
• Use the privacy options in the app settings to review or change your advertising privacy choices.
• Submit requests to access, correct, or delete personal data or restrict its processing through customer support.

Game progress cannot be restored after account deletion. Purchase history managed by Google Play and transaction records that must be retained by law may remain with Google or the Company for the applicable retention period.

To view or confirm your transaction records or request an electronic copy, contact tinyfactory.support@junnie.games with the order ID and the scope of your request. We verify that you are the transaction party using existing account and order information, then explain or provide the relevant records. You do not need to send a payment password, full card number, or review response token. Information about other users and security secrets are excluded from the materials provided.

8. Children’s Privacy

Tiny Factory is not designed primarily for children. If we learn that a user who is below the age at which parental consent is required has submitted personal data without the required consent, we will take appropriate action, including deleting that data.

9. Security Measures

• Encryption in transit (HTTPS/TLS) and encryption of data stored in Firebase
• Request verification using Firebase Authentication, App Check, and Play Integrity
• Per-user access controls and Firestore security rules
• Server-side verification and duplicate prevention for purchase tokens and rewarded ad transactions
• Restricted operational access privileges and management of security logs

10. Friend Referrals

For referrals, server-verified authentication, Google account linking, and tutorial completion are used to validate registration. A referral ID is a public identifier, not an authentication credential. Friends’ email addresses, names, and account details are not disclosed.

Referrals do not additionally collect raw IPs or IP hashes/HMACs, advertising IDs, IMEI, MAC addresses, device serial numbers, or contacts. Existing Firebase Authentication, App Check, Play Integrity, and service request logs follow the existing sections of this policy. Shared home, school, or Wi-Fi networks, and VPN use alone, do not cause referral rejection.

The minimum relationship and lifetime claim facts are separated from game saves with restricted access to prevent participation resets through deletion and rejoining. The implementation retains these minimum records while lifetime registration and duplicate-reward prevention rules remain in place. Clients cannot directly access or edit complete referral relationships or participation records; signed-in users receive only their own referral progress and reward status through the server.

11. Privacy and Support Contact

Data controller: JUNNIE Games
Representative and privacy officer: 어준성
Business registration no.: 822-72-00810
Email: tinyfactory.support@junnie.games

If we change this policy, we will announce the changes and their effective date on this page before they take effect.