Acorn Cafe Privacy Policy
Scope
| App name | Acorn Cafe (Korean name: 도토리 카페 - 숲속 퍼즐, formerly 도토리 러쉬 / Dotori Rush) |
|---|---|
| Package / bundle identifier | com.midnightlog.dotorirush (both Google Play and App Store) |
| Developer name | midnight-log (operated by Midnight AI (미드나잇AI), Republic of Korea) |
| Contact | datajuny01@gmail.com |
This Privacy Policy applies to the app listed on Google Play and the App Store under the app name and package identifier above, and to the web version of the same app.
Midnight AI (미드나잇AI, the “Operator”, Google Play developer name midnight-log) processes information only as necessary to provide Acorn Cafe (Korean name: 도토리 카페 - 숲속 퍼즐) and manages it securely in accordance with applicable laws.
1. Purposes and Data Processed
| Category | Data processed | Purpose |
|---|---|---|
| Progress on the device | Wallet, unlocked stages, star and card results, owned and equipped items, rewards claimed, daily attempts, sound and vibration settings, whether the introduction has been viewed, screen restoration information, practice scores, information for recovering failed transmissions | Saving and restoring game progress, retransmitting after a connection is restored |
| Guest device account | A random secret generated on the device (kept only on the device); on the server, the SHA-256 hash of that secret, a nickname in the “도토리 0000” (“Acorn 0000”) format generated from the hash, account number, app login session identifier and expiration time, server-side progress information | Identifying an account without registration, synchronizing progress. Created automatically when connected to the internet |
| Optional account linking (Kakao, Apple, Google) | Unique identifier verified from the login credential issued by each service, service type, linking time, single-use login verification value valid for five minutes | Signing into the same account and continuing progress on another device |
| Online play and rankings | Seed, stage, mode, cards, unit price, target, play date and attempts, final virtual assets, score, validation and extension status, input count and hash, start and end times, rejection code, daily and weekly ranking groups, ranking reward records | Checking for cheating, providing rankings (displaying nicknames and scores on leaderboards), settling rewards |
| Weekly ranking country code | Two-letter country code determined from the device time zone | Displaying a flag next to the nickname on the weekly leaderboard, forming ranking groups of users from the same country |
| Sharing and friend invitation rewards | Share reward request number, invitation link containing a random identifier of the sharing account, association between the inviting account and the new account, whether the first game was validated, reward date and delivery result | Delivering sharing and invitation rewards, preventing duplicate rewards. The invitation link is passed to the sharing app selected by the user and to the person who receives the link |
| In-app purchases (when paid items are sold) | Product ID, store type (App Store, Google Play), store transaction ID, purchase time, hash of the purchase verification record, refund and cancellation status | Delivering and restoring purchased items, revoking items upon refund or cancellation |
| RevenueCat purchase integration | Random game account identifier, product, store, transaction and subscription status and times, store receipt or purchase token, device type, operating system and connection information | Verifying store purchases, managing pass and item entitlements, handling restoration and refunds, purchase statistics |
| News emails (optional consent) | Email address entered directly by the user, confirmation of being at least 14 years old, consent time, version of the consent wording, language, withdrawal time | Announcements of new game releases and major updates (promotional information). Declining consent does not affect use of the game |
| Advertising (when ads are provided) | Ad unit ID, reward request and transaction IDs, hash of the reward verification record. The Google advertising SDK may process approximate location inferred from the IP address, advertising and device identifiers, ad impressions and interactions, crash and performance information | Providing rewarded ads and verifying rewards, ad delivery, measurement and analysis, fraud prevention |
The app determines and stores a country (a two-letter country code) from the device time zone, displays it as a flag next to the nickname on the weekly leaderboard, and uses it to group users from the same country into ranking groups. This feature does not use GPS or IP-based location information and does not collect precise location information.
Except for email addresses entered directly by users who separately consent to news emails, the Operator does not store names, telephone numbers, email addresses, dates of birth, gender or location in its own database. Email addresses are not retrieved from login services. Kakao login requests only a member identifier. Apple and Google login screens may ask for consent to provide an email address or name, and this information may be included in the login credential sent to the server. However, after verifying the signature, the server stores only the unique identifier and does not store the other information. Payment information such as card numbers is handled by each store and is not received by the Operator.
2. Processing and Retention Periods
- On-device progress, settings, recovery information and guest secret: kept on the device until the app is uninstalled or its data is cleared.
- Kakao, Apple and Google login credentials, and authorization codes and access tokens from each service: used only to verify login or revoke the connection when an account is deleted, and not stored in the Operator’s database.
- Single-use login verification value: usable only for five minutes after issuance.
- App login token: valid for one hour after issuance.
- Account, linked login identifiers, progress, game, ranking, reward and purchase records: retained until the user deletes the account in the app or the service ends.
- News email address: retained until consent to receive emails is withdrawn or the account is deleted. On withdrawal, the email address is deleted and only the consent and withdrawal times remain. These records are also deleted when the account is deleted.
- Where applicable law requires separate retention, the information is stored separately for the period required by that law.
Raw swipe inputs for a round are processed only during result validation and are not stored. Only the input count and SHA-256 hash are stored in the database.
3. Outsourced Processing and External Services
| Processor / service | Tasks | Retention criteria |
|---|---|---|
| Supabase Pte. Ltd. | Database and server function hosting in the Seoul region, Republic of Korea, game record validation | Until the Operator requests deletion or the service agreement ends |
| Kakao Corp. | Optional Kakao login, KakaoTalk sharing (when provided) | According to the provider’s privacy policy and applicable laws |
| Apple Inc. | Optional Apple login, App Store app distribution, in-app purchases and refunds | According to the provider’s privacy policy and applicable laws |
| Google LLC | Optional Google login, Google Play app distribution, in-app purchases and refunds, AdMob ad delivery, measurement and reward verification when ads are provided | According to the provider’s privacy policy and applicable laws |
| RevenueCat, Inc. | In-app purchase and subscription verification, entitlement management, restoration and refund handling, purchase statistics | According to the Operator’s deletion requests and the service agreement; information subject to statutory retention requirements is retained for the required period |
The Operator does not sell personal information. Information independently processed by Kakao, Apple and Google during login, app distribution, payments and advertising is subject to their respective privacy policies.
4. International Transfers of Personal Information
The Operator’s server records are stored in a Supabase database in the Seoul region, Republic of Korea. The information below may be processed outside Korea during Supabase operations and support, RevenueCat purchase integration and Google advertising.
| Recipient | Country / contact | Data transferred and purpose | Timing, method and retention |
|---|---|---|---|
| Supabase Pte. Ltd. | Storage location: Republic of Korea (Seoul region) Corporate location: Singapore privacy@supabase.io | Guest accounts, optional login identifiers, online play, ranking, reward and purchase records Cloud operations, incident response and technical support | Encrypted network transmission when the relevant feature is used Until the Operator requests deletion or the service agreement ends |
| Google LLC (when ads are provided) | United States policies.google.com/privacy | Device and advertising information, including advertising identifiers, reward request number Ad delivery, measurement and reward verification | Sent over an encrypted network when the advertising SDK is initialized or used According to Google’s privacy policy |
| RevenueCat, Inc. | United States (AWS storage) compliance@revenuecat.com | Random game account identifier, purchase, subscription and transaction information, receipts and purchase tokens, device, operating system and connection information Purchase verification, entitlement, restoration and refund management, purchase statistics | Sent via HTTPS when connecting store products, making purchases or restoring purchases According to the Operator’s deletion requests, the service agreement and statutory retention requirements |
Users access Apple and Google login and store payments directly on those companies’ screens, and information may be processed abroad according to their policies. If you do not want international transfers, you can delete server information using account deletion in the app. The basic game can also be played locally on the device without an internet connection.
5. Disposal and Account Deletion
Electronic files are deleted using methods that make recovery difficult. When you confirm deletion in Settings > Delete Account in the app, the server account and its linked login identifiers, sessions, progress, game, ranking, reward and purchase records are deleted together. The guest secret and login session on the device are also deleted, resetting on-device progress to its initial state. Deleted records and remaining hearts cannot be recovered. Store payment records remain with each store.
Consumable heart purchases are not granted again through purchase restoration. Deleting an account does not cancel automatic renewal of passes through the App Store or Google Play. You must cancel separately through pass management / cancellation in the app or the store’s subscription settings. Requests to delete information linked to RevenueCat can also be sent to the contact email, and the Operator will request deletion from that service.
6. Your Rights and How to Exercise Them
You may request access to, correction or deletion of your information, or suspension of its processing. You can delete your account directly in Settings > Delete Account in the app, or, if you have already uninstalled the app, send a request to datajuny01@gmail.com. After verifying your identity, we will handle your request without undue delay and inform you of the result. You can delete on-device information yourself by uninstalling the app or clearing its data in device settings. Turning off news emails in Settings > Receive News Emails in the app immediately withdraws your consent to receive them.
7. Automatic Storage Technologies
The app uses device storage (localStorage) for game progress, settings, the guest secret, login sessions and recovery of failed transmissions. The Operator has not separately installed advertising tracking pixels or its own analytics SDK. RevenueCat is used for purchase verification and purchase statistics. Google AdMob ad requests proceed after checking the privacy consent status. Where a privacy choices screen is required, it can be reopened through the advertising privacy settings in the app’s settings. On iOS, the system tracking permission status is checked before viewing ads, and non-personalized ads are requested if permission is not granted. Tracking permission is not required to use the game or receive ad rewards. Users can also reset advertising identifiers or limit personalized ads in device settings.
8. Security Measures
All server communications use HTTPS. The guest secret is stored on the server only as a SHA-256 hash. Kakao, Apple and Google login credentials are accepted only after their signatures, issuers, intended app, expiration times and single-use verification values are checked using each service’s public keys, and the credentials are not stored. Direct database writes are restricted using row-level security (RLS) and service roles. Round signatures, server-side replay and idempotent processing prevent forgery and duplicate settlement. Purchases and ad rewards are granted only after the server receives signed verification.
9. Privacy Contact and Notice of Changes
Privacy contact: Operator of Midnight AI (미드나잇AI)
Email: datajuny01@gmail.com
When this policy changes, the effective date and key changes will be announced through the service or a public page.
10. Additional Information for EEA and UK Users
Subject to the conditions and exceptions under applicable data protection law, you have the right to access, rectify or erase your personal data, restrict processing, object to processing based on legitimate interests, and receive data you have provided in a structured, commonly used, machine-readable format and transmit it to another controller where processing is automated and based on consent or a contract (data portability). Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise these rights, contact datajuny01@gmail.com or use the controls described in Section 6. You also have the right to lodge a complaint with a competent data protection supervisory authority in the EEA, in particular where you habitually reside, work or where an alleged infringement occurred, or with the UK Information Commissioner’s Office (ICO).
The legal bases for processing are performance of the contract for providing requested game features, account identification and progress synchronization, rankings, and purchase and reward delivery; consent for optional news emails and for advertising or tracking where consent is required; and legitimate interests in maintaining service security, preventing cheating, fraud and duplicate rewards, and verifying game records, to the extent those interests are not overridden by your interests or fundamental rights and freedoms.
Using the service from the EEA or UK involves transferring personal data to the Republic of Korea, where the Operator’s server records are stored in the Supabase Seoul region. As described in Section 4, Supabase is based in Singapore, Google advertising may involve processing in the United States, and RevenueCat uses AWS storage in the United States. Apple and Google may also process login and store payment information abroad under their policies. Contact the Operator at the email above for information about the applicable transfer arrangements.
Rights and legal bases are described with reference to the European Commission’s information for individuals, EDPB guidance on legal bases, and ICO guidance on data protection rights.
11. Notice for California Residents
The Operator does not sell your personal information.