Popcannon 개인정보처리방침

Privacy Policy (Popcannon)

Effective date: August 4, 2026 · Last updated: August 4, 2026

Scope of Application

This Privacy Policy applies to Popcannon (the "Game"), a mobile game published by EF lab. (the "company"). Because the Game stores player progress on cloud services operated on the company's behalf, this policy applies instead of the company's "Privacy Policy — No-Account Apps."

The Game does not provide account registration and does not collect directly identifying information such as name, email address, postal address, or phone number. The only value distinguishing one player from another is an anonymous identifier issued automatically, per device, on first launch.

The company complies with the Personal Information Protection Act (Republic of Korea), the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the EU General Data Protection Regulation (GDPR).

Article 1 — Personal Data Collected

1. Anonymous identifiers

Anonymous user ID	A string issued automatically by Firebase Authentication on first launch. Not linked to any account or email address
App instance identifier	Issued per installation by Firebase Analytics
Firebase Installation ID	Used by Firebase Remote Config to deliver in-app configuration
Advertising Identifier	Android Advertising ID (AAID) / iOS Advertising Identifier (IDFA). On iOS, collected only if the user permits tracking

2. Game progress (stored in the cloud)

Stored together with the anonymous user ID so that progress can be restored after a device change or reinstall.

• Coins, gems, energy, and the energy accrual timestamp
• Per-cannon progress: unlock state, highest stage reached, checkpoint, damage and fire-rate upgrade levels
• Skill shard counts and the equipped skill
• Chapter reward claim history
• Number of purchases
• App version, platform (iPhone/Android), last synchronization time

3. Device information

• Device model (e.g. iPhone15,2, SM-S911N) — used to trace performance problems and errors specific to a model
• OS version, language setting, country/region (inferred from IP address)

4. Gameplay events (analytics)

Collected to tune balance and identify errors. All of these are in-game actions and contain nothing that identifies an individual.

• Run start and end, stage and chapter clears, game over
• Use of boosts, unlocks, and continues
• Daily reward claims, gem spending
• Ad completions, abandonments, and display failures
• Purchase success and declines
• Detection of a save-data signature mismatch
• Crash logs, stack traces, and network state at the time of an error

5. Purchase information

• Product ID, currency, amount, and time of purchase

Payment instrument details such as card or account numbers are handled by the Apple App Store and Google Play; the company neither collects nor has access to them. Purchase receipts are validated on the user's device only, and receipt contents are not transmitted anywhere.

6. Information kept on the device and not transmitted

Game settings, language selection, tutorial state, and a local copy of progress are held in device storage (iOS UserDefaults / Android SharedPreferences) and are not, in themselves, transmitted externally.

7. Information not collected

Name, email address, phone number, postal address, date of birth, precise location (GPS), contacts, photos or videos, microphone or camera input, call logs, or the list of installed apps.

Article 2 — Purpose of Processing

Saving game progress and restoring it across devices	Art. 1(1), 1(2)
Improving game balance and planning content	Art. 1(4)
Diagnosing and fixing errors and performance problems	Art. 1(3), 1(4)
Serving advertisements and measuring their performance	Art. 1(1), 1(3)
Processing purchases, verifying purchase history, preventing fraudulent payment	Art. 1(5)

The company does not use this information to send marketing messages other than in-game advertising, and does not sell it to third parties.

Article 3 — Storage, Retention, and Cross-Border Transfer

1. Retention periods

Game progress (Art. 1(2)), device information (Art. 1(3))	Until deletion is requested
Gameplay events (Art. 1(4))	Automatically deleted after a maximum of 14 months under Firebase Analytics policy
Purchase records (Art. 1(5))	5 years, as required by law (records of payment and supply of goods under the Act on Consumer Protection in Electronic Commerce)
Locally stored information (Art. 1(6))	Deleted when the user uninstalls the app

2. Cross-border transfer

The information above may be processed and stored outside the Republic of Korea, including in the United States, where Google's and Apple's data centers are located.

Recipients	Google LLC, Apple Inc.
Countries	The United States and other regions operated by each provider
Data transferred	Art. 1(1)–1(5)
Purpose	The purposes in Article 2
Retention	As set out in paragraph 1 of this Article

Article 4 — Provision to Third Parties and Processing on the Company's Behalf

The company uses the following services. Each provider processes information only within the stated purpose.

No other provision to third parties is made, except in response to a lawful request from an investigative authority, in which case the procedures set out in applicable law are followed.

Article 5 — Children's Privacy

The Game is intended for users aged 16 or older and is not primarily directed at children. The Game contains randomized virtual items available for purchase, and its age rating is classified accordingly in some regions.

The company does not knowingly collect personal data from children under 14 (Republic of Korea), under 13 (United States), or under 16 (per EU member state rules) without verifiable parental or legal guardian consent. If such collection is discovered, the data will be promptly deleted.

A parent or legal guardian who believes their child's information has been collected may contact the company at the address in Article 10, and the data will be verified and deleted.

Article 6 — Consent and Withdrawal

1. Advertising

The Game serves rewarded video advertisements through Google AdMob. Rewarded ads play only when the user chooses to watch them. Google and its advertising partners may process the advertising identifier, IP address, device information, and ad interaction records in order to display advertisements, control frequency, and measure performance.

2. Consent to personalized advertising

Users in the European Economic Area, the United Kingdom, and other regions where consent is required are shown a consent request screen on first launch. Users may accept or decline personalized advertising; the Game remains fully playable if declined.

Consent can be changed at any time — open Settings → About → Privacy options in the Game to bring the consent form back and change or withdraw your earlier choice. After withdrawal, only non-personalized ads will be served on that device. (This button appears only in regions where consent is required.)

3. Controlling the advertising identifier

• iOS: turn off tracking for the Game under Settings → Privacy & Security → Tracking
• Android: reset or delete the advertising ID under Settings → Google → Ads

For details of Google's processing, see the Google Privacy Policy and the list of Google advertising technology providers.

Article 7 — User Rights

Users may request access to, correction of, deletion of, or restriction of processing of their information, and may withdraw consent. Requests are received at the contact address in Article 10.

1. How to request deletion

Because the Game has no account registration, an email address alone cannot identify a user. When requesting deletion, please include the User ID shown on the Settings → About screen in the Game. Tapping the ID on that screen copies it.

Upon receiving a request, the company deletes the game progress stored in the cloud, and purchase records whose statutory retention period has expired, within 10 days, and replies with the outcome.

Progress cannot be recovered once deleted. Launching the app again issues a new anonymous ID and starts from the beginning.

2. Uninstalling the app does not erase cloud data

Uninstalling removes the information held on the device (Art. 1(6)), but the information stored in the cloud (Art. 1(2), 1(3)) remains. For complete deletion, please use the procedure in paragraph 1 of this Article.

3. Certain rights regarding automatically collected data must be exercised through Google directly, via Google Account settings or Google Privacy controls.

Article 8 — Security Measures

• Encryption in transit (HTTPS/TLS) for all communication between the Game and external services
• Compliance with Google Firebase's security policies and encryption standards
• Access control and minimization of data processing
• Signature verification to detect tampering with data stored on the device

Article 9 — Amendments

This Privacy Policy may be amended to comply with legal or service changes. Amendments and their effective date will be announced through in-app notices or this page. Changes unfavourable to users will be announced 7 days before they take effect.

Article 10 — Contact

Privacy officer	Kim Tae-jin
Email	cs@eflabapps.com

Replies are provided within 10 days of receipt.

Last updated: August 4, 2026