Palcon (the "Operator") processes the personal information of users of the mobile game Tank Defense (the "Game") as described below. This policy applies to both the iOS and Android versions.
The Operator processes only the minimum information necessary to provide the Game service, and does not collect users' real names, addresses, phone numbers or precise location information. A guest account is created automatically without registration, and the Operator's servers do not store email addresses either (for contact details that you enter yourself in a bug report, see §2-1).
| Item | When | Notes |
|---|---|---|
| Nickname and profile (portrait and frame) | When setting up your profile | Displayed publicly on the leaderboard and to versus opponents |
| Bug report content and contact details (optional) | Settings ▸ Support ▸ Report Bug | You may leave the contact field blank |
| Screen images attached to a report (up to 3) | When you turn on attachment on the same screen | Stored exactly as the screen you sent |
| Item | Description |
|---|---|
| Account identifier | A random string issued by the Operator's server. It is not linked to your real name or email |
| Device authentication token | Generated randomly on your device; the server stores only an irreversible hash |
| Game progress information | Currency balances, stage and wave progress, owned units, parts and relics, upgrade levels, combat power, mail |
| Gameplay activity records | Screen navigation, battle start, end and abort points, stage retries, currency earned and spent, draw results, growth stages, Supplies views, product views, purchase attempts and results, ad viewing results, responses to notification permission requests, tutorial steps, session start and end, first app launch |
| Performance and error records | Loading times, frame-rate samples, network failures, the occurrence of abnormal terminations (crashes) |
| Device and app information | App version, operating system type and version, device model, language setting |
| Country | Determined from your device's region setting. Used for the country breakdown on the leaderboard |
| Access logs | For security and incident response, the web server records the access time, request path and IP address. These are not linked to your game account and are deleted after the period in §4. Rate limiting of repeated requests uses only an irreversibly transformed value of the IP address |
| Item | When |
|---|---|
| Apple or Google account identifier | When you choose to link your account (in case you change devices). Only an irreversible hash is stored, and we do not receive your email address or name |
| Payment records | When you make an in-app purchase (§2-6) |
The Game shows Google AdMob ads. An interstitial ad is shown when you return to the lobby after a match ends, and rewarded ads are shown only if you choose to watch them for Energy recharge, Supplies refresh, Relic Dig and doubling Outpost hunt rewards. To serve ads, Google may process device information (advertising identifier, IP address, device and app information, ad view and click history, etc.). The Operator neither receives nor stores that information, and ad processing is governed by Google's policies: Google Privacy Policy · How Google uses information from sites or apps that use its services.
Ads are requested only up to a rating suitable for ages 13 and over.
To find out whether users installed the Game after seeing an ad, and whether they kept playing after installing, the Operator uses the measurement SDK of Singular (Singular Labs, Inc.). When you launch the app, the following information is sent to Singular.
| Item | Description |
|---|---|
| Device identifiers | Advertising identifier (on iOS only if you have allowed tracking; on Android according to the device's advertising ID setting), iOS Identifier for Vendors (IDFV), a device identifier assigned by Singular |
| Device and network information | Information the SDK processes in the course of communication, such as device model, operating system, app version, language and IP address |
| Install and usage events | App install and launch, end of first match, reaching 5 minutes of cumulative battle time, tutorial completion, first clear of a stage |
| Purchase events | Product identifier, amount and currency of actual payments confirmed by the store |
We do not send your game account identifier, nickname, email, Apple/Google account information or payment method information. Singular passes this information to the advertising platforms the Operator has connected for advertising performance measurement (Meta Platforms, Google, AppLovin). On iOS, Google's on-device measurement feature also runs as part of the Singular integration. Singular's processing is governed by the Singular Privacy Policy.
You can refuse the sending of the advertising identifier through the iOS tracking setting or the Android advertising ID setting described in §2-4.
Payments are processed by Apple (App Store) and Google (Google Play), and the Operator neither receives nor stores your payment method information. To ensure that the same purchase is not delivered twice and that refunded purchases do not continue to be delivered, the Operator records the transaction information reported by the store (order and transaction number, product, amount and currency, purchase time, country of purchase, refund and cancellation status) together with your account identifier. The account identifier is also passed to the store to distinguish the purchasing account. Matters relating to purchases, refunds and receipts are governed by each store's policies: Apple Privacy Policy · Google Privacy Policy. You can restore purchases in the Game under Settings ▸ Support ▸ Restore Purchases.
The iOS version supports Apple Game Center leaderboards and achievements. Game Center information is processed by Apple and is not sent to the Operator's servers. Base timer notifications are notifications scheduled only on your device; no push server or notification token is used.
For users in the European Economic Area and the United Kingdom, the items in parentheses are the legal bases for processing personal information. Where processing is based on consent, you may withdraw your consent at any time; this does not affect processing carried out before the withdrawal.
| Data | Retention period |
|---|---|
| Account, game progress, nickname | Destroyed 7 days after a deletion request (§7-1). The request can be cancelled within those 7 days |
| Gameplay activity records (including personal identifiers) | 30 days from collection |
| Web server access logs (including IP addresses) | 30 days from recording |
| Inquiry and report records and attached images | 1 year from receipt, or destroyed together with the account upon account deletion |
| Aggregated statistics | Processed so that individuals cannot be identified and kept without time limit |
| Payment records | For the periods required by applicable law (under the Act on the Consumer Protection in Electronic Commerce: records of payment and supply of goods 5 years; records of consumer complaints and dispute resolution 3 years) |
| Finalized past leaderboard records | Retained after the nickname is replaced with an anonymous label (so that other users' rankings do not change) |
| Information received by Singular and advertising platforms | According to each company's policies and its contract with the Operator |
Method of destruction: Electronic files are deleted in a way that cannot be recovered, or irreversibly replaced with values that cannot identify an individual.
The Operator does not sell users' personal information. However, for the advertising performance measurement described in §2-5, device identifiers and install, usage and purchase events are shared with advertising platforms via Singular. You can limit this sharing through the settings in §2-4 and §2-5.
| Recipient | What | Why |
|---|---|---|
| Apple Inc. | Payment transaction information, account link verification, Game Center | Payments, sign-in and leaderboards are performed by Apple |
| Google LLC | Payment transaction information, account link verification, ad request information, delivery of payment notifications | Payments, sign-in and ads (AdMob) are performed by Google |
| Singular Labs, Inc. | The items in §2-5 | Advertising performance measurement |
| Meta Platforms, Google, AppLovin | The items in §2-5, via Singular | Advertising performance measurement and ad optimization |
| Unity Technologies | Anonymous diagnostic information such as device hardware specifications | Operation of the game engine. Unity Privacy Policy |
On the leaderboard and in versus play, your nickname, profile, records and combat power are visible to other users. This is inherent to the leaderboard and versus services; if you do not want them shown, you can change your nickname or stop participating in rankings and versus play.
The Game's servers and backups are located in the Republic of Korea. If you use the Game outside the Republic of Korea, your information is transmitted to and processed on servers in the Republic of Korea. Backups are encrypted and kept on a separate storage device located in the Republic of Korea.
The following companies may process information outside the Republic of Korea (mainly in the United States) in accordance with their own policies.
| Recipient | Country | When and how | Items | Purpose |
|---|---|---|---|---|
| Singular Labs, Inc. | United States | Transmitted over the network when the app is launched and when events occur | The items in §2-5 | Advertising performance measurement |
| Meta Platforms, Google, AppLovin | United States and others | Passed on via Singular | The items in §2-5 | Advertising performance measurement |
| Google LLC | United States and others | Transmitted over the network when ads are requested and when paying or signing in | The items in §2-4 and §2-6 | Advertising, payments, sign-in |
| Apple Inc. | United States and others | Transmitted over the network when paying, signing in or using Game Center | The items in §2-6 and §2-7 | Payments, sign-in, leaderboards |
| Unity Technologies | United States | Transmitted over the network when the app is launched | Anonymous diagnostic information | Operation of the game engine |
Retention periods follow each company's policies. If you do not want your information transferred abroad, you can refuse the sending of the advertising identifier through the tracking and advertising ID settings in §2-4; however, if you refuse processing that is necessary for payments and ad serving, you will not be able to use those features. When transferring information of users in the European Economic Area and the United Kingdom, we follow the safeguards required by the applicable laws (such as Standard Contractual Clauses).
You may at any time request: access · correction · deletion · suspension of processing. Users in the European Economic Area and the United Kingdom may additionally request restriction of processing, objection to processing, data portability and withdrawal of consent, and may lodge a complaint with the data protection supervisory authority of their country of residence. Users in certain U.S. states have the right to know the categories of personal information processed, the right to request deletion, and the right to opt out of sharing for personalized advertising. You can opt out of sharing through the tracking and advertising ID settings in §2-4 or via the contact in §10. We will not discriminate against you for exercising your rights.
Automatically created guest accounts can also be deleted. You may use whichever of the two methods is convenient.
Deletion permanently removes your game progress, currencies, owned items, nickname and linked account information, and they cannot be recovered. Products you have purchased are also removed.
You can cancel within 7 days of the request. During that period you can use your account as usual, and you can check in the Game when it will be deleted. After 7 days it is deleted automatically, and it cannot be undone after that.
Payment records that must be retained by law remain for the periods in §4 with their link to the account severed.
The Game is not directed at children under 14. If you are younger than the age at which the laws of your country of residence require parental consent for the processing of personal information (for example, 16 in some countries of the European Economic Area), please use the Game with your parent's or guardian's consent. If we learn that information belongs to a child under 14, we will destroy that information without delay. The store age ratings are 12+ on the App Store and 13+ on Google Play.
Requests under §7, such as access, correction, deletion or suspension of processing, are received at the contact above; we will act on them without delay and notify you of the outcome.
You may report or seek advice on personal information infringement from the agencies below.
Users outside the Republic of Korea may also file a report with the data protection supervisory authority of their country of residence.
If this policy changes, we will announce it on the Game's store page and on this page. Changes unfavorable to users will be announced at least 30 days in advance.
Effective date: October 9, 2026
This policy is a translation of the Korean original. In case of any discrepancy, the Korean version prevails.