Privacy Policy
BelongwithLabs ("we", "us") respects the privacy of everyone who plays 냥줍멍팔: 던전상회 (the "Game") and complies with applicable laws, including the Personal Information Protection Act of the Republic of Korea, the EU General Data Protection Regulation (GDPR), the UK GDPR, and US state privacy laws.
This policy explains what information the Game collects and why, how long we keep it, and how you can manage or delete it.
Effective date: 2026-11-14
Last updated: 2026-11-14
1. Who is responsible
BelongwithLabs is the controller of the personal information described in this policy.
- Company: BelongwithLabs, Sangnok-gu, Ansan-si, Gyeonggi-do, Republic of Korea
- Privacy contact: [email protected]
2. What we collect and why
| Information | When | Purpose |
|---|---|---|
| Game account ID (random number), device identifier | Created automatically on the server at first launch | Saving and loading progress, preventing abuse |
| Nickname, shop name, game records (progress, level, currencies, equipment, heroes, skills, guild activity) | While you play | Providing the Game, handling support requests |
| Market records (orders and listings you post, items, quantities, prices and times of completed trades, the other account in a trade) | When you use the Market | Processing trades, settling payments in game gold, showing trade history, preventing fraudulent trades |
| A one-way hash of your IP address | When you place a Market order | Detecting one person trading between multiple accounts |
| Google or Apple account identifier and email address | Only if you choose to link an account | Restoring the same game account on a new device or after reinstalling. The email is shown in the Game only partly masked |
| Purchase records (store order number, product, amount, currency, time, refund status) | When you buy paid items | Delivering items, handling refunds, legal retention |
| Guild chat messages and the nickname shown with them | When you use guild chat | Showing messages to members of the same guild, moderation |
| Reports (reported message, nicknames, reason) and enforcement records | When a report is made or a rule violation is handled | Handling reports, enforcing the Terms, preventing repeat violations |
| Push notification token, app version, game language, device time zone | Only if you allow notifications | Sending sale notifications and announcements, delaying notifications at night |
| Game language, device time zone, OS, app version | When you connect to the game server | Showing the Game in the right language and time, statistics, troubleshooting |
| Analytics data (app launches, tutorial progress, level, floors cleared, purchase amount and currency) and a random app identifier (Firebase app instance ID) | While you play | Improving the service, measuring advertising effectiveness |
| Advertising ID, IP address, device information, ad interactions | When you watch a rewarded ad | Showing ads and preventing ad fraud (Google AdMob) |
| Support messages, attached screenshots, email address, device information | When you contact us | Answering your request |
We do not store your raw IP address in your game account.
We do not collect your real name, phone number, postal address, or payment card details. Payments are processed by Google Play and the App Store.
We do not use precise location, contacts, your photo library (other than screenshots you attach yourself), the microphone, or the camera.
3. Legal bases (EEA, UK, Switzerland)
If you are in the European Economic Area (EEA), the UK, or Switzerland, we process your information on these bases.
| Purpose | Legal basis |
|---|---|
| Creating your account, saving and loading progress, account linking, Market trades and settlement, delivering purchases, guilds and chat, answering support requests | Performance of our contract with you (the Terms of Service) |
| Preventing abuse and fraud, preventing fraudulent trades, security, moderating chat and names, fixing errors | Our legitimate interest in running a fair and safe game and market. You can object at any time (Section 9) |
| Analytics, measuring advertising, personalized ads | Your consent. Where required, we ask through a consent dialog before collecting, and you can withdraw at any time |
| Push notifications, screenshots you attach | Your consent (granting the device permission or sending it yourself) |
| Keeping purchase records | Legal obligation (tax, e-commerce and consumer protection laws) |
Abuse detection: the game server automatically checks currency ledgers and trade records for currencies or trades that play and purchases cannot explain. Automatic checks only flag suspicious activity. Any restriction is decided by a person after review.
If you believe you were restricted by mistake, contact [email protected]. A person will review the decision and consider your explanation.
4. Information visible to other players
In the Market, guilds, and rankings, your nickname or shop name, character appearance, level, and the items and prices you list may be visible to other players. Guild chat messages are visible to members of the same guild.
Your account ID, device information, email address, and payment information are never shown to other players.
Operators may hide or change inappropriate nicknames and shop names.
5. Chat, reports and moderation
Guild chat messages are stored on the game server so that members of the same guild can read them. When a guild is disbanded its messages are deleted, and when you delete your account the messages you wrote are deleted.
Messages from players you block are hidden, and messages containing filtered words are masked.
When you report a message, we store the reported message, the nicknames of both players, and the reason so that an operator can review it.
6. Analytics, ads and your choices
We use Google Firebase Analytics to improve the service and measure advertising effectiveness.
We do not send your nickname, account ID, email address, or payment information.
We use Google AdMob for rewarded ads that you choose to watch. AdMob sends the advertising ID, IP address, device information, and ad interactions to Google.
On iOS, we do not ask for App Tracking Transparency permission and do not use the advertising identifier (IDFA).
Your choices:
- In the EEA, the UK, and Switzerland, we ask for consent through a consent dialog (Google User Messaging Platform) before analytics and personalized ads start. In some US states, a notice lets you opt out of the sale and sharing of personal information. You can change your choice in the game settings at any time.
- You can play the Game without watching ads.
- You can reset or delete the Android advertising ID in your device settings.
- You can turn off push notifications in your device settings or in the game settings.
7. Service providers and international transfers
| Recipient | Service | Location |
|---|---|---|
| Amazon Web Services, Inc. (Amazon Lightsail) | Running the game server (game accounts and records, Market records, purchase records, chat, support messages, reports) | Japan (Tokyo) |
| Google LLC (Firebase, AdMob, Gmail) | Analytics, sending push notifications, rewarded ads, receiving support email | United States and other countries |
| Cloudflare, Inc. | Protecting server connections, serving web pages, forwarding support email | United States and other countries |
| Telegram | Operator chat that forwards support requests, reports, and server status to operators | Multiple countries (per Telegram's policy) |
| Google LLC (Google Cloud) | Running a test server for app store review (game records of review accounts only) | United States |
| Google LLC (Google Play), Apple Inc. (App Store) | Payments and receipt verification, Google and Apple sign-in verification | Per each company's policy |
We are located in the Republic of Korea and the game server is in Japan. The European Commission and the UK have recognized both countries as providing an adequate level of data protection.
When personal information is transferred to the United States or other countries, we rely on the recipient's certification under the EU-US Data Privacy Framework (including the UK Extension and the Swiss-US framework) or on the Standard Contractual Clauses approved by the European Commission (with the UK Addendum). You can request details of these safeguards at [email protected].
Information is transferred over the network while the recipient's service is used, and is kept for the periods in Section 8. If you do not want your information transferred abroad, you can avoid the related features (account linking, analytics, notifications, support) or delete your account, but the game server cannot be used without a transfer.
We do not sell personal information for money or hand it to others, except when required by law.
Information is sent over encrypted connections (HTTPS).
8. Retention and deletion
- Game account and records: until you delete your account. When you delete it, we delete them immediately, except for the records described under "Records kept after deletion" below.
- Another game account not chosen during account linking: kept for 30 days in case you ask to switch back, then deleted.
- Purchase records: 5 years, as required by law.
- Support messages: 1 year after we finish answering, or deleted together with your account.
- Guild chat messages: until the guild is disbanded or you delete your account.
- Reports and enforcement records: as long as needed to handle reports and prevent repeat violations. For this purpose only, they may remain after account deletion.
- Push notification token: deleted as soon as you turn off notifications or delete your account.
- Analytics data: up to 14 months.
Records kept after deletion: a completed Market trade is also the other player's record, and the in-game currency ledger is needed to check that all currencies add up. So when you delete your account, we immediately delete your linking information, device identifier, nickname, shop name, email address, push token, and IP hash, and keep trade records, currency ledgers, and progress records only in a form that cannot be connected to you.
Information whose retention period has ended or whose purpose has been fulfilled is deleted in a way that cannot be recovered.
You can delete your account at any time from the game settings: open "Account link and sale alerts" and tap "Delete account" at the bottom. If you cannot open the Game, see Account deletion request.
9. Your rights
You can ask us at any time to:
- Access your personal information and get a copy
- Correct inaccurate information
- Delete your information
- Restrict or stop processing
- Receive the information you gave us in a portable format
- Object to processing based on our legitimate interests
- Withdraw consent (this does not affect processing before withdrawal)
Send your request to [email protected]. After verifying your identity, we will reply within one month (45 days for requests under US state laws). If a request is complex, we may extend this period as far as the law allows and will tell you why.
We will not treat you unfavorably for exercising your rights.
10. Additional information for US residents
This section applies to residents of California and other US states with consumer privacy laws.
- Categories collected in the last 12 months: identifiers (account ID, device and advertising identifiers, IP address, email address of players who link an account), commercial information (purchase records, Market trade records), internet and electronic network activity (game usage data), and content you send (chat messages, support messages, screenshots). We do not collect sensitive personal information to infer characteristics about you.
- Sources: you, your device, app stores, and Google and Apple sign-in.
- Purposes and recipients: as described in Sections 2, 6, and 7. Service providers receive information only for these business purposes.
- Sale and sharing: we do not sell personal information for money. Google AdMob may use the advertising ID and IP address to show personalized ads, which some state laws may treat as a "sale", "sharing", or "targeted advertising". If you opt out as described in Section 6, we send Google a restricted data processing signal. We do not knowingly sell or share the personal information of consumers under 16.
- Rights: depending on your state, you may have the right to know, access, correct, delete, opt out of sale, sharing, and targeted advertising, and limit the use of sensitive information (which we do not use). You may make a request through an authorized agent. If we deny your request, you can appeal by replying to our answer, and if the appeal is denied you can contact your state attorney general.
- Retention: as described in Section 8.
11. Children
The Game is not directed at children.
We do not knowingly collect personal information from children under 13, or under the age at which they can consent to data processing in their country (14 in the Republic of Korea, 13 in the UK, and 13 to 16 depending on the country in the EEA).
If we learn that we have collected such information, we delete it promptly. Parents or guardians can contact us at [email protected].
12. Security
All connections to our servers are encrypted (HTTPS, TLS).
Only authorized operators can access servers and data. Customer support uses tools that mask personal information, and we keep personal information out of operational logs as much as possible.
13. Privacy officer, contact and remedies
- Privacy officer: KWAK KEUNCHEOL
- Email: [email protected]
- Company: BelongwithLabs, Sangnok-gu, Ansan-si, Gyeonggi-do, Republic of Korea
If you think there is a problem with how we handle personal information, please tell us first. You can also contact the following authorities.
- Republic of Korea: Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), Supreme Prosecutors' Office (spo.go.kr, 1301), Korean National Police Agency (ecrm.police.go.kr, 182)
- Japan: Personal Information Protection Commission (ppc.go.jp)
- EEA: the supervisory authority of the country where you live, work, or where the issue occurred
- UK: Information Commissioner's Office (ico.org.uk)
- Switzerland: Federal Data Protection and Information Commissioner (edoeb.admin.ch)
14. Changes to this policy
If we change this policy, we will announce it in the Game and on this page 7 days before it takes effect.
Changes that are unfavorable to you will be announced 30 days in advance.