HalfCoding ("we", "us") operates the Keycap Atelier app ("the app"). This policy explains what personal information we process, why, and the choices you have. Section 14 adds information for specific countries.

1. Information we process, why, and for how long

① Account (required)

• Information: email address, Google account identifier, nickname and profile picture URL (if Google provides them), a randomly generated user ID
• Purpose: identify your account and sign you in
• Kept until: you delete your account

② Activity (required)

• Information: points and their history (type, amount, balance and time of each check-in, first-game, set-bonus, ad-reward and purchase entry; for ad rewards, the transaction number Google sends us), owned parts, equipped loadout, keyboard name, check-in and mini-game records, the version and time of your consent to the terms, app language, push token, a randomly generated installation ID, invite records (the invite link codes you create; if you opened or installed the app from an invite link, that link's code, which Google Play passes to the app when you install, and the gift you received)
• Purpose: let you continue on another device with the same account; award points on our server and prevent duplicate or fraudulent rewards; give invite gifts and rewards; send notifications
• Kept until: you delete your account

③ Marketing choice (optional)

• Information: whether you opted in, and when you opted in or out
• Purpose: send promotional notifications; keep a record of your choice
• Kept until: you opt out or delete your account

④ Usage statistics (automatic, can be turned off)

• Information: a random app-instance ID; device model, OS version, app version, language and country; usage events (screen views, equipping and buying parts, starting a game, check-in, sign-in — internal part and game IDs only)
• Purpose: improve the app and find errors
• Kept for: 14 months from collection

⑤ Ads (automatic, collected directly by Google)

• Information: advertising ID, app set ID, IP address (used to estimate approximate location), device model, OS version and language, ad views, clicks and completed views, crash and performance data
• Purpose: show ads, including ads based on your interests (personalized ads); measure ad performance; prevent invalid clicks and fraud
• Kept for: as set out in Google's Privacy Policy (policies.google.com/privacy)
• Details and how to opt out: Section 9

⑥ Payment records (if you buy a point pack)

• Information: order number, purchase token, product, points, amount, purchase country, payment and refund times and reason codes, and the order details Google Play sends us
• Purpose: confirm payments and grant points, handle refunds and disputes, keep accounts
• Kept until: 5 years, as required by Korean e-commerce law, stored separately even after you delete your account, then destroyed
• Google handles card numbers and other payment details. We never receive them.

⑦ Preventing abuse (if your account is suspended)

• Information: a hash of your Google account identifier, and the suspension end date
• Purpose: prevent deleting and re-creating an account to avoid a suspension
• Kept until: the suspension ends, or 1 year after deletion for a permanent suspension

We do not collect your name, phone number, precise location or contacts. Usage statistics are collected only after you accept this policy, and you can turn them off any time in Settings > Send usage statistics.

2. What you type

Everything you type with the keyboard is used only on your device to compose text, and is never stored or sent anywhere. The keyboard runs in a separate process with no internet access. In password fields, sound and haptics are muted automatically.

3. Information kept only on your device

Keyboard settings (height, layout, sound, haptics, toolbar, notification and usage-statistics preferences) stay on your device and are removed when you uninstall the app.

4. Sharing

We do not sell your personal information for money, and we do not give it to third parties for their own purposes. The exception is advertising: Google collects the information in Section 1 ⑤ directly through its SDK in the app to show and measure ads, as described in Section 9. Otherwise, we disclose information only where the law requires it.

5. Service providers and international transfers

We use these providers to run the app:

• Supabase, Inc. — hosts our account and activity database (servers in Seoul, Republic of Korea)
• Google LLC — push notifications (Firebase Cloud Messaging), usage statistics (Google Analytics for Firebase), app configuration (Firebase Remote Config), confirming rewarded ad views (Google AdMob) and processing and confirming in-app payments (Google Play), on servers in the United States and other countries where Google operates data centers

Your information is therefore processed in the Republic of Korea and the United States. It is sent over encrypted connections. Turning off Settings > Send usage statistics stops usage statistics from being sent; the push token is needed to deliver notifications and is sent while you use the app, and it becomes invalid when you uninstall the app. When you choose to watch a rewarded ad, we send Google your random user ID so it can confirm the view to our server; it is not sent otherwise.

6. How we delete information

When you delete your account, your account and activity data are erased from our database without delay and cannot be recovered. Information the law requires us to keep, such as payment records, is stored separately and only for that period. Usage statistics are deleted automatically by Google after the retention period.

7. Your choices and rights

• Delete your account any time in Settings > Account > Delete account. If you have already uninstalled the app, follow halfcode.vercel.app/keycap/delete-account.
• Turn off usage statistics in Settings > Send usage statistics, and promotional notifications in Settings.
• Opt out of personalized ads as described in Section 9.
• To access, correct or get a copy of your information, or to object to or restrict its use, email halfcode36@gmail.com. We will verify your request and reply within 10 days.

8. Security

All traffic between the app and our servers is encrypted (HTTPS). Database rules let each user read and write only their own records. Administrative access is limited to the minimum number of people. What you type is never stored.

9. Device identifiers and personalized ads

The app does not use web cookies. For usage statistics, the Google Firebase SDK stores a random app-instance ID on your device. Turning off Settings > Send usage statistics stops this collection.

For ads, the Google Mobile Ads SDK reads your device's advertising ID and sends Google the information in Section 1 ⑤, which Google uses to show ads based on your interests. To opt out of personalized ads, open your device settings > Google > Ads (on some devices, Privacy > Ads) and delete your advertising ID; you will still see ads, but they will not be based on your interests. Where the app shows Settings > Ad privacy settings, you can also make your choice there. The keyboard shows no ads, and what you type is never used for ads.

10. Children

The app is not directed to children. You must be at least 14 years old to create an account. If we learn that we collected information from a younger child without the required consent, we delete it. For the same reason, we do not knowingly show personalized ads to children.

11. Promotional notifications

We send promotional notifications only if you opt in at sign-up or in Settings, and you can turn them off any time. The time of your choice is recorded in your account.

12. Contact

Privacy officer: Park Juhee (Representative, HalfCoding) · halfcode36@gmail.com

HalfCoding · Business registration no. 891-42-01439 · 602, 148 Hyeonam-ro, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea · Tel +82-10-8351-3635

13. Changes to this policy

We will announce changes in the app's Notices at least 7 days before they take effect, or 30 days before for significant changes.

14. Country-specific information

United States — We let Google collect your advertising ID and ad interactions through its SDK to show personalized ads (Section 9). Under some state privacy laws, such as California's, this may be considered "selling" or "sharing" personal information for targeted (cross-context behavioral) advertising. We do not sell personal information in any other way. You can opt out at any time in Settings > Ad privacy settings, or by deleting your advertising ID in your device settings. The app does not respond to browser Do Not Track signals. The app is not directed to children under 13, and we do not knowingly sell or share the personal information of consumers under 16.

Canada — You can ask to access or correct your information at the email above. You can opt out of personalized ads as described in Section 9. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Australia — Your information is disclosed to service providers in the Republic of Korea and the United States, as described in Section 5. You can ask to access or correct it at the email above, and you can complain to the Office of the Australian Information Commissioner (OAIC).

New Zealand — You have the right to access and correct your information under the Privacy Act 2020. You can complain to the Office of the Privacy Commissioner.