Privacy Policy

Effective November 6, 2026 · Operator: BLUETAG

Optional rankings, friends and clans: When you choose to participate, other players can see your randomly generated game code and verified campaign and endless scores. We store relationships between codes to manage friend requests, blocks and clan membership. Only you see your friends list; your clan members see the clan roster. Your name, email and sign-in ID are not shown to players. Leaving social features removes your public ranking, game code, friend links and clan membership. We keep a private identifier for blocks until account deletion so leaving and rejoining cannot bypass them. Resetting game progress resets your score but keeps social membership.

Rollguard processes information for account access, saved progress, security and game balance. You may also play with a local device save without linking an account.

Information and purposes

Firebase account identifiers, linked providers, email, display name, profile information supplied by the provider and authentication state support sign-in, identity checks and deletion. Rollguard does not directly collect your Google password. Cloud saves contain currencies, cards, dice, upgrades, campaign progress and reward records. Local guest progress is kept separately and is not merged into an account.

Required server records cover verified battles, rewards, currency changes, summons, upgrades, season settlement and anti-abuse requests. They support security, duplicate-reward prevention and balance analysis. Analytics event bodies exclude names, email and authentication tokens, but their storage path is associated with an account for access control and deletion. Optional diagnostic sharing is off by default. If enabled, it adds language, platform, session duration and gameplay summaries. Disabling it removes unsent diagnostics; required server records continue.

Firebase Authentication, App Check, Play Integrity and web reCAPTCHA process authentication and integrity checks. Hosting and network providers may process IP addresses, request times, browser/device and connection data for operations and security. When the Android or iOS advertising SDK initializes or requests an ad, Google may process IP addresses, device/advertising identifiers, interactions and diagnostics. Consent and privacy choices are shown where required. Development builds use test ads. Real purchases remain blocked until store setup and server verification are ready. When purchases are enabled, store transaction details and purchase tokens are used for server validation, delivery and restoration; Rollguard does not receive card numbers directly. This policy will be updated when processing changes.

Support uses your email and the content you submit to resolve requests. Do not send passwords, verification codes or card numbers.

Providers and retention

We use Google Firebase/Google Cloud. The game server and game database use the Seoul region. Authentication, ads, integrity and support services may process data in global infrastructure. See the Google Privacy Policy and Firebase privacy information.

Account deletion removes authentication, cloud progress, per-account diagnostic/verified events, ad verification identifiers and account-linked transaction/receipt data; transient failures are retried. To prevent the same purchase being granted to another account after deletion, we retain its SHA-256 token hash, store type, creation/deletion timestamps and deletion/revocation flags indefinitely. That record no longer contains the account ID, original token, receipt or reward details. Deleted purchase rights and progress are not automatically transferred to a new account. Diagnostics expire after 30 days, verified analytics after 90 days and request-limit records after one day. Expiry removal is asynchronous. A limited deletion marker containing account identifier, deletion status and timestamps is retained to prevent stale requests from recreating deleted data; it contains no game inventory or profile. Provider access/security logs and support correspondence follow their operational retention policies and may not disappear immediately with account deletion. Local guest saves and settings can remain on the device and can be removed separately. Signing out or resetting game progress does not delete the account.

Your choices

You can disable optional sharing in settings, or sign out, reset progress and delete your account under Account and Save. Deletion may require reauthentication. Use our web account deletion page without reinstalling the app, or contact support@bluetag.co.kr for access, correction, deletion or concerns about a child's information. We use HTTPS, authenticated account access, app integrity checks and server validation. No system can guarantee protection against every attack. Material changes will be reflected here with appropriate notices or consent where needed.