Turtle Game · Privacy policy

1. Scope and operator

It From Bit Co., Ltd. (주식회사 잇프롬빗, “we”) explains how information is handled in the Android version of Turtle Game (거북이 게임). The app identifier is com.itfrombit.turtlegame.

This policy covers the Android game and related customer support. It does not describe separate Steam features or the entirety of services operated by other companies. Advertising and purchase processing applies to versions in which those features are available.

2. Information and purposes

Game progress and settings: Progress, collected creatures, game currency, unclaimed rewards, settings and cached purchase entitlements are handled on your device to run and save the game. You can play without creating or signing into a game account. Local saves are separate from information transmitted by advertising and purchase SDKs.
Google Play Games leaderboards: In versions offering leaderboards, Google Play Games receives completed-game scores. The game uses player IDs, nicknames, scores and ranks to display leaderboards. Sign-in may be attempted automatically according to Google settings; ordinary play remains available without signing in.
Advertising: The Google AdMob SDK processes IP addresses (which may estimate approximate location), identifiers such as advertising ID and app set ID, interactions such as ad views and taps, and diagnostic and performance information. Purposes include advertising, measurement, analytics and fraud prevention. Processing can vary with consent, device settings and ad delivery mode.
Purchases and restoration: Google Play and Unity IAP process product and transaction identifiers, receipts, purchase history and status to support payment, purchase verification and restoration. Unity IAP may also process device and app identifiers, IP-derived approximate location, diagnostic, error and performance information for functionality and analytics. The game does not directly ask you to enter card or bank account numbers.
Customer support: Email support receives your sender address, message and any attachments you choose to provide. The website form sends your name, reply address, selected game and inquiry type, message, optional company, language and page URL. We use these to understand and respond to inquiries and resolve problems. Do not send unnecessary sensitive information, national ID numbers, passwords or card numbers.
Review account: When you sign in with a review account provided by us, the account name and password are sent to the authentication service. The issued session token is used to verify access. The connection IP address and a derived identifier are processed for login rate limiting and security. A review account is not required for ordinary play.

3. Services involved

SDKs may transmit information directly to service providers without passing through our servers. The absence of a company-operated gameplay analytics server does not mean that external SDKs do not process information.

Google AdMob · Google Play: These services support advertising, consent-related choices, payment and purchase records under Google’s applicable policies and service terms.
Google Play Games: In versions using Google Play Games, Google provides sign-in and leaderboards. Its SDK automatically collects analytics and diagnostics for stability and product improvement, and gamer identity (nickname and avatar) when a Play Games profile is created or updated. Data is transmitted using HTTPS and may be processed internationally under Google's policies.
Unity IAP: We use Unity IAP for store connections, purchase status and restoration, and purchase-related diagnostics and analytics. Its own data processing is separate from the standalone Unity Analytics feature.
FormSubmit · NAVER Mail: If you use the website inquiry form, FormSubmit forwards your inquiry to our company email, received through NAVER Mail. Direct email does not use the FormSubmit form. We access the inquiry to handle your request.
Cloudflare: We use Cloudflare Workers for review-account authentication and connection security. Authentication information is transmitted over HTTPS. Cloudflare may process connection information, including IP addresses, to provide and secure its services.

4. Advertising and privacy choices

You may choose to watch a rewarded ad through the reward options presented in the game. Where an ad-removal product is available, its description explains the benefits provided without ads.

A privacy message is displayed when Google requires consent or privacy choices. If an advertising privacy option is shown in the app settings, you can use it to reopen the applicable choices. Declining personalized advertising may not stop all processing needed for basic ad delivery, security or fraud prevention.

Android settings allow you to reset or delete your advertising ID. Menu names vary by device and Android version. Deleting this ID does not delete other identifiers, purchase records or support inquiries.

You can manage Google Play Games sign-in and profile visibility in Google settings. Other players' access to leaderboard data follows your profile visibility settings.

5. Retention and deletion

You can remove local game saves by clearing app storage or uninstalling the app, which may erase your progress. Operating system backups, Google Play purchase records and data held by external services are managed separately.

We delete support emails and attachments under our control without undue delay once the inquiry and necessary follow-up are resolved. Records that must be retained by law are kept separately for the required period and deleted when that period ends. This rule does not delete records independently held by external providers.

Retention and deletion by Google, Unity and other services depend on the information, service settings and provider policies. We cannot directly delete every record held by those providers.

FormSubmit states that it retains form submissions for 30 days. This archive is separate from our support mailbox and may remain after we delete the email. You can contact us directly by email instead of using the website form.

Where information must be retained by law, we will distinguish the legal basis, information and period concerned. Information under our control is deleted or destroyed so that it cannot be recovered when its retention purpose and obligations end.

Review progress is kept only in app memory, separately from normal saved progress, and is discarded on sign-out or app exit. Review sessions remain valid for up to two hours. The authentication service does not store plaintext passwords or log passwords, session tokens or request bodies. Cloudflare’s policies govern retention of information handled by its underlying services.

Deleting the app does not delete Google Play Games scores or profile data. You can delete this game's Play Games data or your profile through Google's official deletion process linked in section 3. Google's retention and deletion policies apply.

6. Access, correction and deletion requests

You can contact the privacy email below to request access, correction, deletion, restriction of processing or withdrawal of consent. Legal representatives may also make requests under applicable law. We will explain the scope of the request and any minimum information needed to verify it.

Include the game name and what you are requesting. For purchase issues, we may ask for an order reference when needed. Do not send passwords or identity document copies in your initial message.

We will explain the outcome for information we control, or why a request cannot be completed and the applicable process. Google account or Play purchase information and information held by Unity may require a separate provider process. A data deletion request is separate from purchase cancellation or a refund.

7. International processing

Google and Unity state that they process information through global infrastructure, including in the United States and other countries outside the Republic of Korea. Information described in section 2 may be transmitted over networks when the relevant advertising or purchase service operates. The purposes are those described in sections 2 and 3; retention and deletion follow section 5 and the applicable provider policies.

Website inquiries are transmitted through FormSubmit to our NAVER Mail inbox when you submit the form. FormSubmit’s public privacy policy does not specify every processing country. Direct email to our contact address bypasses FormSubmit. The linked Google, Unity, FormSubmit and NAVER policies explain their privacy contact channels and applicable processing practices.

You can ask our privacy officer about overseas processing or request restriction or withdrawal of consent. Use the available in-app advertising privacy choices or contact the relevant provider for information it controls. Restricting processing needed for a feature may prevent that advertising, purchase, restoration or inquiry feature from working. Declining personalized advertising does not necessarily stop all overseas processing.

Review authentication and connection information may be processed outside your country through Cloudflare’s global infrastructure.

8. Security and children

According to their official disclosures, the advertising and purchasing SDKs encrypt transmitted data using TLS or equivalent transport protection. We limit access to support information to what is needed for handling it and apply appropriate access controls.

The game is designed primarily for teenagers and adults. Content age ratings and the intended primary audience are different criteria. A parent or guardian may contact us about concerns involving a child’s information.

9. Contact and complaints

Privacy officer: SEO SEUNGWAN (서승완), It From Bit Co., Ltd. (주식회사 잇프롬빗). For privacy inquiries or requests, email fibonacci618@naver.com.

In Korea, privacy concerns can also be raised with the KISA Privacy Infringement Report Center (118 within Korea; privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (kopico.go.kr).

fibonacci618@naver.com

10. Changes

This policy takes effect on 2026-09-24. We will update this page when the game’s features, service providers or information-handling practices change. Important changes will be announced on this page and, where necessary, within the app.