Effective date:
The privacy policy for on-device storage in 회귀버튼 and the optional online records planned for version 0.50.4. The online records provisions apply once the feature becomes available.
01Operator and contact
Individual developer 박재영 develops 회귀버튼 under the Detailoop Games brand. Privacy questions and requests to access, correct, delete or stop processing information can be sent to happyone123@naver.com. Identity may be checked to the extent needed to handle a request.
This notice covers on-device storage and online records for the game. The website privacy notice covers website visits.
02On-device information and optional connection
Game names, settings, progress, choices, and images and videos for sharing are processed on the device. Clearing app data or uninstalling the app may remove local records. Files sent to other apps are managed separately through those services.
The app sends a request to check whether online records are available. This request carries no game records, and the hosting service may process IP addresses and request information. Google sign-in alone does not send game records. When you review the nickname and public fields and consent to register a completed run in the Hall of Fame, the service stores monthly records and the final result, then displays the final result in the ranking. Online records cannot restore complete playable game progress.
03Online data and purposes
For Google sign-in or identity verification before deletion, the app sends a Google-issued ID token to the server over HTTPS. It may contain a Google account identifier, email address, name and profile picture URL. The server processes the token to verify it and does not retain the raw token, Google email, name or picture URL in the operational database. Account linking stores a transformed Google account identifier, service account ID, nickname, creation time, and session hashes and expiration times. We do not receive your Google password.
For the online age self-declaration, the account stores the applicable rule version (2026-11-12) and server confirmation time. These are updated during normal sign-in and removed with the account. This check does not collect a date of birth, identity document or real name.
To retain records and provide rankings, the service stores run IDs, game-rule and art versions, starting conditions, monthly in-game dates, cash, net worth, income and spending, final age, character, career, housing, badges, and creation and update times. Starting conditions include in-game age, gender, assets, housing, region, job, values, appearance mode, military status, romance settings and university choices. The feature does not request real bank accounts or real financial assets.
Security and request limits use short-lived authentication challenges, request purposes, the age-rule version and time attached to normal sign-in, transformed connection IP addresses and per-account request counts. Deletion-only authentication stores a separate token hash, account ID, issue time and expiration time. Reports store the target, reporting account ID, reason, submission time and resolution time.
04Public display and providers
Monthly records and personal final results are available to the account that stored them. Other ranking participants receive your nickname, game character, final net worth and rank. Withdrawing publication removes that result from the ranking. Stored records remain private until you delete the run or account or the retention limits remove the records. The ranking displays each account’s best published result.
Google authenticates the Google account you choose. 회귀버튼 uses the result to link your game account or verify a request to delete an existing account. Google’s own services are governed by the Google Privacy Policy.
Cloudflare, Inc. provides Workers and D1 for availability checks, sign-in, online record storage and retrieval, rankings, reports and deletion requests. When a feature makes a request, the connection IP address and data for that request are sent over HTTPS. Workers run in a Cloudflare data center near where the request is received, so the processing location varies with the connection route. See Cloudflare’s network directory below for data center countries and cities.
A query to the live D1 primary database identified Singapore (SIN, Asia-Pacific), and read replication is disabled. The storage location is not restricted to one country. Developer request logging is disabled on the live app server. The retention period of Cloudflare’s own security records and the location of D1 recovery data are still being verified. Cloudflare questions can be sent to privacyquestions@cloudflare.com.
We receive enquiries through Naver Mail. You can continue playing on your device by choosing to skip Google sign-in and online record registration. Availability checks and email enquiries are handled as described in this notice.
05Retention and expiration
Monthly details cover the latest 3 registered runs, with up to 252 months per run. Final results include the latest 20, the personal best and the account’s best public result eligible for the overall ranking. That public best remains even outside the top 100. Count-based cleanup runs when new records are stored. Run identifiers and starting conditions remain until the individual run or account is deleted, even after monthly details are removed.
Authentication challenges are valid for 5 minutes, normal sign-in sessions for up to 30 days, and deletion-only tokens for 5 minutes. Temporary request-limit entries have a default validity of 2 minutes. Expired entries are removed by daily cleanup; expiry does not immediately remove the stored row. Account deletion also removes normal sessions and deletion-only tokens. Accounts and runs are not currently deleted automatically solely because of inactivity.
Reports are retained while being handled and deleted within 30 days after the operator marks them resolved. Daily cleanup targets reports resolved at least 29 days earlier. Repeating the completion action does not extend the original resolution time.
06Deletion and safeguards
Deleting an online account removes its account-linking information, sessions, runs, monthly records, final and public results, and associated reports from the operational database. After deleting an individual run, account and run IDs used to prevent re-upload remain valid for 31 days and are removed by scheduled cleanup. Account deletion also removes these re-upload markers, but temporary request-limit entries may remain until the next cleanup.
If you have linked an online account, verify your Google account in the app’s record settings to request deletion. Deletion requests do not require an age declaration. Deletion-only authentication is valid for 5 minutes and you confirm deletion before the request is processed.
If you cannot sign in or have uninstalled the app, request deletion through happyone123@naver.com. Account ownership is checked using only information needed for the request; an email address alone is not authority to delete someone else’s records. Do not send Google passwords, verification codes, complete tokens or identity documents. Your Google account, on-device saves and external posts are separate from this online account deletion.
Communications use HTTPS, and authentication and access checks separate personal records. The implementation encrypts sessions stored on the device. Data deleted from the live database may remain in Cloudflare D1 recovery history for up to 7 days under the Workers Free plan.
You can also request deletion by email through the account deletion page linked below.
07Age eligibility for online features
Online account connection, record storage and rankings are intended for players aged 14 or older. Before Google authentication, players select whether they meet the threshold. Selecting that they do not qualify or cancelling prevents authentication and record connection from starting. A Google account, successful sign-in or this self-declaration is not treated as independent proof of age.
Players are not asked to enter or email a date of birth or identity document for this check. Only the rule version and server confirmation time are stored on the account. Normal gameplay and requests to delete an existing online account are not blocked by the age self-declaration. Providing an English website does not establish compliance with online-service requirements in every country.
08Contact information and changes
Email addresses, messages and attachments voluntarily sent to happyone123@naver.com are processed to answer questions and resolve issues. The agreed rule is to keep ordinary enquiries while being handled, then for follow-up for up to 90 days after resolution before deletion. Received and sent messages, attachments and separately downloaded copies will be cleaned up together. Do not send passwords or verification codes.
If an ongoing dispute or a legal retention duty requires separate preservation, the affected data, grounds and period will be defined separately and the data deleted when that reason ends. No blanket extended retention is assigned to information without such a reason.
If our processing practices change, we will post the effective date and changes on this page.
