Soul Dungeon
Privacy Policy
Soul Dungeon (the "App") is an action roguelike in which you play the soul of a soldier trapped in a five-floor dungeon. This policy applies to the App and to its information and support website (souldungeon.sanglimsoft.com), both provided by SangLimSoft ("we", "us"). We comply with the Personal Information Protection Act of the Republic of Korea and other applicable laws.
- There is no sign-up or login, and the App does not ask for your name, email address, phone number or location.
- Your game progress and settings are stored only on your device (the usage records we receive include part of your progress — section 3).
- To improve the game, the App can send gameplay records and error information to a collection server we operate in the United States. You choose whether to send them with the "App usage statistics and error information" switch on the first launch screen, and nothing is sent before you choose.
- The switch starts off in the European Economic Area (EEA), the United Kingdom and Switzerland, and on everywhere else. You can change it at any time in Settings > Privacy > "Send Analytics Data", and the game works the same either way.
- There are no ads, no in-app purchases and no advertising identifiers.
1. Purposes and legal bases
- Gameplay analysis: to see whether players keep playing and whether floors and bosses are fairly difficult, and to improve the game
- Error analysis: to find and fix the causes of errors and crashes
- Support: to answer questions sent through the support page or by email and to handle requests, including deletion requests
We process information on the following bases. Information processed with consent is listed separately from information processed without consent.
| Information | Legal basis |
|---|---|
| Section 3 information — outside the EEA, the UK and Switzerland (including Korea) | Article 15(1)(6) of the Korean Personal Information Protection Act — our legitimate interest in fixing errors and improving the game. This information is not processed on the basis of consent. You can stop sending it at any time using the methods in section 2 (suspension of processing), with no effect on your use of the game. We keep the processing narrow so that this interest does not override your rights: we do not collect names or contact details, we do not use the information for advertising, sell it or combine it with other information, and the off switch is on the first screen and in Settings. |
| Section 3 information — EEA, UK and Switzerland | Your consent (Article 6(1)(a) GDPR and UK GDPR, including consent to storing and reading information on your device). It is sent only if you turn it on yourself on the first launch screen or in Settings. You can withdraw consent at any time; this does not affect the lawfulness of processing before the withdrawal. |
| Section 9 support information | Article 15(1)(4) of the Korean Personal Information Protection Act — necessary to handle the request you made (Article 6(1)(b) GDPR for users in the EEA, the UK and Switzerland) |
| Section 8 website technical information | Article 15(1)(6) of the Korean Personal Information Protection Act — our legitimate interest in providing and protecting the website (Article 6(1)(f) GDPR) |
2. How you choose — first launch screen and Settings
The App does not ask your age. On first launch, the "Notice" screen has a "App usage statistics and error information" switch that decides whether the section 3 information is sent. Nothing in section 3 is sent before you tap [Start].
- Starting value: off in the EEA (the 27 EU member states plus Iceland, Liechtenstein and Norway), the United Kingdom and Switzerland; on everywhere else. The region is judged from your App Store country and your device's region setting. If either one is in those regions, or neither can be determined, the switch starts off. Location data is not used.
- In those regions, if you have not turned it on yourself, nothing is sent after you update the App — even if you used a version released before this screen existed.
- After you start, you can change it at any time in Settings > Privacy > "Send Analytics Data". The game works the same when it is off.
- "Reset Local Data" also clears this setting, so it returns to the regional starting value above. The first launch screen is not shown again, so outside those regions, turn it off again in Settings if you do not want sending to resume after a reset.
When you turn off "Send Analytics Data", gameplay records stop being sent immediately, and from the next launch the sending feature is not started at all. During the launch in which you turned it off, records about the app's state (opened, moved to the background) and errors may still be sent until the App is fully closed.
Earlier versions of the App without this screen send the section 3 information from first launch; it can be turned off in Settings in those versions too. Users in the regions above will not send anything after updating until they turn it on, and can ask us to delete records sent by an earlier version as described in section 10.
3. Information sent (when sending is on — starting value in section 2)
To improve the game and fix errors, the following is sent to our collection server while you are connected to the internet.
3-1. Gameplay records
- App install, launch, background and update events, and a value that groups one period of use (session)
- Identifiers of the screens you visit (lobby, loading, dungeon, result, permanent upgrades, achievements, settings, credits)
- Records of key actions in the game — starting or resuming a run (with, at the start, the number of runs previously finished on this device, the previous best floor reached, the total of permanent upgrade levels and the automatic difficulty adjustment steps for enemies and bosses); tutorial start, steps reached and completion; floor cleared (the floor, time taken on that floor and its boss fight, remaining health percentage and character level); clearing floor 1 for the first time; entering a boss room; the first activation of each synergy per run; run end (floor reached; clear, death or give-up; soul stones earned and kept; play time; character level; kills; weapon swaps; times hit and how many of those while moving; damage taken; health percentage at the end and at its lowest; dashes and attacks avoided by dashing; share of time spent standing still; pauses; potions used; how many level-up picks were new skills, rank-ups or automatic picks; shop purchases; if you died, the type of enemy that hit you last; and the run's weapons and skills); the button chosen on the result screen (retry or lobby); permanent upgrade purchases (item and level); claiming achievement and daily quest rewards and unlocking achievements; the name of a changed setting (for example volume, frame rate, display language, sending analytics data, replaying the tutorial, reset local data); and the fact and method of recovery when saved data could not be loaded
- That the first launch screen was shown and [Start] was tapped, the screen's version and number of items, and the time taken to start — sent only if usage statistics are on
Every record and error report carries the identifier of the screen being viewed at the time. Inside the dungeon they also carry the run identifier (the number used to generate that run's dungeon), the current floor, room type and boss phase, the run-start values above and the tutorial step.
3-2. Error information
- Error type and message, the program execution path leading to the error, and whether the error ended the App
- Technical information about errors and abnormal terminations (including freezes and forced closes)
Error messages may include part of the values the App was processing when the error occurred.
3-3. Environment information
- Device manufacturer, model and type; operating system name and version; App name, version and build number
- Language and region settings and time zone, screen size, network type (Wi-Fi or cellular)
- Whether the App is a test build or running in an emulator, and the version of the collection feature
Some items may differ by device and operating system.
3-4. Anonymous identifier
A random value created by the App to group the records above by installation. It is not linked to information that can identify you, such as a name or contact details, and because the App has no login it is not tied to any personal account. Because records are linked through this value, we treat section 3 information as personal information and handle it under this policy. "Reset Local Data" in the App does not change the anonymous identifier.
3-5. IP address
When it receives a request, the collection server briefly checks the IP address only to block excessive requests and does not store it. The company that relays transmissions (section 7) processes IP addresses in transit.
4. Information we do not collect
- Name, email address, phone number, postal address, location
- Account information — the App has no sign-up or login
- Advertising identifiers — the App has no ads
- Screen recordings or the contents of the screen
- The coordinates of taps — rapid repeated tapping is normal joystick play, so the feature that records the position of repeated taps is turned off
5. Information stored only on your device
So you can continue playing, the following is stored only on your device and is not itself sent to our servers or anywhere else. Section 3 gameplay records do, however, include part of your progress and settings, such as the floor reached, soul stones earned, difficulty adjustment steps and changed settings.
- Game progress: soul stones, permanent upgrade levels, tutorial completion, achievement and daily quest progress, difficulty adjustment values, the state of a run in progress, and so on
- Settings: volume, vibration, control sensitivity, frame rate, display language, whether analytics data is sent and whether you have chosen it yourself
- That you passed the first launch screen, and that screen's version and time
This information is deleted when you delete the App, and everything except the first-launch-screen record is also deleted by "Reset Local Data". We keep no copy, so it cannot be restored. If you have turned on your operating system's device backup (iCloud Backup, Google backup, etc.), information stored on the device may be included in that backup under the operating system provider's policy.
6. Retention and deletion
- Section 3 information: kept as long as needed for the purposes in section 1. We will add the specific retention period to this policy once it is set. If you ask for deletion, we find and delete the relevant records as described in section 10. Backup copies of the collection server are kept for 30 days and then replaced, so deleted records may remain in a backup copy for up to 30 days.
- Support information (section 9): kept as long as needed to handle the request and destroyed once the purpose is achieved, unless a law requires us to keep it longer.
- Information stored only on your device (section 5): deleted immediately when you delete the App or use "Reset Local Data".
- Website technical information (section 8): handled under the hosting provider's policy.
How we delete: information whose retention period has ended or whose purpose has been achieved is destroyed without delay. Electronic files are deleted from storage, and backup copies disappear on the replacement cycle above. We do not process personal information on paper.
7. Service providers and international transfers
We do not sell your information or provide it to other companies for advertising. We use the services below only as far as needed to run the service. These companies have servers outside Korea, so information is transferred abroad in the course of processing.
| Company | What it does | Information processed | Country | Privacy contact |
|---|---|---|---|---|
| Oracle Corporation | Cloud infrastructure on which our collection server and its backup server run | Section 3 information | United States | oracle.com/legal/privacy |
| Cloudflare, Inc. | Relaying transmissions from the App to the collection server, hosting this website, receiving and forwarding mail sent to support@sanglimsoft.com | Section 3 information and IP addresses (in transit), website technical information, email addresses and message contents | United States and countries with Cloudflare data centers — relay locations depend on where you connect from | cloudflare.com/privacypolicy |
| Supabase, Inc. | Storing messages submitted through the support page contact form | Email address, message contents, and the IP address stored with each submission (to limit excessive submissions) | South Korea · processor headquartered in the United States | supabase.com/privacy |
| Discord, Inc. | Internal notification to the operator that a contact form message has arrived | Email address, part of the message contents | Outside Korea | discord.com/privacy |
| Microsoft Corporation (Outlook.com) | Receiving and storing support mail and sending replies | Email address, message contents | United States | privacy.microsoft.com |
These transfers are entrustment and storage needed to provide the service, made by disclosing the required details in this policy under Article 28-8(1)(3) of the Korean Personal Information Protection Act. Information is transferred to the support providers (Cloudflare mail forwarding, Supabase, Discord, Microsoft) over encrypted connections when you send a message, and kept for the periods in section 6. Nothing is transferred to them if you do not contact us.
International transfer of section 3 information
| Information transferred | Section 3 gameplay records, error information, environment information and anonymous identifier |
| Destination country | United States — the collection server and its backup server are both in data centers in the United States. Transmissions pass through the Cloudflare network. |
| When and how | If usage statistics are on (starting value in section 2), sent from time to time over encrypted internet connections while you use the App, after you pass the first launch screen. |
| Recipient and contact | Our collection server — infrastructure by Oracle Corporation, relay by Cloudflare, Inc. (privacy contacts in the table above). Our contact details are in section 14. |
| Purpose and retention | The purposes in section 1 and the periods in section 6 |
| Legal basis | Article 28-8(1)(3) of the Korean Personal Information Protection Act (entrustment and storage disclosed in this policy). For users in the EEA, the UK and Switzerland, information is transferred only if they turn it on in section 2. |
| How to refuse, and the effect | Turn off the "App usage statistics and error information" switch on the first launch screen or Settings > Privacy > "Send Analytics Data" (section 2). Refusing does not limit your use of the game. |
Except where required by law, we do not provide your information to anyone for purposes other than those in this policy.
8. Information processed when you visit the website
This website (souldungeon.sanglimsoft.com) is served through the hosting provider in section 7, which may process technical information such as IP address and browser type in the course of your visit. We do not install visitor analytics or advertising trackers on this website and do not use cookies. Fonts and images are served from this website, not loaded from external services.
9. Information received when you contact us
When you contact us through the support page form or by email, we receive the following to reply and handle your request.
- Email address, message contents, and the request type and app name chosen in the form
We use this information only to reply and handle your request. Form messages are stored in our support intake storage, and emails in our mailbox.
10. Your rights and those of legal representatives
You (and, for a child under 14, the child's legal representative) can ask to access, correct, delete or suspend the processing of your information, and can withdraw consent for information processed with consent. Send your request through the support page form or to support@sanglimsoft.com; we will tell you the result within 10 days of receiving it. You can also make a request through a legal representative or someone you authorize, in which case we may ask for proof of the authorization.
Because the App has no accounts, we cannot directly match you to section 3 records. If you tell us your device type and roughly when you installed the App, we will look for the matching records and act on them, or tell you if we cannot identify them. If we refuse a request or handle only part of it, we will tell you why and how to object.
You can stop section 3 sending yourself with the "App usage statistics and error information" switch on the first launch screen or Settings > Privacy > "Send Analytics Data" (section 2). For users in the EEA, the UK and Switzerland this withdraws consent; for others it is a request to suspend processing. Information stored on your device can be deleted by deleting the App or using "Reset local data" (section 5).
In Korea, you can contact the following for advice or remedies regarding personal information infringement: Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), Personal Information Infringement Report Center of KISA (118, privacy.kisa.or.kr), Supreme Prosecutors' Office (1301, www.spo.go.kr), Korean National Police Agency (182, ecrm.police.go.kr).
11. Children's information
The App does not ask your age and does not collect information that can identify you, such as a name or contact details. In Korea, section 3 information is processed not on the basis of consent but on the basis in section 1 (Article 15(1)(6) of the Personal Information Protection Act), so there is no legal-representative consent procedure. Parents and guardians can turn sending off on the first launch screen or in Settings, and can ask to access, delete or suspend the processing of a child's information as described in section 10.
- To make the game better, we send which floors are hard and where errors happen to our server.
- We do not send your name, contact details or where you live.
- If you don't want to send it, turn off "App usage statistics and error information" on the first screen or "Send Analytics Data" in Settings. The game is the same either way.
- If you are younger than 14, please read this with a parent or guardian.
Users in the United States: the App is a general-audience game and is not directed to children under 13. If we learn that information from a child under 13 has been collected, we will delete those records. The anonymous identifier the App sends is used only for internal operations — maintaining and analyzing how the App functions. To make sure it is not used to contact a specific individual, for behavioral advertising, or to build a profile of a specific individual, we do not use ads or advertising identifiers, we do not provide this information to other companies or combine it with other information, we limit access to the collection server to our staff, and we use the analysis only to look at trends across all players.
12. Automatic collection and how to refuse it
The App contains a usage statistics and error collection feature that automatically gathers and sends section 3 information, and stores the anonymous identifier on your device when usage statistics are on. The starting value and how to refuse are as in section 2. The App does not use cookies or advertising identifiers, does not collect behavioral information for targeted advertising, and does not combine section 3 information with information gathered from other companies' apps or websites to track you.
The App does not request device permissions that ask for your approval, such as camera, photos, location, contacts or notifications.
13. Security measures
- Information sent from the App to the collection server travels over encrypted connections.
- Only our staff can access the collection server and its management tools.
14. Privacy officer and contact
- Operator: SangLimSoft (상림소프트)
- Privacy officer: SangLimSoft operations team
- App: Soul Dungeon
- Email: support@sanglimsoft.com
- Support page: souldungeon.sanglimsoft.com/support
15. Additional information for users outside Korea
Users in the EEA, the UK and Switzerland: the controller of section 3 information is SangLimSoft in the Republic of Korea. The legal bases are in section 1, and the destination country and retention are in sections 6 and 7. You have the right to access, rectify, erase, restrict processing of, port and object to the processing of your information, and to withdraw consent; contact us as in section 14. You also have the right to lodge a complaint with the data protection authority of the country where you live.
Users in the United States: we do not sell personal information and do not share it for cross-context behavioral advertising. Information about children under 13 is in section 11.
16. Changes to this policy
If the information we process or how we process it changes, we will update this policy first and post the changes and effective date on this page.