Voxel Blast Privacy Policy

Effective date: [enter publication date, e.g. 2026-10-XX] · App: Voxel Blast (VOXEL BLAST, Android package com.metacode.voxelblast) · Controller (operator): Metacode (representative: YUN JEONG MIN)

This policy explains what information Voxel Blast (the "App") stores and where, what information the operator and third-party services process, why and for how long, and how you can exercise your rights. The App has no sign-up or login, and the operator does not run its own game servers.

  1. Information stored only on your device
  2. Information the operator processes directly (support, rights requests, refunds)
  3. Information processed by third-party services (ads, payments)
  4. International transfers
  5. Legal bases (EEA and UK users)
  6. Automatic collection and how to refuse it
  7. App permissions
  8. Children and teenagers
  9. Your rights and how to exercise them
  10. Retention and deletion
  11. Security measures
  12. U.S. state privacy laws
  13. Privacy contact and complaints
  14. Changes to this policy

1. Information stored only on your device

The following information is stored only in the App's private storage on your device and is never sent to the operator:

All of this is erased when you uninstall the App or clear its data in Android settings. The operator keeps no copy, so deleted progress cannot be restored.

2. Information the operator processes directly (support, rights requests, refunds)

The operator processes the following only when you email us with a question, a rights request or a refund request.

InformationPurposeRetention
Email address, name (if you provide it), the content of your message, attachments you send (such as screenshots)Answering you, investigating errors, handling rights requests, verifying identity3 years after the matter is closed (retention period for consumer complaint and dispute records under the Korean Act on Consumer Protection in Electronic Commerce). Simple questions with no legal retention duty: 1 year after the matter is closed
For purchase or refund questions: order number (starting with GPA.), purchase date, product name, amount paidConfirming purchases, handling refunds and cancellations, handling disputesPayment and supply records: 5 years; cancellation records: 5 years (same Act)
Order information Google Play Console provides to the seller (order number, product, amount, country of purchase, etc., to the extent provided by Google) [to confirm: actual fields shown in the console]Sales settlement, handling refunds and cancellations, legally required record keepingAs above (5 years)

The operator does not use this information for other purposes or provide it to third parties, except where required by law. Emails are received through Gmail (Google LLC), which stores them.

3. Information processed by third-party services

3.1 Advertising — Google AdMob

The App is free and shows ads through Google AdMob (Google Mobile Ads SDK). According to Google's public disclosure (AdMob Play data disclosure), the SDK automatically collects and sends to Google the following for advertising, analytics and fraud prevention purposes:

Google also processes some of this information for its own purposes, such as ad personalization, measurement, service improvement and fraud prevention. See How Google uses information from sites or apps that use its services and the Google Privacy Policy.

Consent: In regions where consent is required, such as the European Economic Area, the UK and Switzerland, the App checks the required consent through Google's User Messaging Platform (UMP) and then requests ads only in the permitted way. Depending on your consent status and region, limited ads may be shown or no ads may be shown. You can review your choice at any time in the App under Settings › Misc › "Change privacy choices" (shown when a choice is required in your region).

Advertising ID: You can reset or delete your advertising ID in Android Settings › Privacy › Ads. Deleting the advertising ID stops only the advertising ID from being sent; it does not stop all ad-related information (such as IP address, interactions and diagnostics) from being sent.

Remove Ads: Once a purchase of the in-app product "Remove Ads" is confirmed on the device, the App no longer requests or preloads ads, and from the next launch it does not start the ads SDK (Google Mobile Ads). However, we do not guarantee that communication by an ads SDK that had already started before the purchase stops entirely during that session. To keep "Change privacy choices" available, the App still checks your consent status with Google UMP when it starts, even after Remove Ads (device and network information may be sent to Google when it does). Rewarded-ad rewards are granted without an ad.

3.2 Payments — Google Play Billing

In-app purchases are processed by Google Play Billing. Google handles your payment method and billing details, such as card numbers; the App and the operator do not receive them. To confirm, deliver and restore items, the App receives purchase data from Google Play (such as the product ID, purchase token and purchase state), stores it on your device, and asks Google Play to acknowledge the purchase. The App does not send this data to any operator server. Google's handling of payment information is described in the Google Payments Privacy Notice.

4. International transfers

When ads are shown, the information in section 3.1 is transferred abroad (Article 28-8 of the Korean Personal Information Protection Act).

Legal basis for the transfer[to confirm after legal review — e.g. your separate consent (Art. 28-8(1)(1) of the same Act). If separate consent is chosen, an in-app consent screen is also needed for users in Korea. UMP consent for the EEA is not treated as meeting this requirement.]
Recipient and contactGoogle LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) · Privacy contact: Google privacy troubleshooter [to confirm: add the AdMob contracting entity if different (e.g. Google Asia Pacific Pte. Ltd.)]
CountryUnited States [to confirm: other countries where Google has data centers — Google data center locations]
Information transferredIP address, app interaction information, diagnostic information, device identifiers such as the advertising ID and app set ID, device information (section 3.1)
PurposeShowing, measuring and analyzing ads; fraud prevention (including Google's processing for its own purposes)
When and howEach time the App checks consent status (UMP — also at launch after Remove Ads), initializes the ads SDK, or requests or shows an ad, over encrypted connections (TLS/HTTPS)
RetentionUnder Google's retention standards — Google states that it anonymizes advertising data in server logs by removing part of the IP address after 9 months and cookie information after 18 months (Google data retention). [to confirm: specific periods for other items such as the advertising ID]
How to refuse, and the effect
  • If you do not want the transfer, you can stop using or uninstall the App. Ads come with using the App, so the transfer cannot be fully blocked while ads are shown.
  • If you buy "Remove Ads", the App stops requesting and preloading ads on that device and does not start the ads SDK from the next launch. However, we do not guarantee that communication by an ads SDK that had already started before the purchase stops entirely during that session, and consent status checks (UMP) continue.
  • Deleting or resetting the advertising ID and using "Change privacy choices" (where available) reduce what is sent, but do not stop all transfers.
  • [If separate consent is the basis: you can refuse or withdraw consent, and the App will then not request ads or request them only in a limited way — describe the actual implementation]

For transfers from the EEA, the UK and Switzerland to the United States, Google LLC states that it is certified under the EU-U.S. Data Privacy Framework (including the UK Extension) and the Swiss-U.S. Data Privacy Framework and uses Standard Contractual Clauses (Google data transfer frameworks).

5. Legal bases (EEA and UK users)

ProcessingLegal basis (Art. 6 GDPR / UK GDPR)
Answering questions, handling rights and refund requestsPerformance of a contract or steps at your request (Art. 6(1)(b)); legitimate interest in responding (f)
Keeping transaction and dispute records required by lawLegal obligation (c)
Personalized ads; access to information stored on the device for ads (such as the advertising ID)Consent (a) — collected through UMP and can be withdrawn at any time
Non-personalized or limited ads, ad measurement, fraud preventionLegitimate interests (f) or consent (a), depending on region, consent status and Google's settings [to confirm against the actual AdMob/UMP configuration]
Game data on your deviceNot received by the operator; used only on your device to provide App features

EEA and UK users may request access, correction, erasure, restriction or portability of personal information processed by the operator, and object where applicable. You may withdraw consent at any time (this does not affect processing before withdrawal). You may complain to the supervisory authority where you live or work or where an infringement occurred (for example, the UK ICO). [to confirm: whether an EEA/UK representative (Art. 27 GDPR) is required — if appointed, list here]

6. Automatic collection and how to refuse it

The App does not use cookies itself. However, the ads SDK reads device identifiers such as the advertising ID and app set ID for the purposes in section 3.1. You can refuse through Android Settings › Privacy › Ads (delete or reset the advertising ID), "Change privacy choices" in the App (where available), or by buying "Remove Ads". The effect of each is described under "How to refuse, and the effect" in section 4.

7. App permissions

The App does not request location, contacts, photos, camera or microphone permissions.

8. Children and teenagers

9. Your rights and how to exercise them

10. Retention and deletion

11. Security measures

12. U.S. state privacy laws

Whether U.S. state laws such as the California Consumer Privacy Act (CCPA/CPRA) apply depends on business size and processing. The operator will assess whether they apply and, if so, add the required notices and choices to this policy (such as access, deletion and correction; opting out of sale, sharing or targeted advertising; non-discrimination; and authorized-agent procedures). Use of AdMob's U.S. state regulations messages: [to confirm — check the AdMob "Privacy & messaging" settings and fill in]. The App does not respond to browser "Do Not Track" signals, as it does not use them.

13. Privacy contact and complaints

Privacy officer: YUN JEONG MIN (representative)
Email: voxelblast.help@gmail.com · Phone: +82-10-2409-9101

Users in Korea may also seek advice or file reports with: the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office (www.spo.go.kr, 1301) and the Korean National Police Agency (ecrm.police.go.kr, 182). EEA and UK users may contact their supervisory authority (section 5).

14. Changes to this policy

If this policy changes, we will announce the changes and the effective date on this page and in the App at least 7 days before they take effect (30 days for changes important to your rights). Previous versions are kept available on this page.