What personal data Drop the Coins processes, and how it is used, kept and destroyed.
A17s (the "Company") complies with the Korean Personal Information Protection Act and related law. This policy applies to Drop the Coins (the "Service").
The Service can be started without any sign-up procedure. Identity data such as name, date of birth, phone number and address is not collected.
| Item | When collected | Purpose |
|---|---|---|
| Device identifier | First launch | Guest account identity · coin ledger save |
| Email address | Only when linking a social account | Account recovery on device change or loss |
| Social account identifier | Only when linking a social account | Identity match (identifier issued by the login provider) |
| Purchase history · receipts | On in-app purchase | Grant confirmation · refund and double-grant dispute handling |
| Advertising ID (AAID) | When watching a rewarded ad | Ad delivery · fraud prevention (processed by the ad provider) |
| Inquiry content and contact | When you contact us by email | Handling and replying |
| Gameplay data | During play | Coin ledger and machine upgrade save · reward grants · balancing |
The following is not collected:
Access times, device information and error logs may be generated and stored automatically during use.
Personal data is destroyed without delay once its purpose is achieved. The following is kept for the periods required by law.
| Data | Period | Basis |
|---|---|---|
| Account and play data | While the agreement is in force (destroyed on deletion request) | Until the purpose is achieved |
| Records of contracts and withdrawal of purchase | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of payment and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of consumer complaints and disputes | 3 years | Act on Consumer Protection in Electronic Commerce |
| Service access logs | 3 months | Protection of Communications Secrets Act |
Deleting an account does not delete payment and receipt records; they are kept for the statutory period above. They are also the only basis on which a refund or double-grant dispute can be resolved. Those records are stored separately from account identifiers.
The Company does not sell personal data or provide it for advertising purposes. Exceptions are limited to cases where the user has consented in advance, or where a law or a lawful request from an investigative authority requires it.
| Processor | Entrusted work |
|---|---|
| Google LLC (Google Play) | In-app purchase processing and receipt verification |
| Google LLC (AdMob) | Serving rewarded ads and preventing fraudulent views |
| The social login provider chosen by the user | Account linking and identity matching |
| Cloud hosting provider | Server infrastructure and data storage |
Data region not set — the server region must be stated once it is fixed.
A user may refuse the transfer, in which case use of the Service may be limited.
The Service is not directed at children under 14; where the Company learns that a user is under 14, the data is destroyed without delay.
The Service offers rewarded ads. When an ad is watched, the advertising identifier (Android Advertising ID) is passed to the ad provider (Google AdMob) to serve the ad and prevent fraudulent views. Users can reset the advertising ID or opt out of personalised ads in their device settings (Android: Settings → Privacy → Ads).
The Service does not send push notifications and does not collect notification tokens.
Send inquiries to this address. We review them on business days and reply by email.
Users may seek help from the following bodies in Korea:
This English text is provided for convenience. In the event of any discrepancy, the Korean version prevails.