Privacy Policy

1. Purposes of Processing Personal Information

We process personal information only to the extent necessary for the following purposes:

1. Providing Games and Services

• Identifying users and maintaining Service status
• Saving, restoring, and synchronizing game progress
• Managing in-game currency, items, rewards, and other Service states
• Providing rankings and other gameplay features

2. Paid Services and Purchase Management

• Confirming paid purchases
• Providing ad removal and purchased products
• Confirming purchase, cancellation, and refund status
• Handling purchase-related inquiries and disputes

3. Service Operation and Security

• Preventing fraudulent or abnormal use
• Identifying Service errors and operational issues
• Protecting the integrity and security of the Services and user data

4. Service Improvement and Development

• Understanding Service usage
• Improving game balance, content, and user experience
• Developing new Services and features

5. Advertising

• Providing rewarded, banner, interstitial, and other in-game advertisements
• Measuring advertising performance, managing frequency, and preventing advertising fraud
• Providing personalized or non-personalized advertisements according to user choices and applicable law

6. Customer Support

• Receiving and responding to inquiries and complaints
• Verifying relevant facts and communicating results
• Resolving disputes

7. Legal Compliance and Protection of Rights

• Retaining records required by applicable law
• Responding to lawful requests
• Protecting the rights and property of users and COZERU

2. Personal Information We Process

Depending on the Service and features used, we may process the following personal information.

2.1 Game Use

Some games and Services produced and operated by COZERU may be available without separate user registration.

Where Firebase anonymous authentication or cloud-saving features are enabled, we may process:

• Firebase anonymous user identifier (UID)
• Authentication and session information
• Automatically generated in-game nickname
• Current stage and highest completed stage
• Highest score and ranking information
• In-game currency such as Gold
• Items and boosters
• Gift and reward status
• Tutorial progress
• Roulette usage status and counts
• Game state necessary to save and restore progress
• Last synchronization time

Certain information, such as detailed state of an unfinished stage, may be stored only on the user's device and may not be transmitted to COZERU servers.

2.2 Technical Information That May Be Automatically Processed

• IP address
• App and game version
• Installation platform
• Operating-system and device-related technical information
• Access and authentication time
• Technical information necessary for network requests and Service operation

COZERU does not currently intend to directly collect telecommunications device identifiers such as IMEI through the Services.

2.3 When Using Apps in Toss / Toss Login

When Apps in Toss or Toss Login is used, we may process:

• Toss user identifier (userKey)
• Name, which may be processed during login or user verification and may not be separately stored on COZERU servers
• Information necessary for login and authentication

This information may be processed for user identification, login and authentication, game-data synchronization, Service provision, and account management.

2.4 Paid Services

When a purchase is made through Apps in Toss, Google Play, Apple App Store, or another payment platform supported by COZERU, the following information may be temporarily processed:

• Purchased product ID
• Order or transaction identifier
• Purchase status
• Purchase time
• Quantity
• Receipt or other information necessary for purchase verification

Financial information such as credit card or bank account numbers is processed through the applicable platform's payment system and is not directly collected or stored by COZERU.

2.5 Customer Support

When you contact support@cozeru.com, we may process:

• Email address
• Contents of the inquiry
• Attachments
• Game or Service information voluntarily provided to resolve the inquiry
• Information generated while handling the inquiry

2.6 Advertising

Some games produced and operated by COZERU may use Google AdMob to provide banner, interstitial, and rewarded advertisements. Google may process:

• Advertising identifiers and other identifiers necessary to provide advertising
• IP address
• Device, operating system, and app information
• Ad request, impression, click, and reward information
• Advertising diagnostic information
• Approximate location derived from information such as IP address

3. Retention of Personal Information

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy and delete or anonymize it without undue delay when it is no longer required.

3.1 Service Retention Periods

Where applicable law requires certain records to be retained, we retain them for the relevant statutory period.

3.2 Principal Statutory Retention Periods in Korea

Information processed directly by Apps in Toss, Toss Login, Google Play, Apple App Store, or another external platform or payment provider may be subject to that provider's own privacy and retention policies.

4. Disclosure of Personal Information to Third Parties

We generally process personal information within the purposes described in this Privacy Policy and do not disclose it to third parties without the user's prior consent.

Personal information may nevertheless be disclosed where:

• the user has given prior consent;
• disclosure is specifically permitted or required by law;
• a court, law enforcement authority, or government authority makes a lawful request; or
• disclosure is otherwise permitted by applicable law to protect the life, body, property, rights, or safety of a person.

Where a ranking feature is provided, an automatically generated nickname, highest stage, score, or similar ranking information may be visible to other users. Internal authentication information such as a Firebase UID is not displayed to other users.

5. Outsourcing and External Service Providers

We use external service providers to the extent necessary to provide the Services.

Google LLC / Firebase

• Services: Anonymous user authentication, saving, restoring and synchronizing game progress, and managing ranking data
• Main information processed: Firebase UID, authentication information, game progress, currency, items, rewards, and ranking information

We take appropriate measures in accordance with applicable law and relevant contractual or service arrangements so that information processed by external service providers is used only for purposes necessary to provide the Services.

During use of the Services, external platforms or services such as Apps in Toss, Toss Login, Google Play, and Apple App Store may be used. The privacy policies and service terms of the respective providers may separately apply to those services.

If we begin outsourcing personal information processing to additional providers, this Privacy Policy will be updated to reflect the actual processing activities.

6. International Transfers of Personal Information

Because COZERU uses global cloud services, personal information may be transferred to, processed in, or stored outside the Republic of Korea.

Google LLC / Firebase

• Information transferred: Firebase anonymous user identifier (UID), authentication and session information, IP address, and technical information necessary for the Service. Where cloud-saving features are enabled, automatically generated nickname, game progress, highest stage and score, in-game currency, items, rewards, roulette status, ranking information, and synchronization information
• Country: United States
• Timing and method: Transmitted through encrypted network communications when the Service is used, a user is authenticated, or game data is saved, loaded, or synchronized
• Recipient: Google LLC
• Contact: https://firebase.google.com/support
• Legal basis for the international transfer: Article 28-8(1)(3)(a) of the Personal Information Protection Act of the Republic of Korea, where overseas processing or storage is necessary for entering into or performing a contract with the data subject and the required information is disclosed in the Privacy Policy
• Purpose: Anonymous user authentication, Service delivery, saving/restoring/synchronizing game progress, and providing ranking functionality
• Retention: For the duration of Service use or until a valid deletion request is processed, unless a longer period is required by applicable law

Users may contact support@cozeru.com with questions regarding international transfers or to request refusal of an international transfer. However, where the overseas processing is necessary to provide essential features such as Firebase authentication, cloud saving and restoration, game-data synchronization, or rankings, refusing the transfer may limit the availability of those features or Services.

7. Additional Use or Disclosure Within a Reasonably Related Scope

Where permitted by applicable law, we may use or disclose personal information without additional consent within a scope reasonably related to the original purpose of collection.

In doing so, we consider:

1. whether the additional purpose is related to the original purpose;
2. whether the additional use or disclosure could reasonably have been anticipated in light of the circumstances or customary processing practices;
3. whether it unfairly infringes the interests of the user; and
4. whether appropriate safeguards, such as pseudonymization or encryption, have been applied where necessary.

8. Rights of Users and Legal Representatives

Users may exercise rights available under applicable law regarding their personal information, including the right to:

• request access;
• request correction;
• request deletion;
• request suspension or restriction of processing;
• withdraw consent; and
• exercise other rights available under applicable privacy laws.

Privacy-related requests may be submitted to support@cozeru.com, and COZERU will handle them in accordance with applicable legal procedures and timeframes.

To prevent another person's information from being improperly accessed, altered, or deleted and to accurately identify the data covered by a request, we may request the minimum information necessary.

For games and Services produced and operated by COZERU that use internal identifiers without separate registration, we may, where necessary, ask for a Player ID or similar internal Service identifier to locate the correct user data.

A Player ID is not a user's real name or government identification number. It is an internal identifier used to distinguish game data associated with a particular user.

A legal representative or properly authorized agent may exercise rights on behalf of a user in accordance with applicable law. We may request information reasonably necessary to verify the representative's authority.

Certain requests may be restricted where retention is required by law, where the rights or legitimate interests of another person would be adversely affected, or where another legal basis for restriction applies.

COZERU does not currently intend to make decisions that have legal or similarly significant effects on users solely through fully automated processing without human involvement. If such functionality is introduced in the future, we will provide notices and rights required by applicable law.

9. Children's Personal Information

The Services are intended for a general audience.

COZERU does not intend to knowingly collect personal information from children under the age of 14 without legally required consent from a legal representative.

Where applicable law requires consent for the processing of personal information of a child under the age of 14, COZERU will obtain and verify the consent of the child's legal representative.

If we become aware that personal information of a child under the age of 14 has been processed without legally required consent, we will review the circumstances and take appropriate action, including deletion where required.

Children or legal representatives may contact support@cozeru.com regarding privacy requests.

Where a country or region applies a higher standard of protection or a different age threshold for children's personal information, COZERU will follow the applicable standard.

10. Deletion and Destruction of Personal Information

When personal information is no longer required because the retention period has expired or the purpose of processing has been fulfilled, we delete or destroy it without undue delay.

Where information must continue to be retained under applicable law, it is retained separately or otherwise distinguished from information in active use.

Our destruction methods include:

• Electronic files: securely deleting information so that it is not readily recoverable or reproducible
• Paper documents: shredding, incinerating, or otherwise securely destroying them

Game data stored only on a user's device may be deleted by deleting the application, clearing application data, or resetting the device.

11. Security Measures

We take administrative and technical measures appropriate to the nature of the information processed and the scale of the Services.

11.1 Administrative Measures

• Limiting the number of persons who handle personal information and their scope of access
• Managing personal information processing and access permissions
• Internal review and management of privacy-related matters
• Managing external service providers and outsourced processing activities

11.2 Technical Measures

• Use of encrypted communications such as HTTPS/TLS
• Authentication-based access management
• Restriction and management of access privileges
• Software and security updates
• Monitoring for abnormal access or use
• Secure deletion and destruction procedures

12. Automatically Collected Information and Website Analytics

We may use Netlify website hosting and server-side web analytics to provide the COZERU website and understand overall visitor activity.

Netlify Web Analytics uses CDN server logs generated while serving website content rather than a separate client-side analytics tag or analytics cookie.

Technical information processed in this context may include:

• requested page information;
• access time;
• IP address;
• approximate region that may be derived from IP address; and
• browser or network-request-related technical information.

COZERU does not use this information to create individual user profiles for personalized advertising.

If we later introduce separate cookies, pixels, or client-side analytics tools, this Privacy Policy will be updated to reflect the actual implementation.

13. Behavioral Information and Personalized Advertising

Some games produced and operated by COZERU may use Google AdMob to provide:

• Rewarded Ads
• Banner Ads
• Interstitial Ads

Google AdMob

• Collection method: Information may be automatically collected and transmitted through the advertising SDK when a user launches the app or requests, views, clicks, or otherwise interacts with an advertisement
• Information that may be processed: Advertising identifiers, IP address, device, operating system and app information, ad requests, impressions, clicks, reward events, approximate location, and advertising diagnostic information
• Purposes: Advertising delivery, ad performance measurement, frequency management, fraud prevention, and abuse prevention
• Retention: In accordance with Google's privacy and advertising data retention policies or for the period necessary for the relevant processing purpose
• Google Privacy Policy: https://policies.google.com/privacy

Depending on the user's choices and applicable law, personalized advertising may be based on previously collected information such as app activity, interaction with advertisements, approximate location, or inferred interests.

If personalized advertising is not permitted by the user or is restricted by applicable law or Service settings, non-personalized advertising may be provided.

Non-personalized advertisements may still process certain technical information or advertising identifiers for purposes such as frequency capping, aggregate reporting, fraud prevention, and abuse prevention.

Users may adjust advertising-related preferences through privacy or advertising settings provided by their mobile operating system or through privacy and advertising controls made available within the Service.

Where required by applicable law or platform policies, COZERU will provide appropriate consent, opt-out, or other user-choice mechanisms relating to advertising data.

14. Privacy Officer and Contact

COZERU operates the following privacy contact channel to oversee privacy matters and handle privacy-related inquiries, complaints, and rights requests.

• Privacy Contact: COZERU Customer Support
• Email: [support@cozeru.com](mailto:support@cozeru.com)
• Tel: +82-70-4581-8128

Requests for access, correction, deletion, suspension of processing, withdrawal of consent, questions regarding international transfers, and other privacy-related inquiries may be submitted through the contact above.

15. Remedies and Privacy Complaints

Users in the Republic of Korea may seek assistance regarding privacy infringements from relevant authorities, including:

• Personal Information Infringement Report Center: 118
• Personal Information Dispute Mediation Committee: 1833-6972
• Korean National Police Agency: 182

Current contact information and procedures are available through the official websites of the relevant authorities.

16. Additional Notice for Users Outside the Republic of Korea

COZERU is based in the Republic of Korea and complies with applicable Korean privacy laws.

Where the privacy laws of a user's country or region also apply, COZERU will provide the rights and protections required by those laws.

Privacy requests and inquiries may be submitted to support@cozeru.com. Refusing or withdrawing processing necessary to provide the Services may limit the availability of certain features or Services.

17. Changes to This Privacy Policy

We may revise this Privacy Policy to reflect changes in applicable law, the Services, or our personal information processing practices.

Where the Privacy Policy is changed, we will provide notice through the COZERU website or another appropriate method before the changes take effect.

If a change materially affects users' privacy rights, we will provide additional notice in the manner and within the period required by applicable law.

This Privacy Policy is effective as of August 12, 2026.