Privacy Policy

Last updated 2026-10-19

Dot Spin Privacy Policy

Version: v1.2.0 | Effective: 2026-10-18

This document is a translation of the Korean original. If this translation and the Korean original differ, the Korean original prevails.

Rebalabs Co., Ltd. ("Company") processes the personal information of users of the mobile game "Dot Spin" ("Service") as follows, in compliance with the Personal Information Protection Act of Korea and related laws.

In short — Dot Spin has no email/password sign-up and never asks for your name, birth date or phone number. On first launch, a guest account is created automatically with a random device ID generated by the app.

1. Controller

• Rebalabs Co., Ltd.
• 1704, Anyang Trade Center, 161 Simin-daero, Dongan-gu, Anyang-si, Gyeonggi-do, Republic of Korea (14048)
• Contact: support@rebalabs.com

2. Information We Process and How We Collect It

(1) To provide the Service, the Company processes the following information.

• Guest account — a random installation ID (UUID) created by the app, a user number assigned by our server, and an access token. We do not read phone numbers, IMEI or other hardware identifiers.
• Nickname — a 2–12 character name you choose plus an automatic 4-digit tag. It is visible to other players in rankings, battles and friend screens. Real names and contact details are not allowed; a profanity filter applies.
• Account link (optional) — if you link a Google or Apple account (available on both Android and iOS; one account can have both), we store only the unique identifier issued by that provider. We do not store your email or name. If you link an Apple account, we keep a token used to ask Apple to revoke the link when you delete your account.
• Device move (optional) — if you get a transfer code with "Move to another device", we store an irreversibly transformed value of the code, when it was issued, expires (24 hours) and was used, and the number of wrong attempts (we never store the code itself). When your account is moved to another device, we keep an irreversibly transformed value of the previous device's ID for 7 days so the move can be undone if you did not make it.
• Game records — currency balances (coins, gems) and their history, owned weapons and decks (including pixel weapons you draw), match history, rank score (MMR) and tier, season pass, missions, attendance, and mailbox.
• Battle data — match results and per-round inputs (aim, special moves, guards, tactic card use and the upgrade picked between rounds). When no live opponent is available, your ranked tag team may be used as an asynchronous ("ghost") opponent for other players, showing your nickname, tier and weapon shapes.
• Friends — your friend list, friend requests you sent and received, players you blocked, and battle invites. Your friends can see your online status (online, in a match, offline).
• Contact Us and reports — the category and text of inquiries you send in the app and the Company's replies, together with the app version, device model, OS and language sent with the inquiry. If you report an opponent from the match screen, we record the reason, your note, the match number and the reported player. We ask you not to include personal information in inquiry text.
• Purchases — product ID, store order number and purchase token, amount, time, delivery result, and records of rights moved when you restore purchases after reinstalling the app. Payments are processed by Google Play or the Apple App Store; we never receive card numbers or other payment instrument details.
• Advertising ID (ADID/IDFA) — processed by our ad provider (Google AdMob) to show ads, cap frequency and verify rewarded ads. Personalized ads are shown only if you consent. On iOS we ask through the App Tracking Transparency (ATT) prompt, and in regions that require consent, such as Europe, through Google's consent form (UMP). You can play the game the same way without consenting; non-personalized ads are shown instead. You can change your choice at any time in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: the Google ads menu in Settings).
• Usage and connection data — access time, app version, device model, OS version, IP address and error logs, used for fraud prevention and troubleshooting.
• Service usage records — which steps you reached in the app (first launch, nickname, practice, first ranked match), shop/pass screen views, purchase attempts/successes/failures (product ID), ad impressions and rewarded-ad completions with timestamps, app version and OS type. Linked only to the user number assigned by our server; never includes the device identifier, nickname or purchase token. Used to improve the service and for operating statistics (step conversion, revenue per user, ad impressions).
• Anonymous usage statistics — daily totals of feature usage that do not identify individuals. Device identifiers are only used in an irreversibly transformed form.

(2) This information is collected automatically while you use the app, or when you enter it yourself (nickname, account link, friend requests, inquiries, reports).

3. Purposes

1. Creating and maintaining guest accounts; moving and recovering accounts through account linking and transfer codes; undoing device moves you did not make

2. Matchmaking (live, asynchronous, computer and friend battles), rankings and seasons, and delivery of season rewards

3. Providing friend, battle invite and block features

4. Verifying and delivering purchases, restoring purchases after reinstalling the app, and handling refunds

5. Showing ads and granting rewards for watched ads

6. Preventing abuse (modified clients, currency manipulation, payment fraud, match fixing), handling reports and issuing sanctions

7. Responding to Contact Us inquiries, sending notices and mail, and statistics to improve the Service

4. Retention

• Account identifiers (device ID, account link, Sign in with Apple token), owned weapons and teams, friend data, inquiries and reports you sent, and service usage records: deleted immediately when you delete your account. Your nickname is replaced with "(탈퇴)" (deleted account) and removed from rankings, and any remaining currencies and items are lost and can no longer be used.
• Service usage records: deleted 1 year after collection
• Device move data: a transfer code stops working when used, expired or replaced by a new code and is deleted with your account; the previous-device check value is deleted 7 days after the move
• Match records: unsettled matches (expired or aborted) and practice matches are deleted after 90 days. Settled ranked and friendly match results are kept so that opponents' match histories stay intact; after you delete your account, they remain only in a form that cannot identify you, without your nickname or device information.
• Mail: deleted 30 days after its claim deadline passes
• Access and usage logs: 3 months (Protection of Communications Secrets Act of Korea)
• Payment records (payment and supply of currency): 5 years (Act on the Consumer Protection in Electronic Commerce of Korea) — anonymized after account deletion so they cannot be linked to you
• Complaint and dispute records: 3 years
• Sanction records: 1 year after the sanction ends

5. Account Deletion

You can delete your account at any time in Profile → Delete account. The information listed in Section 4 as "deleted immediately when you delete your account" is deleted right away and cannot be restored. Any remaining paid currency is also lost, so please check before deleting. If you linked an Apple account, we also ask Apple to revoke the link. If you cannot use the app, you can request deletion at support@rebalabs.com; details are in the account deletion guide (https://apps.rebalabs.com/p/dotspin/delete).

6. Sharing and Processors

We do not sell or provide your personal information to third parties. The following providers process data under their own policies to operate the Service:

• Google LLC — ads (Google AdMob) and the ad consent form (UMP), server hosting (Google Cloud), Google sign-in, Google Play billing: https://policies.google.com/privacy
• Apple Inc. — Sign in with Apple, App Store payments: https://www.apple.com/legal/privacy/

Some providers may process data outside Korea (e.g., in the United States). The data concerned is listed in Section 2 and is transferred over the network while you use the Service; retention follows each provider's policy. You can avoid such transfers by not linking an account, declining personalized ads, or deleting your account.

7. Children

The Service is intended for all ages. Children under 14 are advised not to link an account without a parent's consent, and ad consent flows are followed so that children do not receive personalized ads. Parents may request access to or deletion of a child's account at support@rebalabs.com.

8. Your Rights

You and your legal representative may request access, correction, deletion or suspension of processing. Nickname changes and account deletion are available in the app; other requests can be sent through Contact Us in the app or to support@rebalabs.com and will be handled within 10 days.

9. Security

Encryption in transit (HTTPS), signed and expiring access tokens, server-side receipt verification, least-privilege administrator access and audit logs.

10. Privacy Officer

• Privacy Officer: CEO, Rebalabs Co., Ltd.
• Email: support@rebalabs.com

11. Changes

We will announce changes in the app at least 7 days before they take effect (30 days for changes unfavorable to users).

History

• v1.2.0 (2026-10-18): Pre-launch revision — Google and Apple account linking on both Android and iOS (both on one account), and device move (transfer code) and undo data with retention periods.
• v1.1.0 (2026-10-13): Pre-launch revision — added friends, Contact Us and reports, tactic card and upgrade inputs, purchase restore records, ad consent (ATT, UMP) and how to change it, retention periods by item (matches 90 days, mail 30 days), and the account deletion guide.
• v1.0.0 (2026-10-07): First version.