Privacy Policy

1. Who we are and what this policy covers

Graceful Logic Studios publishes K-Drama Director and determines why and how information is processed for the game. In this policy, “we”, “us”, and “our” refer to Graceful Logic Studios. This policy covers the K-Drama Director mobile game and the website at kdramadirector.com.

For privacy questions or requests, email privacy@kdramadirector.com. We may need to verify that a request relates to you before acting on it.

2. Information we process

Offline game data

The game stores progress on your device, including maps and episodes, selected director or avatar, actors, properties, inventory, upgrades, currencies, hearts, fame, unlocks, language, audio, notification and gameplay settings, and operations waiting to synchronize. You can start playing offline before a cloud identity is available. Pending changes may synchronize when a connection returns.

Anonymous authentication and cloud identity

Supabase anonymous sign-in creates a unique user UUID and an authenticated server-side record without requiring your email address. Supabase processes session and authentication tokens, account and session timestamps, and technical security information. “Anonymous” sign-in is pseudonymous, not fully anonymous, because the record has a persistent identifier.

Google sign-in and account linking

If you choose Google sign-in, Google and Supabase may process your Google account subject identifier, email address, basic profile details included in the requested sign-in scope, and authentication tokens. Sign-in can link or restore an existing K-Drama Director game state. Offline progress may be migrated or merged; when a social account already owns game state, the existing primary game-state identity can be preserved.

Cloud gameplay and security data

Cloud records can include maps, episodes, stars, achievements, progression, actors and avatar, inventory, staff upgrades, properties, currencies, settled transactions, Awards access, Ghost matches, Live Waves, rankings, fame, match results, reward claims, timestamps, synchronization and migration state, and records used for anti-cheat, fraud prevention, service integrity, and abuse response.

Turnstile and notifications

Cloudflare Turnstile helps prevent automated abuse during guest authentication and may process IP address, WebView or device characteristics, and challenge and abuse signals. This is a security service, not product analytics. If you ask for a Live Wave reminder, the app requests notification permission and schedules the reminder locally on your device. The reminder itself does not require a remote push-messaging identifier.

3. Optional product analytics

Product and onboarding analytics are optional, default off, and begin only after you accept them. This choice is separate from Google advertising consent. Consented events can wait offline and upload later. Turning analytics off stops new optional collection and starts deletion of optional analytics records; it does not delete game progress.

When enabled, analytics can include pseudonymous installation, analytics, session, event, and primary user identifiers; language, platform, app/build/onboarding version; onboarding stages and milestones; map and episode progress; unlock state; coarse actor, item and economy counts; outcomes for Staff, Shop, Awards, Ghost and Live onboarding; and restricted error or result codes.

The analytics allowlist excludes email, display name, precise location, free-text metadata, trivia question or answer content, and Google UMP consent strings.

4. Google AdMob and optional rewarded ads

Rewarded ads are optional and start only when you choose to watch one. Google’s User Messaging Platform (UMP) manages applicable advertising privacy choices. You can revisit those choices in the game’s Account area. Your ad choice does not enable the separate Supabase product analytics described above.

The Google Mobile Ads SDK and configured advertising partners may process IP address and general location derived from it, app interactions such as launches, taps and video views, diagnostics, and identifiers such as the advertising ID or app-set ID where available. Whether ads are limited, personalized, or non-personalized depends on your choices, location, device settings, Google policy, and the partners configured for the released build. Pseudonymous user and reward context may be used for server-side reward verification and fraud prevention.

5. Why we process information

• Provide offline and synchronized gameplay, cloud saves, competitive modes, and rewards.
• Authenticate players, link identities, restore progress, and resolve synchronization conflicts.
• Settle game-economy operations and verify rewarded-ad completion.
• Protect the service, prevent fraud and abuse, diagnose faults, and enforce game rules.
• Respond to support and privacy requests and meet legal obligations.
• Improve onboarding and the product when you consent to optional analytics.
• Show and measure advertising according to applicable UMP choices.

Depending on your location and the activity, processing may be necessary to perform our agreement with you, comply with law, pursue legitimate interests in operating and securing the game, or rely on your consent. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

6. Service providers and recipients

• Supabase: authentication, database, cloud game state, functions, and related infrastructure.
• Google: Google sign-in, AdMob, UMP, advertising delivery, measurement, and fraud prevention.
• Cloudflare: Turnstile bot and abuse prevention.
• Vercel: hosting and delivery of this website and policy.
• Advertising technology partners: vendors selected through Google’s advertising systems and the released app configuration.

These providers receive information only for their stated roles or as otherwise described in their terms and your advertising choices. We do not describe persistent or advertising identifiers as anonymous, and we do not claim that no information is shared when a provider needs it to deliver a feature.

7. Retention and deletion

8. Your choices and privacy rights

You can turn optional analytics off and reopen Google ad privacy options in the Account area. You may also request access, correction, deletion, restriction, objection, or portability where applicable by emailing privacy@kdramadirector.com. You may withdraw consent at any time. You may also complain to the privacy or data-protection authority responsible for your location.

Deleting optional analytics does not delete game progress. Account or cloud-state deletion may be subject to identity verification, pending offline requests, provider backup rotation, fraud holds, and legal retention requirements.

9. Children and age

K-Drama Director is designed for older teens and adults. Its declared Google Play target-audience groups are ages 16–17 and ages 18 and over. The game is not directed to children under 16. We apply age-related advertising and consent settings according to the released store configuration and applicable law. Contact us if you believe someone under 16 provided personal information contrary to these requirements.

10. Security

Safeguards include TLS in transit, offline-first data minimization, Supabase Row Level Security and authenticated ownership checks, restricted analytics access, server-side reward verification, access controls, and audit logging. Privileged service-role credentials are not placed in mobile or public browser clients. No system can guarantee absolute security.

11. International transfers

The Supabase project used by the game is hosted in the European Union (eu-central-1). Other providers may process information in countries outside yours. Where required, transfers rely on provider data-processing terms, adequacy decisions, standard contractual clauses, or other recognized safeguards.

12. Website cookies and local storage

This website does not currently use advertising cookies, analytics cookies, social-media trackers, or other non-essential browser storage. It does not set HTTP cookies.

When you choose a website language, the site stores one first-party preference named kdrama-director-language in your browser's local storage. Its value is the selected language code. This preference is used only to remember and display the language you explicitly requested; it is not used for analytics, advertising, profiling, or cross-site tracking. It remains until you choose another language or clear this site's browser data.

Vercel hosts and delivers the website and may process standard request information such as IP address, user-agent information, requested URL, request time, and operational or security logs. If we introduce non-essential cookies or similar tracking in the future, we will update this notice and obtain any consent required before activating them.

13. Changes and contact

We may update this policy when the game, service providers, legal requirements, or data practices change. We will update the date and version above and use an appropriate in-app or store notice for material changes.

Questions and requests: privacy@kdramadirector.com.

English is the controlled source for this policy. Localized versions cover the same policy version and effective date.