Skip to content
Cops and Robbers

Privacy Policy

시행일: June 29, 2026

Cops and Robbers is a location-based offline chase game app provided by Team 동심지키미 (Dongsim Jikimi). We treat users' personal data as important and comply with applicable law. This Privacy Policy explains what data Cops and Robbers processes, why, how long it is kept, and what rights users have.

1. Data Controller

  • Service provider: Team 동심지키미 (Dongsim Jikimi)
  • Enquiries: copsnro66ers@gmail.com

2. Personal Data Processed and How It Is Collected

2-1. Personal Data Processed

[Required]

  • a. Account data (social login)
    • Data: social account identifier (Google/Apple), email address, profile information
    • Purpose: identifying and authenticating members, providing the Service
    • Retention: until the member withdraws
    • Note: Android supports Google sign-in only; iOS supports both Google and Apple sign-in.
  • b. Game participation data
    • Data: nickname (2-10 characters), team selection (police/robber), ready state
    • Purpose: in-game identification, team composition, arrest and chat features, checking game start conditions
    • Retention: until the game session ends
  • c. Location data
    • Data: real-time GPS coordinates, location reveal records (footprints), and game statistics accumulated during play such as route, distance travelled and speed
    • Purpose: running the game (location reveals, area departure detection, confirming arrival at jail) and showing game statistics such as route and distance on the result screen
    • When collected: only while a game session is in progress (IN_PROGRESS), both while the app is on screen (foreground) and while the screen is off or another app is running (background). Collection stops automatically as soon as the game ends (GAME_OVER).
    • Background collection on Android: collected only through a Foreground Service (foregroundServiceType="location") that displays a persistent notification indicating that a game is in progress.
    • Background collection on iOS: collected through the UIBackgroundModes location option, with the blue location indicator shown in the system status bar so that users can see that background location is in use.
    • Retention: real-time coordinates are discarded immediately after delivery to participants in the same game and deleted from the server as soon as the session ends. Location reveal records (footprints) are deleted as soon as the session ends. Accumulated route and statistics are discarded from the user's device memory as soon as the result screen is closed.
  • d. Game activity data
    • Data: arrest and capture records, state changes (alive / arrested / in jail), team chat messages
    • Purpose: running the game and determining the outcome, supporting team communication
    • Retention: until the game session ends
  • e. Device and notification data
    • Data: device identifier (such as identifierForVendor), FCM token, device name, device model, operating system type and version, whether the device is physical
    • Purpose: sending push notifications (remote and local), optimising the Service and analysing errors, managing device compatibility
    • Retention: until the member withdraws (FCM tokens until the token is refreshed)
  • f. Error analysis data
    • Data: app crash logs, the time and circumstances of an error, device state (OS version, device model, kernel information)
    • Purpose: improving app stability
    • Retention: 90 days from collection, under the default Firebase Crashlytics policy
  • g. Records confirming collection, use and provision of location data
    • Data: the date, time and purpose of collection, use or provision, the recipient, a summary of the collection interval and similar details
    • Purpose: statutory record keeping under Article 16(2) of the Korean Act on the Protection and Use of Location Information
    • Retention: at least six months
  • h. Advertising and analytics data
    • Data: advertising identifiers (Android Advertising ID/AAID, iOS Advertising Identifier/IDFA), app instance ID, event logs (app launches, screen views, game progress stages and similar usage), advertising interaction data, approximate location derived from IP address
    • Purpose: displaying advertising within the Service, statistical analysis of usage and quality improvement
    • Retention: in accordance with Google's policy (the default Firebase Analytics retention period). Users can reset or delete advertising identifiers at any time in device settings.
  • Note: we use Google AdMob and Firebase Analytics to collect and use advertising identifiers (AAID, IDFA and similar) and usage data for advertising and analytics. Whether personalised advertising is shown depends on the user's consent and device settings. Users can opt out of personalised advertising or reset their advertising identifier as follows.
    • iOS: Settings > Privacy & Security > Tracking (turn off "Allow Apps to Request to Track")
    • Android: Settings > Google > Ads (reset the advertising ID or opt out of personalised ads)
  • Note: we do not collect Korean resident registration numbers, sensitive data or unique identification information.

2-2. How Personal Data Is Collected

Cops and Robbers collects personal data in the following ways.

  • a. Through social login (Firebase Authentication - Google/Apple)
  • b. Directly from what the user enters (nickname, team selection)
  • c. Automatically while the app runs and games are played (GPS location, device information)
  • d. Through the background location collection mechanism of each operating system (Android Foreground Service, iOS UIBackgroundModes location)
  • e. Through external SDKs (Firebase Authentication, Firebase Cloud Messaging, Firebase Crashlytics, Firebase Remote Config, Firebase Analytics, Google Mobile Ads (AdMob), Google Maps SDK - see section 6 for details)

3. Legal Basis for Processing

Cops and Robbers processes personal data on the following bases under Korean law.

  • a. The user's consent (at sign-up, for location collection when joining a game, and for marketing communications)
  • b. Performance of the contract to provide the Service
  • c. Legitimate interests in improving the Service and ensuring its stability
  • d. Compliance with applicable law (the Korean Act on the Protection and Use of Location Information, the Korean Personal Information Protection Act and others)

4. Purposes of Use

  • a. Registering members, verifying identity, and maintaining and managing membership
  • b. Joining and running games, identifying players by nickname, forming teams and assigning roles
  • c. Providing location-based services (real-time location sharing during play, periodic location reveals, area departure detection, confirming arrival at jail)
  • d. Providing core game features (arrests, the jail system, determining when a game ends)
  • e. Showing the user's own route, distance travelled and average speed on the game result screen
  • f. Providing team chat channels
  • g. Sending game event notifications (arrests, location reveals, area departures, game start and end and similar)
  • h. Improving service quality and analysing errors
  • i. Displaying advertising within the Service and improving features through statistical analysis of usage
  • j. Providing marketing information (only where separate consent has been given; see the separate Marketing Communications Consent)

5. Processing of Location Data

This app provides location-based services as a core feature and processes location data in accordance with the Korean Act on the Protection and Use of Location Information. Details are governed by the separate Location Data Terms.

5-1. Collection and Use of Location Data

  • Collected by: Team 동심지키미 (Dongsim Jikimi)
  • Purpose: running the game (location reveals, area departure detection, the jail system, game statistics)
  • Method: automatic collection through the device's GPS sensor
  • Interval: real-time collection every 3 to 5 seconds while a game is in progress
  • When: only while a game session is in progress (IN_PROGRESS), in both foreground and background states. No location data is collected before a game starts or after it ends (GAME_OVER).
  • Limits on background collection: background location collection takes place only within the legitimate purpose of running a game, and no location data is collected at any time while a game is not in progress.
  • Retention: deleted immediately when the game session ends. Records confirming collection, use and provision are kept for at least six months under the Korean Location Information Act.

5-2. Provision of Location Data to Third Parties

To the extent essential to running a game, the Company provides location data only to participants in the same game session, as follows.

  • a. To the police team in the same session, the GPS coordinates of the robber team are provided at the reveal interval set by the host.
  • b. To members of the robber team in the same session, the GPS coordinates of fellow robbers are provided at the reveal interval set by the host (the same moment as the reveal to the police team).
  • Participants in the same game session who receive location data can view it only while the game is in progress, and all sharing stops as soon as the game ends. The Company imposes on recipients obligations to protect personal data equivalent to those in this Privacy Policy.

5-3. Planned Features

The Company may introduce the following features in stages. Each is enabled only where the user has given separate consent.

  • a. Local storage of the user's own game records: with the user's consent, their game records (route, statistics and similar) may be kept in local storage on their device for a period, to support a "replay my past games" feature.
  • b. Server storage and sharing of game records: with the user's consent, their game records may be kept on the Company's servers and routes, MVP information and similar may be shared with other participants.
  • These features will be introduced together with a separate consent process, and the corresponding provisions of this Policy will be set out in detail at that time.

6. Automatic Collection Tools (SDKs)

Cops and Robbers uses the following external SDKs.

  • Firebase Authentication
    • Purpose: social login authentication (Google, Apple)
    • Data: social account identifier, email address, profile information
  • Firebase Cloud Messaging (FCM)
    • Purpose: sending game event push notifications
    • Data: FCM token, device information
  • Firebase Crashlytics
    • Purpose: analysing app crashes and improving stability
    • Data: crash logs, device state (device model, OS version, kernel information), time of error
  • Firebase Remote Config
    • Purpose: managing app versions and controlling access to the Service
    • Data: app instance ID, app version, device information
  • Google Maps SDK
    • Purpose: displaying maps and visualising areas
    • Data: location coordinates (for map rendering)
  • Firebase Analytics
    • Purpose: statistical analysis of usage and feature improvement
    • Data: app instance ID, event logs (app launches, screen views, game progress stages and similar), device information, approximate location from IP address, and on Android the advertising identifier
  • Google Mobile Ads (AdMob)
    • Purpose: displaying advertising within the Service
    • Data: advertising identifier (AAID/IDFA), advertising interaction data, device information, IP address
  • Data collected through these SDKs is handled in accordance with each provider's privacy policy.

7. Provision to Third Parties and Outsourcing

Cops and Robbers outsources the processing of personal data as follows in order to operate the Service.

  • Google LLC (Firebase, AdMob)
    • Outsourced work: social login authentication (Google, Apple), sending push notifications, analysing app crashes, analysing usage, displaying advertising
    • Retention and use period: until the member withdraws or the outsourcing agreement ends
  • The Company imposes on its processors obligations to protect personal data equivalent to those in this Policy, and enters into agreements setting out technical and administrative measures for secure processing.

8. Transfer of Personal Data Abroad

Under Article 28-8 of the Korean Personal Information Protection Act, the Company transfers personal data abroad as follows.

  • Recipient: Google LLC
  • Contact: https://support.google.com/policies/contact/general_privacy_form
  • Destination country: United States
  • Time and method of transfer: transmitted over the network (HTTPS) at the time the Service is used
  • Data transferred: social account identifier, email address, profile information, FCM token, device identifier, device model, OS version, app crash logs, advertising identifier (AAID/IDFA), app instance ID, event logs (usage data)
  • Recipient's purpose: social login authentication, sending push notifications, analysing app crashes, managing app versions, analysing usage, displaying advertising
  • Recipient's retention and use period: until the member withdraws or the outsourcing agreement ends
  • Safeguards: encryption in transit (HTTPS) and Google's Data Processing and Security Terms
  • Users have the right to refuse this transfer abroad. If they do, use of core services based on Firebase may be restricted.

9. Retention and Destruction

Personal data is destroyed without delay once the purpose of collection and use has been achieved. Data held in electronic file form is deleted in a manner that makes it impossible to restore.

  • a. Account data (social account identifier, email address): deleted immediately on withdrawal
  • b. Game session data (nickname, team, state): deleted as soon as the session ends
  • c. Real-time location data: discarded immediately after delivery to participants in the same game, and deleted from the server as soon as the session ends (not stored permanently on the Company's servers unless separate consent is given)
  • d. Location reveal records (footprints): deleted as soon as the game session ends
  • e. Route and statistics accumulated during a game: discarded from the user's device memory as soon as the result screen is closed
  • f. Records confirming collection, use and provision of location data: kept for at least six months under Article 16(2) of the Korean Location Information Act, then permanently deleted in an unrecoverable manner
  • g. Error analysis data: automatically deleted 90 days after collection
  • h. Advertising and analytics data: retained in accordance with Google's policy. Users can reset or delete advertising identifiers at any time in device settings.
  • Where retention is required by law, the data is kept for the relevant period and then destroyed.
    • Access logs: three months (Korean Protection of Communications Secrets Act)
    • Records of consumer complaints and dispute handling: three years (Korean Act on Consumer Protection in Electronic Commerce)

10. Users' Rights and How to Exercise Them

Users may exercise the following rights at any time.

  • a. Request access to, correction of, deletion of, or suspension of the processing of their personal data
  • b. Request withdrawal from the Service
  • c. Withdraw consent to the use of location data
    • By revoking the app's location permission in device settings (in-app Settings > Location permission opens the OS permission screen directly)
    • By leaving the game or ending the game session (no location data is collected while a game is not in progress)
  • d. Withdraw consent to marketing communications (turn off the toggle in in-app settings)
  • e. Opt out of personalised advertising and reset the advertising identifier (iOS: Settings > Privacy & Security > Tracking / Android: Settings > Google > Ads)
  • f. Refuse the transfer of personal data abroad
  • Temporary location data processed during a game is discarded automatically when the game ends, so it is not retained even if no deletion request is made. Other rights may be exercised by email (copsnro66ers@gmail.com); the Company will verify identity and take the necessary steps without delay.

11. Children Under 14

  • 1. Under Article 22-2 of the Korean Personal Information Protection Act and Article 25 of the Korean Act on the Protection and Use of Location Information, Cops and Robbers does not knowingly collect personal data from children under 14.
  • 2. At sign-up the Company includes an "I am 14 or older" confirmation step to block registration by children under 14.
  • 3. If it is confirmed that a child under 14 registered by misstating their age, the account and personal data are deleted immediately.
  • 4. A legal representative may request access to, correction of, deletion of, or suspension of the processing of a child's personal data, and the Company will take the necessary steps without delay.

12. Security Measures

Cops and Robbers takes the following measures to keep personal data secure.

  • a. Minimising access rights to personal data
  • b. Encryption in transit (HTTPS/WSS)
  • c. Protecting location data (deleted immediately when a game session ends; background collection limited to while a game is in progress)
  • d. Technical measures that disable the location collection mechanism outside gameplay
  • e. Regular security reviews
  • f. Countries where data is processed: the Company processes personal data in the countries below, and has taken the security measures above having regard to the data protection regime in each.
    • Republic of Korea: operation of the Company's service infrastructure (application servers and databases)
    • United States: use of Firebase and AdMob provided by Google LLC
    • In services provided by Google LLC, personal data may be handled on servers in countries other than those listed, depending on Google's own operations. The Company uses those services having confirmed the safeguards under its agreement with Google.

13. Remedies for Infringement

If you need help with a personal data infringement, you can contact the following bodies.

  • Personal Information Dispute Mediation Committee (Korea): 1833-6972 / www.kopico.go.kr
  • Privacy Infringement Report Centre (Korea): 118 / privacy.kisa.or.kr
  • Supreme Prosecutors' Office Cyber Investigation Division (Korea): 1301 / www.spo.go.kr
  • National Police Agency Cyber Bureau (Korea): 182 / cyberbureau.police.go.kr

14. Data Protection Officer

  • Data protection officer: 동심지키미 (Dongsim Jikimi)
  • Enquiries: copsnro66ers@gmail.com

15. Changes to This Policy

This Policy may be revised where the Service or applicable law changes. Changes are announced through the app or the store page at least 7 days before the effective date, or 30 days in advance where the change is unfavourable to users, and take effect on the announced date.

16. Contact

For enquiries about personal data, the exercise of rights, or security issues, please email us.

copsnro66ers@gmail.com

17. Provisions for Users Outside the Republic of Korea

These provisions apply to users who reside outside the Republic of Korea and prevail over the other provisions of this document and over the Korean original.

  • 1. Applicable law
    • The processing of personal data of users residing outside the Republic of Korea is also subject to the data protection law of their country of residence, to the extent that law is applicable.
    • The legal bases set out in section 3 are those under Korean law.
  • 2. Users' rights
    • In addition to the rights in section 10, users may exercise any rights granted by the data protection law of their country of residence, such as the right to object to processing, to restrict processing, or to data portability.
    • Requests are made in the same way as in section 10, by email to copsnro66ers@gmail.com.
  • 3. Supervisory authority
    • Users may also raise concerns about the Company's handling of their personal data with the data protection authority of their country of residence.
    • Users in Japan may contact the Personal Information Protection Commission (PPC) at www.ppc.go.jp.

Supplementary Provisions

This Privacy Policy takes effect on June 29, 2026.

The Korean text of this Policy is the original. The English version is a translation provided for reference. In the event of any discrepancy in interpretation between the English and Korean versions, the Korean version prevails. This does not apply to the provisions for users outside the Republic of Korea, which are set out in the English version in order to address the laws of other countries and apply to such users regardless of that principle.