Spear Legend Privacy Policy

Hifun Studio ("we", "us") handles the personal information of players of the game Spear Legend (Korean title: 창 키우기; the "Game") as described below. This policy covers the Game app. Our website is covered by the website privacy policy (in Korean).

This is an English translation of the Korean privacy policy. If the two versions differ, the Korean version prevails.

1. Playing without signing in

While you play without signing in, your progress (gate records, the growth of your spear and companion weapons, gear, souls and sigils, trial stars, settings) is stored only on your device and is never sent to our servers. It is deleted when you uninstall the app, and we cannot see it. Every part of the Game can be played without signing in.

2. When you link a Google account

If you link a Google account to continue your progress across devices or to join the server rankings, we store the following.

Account identifier — we do not store the identifier Google gives us as-is. We keep only an irreversible hash (SHA-256) of it combined with the Game's name.
Google account display name — stored on our server but never shown to other players. Rankings show an automatically generated in-game name instead (see section 3).
Game progress — your save data such as gates, spear attack, companions and trial stars. The list of items you purchased (for example Ad-Free) is recorded as part of that progress.

When you sign in, Google also sends us your email address. We use it only at that moment to complete the sign-in (and to recognise operator accounts) and we do not store it. We never receive your password. Progress that was on your device before linking returns to the device when you unlink the account.

3. Server rankings and season rewards

Once an account is linked, an automatically generated in-game name (for example 창수-a1b2c3) and your records are visible to other players. Your Google name, photo and email address are never shown. Public boards are: gate, spear attack, total companion attack, strongest companion, trial stars, plus the weekly expedition, world boss and siege boards. If you do not want this, do not link an account, or unlink it.

When a weekly or monthly season ends, top ranks receive sigils. The Game has no chat or messaging and offers no way for players to contact each other directly.

4. Payments

Payments are processed by Google Play. We never receive card numbers or other payment details. To confirm that a purchase is genuine and to make sure the same purchase is never granted twice, our server looks the purchase up with Google Play and keeps a purchase verification record: order number, product name, a hash of the purchase token and the time of verification. If an account is linked at that moment, the record also carries the account identifier from section 2, and the purchased item is written into your game progress. Refunds and payment disputes follow Google Play's procedures.

5. Advertising

The Game shows Google AdMob ads. To serve them, Google may collect and use the advertising ID (AAID), device information, app usage and diagnostics, and an approximate location derived from the IP address. Google processes this information under its own policies; see How Google uses information from sites or apps that use its services.

Turning off personalised ads — on Android, go to Settings → Google → Ads to reset or delete your advertising ID. Deleting it does not stop ads, but stops interest-based personalisation. Buying Ad-Free inside the Game removes ads entirely.

Players in the European Economic Area, the United Kingdom and Switzerland are asked for consent through Google's User Messaging Platform (UMP) before any ad is requested. If consent is not confirmed, no ad is requested. You can change your choice at any time in Settings → Account & Services → Ad privacy options inside the Game.

6. Usage statistics and error reports

To keep the Game stable and to tune its difficulty, the Game sends anonymous usage statistics to our server: event names (for example app opened, gate reached, ad requested, purchase attempted) with a few numbers attached, the error message, file name and line number when an error occurs, the running build number, the language setting, and a random 32-character token generated on first launch so that one device can be counted once.

This token is unrelated to the advertising ID, your Google account or any device serial number, and it disappears when you uninstall the app. No name, email address, location or contacts are sent, and statistics are never joined with the account identifier. You can stop sending them in Settings → Data → Send usage statistics inside the Game. Statistics are deleted after 180 days.

7. Processors and third parties

Google LLC — sign-in, in-app purchases, advertising
Cloudflare, Inc. — servers and storage, ranking aggregation

We do not sell or share your personal information with third parties for any purpose other than those above.

International transfer — both companies operate servers outside Korea, including in the United States. When you link an account or an ad is shown, the information in sections 2, 4, 5 and 6 is transmitted over the network and processed in those countries, for the retention periods in section 8. If you do not link an account, the information in section 2 is never transmitted.

8. Retention and deletion

Data of a linked account (sections 2 and 3) is kept for as long as the account exists and is destroyed without delay when you request deletion. Purchase verification records (section 4) are kept to confirm delivery, prevent double grants and handle refunds; when you delete your account the link to the account identifier is removed and the record itself is kept only for the transaction-record retention period required by the Korean E-Commerce Act (5 years). Records of the payment itself are kept by Google Play under applicable law and its own policies. Usage statistics (section 6) are deleted after 180 days.

You can request deletion of your account and data on the account deletion page, or delete them immediately from the settings screen inside the Game.

9. Children

The Game is not directed at children under 13. We do not knowingly collect personal information from children under 13, and if we learn that such information has been collected we delete it immediately.

10. Your rights

You may at any time request access to, correction or deletion of, or a halt to the processing of your personal information. Send your request to the contact below; we will verify it, act on it and let you know the result.

11. Privacy officer

Hyungjin Kim · hifunapps@gmail.com

12. Notice

This policy takes effect on 21 September 2026 (first in force 9 September 2026; revised 11 September; this revision published 14 September 2026). This revision adds purchase verification records (section 4) and anonymous usage statistics (section 6). Future changes will be announced on this page 7 days before they take effect.