This is an English translation provided for convenience. If it differs from the Korean version, the Korean version prevails. Read the Korean version (한국어).
The operator collects only the minimum personal information strictly necessary for “Iron Crown” membership sign-up and for providing the Service. We do not collect phone numbers, names or profile photos, and we collect an email address only if you choose email login. If you sign up with a username, we collect the username and password; the password is stored after being converted in an irreversible way (scrypt), so not even the operator can know the original value.
1. Items Collected and Purposes of Use
| Category | Items collected | Purpose of use |
|---|---|---|
| Sign-up and login | If you sign up with a username: the username and password (stored in converted form); the member identifier issued by the login provider (Google or Kakao); if you choose email login: your email address; the types of login methods linked; records of your agreement to the Terms | Identifying members, login and re-authentication (including sending email verification codes), linking and unlinking login methods |
| Guest play | If you start without signing up: a session stored in a browser cookie (up to 400 days, extended each time you play) and a guest number | Continuing play in the same browser without logging in; linking a login method or moving to an existing member account |
| Game play | Lord name; records of game accounts, estates, items and currency; session information | Providing the game service, protecting accounts, continuing play across multiple devices |
| Chat | Messages sent in world and alliance chat, and the time they were sent | Delivering them to lords on the same server (world chat) or in the same alliance (alliance chat); investigating abuse, spam and other grounds for restricting use |
| Account transfer | Records of transfer requests, acceptances and cancellations; the member numbers of the parties | Processing transfers, investigating ownership disputes, preventing fraudulent use |
| Paid purchases | Order number, product and amount, payment status, payment key issued by the payment provider | Confirming payments and delivering products; processing withdrawals (cancellations) and refunds |
| Generated automatically | Service access logs (date and time of access, IP address, whether it was a login, sign-up or use); for each session, the device type (operating system and browser), the leading part of the IP address and the last access time; security and operations logs | Retention required by applicable laws, blocking excessive requests, responding to security incidents, the list of signed-in devices on the account screen |
Guests do not enter personal information such as names or contact details. For a guest who goes more than 48 hours without accessing the game before capturing their first village, we delete the guest number, session, game account and estate without delay (access logs are kept for the period required by law). Otherwise, if you clear your cookies or do not access the game for 400 days, there is no way to return to the guest estate, and its game records are managed in the same way as members' game accounts.
Payment method information such as card numbers is processed by the payment provider (Toss Payments) and is not stored by the operator. Email verification codes are sent through Google's (Gmail) email sending service.
2. Retention and Use Period
We keep your information until you delete your membership. When you request deletion, the deletion is put on hold for 30 days to prevent you from losing your account because of a request made by someone else. During this period, use of your game accounts is suspended, and you can cancel the deletion by logging in with a linked login method. After 30 days, we delete without delay your username, password, login provider member identifier, email address, sessions, account notifications and login history. If you want your information deleted immediately without the hold period, you can ask the operator, and we will do so after verifying your identity. However, the following records are kept, linked only to a member number separated from your login information, for the periods specified and then destroyed.
- Records of contracts or withdrawal of subscription (cancellation), payment, and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce, etc. (전자상거래 등에서의 소비자보호에 관한 법률))
- Records of consumer complaints or dispute handling: 3 years (same Act)
- Service access logs (date and time of access, IP address): 3 months (Protection of Communications Secrets Act (통신비밀보호법)). They are destroyed automatically when the period ends.
- Account transfer records and related operations records: 3 years (for handling ownership disputes; dispute-handling records under the same Act)
Device information (device type, leading part of the IP address, last access time) is attached only to that session, and is deleted along with it when you log out or the session expires.
Chat messages are deleted automatically 30 days after they are sent, regardless of membership deletion, and are also deleted before then once a membership deletion becomes final.
3. Right to Refuse Consent
You may refuse to consent to the collection and use of personal information. The items above are strictly necessary for providing the Service, so if you do not consent, you cannot sign up as a member.
4. Children Under 14
Processing the personal information of children under 14 years of age (full age) requires the consent of their legal guardian (법정대리인). The Service does not currently provide this procedure, so only people aged 14 or older may sign up.
5. Your Rights
You may at any time request access to, correction, deletion or suspension of processing of your personal information, and withdraw your consent, and the operator will act on the request without delay. You can also withdraw your consent and have your personal information deleted yourself by deleting your membership on the account settings screen. However, records that laws require to be kept may not be deletable during the required period.