Embroidery Box Privacy Policy
- App Name: Embroidery Box (Google Play Package Name: com.sbgc.stitchbox)
- Personal Information Controller: Individual Developer Kim Seunghoon (Google Play Developer Name: s.h.)
- Effective Date: November 3, 2026
- Last Modified: October 26, 2026
Kim Seunghoon (the "Developer") processes the personal information of users of Embroidery Box (the "App") in accordance with applicable laws, including the Korean Personal Information Protection Act. This policy explains what information the App stores and where, whom it sends information to, and how users can make choices and exercise their rights.
Summary
- The App has no sign-up, the Developer runs no server of its own, and the App uses no analytics tools.
- Game records and settings are stored on your device. If you are signed in to Play Games, the same content is also stored in your Play Games account as a "saved game," so you can continue on another device.
- When you use Play Games (achievements, saved games), Google Play billing, or AdMob ads, the necessary information is sent to Google LLC. Signing in to Play Games and making purchases are optional.
- The App shows AdMob ads. In the European Economic Area (EEA), the UK, and Switzerland, whether ads are personalized depends on your choice in the consent screen. In all other regions, the App does not request personalized ads (it requests non-personalized ads only).
1. Personal Information Processed and Purposes
1.1 Information Stored on the Device
| Item | Purpose | Retention |
|---|---|---|
| Settings: Sound, Vibration, Mistake check, Stitch/Pin button side (left/right), Show pins as dots, Reduce motion, Auto-pin full lines, Large puzzle starting view, last view per pattern | Keep app settings | Until the App is deleted or its data is cleared |
| Pattern records (best stars, number of completions, best time, first completion time, chosen thread color per pattern), Today's pattern and Sunday picture records (pattern, stars, mistakes, and time per date), streak, tutorial progress, unlocked moon pictures, box growth stage, earned thread colors and cosmetic rewards, "already shown" notice flags, first play date, cumulative counters | Provide game features, calculate achievements | Until the App is deleted or its data is cleared |
| Unfinished puzzles (filled cells, mistakes, hints used, elapsed time) | Resume play | Until the puzzle is finished or the data is cleared. An unfinished Today's pattern disappears at midnight |
| Thread (hint) balance and its grant/use ledger, achievement sync markers, ad state (e.g., counting toward interstitial ads), last-run date used for clock protection | Provide game features, control ad frequency, prevent duplicate grants | Until the App is deleted or its data is cleared |
| Owned purchases (Remove ads, cosmetic items), purchase tokens of granted consumable purchases (Threads ×10; most recent 200) | Show purchase status offline, avoid granting the same purchase twice | Re-checked with Google Play when the App starts, returns to the foreground, or opens the shop |
| Install ID (a random value created on the device when the App is installed), a transformed value (hash) of the Play Games player ID this device's save was last merged with, cloud save status | Tell devices apart for thread use, detect a change of Play Games account, mark whether there is anything left to save | Until the App is deleted or its data is cleared |
- This information is not sent to the Developer, and the Developer cannot see it.
- The install ID is not an advertising ID or a hardware identifier and is not linked to your name, email, or other personal details.
1.2 Play Games Saved Games (Cloud Save, Optional)
If you are signed in to Play Games, the App uses the "Saved Games" feature of Google Play Games Services to store your game progress in your Play Games account. Your progress continues on other devices signed in to the same account. The App merges this device's save with the account's save and saves again at times such as app start, right after sign-in, when you finish a puzzle, when a purchase is granted, when you leave the App, and when you tap [Save now] in Settings.
| Item | Purpose | Required? |
|---|---|---|
| A compressed file of the on-device save in section 1.1 (settings, pattern records, Today's pattern records, unfinished puzzles, the thread ledger including install IDs and purchase tokens, streak, achievement sync markers, etc.) | Continue your progress when you change devices or play on several devices | Optional. If you do not sign in, it is stored on this device only |
| Saved game cover image (a small picture of recently finished patterns), description ("n finished · n-day streak"), play time, number of finished patterns | Display the saved game in Play Games | Optional |
- The saved game is kept on Google's servers under your Play Games account. The Developer does not receive its contents separately and cannot see them. Source: https://developer.android.com/games/pgs/savedgames
- Purchase status is checked again with Google Play billing on each device. Purchase status values carried in the saved game are not used on other devices.
- Settings stay per device. Settings are copied only once, when progress is first restored to a new device.
- The saved game stays in your Play Games account even if you delete the App. How to delete it is described in sections 3 and 6.
1.3 Information Sent to Google
| Feature | Information Sent | Purpose | Required? |
|---|---|---|---|
| Play Games (Play Games Services) | If signed in: Play Games player ID, profile name and avatar, achievements, and the saved game in section 1.2. In addition, analytics and diagnostic information that the Play Games SDK collects automatically | Achievements, cloud save. Google uses the analytics and diagnostic information for SDK stability and product improvement | Optional. The whole game can be played without signing in (see automatic sign-in below) |
| Google Play billing | Purchase history (product, purchase state, etc.) | Process payments, confirm and restore purchases | Payment only when you buy. To check purchase status, the App queries Google Play for this App's purchase history when it starts, returns to the foreground, or opens the shop |
| AdMob ads (Google Mobile Ads SDK) | IP address (may be used to estimate general location), ad interactions such as app launches, taps, and video views, app performance diagnostics, and device identifiers such as the advertising ID and app set ID. If an error occurs in the ad feature, the Google Mobile Ads SDK may send error details (stack information) and device information (device type, OS version, memory status, app version) to Google. App code content is redacted before it is sent | Show ads, frequency capping and measurement, fraud prevention, checking ad feature errors | The App shows ads. For personalization, see section 2. Sending error information cannot be turned off by the user |
- Play Games Services tries to sign you in automatically when the App starts. If the Google account on the device has a Play Games profile, you may be signed in without tapping anything, and while signed in, achievements and the saved game are uploaded to Play Games automatically. If there is no profile, Google may suggest creating one; you can keep playing without it. Source: https://developer.android.com/games/pgs/android/android-signin
- Play Games items are based on Google's published data disclosure for the Play Games Services SDK: https://developer.android.com/games/pgs/data-collection
- AdMob items are based on Google's published data disclosure for the Google Mobile Ads SDK: https://developers.google.com/admob/android/privacy/play-data-disclosure
- Payment method details such as card numbers are handled by Google; the Developer does not receive them. The App handles only the purchase information needed to check purchase status on the device, and stores on the device only whether items are owned and the purchase tokens of granted consumables.
1.4 Information You Send Directly
| Item | Purpose | Retention |
|---|---|---|
| Email address, inquiry content | Answer inquiries, handle rights requests | Deleted without delay once handled, unless the law requires keeping it for a period |
1.5 Information the Developer Does Not Collect
- The App does not ask for your name, phone number, address, date of birth, or other personal details.
- The App does not request location, contacts, photos/storage, camera, or microphone permissions.
- The App does not use its own crash reporting or analytics tools. However, the Google Mobile Ads SDK may send error details to Google when an error occurs in the ad feature; this information is described in section 1.3. Information collected by the Play Games SDK on its own is also described in section 1.3.
- The Developer does not receive or keep the advertising ID. The Google Mobile Ads SDK uses the advertising ID to show ads (section 1.3).
1.6 Google Play App Quality Information (Android vitals)
On some devices of users who have turned on "Automatically share usage & diagnostics," Google Play collects quality information such as app crashes and app-not-responding events and provides it to the Developer through Google Play Console (Android vitals). This information is collected by Google at the device level, not by the App, and depends on your device settings. The Developer uses it only to fix errors and improve quality.
Source: https://support.google.com/googleplay/android-developer/answer/9844486
2. Ads and Your Choices
The App shows AdMob ads (interstitial ads, and rewarded ads that you choose to watch).
- EEA, UK, and Switzerland: The App shows the Google User Messaging Platform (UMP) consent screen, and whether ads are personalized depends on your choice. The App does not request ads until the consent process is complete. You can change your choice at any time in [Settings] > [More] > [Ad consent] (this menu appears only in regions where the consent screen is required).
- All other regions (including South Korea): The App does not request personalized ads and requests non-personalized ads only. There is no menu in the App to turn on personalized ads.
- Non-personalized ads may still use cookies or the advertising ID for frequency capping and aggregated ad reporting. Source: https://support.google.com/admob/answer/7676680
- You can delete or reset your advertising ID in your device settings.
3. Retention and Deletion
- Information stored on the device: Deleted immediately when you delete the App or clear its storage in the device's app info settings.
- Android Auto Backup: The App's game save files (the main save and one spare copy) are included in Android Auto Backup. If you have turned on Google backup on your device, they are stored in your own Google account backup and may be restored on a new device or after reinstalling. The install ID, share images, and set-aside progress are not backed up. This backup is kept in your Google account, and the Developer cannot see it. If you turn off backup in your device settings, it is not stored.
- Play Games saved game: Kept in your Play Games account and not deleted when you delete the App. To delete it, use "Delete individual game data" for this game in your Play Games profile settings on Google Play (section 6). If a device with the App installed and signed in remains, its progress will be uploaded again at the next save, so please first delete the App or clear its data on each device, and then delete the game data. Source: https://support.google.com/googleplay/answer/9130646
- Information sent to Google: Kept by Google under Google's Privacy Policy. https://policies.google.com/privacy
- Inquiry emails: Deleted from the mailbox and trash without delay once handled. If the law requires keeping them, the basis and items are kept separately and deleted when the period ends.
4. Provision to Third Parties and International Transfer
The Developer does not sell your personal information. Because the App uses Google services, information is transferred abroad as below when you use those features. Except for lawful requests such as from investigative agencies under the law, information is not provided to anyone else. The Developer does not outsource personal information processing.
| Recipient | Items Transferred | Country | When and How | Purpose | Retention | How to Refuse and Effect |
|---|---|---|---|---|---|---|
| Google LLC (Play Games: achievements, profile, SDK diagnostics) | Play Games items in section 1.3 | United States and countries where Google operates servers | Sent over the internet when achievements are uploaded while signed in (including automatic sign-in), or when the Play Games SDK sends analytics and diagnostic information | Achievements, SDK improvement | Per Google's policy | If you do not sign in, achievements and profile information are not sent; only the achievements feature is unavailable. Uploaded data can be deleted as described in section 6 |
| Google LLC (Play Games Saved Games) | Items in section 1.2 | United States and countries where Google operates servers | Sent over the internet at each save time in section 1.2 while signed in; if offline, after the connection returns | Cloud save, continuing on multiple devices | Until you delete it (section 3) | If you do not sign in, nothing is sent and the save stays on this device; only continuing on another device is unavailable |
| Google LLC (Google Play billing) | Purchase history | United States and countries where Google operates servers | Sent through Google Play when you buy, and when purchase status is checked or restored at app start, return to foreground, or shop entry | Payment processing, purchase confirmation | Per Google's policy | If you do not buy, no payment information or purchase history is created |
| Google LLC (AdMob) | AdMob items in section 1.3 | United States and countries where Google operates servers | Sent over the internet when ads are loaded and shown and when you interact with ads | Show ads, frequency capping and measurement, fraud prevention | Per Google's policy | In the EEA, UK, and Switzerland you can refuse personalized ads in the consent screen. In other regions only non-personalized ads are requested. Buying Remove ads stops interstitial ads |
| Google LLC (Gmail, inquiry emails) | Email address, inquiry content | United States and countries where Google operates servers | When you send an inquiry email | Answer inquiries | Section 3 | If you do not send an email, nothing is sent |
- Contact Google: https://support.google.com/policies/contact/general_privacy_form
- Google's international transfer safeguards: https://policies.google.com/privacy/frameworks
- How Google uses information from apps: https://policies.google.com/technologies/partner-sites
5. Security Measures
As an individual developer, the Developer takes the following measures:
- There is no server or account system of the Developer's own, so the Developer does not gather or keep users' personal information.
- Game data is stored in the app-specific storage area that Android protects from other apps. Cloud save is stored only in your Play Games account, and Android Auto Backup only in your own Google account.
- The App does not request location, contacts, storage, camera, or microphone permissions. The permissions the App uses are vibration, internet, network state, Google Play billing, advertising ID, Android ad services (advertising ID, ad attribution, topics), keep device awake (WAKE_LOCK), foreground service, and an app-only permission that prevents other apps from receiving the App's internal signals. All except vibration are added by the Google Play billing, ads, and Play Games SDKs and Android libraries. None of them are asked of you separately.
- The Developer does not receive payment method information.
- Inquiry emails are read only by the personal information protection officer.
- Google states that data collected by Play Games Services and the Google Mobile Ads SDK is encrypted in transit.
- If the Developer becomes aware of a personal information breach, the Developer will notify users as required by law and, where necessary, report it to the Personal Information Protection Commission or the Korea Internet & Security Agency.
6. Your Rights and How to Exercise Them
You (or a legal guardian for a child under 14) may request access to, correction of, deletion of, and suspension of processing of personal information, and may withdraw consent. Since the only personal information the Developer keeps directly is inquiry emails, most rights can be exercised directly as follows:
- Delete device data: Delete the App or clear its storage in the device's app info settings.
- Play Games sign-in and cloud save: Signing in is optional. You can sign in from [Settings] > [Cloud save] > [Sign in to Play Games] in the App. While signed in, the same place shows the last save time, and [Save now] saves right away. If the device has a Play Games profile, you may be signed in automatically when the App starts (section 1.3). There is no sign-out menu in the App.
- Delete Play Games data (achievements, saved game): In the Google Play Store app, go to Profile > Settings > Play Games profile, or visit https://play.google.com/games/profile, and delete this game under "Delete individual game data." Please follow the order in section 3 (delete device data first). Guide: https://support.google.com/googleplay/answer/9130646
- View achievements: [Settings] > [More] > [Achievements] in the App.
- Purchase history: Check your Google Play purchase history in your Google account. Purchase status can be loaded again from [Settings] > [More] > [Restore purchases] or [Restore purchases] in the shop screen.
- Ads: Users in the EEA, UK, and Switzerland can change their choice in [Settings] > [More] > [Ad consent]. You can delete or reset your advertising ID in your device settings.
- Other requests: Send them to the email in section 9. The Developer will respond within 10 days of receiving the request; if that is not possible, the Developer will tell you the reason and the expected date. The Developer may ask for additional information to the extent needed to confirm that you are the requester.
7. Children's Personal Information
The App is intended for users aged 13 and older and is not directed at children under 13. The Developer does not knowingly collect children's personal information. The App has no step that asks for or checks age, so the Developer cannot know a user's age. If you believe the personal information of a child under 14 is being processed, please tell the Developer at the email in section 9. The Developer will delete without delay any information the Developer keeps (inquiry emails) and explain how to delete the information stored on the device and in the Google account (sections 3 and 6).
8. Users in the European Economic Area (EEA) and the UK (GDPR)
- Controller: Kim Seunghoon, seunghoon.system@gmail.com
- Legal bases:
- Play Games achievements, Play Games Saved Games (cloud save), payment processing: performance of the service you requested (GDPR Article 6(1)(b))
- Analytics and diagnostic information automatically collected by the Play Games SDK: processed by Google for SDK stability and product improvement (under Google's Privacy Policy)
- AdMob ads: consent given in the UMP consent screen (GDPR Article 6(1)(a)). Purposes shown in the consent screen as based on legitimate interest rely on legitimate interest (Article 6(1)(f)), and you can object to them in the same screen.
- Answering inquiries: legitimate interest (GDPR Article 6(1)(f))
- Compliance with legal obligations: Article 6(1)(c)
- Rights: You may request access, rectification, erasure, restriction of processing, objection, and data portability, and you may withdraw consent at any time (this does not affect processing before withdrawal). Ad consent can be withdrawn in [Settings] > [More] > [Ad consent]. Send other requests to the email in section 9.
- Complaints: You may lodge a complaint with the supervisory authority of your place of residence or work, or where the infringement occurred.
- EEA supervisory authorities: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
- UK Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/
- International transfers: Google's international transfer safeguards in section 4 apply.
9. Personal Information Protection Officer and Contact
- Personal Information Protection Officer: Kim Seunghoon
- Email: seunghoon.system@gmail.com
For inquiries, complaints, and remedies regarding personal information, please contact the email above.
10. Remedies for Rights Infringement
If you need to report or get advice about a personal information infringement, you can contact:
- Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency): privacy.kisa.or.kr, dial 118 (within Korea)
- Personal Information Dispute Mediation Committee: www.kopico.go.kr, 1833-6972 (within Korea)
- Supreme Prosecutors' Office: www.spo.go.kr, dial 1301 (within Korea)
- Korean National Police Agency: ecrm.police.go.kr, dial 182 (within Korea)
11. Changes to This Policy
If this policy changes, the changes and the effective date will be posted on this page at least 7 days before they take effect. For significant changes, such as more items collected or wider sharing, notice will be given at least 30 days in advance, and consent will be obtained again if required by law.
- Effective Date: November 3, 2026
- Last Modified: October 26, 2026