Interestick Privacy Policy

In accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, Interestick (the “Company”) establishes and discloses this Privacy Policy to explain the procedures and standards by which it processes personal information, so that users can use its website and mobile game services safely, and to handle related complaints promptly and smoothly.

This Privacy Policy may be amended due to changes in relevant laws and guidelines or in the Company's internal policies.

Article 1 [Personal Information Collected and Used]

1. The Company may collect the following personal information to identify users.

- [Required] Member information: External platform ID (Google, Apple)

2. When users install and use our games and portal services, the Company may automatically collect or generate the following information in order to comply with relevant laws, protect accounts and items, prevent fraudulent use, and provide stable services.

- [Required] When installing and using a game: Nickname, download history, service usage records, access logs (including IP address), records of misuse, game version, payment records, device information (model name, OS information, device language and country), device identifier, location information

3. When users contact customer support, the following additional information is collected.

- [Required] Customer support and complaint handling: Email address, game name, game ID, nickname

- [Optional] Customer support and complaint handling: Information needed to review and answer the inquiry, device information (operating system, OS version, device model name)

4. When a user requests a refund, the Company asks for the following personal information to process it. The information collected may vary depending on the payment method, and separate consent is obtained when necessary.
If the user is a minor, additional information may be requested to verify the user's identity and relationship with their legal guardian.

- [Required] Payment/refund information: Email address, game name, game open ID, payment receipt

- [Optional] Payment/refund information: In cases such as cancellation of a payment made by a minor, the real name and documents proving the family relationship to confirm the payment, materials needed to verify the name of the payment method holder, device information (operating system, OS version, device model name)

5. For services with a feature that uses artificial intelligence (AI) to interpret sentences typed by the user (only where applicable), the following information may be collected to provide that feature.

- [Required] Sentences entered by the user while using the service and records of how they were processed, guest account identifier

※ Entered sentences are not collected for the purpose of identifying users. Please do not enter personal information such as your name or contact details in the input field.

Article 2 [Methods of Collecting Personal Information]

1. The Company may collect users' personal information through the following methods.

  1. Information provided by users when making customer inquiries
  2. Collection through network communication data or access history

Article 3 [Purposes of Collecting and Using Personal Information]

1. The Company may use the collected personal information for the following purposes.

  1. User management

    - Identifying users for content provision, checking duplicate registrations, managing users who violate the rules, detecting and restricting abnormal use, performing contracts, and resolving disputes

  2. Provision of services

    - Handling complaints and providing other customer services, delivering notices, providing paid services and notifying payment details, and supporting in-game cooperative play and community services

  3. Development of new services and use for marketing and advertising

    - Information on new services and events, improvement of service quality, and processing of statistical data

  4. Interpretation of entered sentences (only where applicable)

    - Interpreting the meaning of sentences entered by the user and generating responses, and improving service quality by analyzing inputs that could not be interpreted

Article 4 [Retention and Use Period of Personal Information]

1. Collected personal information is retained and used while the user maintains their user status. It is destroyed without delay when the user loses that status, or when the purpose of using the information has been fully achieved even if the user maintains that status. However, the Company retains user information for the “retention period” notified to users when they consented to the collection and use of their personal information.

  1. Purpose of retention: To resolve consumer complaints and disputes after withdrawal from a game service

    Retention period: 30 days

    Items retained: Access records (date, time and location of access), records of misuse, download records, external platform ID, device information

  2. Purpose of retention: To provide marketing and event information and to select winners

    Retention period: Deleted immediately after winners are notified

    Items retained: Nickname, UID

  3. Purpose of retention: Interpretation of entered sentences and improvement of service quality (only for services described in Article 1, Paragraph 5)

    Retention period: Until the account is deleted. However, guest accounts that are not linked to an external platform account (Google, Apple) are automatically deleted, together with this data, if they are not accessed for 30 days after the last access.

    Items retained: Sentences entered by the user and records of how they were processed, guest account identifier

    ※ Users may request deletion of their account through the contact in Article 12, and the Company will delete it within 7 days of receiving the request.

2. Where the Act on the Consumer Protection in Electronic Commerce (the “E-Commerce Act”), the Protection of Communications Secrets Act, or other relevant laws require information to be preserved, the Company keeps user information for the period prescribed by those laws. In this case, the Company uses the retained information only for the purpose of preservation, and the retention periods are as follows.

  1. Records on labeling and advertising: 6 months (E-Commerce Act)
  2. Records on contracts or withdrawal of subscriptions: 5 years (E-Commerce Act)
  3. Records on payments and supply of goods: 5 years (E-Commerce Act)
  4. Records on consumer complaints or dispute resolution: 3 years (E-Commerce Act)
  5. Service usage records such as access logs and access IP information: 1 year (Protection of Communications Secrets Act)

Article 5 [Procedures and Methods for Destroying Personal Information]

1. When personal information is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved, the Company destroys it without delay.

  1. Destruction procedure – The Company destroys personal information whose retention period has expired in a way that makes it impossible to restore.

    ※ However, deleting a mobile game app (the “App”) does not immediately destroy the personal information collected by the Company.

  2. Destruction method – Personal information stored in electronic files is deleted using technical methods that make the records impossible to restore.

    - Personal information printed on paper is destroyed with a shredder.

Article 6 [Provision of Personal Information to Third Parties]

1. The Company processes users' personal information only within the scope specified in Article 3 [Purposes of Collecting and Using Personal Information] and, in principle, does not provide users' personal information to outside parties. The following cases are exceptions.

  1. When the user has given prior consent
  2. When required by special provisions of law, by court judgments or orders, by binding orders of administrative agencies, or by an investigative agency's request made for investigative purposes in accordance with the procedures and methods prescribed by law

2. In accordance with the “Guidelines on Processing and Protecting Personal Information in Emergencies” jointly announced by the relevant government ministries, the Company may provide personal information to the relevant authorities without the consent of the data subject in emergencies such as disasters, infectious diseases, incidents or accidents posing an imminent risk to life or body, or imminent loss of property. Click here* for details.

Article 7 [Outsourcing of Personal Information Processing and Overseas Transfer]

1. The Company outsources some of the tasks necessary to provide its services to external companies, and manages and supervises them so that they process personal information safely in accordance with Article 26 of the Personal Information Protection Act. If a user does not use a service related to an outsourced task, the user's personal information is not provided to that company.

  1. The outsourced personal information processing tasks are as follows.
  1. Of the outsourced tasks, those processed overseas are as follows.

Recipient

Firebase services (Google LLC and its affiliates)

Contact
(Person in charge of information management)

https://firebase.google.com/support
(Contact through the Google Cloud Support Center)

Destination country

United States
(Depending on the service, data may be stored and processed on servers in the Tokyo, Japan region)

Time and method of transfer

Transmitted over the network when information necessary for using the service is entered

Items transferred

Service usage information, browser, device information, advertising ID, location information

Purpose of use

Data storage, system operation and error analysis for providing the service

Retention and use period

Until the service ends or the purpose of retaining and using the personal information is achieved

※ The transfers below apply only when using a service with the sentence interpretation feature described in Article 1, Paragraph 5. Depending on the service, information may be transferred to some or all of the recipients below.

Recipient

OpenAI, L.L.C.

Contact
(Person in charge of information management)

privacy@openai.com

Destination country

United States

Time and method of transfer

Transmitted over the network (encrypted HTTPS) via the Company's server each time the user enters a sentence

Items transferred

Sentences entered by the user and the service usage information needed to interpret them
(Information that can identify the user, such as account identifiers or email addresses, is not transmitted)

Purpose of use

Interpreting the meaning of entered sentences and generating responses

Retention and use period

The Company does not use the response storage feature, and transmitted information is not used to train AI models. However, under OpenAI's policy, it may be retained for up to 30 days for abuse monitoring and then deleted.

Recipient

Anthropic, PBC

Contact
(Person in charge of information management)

privacy@anthropic.com

Destination country

United States

Time and method of transfer

Transmitted over the network (encrypted HTTPS) via the Company's server each time the user enters a sentence

Items transferred

Sentences entered by the user and the service usage information needed to interpret them
(Information that can identify the user, such as account identifiers or email addresses, is not transmitted)

Purpose of use

Interpreting the meaning of entered sentences and generating responses

Retention and use period

The Company does not use any separate storage feature, and transmitted information is not used to train AI models. However, under Anthropic's policy, it is retained for up to 30 days after receipt or generation and then deleted, and may be retained for up to 2 years if a violation of its usage policy is suspected.

※ The transfer below applies only when using a service that contains advertisements.

Recipient

Google LLC (AdMob)

Contact
(Person in charge of information management)

https://policies.google.com/privacy
(Contact through Google's privacy inquiry form)

Destination country

United States

Time and method of transfer

Transmitted over the network when an advertisement is requested while using a service that contains advertisements

Items transferred

Advertising ID, device information (model name, OS information, device language and country), IP address, app usage records

Purpose of use

Displaying advertisements, providing personalized advertisements and measuring advertising performance

Retention and use period

In accordance with Google's Privacy Policy

Users may refuse the overseas transfer of their personal information by contacting the Company's personal information protection officer or the department in charge. If a user refuses, the Company excludes that user's personal information from overseas transfer. In this case, however, the use of services that necessarily involve the overseas transfer of personal information may be restricted.

Article 8 [Rights of Users and Legal Guardians and How to Exercise Them]

1. Users, and the legal guardians of children under the age of 14 (“children”), may at any time request access to, correction of, or deletion of their own or the child's personal information.

2. Users and the legal guardians of children may exercise the rights in Paragraph 1 through the Company's main telephone number, email or other means, and may contact the personal information protection officer (one@interestick.com). When the Company receives such a request from a user or a child's legal guardian, it will take the necessary measures without delay.

3. Requests for access to personal information and for suspension of its processing may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.

4. Requests for correction or deletion of personal information may be refused where other laws provide otherwise.

Article 9 [Installation, Operation and Refusal of Automatic Personal Information Collection Tools]

1. The Company does not use “cookies” that store and retrieve users' usage information.

2. The Company allows online behavioral advertising providers to collect behavioral information.

  1. Online behavioral advertising: A marketing technique that analyzes users' online activity, access records and similar information to provide services tailored to their characteristics
  2. Online behavioral advertising providers: Google, AdMob
  3. How behavioral information is collected: Automatically when a user visits a website or runs an app
  4. Behavioral information collected: The user's website visit history, app usage history and search history

  5. How to refuse the collection of advertising identifiers: Users may choose whether to receive personalized advertisements and may turn off the following device options to prevent advertising identifiers from being collected.

    - Android: Settings -> Google -> Ads, or Settings -> Privacy -> Ads

    - iOS: Settings -> Privacy -> Apple Advertising

    ※ The menu path may vary depending on the OS version.

Article 10 [Measures to Ensure the Security of Personal Information]

1. To keep users' personal information from being lost, stolen, leaked, forged, altered or damaged while it is processed, the Company takes the following measures.

  1. Administrative measures: Establishing and implementing an internal management plan, and regular training for personnel who handle personal information
  2. Technical measures: Managing access rights to personal information processing systems, and installing and updating security programs
  3. Physical measures: Controlling access to server rooms, data storage rooms and similar areas

Article 11 [Criteria for Additional Use or Provision Without the Data Subject's Consent]

Under Article 15(3) and Article 17(4) of the Personal Information Protection Act and Article 14-2(1) of its Enforcement Decree, the Company may additionally use or provide personal information without the consent of the data subject. Accordingly, the Company considers the following before any such additional use or provision.

  1. Whether the purpose of the additional use or provision is related to the original purpose of collection
  2. Whether the additional use or provision is foreseeable in light of the circumstances of collection or processing practices
  3. Whether the additional use or provision unfairly infringes on the interests of the data subject
  4. Whether necessary security measures such as pseudonymization or encryption have been taken

Article 12 [Handling of Requests for Access, Correction and Deletion]

Users may submit requests for access to, correction of, or deletion of personal information under Article 35 of the Personal Information Protection Act to the department below. The Company will make every effort to handle such requests promptly.

Department handling requests for access, correction and deletion

Contact

one@interestick.com

Article 13 [Remedies for Infringement of Users' Rights]

Users may contact the following organizations for remedies and consultation regarding infringements of personal information.

Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency)

Services

Reports of personal information infringement, consultation

Website

privacy.kisa.or.kr

Phone

118 (no area code)

Address

Personal Information Infringement Report Center, 3F, 9 Jinheung-gil, Naju-si, Jeollanam-do (Bitgaram-dong 301-2), 58324, Republic of Korea

Personal Information Dispute Mediation Committee

Services

Applications for personal information dispute mediation, collective dispute mediation (civil resolution)

Website

www.kopico.go.kr

Phone

1833-6972 (no area code)

Address

4F, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul, 03171, Republic of Korea

Cyber Investigation Division, Supreme Prosecutors' Office

Website

www.spo.go.kr

Phone

1301 (no area code)

Cyber Investigation Bureau, Korean National Police Agency

Website

https://ecrm.cyber.go.kr/

Phone

182 (no area code)

Article 14 [Changes to the Privacy Policy]

The Company's Privacy Policy may change due to changes in laws or in the Company's internal policies. In that case, the Company will announce the changes on its website or within the service, in a way users can check, at least 7 days before they take effect. However, if a change is unfavorable to users or significant, the Company will announce it at least 30 days before it takes effect.


This Privacy Policy takes effect on October 27, 2026.

- Date of announcement: October 20, 2026

- Effective date: October 27, 2026

- Previous Privacy Policy: Applied from January 1, 2024 to October 26, 2026