Current service scope
Find Friends does not operate a separate sign-up process. Basic gameplay and settings are stored on the device. When you use online features that require Play Games authentication, such as ranking or record restoration, the game data needed to provide those features is stored on the Operator's servers.
- Operator
- Bom Studio
- Representative and privacy contact
- Taesu Kim (김태수)
- help@bomstudio.co.kr
1. Information processed
| Feature | Information that may be processed | Location |
|---|---|---|
| On-device gameplay | Stage and character IDs, completion records, play time and count, music, sound, vibration and other settings | Android app-private storage |
| Play Games authentication | Server authorization code processed temporarily, authentication result, hashed player identifier and common user ID | Google Play Games and Operator server |
| Ranking and profile | Nickname, avatar, rank, stars, win count, challenge/attempt/stage identifiers, play records and update times | Operator servers on AWS |
| Game record restoration | Completed stages, best and latest play records, clear counts, character/music/stage unlocks and progress state | Operator servers on AWS |
| Ads and consent | Ad requests, impressions and interactions, consent state, IP address, app/device/SDK diagnostics, advertising ID, App Set ID and similar identifiers | Google Mobile Ads / UMP |
| Usage analytics and crash diagnostics | App-instance and installation identifiers, app/device/session information, gameplay events, approximate region derived from IP, crash stack traces and relevant app state | Google Analytics for Firebase / Firebase Crashlytics |
| Service notifications | FCM token, Firebase Installation ID, app version, language-topic subscription, notification permission and settings | Firebase Cloud Messaging / Installations |
| Content and network | IP address, request time, User-Agent, error and transfer information normally included in network requests | AWS, CloudFront or similar services |
The Operator does not store raw Play Games player IDs or server authorization codes in its database. The App does not directly request your name, phone number, contacts, microphone, camera, precise location or payment details for gameplay. Starting with version 2.11.9, automatic Firebase Analytics and Crashlytics collection is enabled for gameplay analytics and crash diagnostics. Analytics advertising-ID collection and default ad-personalization signals are disabled. The Operator does not set names, email addresses or Play Games user IDs as user identifiers for these SDKs.
2. Purposes
- Store and restore gameplay, settings and records
- Verify users for Play Games-based online features
- Provide ranking, calculate scores, prevent duplicate or abnormal submissions, and process rewards
- Provide ads and rewarded features and manage privacy choices
- Deliver service notifications enabled by the user
- Analyze gameplay, sessions and feature usage and improve app stability
- Deliver game content, respond to incidents, protect security and meet legal obligations
3. Your choices
- Basic on-device gameplay remains available without using online features that require Play Games authentication.
- Advertising privacy choices can be changed through Google UMP and the App's ad privacy settings.
- Service notifications can be enabled or disabled through the App and Android notification settings.
- When service notifications are disabled in the App, it unsubscribes from the topic and requests deletion of its FCM token and Firebase Installation ID.
4. Information shown in ranking
If you participate in ranking, your chosen nickname and avatar, rank, stars and win count may be shown to other users. Email addresses, Google account details, raw Play Games player IDs and internal Operator identifiers are not shown publicly.
5. Advertising
The App may provide interstitial and rewarded ads through Google Mobile Ads. Google may process IP addresses, app interactions, diagnostics and advertising/app identifiers for ad delivery, measurement and fraud prevention. Actual processing may vary depending on region, UMP choices and Android advertising settings.
6. Service notifications
Firebase Cloud Messaging may be used to deliver service notifications related to Find Friends, such as updates, operational changes, new content and ranking results. The current release does not send promotional or marketing push notifications. The Operator does not store FCM tokens on its own server for individually targeted delivery.
7. External services and processing providers
The Operator uses the external services below only as needed to provide the service. Where personal information is processed on the Operator's behalf, the provider is managed in accordance with applicable law.
| Provider / service | Task / purpose | Relevant information |
|---|---|---|
| Amazon Web Services | Server, database and API operations; storage of rankings, game records and profiles; content delivery; security and operational logs | Hashed identifiers, profile/game records and standard network information |
| Google Play Games | Authenticate users for online features | Server authentication and player-verification information |
| Google Analytics for Firebase / Firebase Crashlytics | Gameplay analytics and crash/stability diagnostics | App-instance and installation identifiers, usage events/sessions, approximate region, app/device information, crash stack traces and relevant app state |
| Firebase Cloud Messaging / Installations | Service notifications and app-instance management | FCM token, Installation ID, app/device/network information and topic subscriptions |
| Google Mobile Ads / UMP | Advertising, measurement and privacy-choice management | Ad requests, IP, interactions, diagnostics, advertising/app identifiers and consent state |
8. Retention and deletion
| Category | Retention |
|---|---|
| On-device data | Until App data is cleared or the App is uninstalled |
| Ranking, profile and game records | While the relevant online feature is provided; deleted without undue delay after a verified deletion request or when no longer needed, including after service termination |
| Ranking and record API operational logs | Up to 30 days for incident and security response |
| Information processed by advertising, analytics, crash-diagnostics and notification providers | Under each provider's policies and user settings |
Data subject to deletion is deleted from the Operator's active databases. If applicable law requires specific information to be retained, it is kept separately only for the required period and then deleted.
9. Data deletion requests
To request deletion of Find Friends ranking, profile and game records stored on Operator servers, contact help@bomstudio.co.kr. The Operator may use a minimal verification step to avoid deleting another user's data and will not ask for a Google password or raw authorization code/token. See the data-deletion guide.
10. Security
Safeguards include HTTPS transmission, encryption of data stored on AWS, least-privilege access, not storing raw Play Games player IDs or authorization codes, and excluding request bodies from operational logs.
11. International processing
When Google services are used, the information below may be processed outside Korea as needed to provide those services. Find Friends ranking, game records and profiles are primarily stored in the AWS Seoul Region.
| Item | Details |
|---|---|
| Recipient | Google LLC and relevant subprocessors (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy) |
| Information transferred | Play Games authentication/player-verification information, ad/consent information, FCM token, Installation ID, app-instance and crash-diagnostics identifiers, usage events/sessions, crash stack traces, approximate region, IP and app/device/network information |
| Countries | United States and countries where Google operates relevant service infrastructure |
| Timing and method | Encrypted network transfer during usage analytics and crash diagnostics or when Play Games authentication, advertising or notification features are used |
| Purpose and retention | Authentication, analytics/crash diagnostics, advertising/privacy-choice management and notification delivery; retained under Google's policies and user settings |
| How to refuse / effect | You may avoid Play Games-based online features, disable notifications and change advertising privacy choices. The related online feature, notification or ad-personalization functionality may then be limited, while basic on-device gameplay remains available. |
12. Users under 14
Where Korean law requires parental consent for processing personal information of a user under 14, the applicable legal process will be followed.
13. Your rights and contact
Where provided by applicable law, you may request access, correction, deletion or restriction of processing, or withdraw consent. Requests and questions may be sent to help@bomstudio.co.kr.
14. Changes to this Policy
If changes to law, service features, SDKs or external services affect this Policy, the content and effective date will be updated accordingly.