Hammerking Privacy Policy

Effective date: December 1, 2026

AI PLANET (the "Company") collects only the information it needs to run the mobile game Hammerking. This policy explains what we collect and why, who we entrust it to, and when we delete it. We do not collect your name, date of birth, phone number, resident registration number or card number. This is an English translation; if it differs from the Korean version, the Korean version prevails.

1. Information we process

Category	Items	When	Required?
Account	User identifier (a randomly generated account ID), Member No., sign-up and last-seen times	When your account is created after your first run	Required
Consent record	Versions of the terms and privacy policy you agreed to, confirmation that you are 14 or older, optional alert choices, time of consent, app version	On the consent screen	Required
Google link	Google account email address, Google account identifier	When you link a Google account	Optional (required to make payments)
Profile	Profile ID	When you set one	Optional
Gameplay	Game save data (progress, currencies, items, settings), run records and leaderboard scores, results of opening crates and kits, records of ad rewards, attendance and other rewards, coupon use	While you play	Required
Payments	Order number, purchase token, item bought, purchase time, country of purchase, the item's list price (KRW), Gem transaction history, refund and cancellation records	When you pay	Required when paying
Device and access	Device model, app version, language setting, server access times, access logs such as IP address, error logs	Automatically while you use the app	Required
Advertising	Advertising ID, device and app information, ad views and clicks	Collected automatically by Google AdMob when ads are shown	The advertising ID can be turned off on your device (section 7)
Notifications	Device notification token	When notifications are used	Required to receive notifications
Support	Email address, Member No., message, order number, and (for cancelling a minor's payment) documents proving guardianship	When you contact us	Optional

Payment method details such as card numbers are handled by Google Play; we never receive them. We only ask you to confirm that you are 14 or older; we do not collect your date of birth.

2. Why we process it

To identify players, save and restore game progress, and let you continue on other devices with Google
To verify and deliver paid purchases, keep the Gem ledger, and handle cancellations, refunds and voided payments
To record crate and kit results, check that results match the published odds, and prepare for disputes
To prevent abuse such as tampering, hacking and payment fraud, and to apply restrictions
To run leaderboards and the borrowable character list
To show ads and give ad rewards
To send notices about maintenance, payments and accounts, and promotional notifications to players who agreed
To answer inquiries, handle disputes and meet legal obligations
To find and fix errors and improve the Service

3. Retention and deletion

Information	Retention
Account, game save data, Profile ID, leaderboard records, Google link, notification token	Deleted 7 days after you request account deletion (the period in which you can cancel the request).
Older copies of game save data	We keep one per day, only the latest 7, and delete them with your account.
Payment records, Gem transaction records, cancellation and refund records	Kept for 5 years with the link to you removed, even after account deletion, then deleted (Act on the Consumer Protection in Electronic Commerce — records of contracts and withdrawals, and of payment and delivery).
Records of crate and kit results	Kept for 5 years with the link to you removed, to handle disputes about odds, then deleted.
Consent records (terms, privacy, promotional notifications)	Kept for 5 years with the link to you removed, as proof of consent, then deleted.
Inquiry, complaint and dispute records	Kept for 3 years after the matter is closed, then deleted (same Act — records of consumer complaints and disputes). Documents proving a minor's guardianship are deleted as soon as the check is done; only the outcome is kept.
Server access logs (IP address and so on)	Deleted automatically when the retention period of our server provider (Supabase) ends.
Records used to stop a request from being processed twice	Deleted after 30 days.

Electronic files are deleted so that they cannot be recovered. Where another law requires longer retention, that information is stored separately from other data for that period.

4. Information visible to other players

Your Profile ID (or the name tag we assign if you have not set one), your leaderboard scores, and the character card other players can borrow to keep fighting after they fall (its power and hammer, gear and sidekick setup) are visible to other players. Your Coins, Gems and payment records are not. Accounts we confirm as abusive are removed from leaderboards and the borrowable list.

5. Sharing with third parties

We do not sell or provide your personal information to other companies, except where you have agreed in advance or where law enforcement or other authorities request it through legal procedures.

6. Processors and transfers abroad

We entrust processing of personal information to the companies below to provide the Service. They are all based outside Korea, so your information may be transferred abroad or accessed from abroad. These transfers are processing and storage entrusted to perform our service contract, and are disclosed in this policy under Article 28-8(1)(iii) of Korea's Personal Information Protection Act.

Recipient (contact)	Country	When and how	Items	Purpose	Retention
Supabase Inc. (supabase.com/privacy)	US company. Data stored in the Republic of Korea (Amazon Web Services Seoul region)	Sent over an encrypted internet connection whenever you use the app	Account, consent record, Google link, profile, gameplay, payment, device and access information in the table in section 1	Storing player data, sign-in and account management, server-side logic (payment verification, Gem ledger, crate results and so on)	Until the end of the retention periods in section 3, or until the processing contract ends
Google LLC (policies.google.com/privacy)	The US and other countries where Google has servers	Exchanged over an encrypted internet connection when you link a Google account or pay	Google account email and identifier (provided by Google to us), a masked account tag attached to payments, item bought, purchase token	Google sign-in, Google Play billing, payment verification and refunds	As long as needed to process and evidence payments and refunds; otherwise under Google's privacy policy
Google LLC — AdMob (policies.google.com/privacy)	The US and other countries where Google has servers	Sent directly by the ad tool in the app when ads are shown	Advertising ID, device and app information, IP address, ad views and clicks	Showing ads, measuring ad performance, preventing invalid clicks, verifying ad rewards	Under Google's privacy policy
Google LLC — Firebase Cloud Messaging (firebase.google.com/support/privacy)	The US and other countries where Google has servers	Sent over an encrypted internet connection when a notification is sent	Device notification token, notification content	Sending app notifications	Until you turn notifications off or delete your account

Because this information is essential to the Service, you cannot use the Service if you do not want it transferred abroad. You can stop the transfer by deleting your account (see Account & Data Deletion). You can turn off the advertising ID as described in section 7.

7. Advertising ID and behavioral information

The app does not use cookies. Ads are served by Google AdMob, which may use your advertising ID and app usage to show ads that match your interests (personalized ads) and to measure ad performance. We do not separately collect or store your advertising ID.

If you do not want personalized ads, go to your Android device's Settings → Google (or Privacy) → Ads to delete or reset your advertising ID. You will still see ads, but they will not be personalized.

Because the Service is not offered to children under 14, we do not run personalized ads aimed at children under 14.

8. Promotional notifications

Promotional notifications such as events, discounts and gifts are sent only to players who turned on "Event Alerts" on the consent screen or in Settings. You can play without agreeing.
Between 9 p.m. and 8 a.m. we send them only to players who separately agreed to "Night Alerts". Night Alerts can only be turned on when Event Alerts are on.
Promotional notifications start with "(Ad)" and show the sender (Hammerking) and how to opt out.
You can turn them off at any time in Settings → Account, and we tell you the date and result whenever you agree or opt out. Every 2 years from the date you agreed, we ask whether you still want them.
Notices about maintenance, payments, refunds, account deletion and service shutdown are not advertising and may be sent regardless of these settings.

9. Your rights

You may at any time ask to see your personal information, correct or delete it, or stop its processing, and you may withdraw your consent.

In the app: change your Profile ID, turn Event and Night Alerts off, or delete your account (Settings → Account).
By email: write to Customer Support (aiplanetcontact@gmail.com) with your Member No. After confirming your identity, we will act within 10 days and tell you the result. Information we must keep by law cannot be deleted, and we will tell you why.
A legal guardian or someone you authorize can exercise the same rights. We may ask for a power of attorney or other proof.

10. Children under 14

Hammerking is only for people aged 14 or older, and we do not collect personal information from children under 14. If we learn that we have processed information of a child under 14, we delete it immediately.

11. Security measures

All information exchanged between the app and our servers is sent over encrypted connections (HTTPS).
Server data is locked per account and can only be read or written through defined server functions.
Our operations tool runs only on designated Company computers behind a password, and every operator action is kept in a log that cannot be deleted.
Our server verifies each payment directly with Google before delivering it.
Server keys and passwords are never put in the app or the code repository, and as few people as possible handle personal information.

12. Privacy officer

Privacy officer: 박효준 (CEO)
Department: Customer Support team
Contact: aiplanetcontact@gmail.com · +82 502-1935-2172

13. Getting help

If you need advice or a remedy for a privacy issue, you can contact these Korean agencies:

Personal Information Infringement Report Center: privacy.kisa.or.kr · 118 (in Korea)
Personal Information Dispute Mediation Committee: kopico.go.kr · 1833-6972
Supreme Prosecutors' Office Cyber Investigation: spo.go.kr · 1301 (in Korea)
Korean National Police Agency Cyber Bureau: ecrm.police.go.kr · 182 (in Korea)

14. This website

This information website uses no cookies or visitor analytics and does not collect any input. Our hosting provider (Vercel Inc., US) may briefly keep access logs (IP address, access time, browser information) for security and operations.

15. Changes to this policy

We announce changes in the game and on this site at least 7 days before they take effect. Important changes, such as collecting more information or for new purposes, are announced at least 30 days in advance, and we ask for your consent again where required. Previous versions are available on request.

This policy takes effect on December 1, 2026.