Privacy Policy
This is the version effective November 12, 2026. From November 15, 2026 the new Privacy Policy applies.
JENGA (젠가; representative HANA LEE; business registration no. 878-39-01232; the “Operator”) complies with the Personal Information Protection Act of the Republic of Korea and related laws, and processes only the information needed to provide the game You & Me: Level Up (the “Game”). The Game is rated 12+ by the Game Rating and Administration Committee of Korea (GRAC) and is a service for users aged 12 and over.
1. Information we process and why
| Category | Items | Purpose |
|---|---|---|
| Stored on your device only | Character save, settings, your age answer (14 or over, or 12–13) and when you gave it, the guardian consent request code and its check value, save backups | Saving your progress. Never sent to a server. |
| Game server sync (about every 90 seconds while playing) | Random character ID, character information (name, class, gender, level and experience within that level, gold, alignment, location, kill · death · PK counts, play time, blood pledge, quest progress, summary of stats and gear), game version, platform, IP address, browser · app information (User-Agent), first and last connection time, the time the current level was reached | Delivering mail, notices and events; server-wide announcements; rankings; preventing abuse; service statistics |
| Cloud Save account (optional) | User ID, password (stored only as a non-reversible hash), login session and device identifier · platform, uploaded character saves (including earlier versions) and growth-check records, failed login records (IP) | Continuing a character on several devices, restoring saves, blocking tampered saves, preventing brute-force attacks |
| Google sign-in (optional) | Your Google account’s unique ID and email address, when it was linked and last used (the name, profile photo and other details Google sends along are not stored). When you sign in from the Windows or Android app through the browser: a one-time sign-in code (stored only as a hash), device identifier · platform and IP address. The first Google sign-in creates a Cloud Save account without a password and links it | Signing in with Google and linking it to a Cloud Save account so you can continue the same characters on any device; confirming it is you when the account is deleted |
| Moving from an old web address to the new one (noxblood.vercel.app → neorangnarang.vercel.app → nrnrlv.com, nuriquest.com/noxblood → nrnrlv.com) | The character, settings and save backups stored on your device are handed over inside the browser in the part of the address after # and are not sent to a server. If you are signed in to Cloud Save, the old address uses your login session to get a one-time code (the server stores only the code's hash, the account, the time it was issued and expires, and the IP), and the new address sends that code with the device identifier · platform to get a new login session. The login session itself never goes into an address. | Continuing with the same character and Cloud Save sign-in at the new address |
| Paid purchases (when you use the Shop) | Order number, product name · contents · price, character ID and name, linked Cloud Save account, order · payment · delivery · refund times and status, the payment result reported by the payment service (status · amount · payment method type · transaction number · receipt link), platform, IP address | Confirming payments and delivering products, withdrawals and refunds, applying purchase limits, handling disputes, preventing fraudulent payments, keeping transaction records |
| Shop · Moonblood Stones · daily free gift (when you use the Shop) | Moonblood Stone balance (and how much of it was bought) and its history (kind · amount · balance · time · related order · reason), purchases made with Gold or Moonblood Stones (product · price · time · platform · IP address), daily free gift claims (date · character ID · linked Cloud Save account · IP address · the gift) | Keeping Moonblood Stones and delivering purchases, applying purchase limits and stock, giving the free gift once a day per character and account and stopping repeated claims from one connection, handling inquiries and refunds |
| Live play (about every second in town, hunting grounds and the crypt · can be turned off in Settings) | Random character ID, the place you are in (town · hunting ground · crypt floor) and your position, movement and actions there (attacks · skills · jumps · death), health as a percentage, appearance (class · gender · level · advancement · how your gear and costume look · polymorph · alignment colour · blood pledge name · worn title), what you write in Say chat, platform | Showing your character to other players in the same place and passing on Say chat; checking reports of abuse or scams |
| Muk-jji-ppa event (if you take part) | Character ID, chances used each day · the extra chance for sharing · whether the early-adventurer chance was used, the state of a game in progress, wins and losses, victory gift records (time · Moonblood Stones given · gift mail · length of the game) | Applying the daily number of games, deciding games and delivering victory gifts (mail · Moonblood Stones), preventing abuse, handling inquiries |
| Blood pledges (from level 20 · if you join or found one) | The pledge's name, emblem, colour, introduction and notice; each member's character ID, rank, join time, contribution and pledge coins; attendance, donation and hunt records; applications (the pledge applied to and a short note); what you write in pledge chat; records of rewards given through pledge activities; the pledge news (joins, departures, donations and the like) | Running pledges (joining, ranks, pledge chat, attendance, donations, buffs, weekly missions, the hunt, the pledge shop), the pledge ranking, preventing abuse, checking reports of abuse or scams |
| Between players (another player's character, whispers, friends, blocks, parties, trades, parcels, reports) | Character ID, whether you are online and where you are (about every 4 seconds while playing · less often with the game in the background), full details of your worn gear, your appearance, combat power and worn title (when they change), what you write in whispers and party chat, your friend and block lists, your party and invitations and whether you handed your character to the party leader, trade and parcel records (the items and gold exchanged, with whom, when, and the note on a parcel), the box of items waiting for you and when you took them, reports (reason, what you wrote, recent messages) | Showing your character to other players, passing on whispers and party chat, telling friends whether you are online and where, holding trades and parcels on the server so nothing is lost or doubled, preventing abuse such as item duplication and checking growth, handling reports |
| Voice chat · chat auto-translate (optional · when you speak through the chat window's microphone or read chat in another language) | Voice chat: your recorded voice (up to 15 seconds at a time) and the text your device's or browser's speech recognition made of it, its length, recording format and size, the language spoken, the channel (Say · party · pledge · whisper) and a whisper's recipient, character ID and name, when it was sent. Chat auto-translate: chat lines your device cannot translate itself (including the text of voice chat) and the reader's language, the translation, character ID (for the per-minute limit) | Passing your voice and its text on to the other players in the channel so they can hear it, showing chat and voice chat written in another language in the reader's language, filtering abusive words, applying the sending and translation limits |
| Error reports | Error message and where it occurred, game version, platform, character ID, User-Agent, IP address (for hourly rate limiting) | Fixing errors |
| Support and Bugs & Suggestions (optional) | Messages and conversations (Let's Talk), category, character name · ID, reply email (optional), game version, platform, IP address. When sent from Bugs & Suggestions, also a title, the details shown on screen before sending (place · position, device · browser · screen size · graphics setting, language, recent error log) and a screenshot (optional: the game screen when the window opened; chat and menus are not captured) | Answering (in Let's Talk, by in-game mail, and by email if you gave one), finding and fixing errors, reviewing suggestions, applying the sending limits |
| Guardian consent (legal guardians of users aged 12–13) | The consent request the Game makes: the request code, a check value only the device knows (stored only as a non-reversible hash), platform, language, when it was made and when the Game last checked it. The consent record: the legal guardian's name, how and when they were confirmed, the identity check's transaction number (when confirmed by a phone identity check; the date of birth it returns is used only to confirm the guardian is 19 or over and is not stored, and no phone number is received), and when the Operator confirmed by email, phone or paper, that contact, the operator who confirmed and a note; the IDs of the characters played on that device after consent | Confirming and recording a legal guardian's consent under Article 22-2 of the Personal Information Protection Act; deleting the linked characters' information when consent is withdrawn |
What other players can see: server-wide announcements show a character's name and the item found and where; the in-game Ranking (the top 50 of characters active in the last 30 days, and your own place) shows a character's name, class (and whether it has advanced), level and rank. Characters restricted from the server are not shown in the ranking. With live play (on by default), other players in the same town, hunting ground or crypt floor see your character's name and appearance, level, class, blood pledge and title, your position, movement and actions, your health as a percentage, and what you write in Say chat. Turn off Settings › General › Other players and none of this is sent or received. A blood pledge's name, emblem, introduction, level, member count and its lord's character name are visible to everyone (pledge finder, pledge ranking), and the pledge name appears in the rankings and beside the character's name. The member list (character names, classes, levels, ranks, contribution, whether they are online), pledge chat, the notice and the pledge news are visible to the members of the same pledge; applications (character name, class, level, short note) to that pledge's lord and vice lords. When another player taps your character or picks it in the ranking, a pledge's member list or chat, they see your character card: character name, class, level, advancement and alignment, blood pledge, title, full details of your worn gear with your costume and appearance, combat power, health, attack and armour, kills and PK count, ranking place, and whether you are online. Where you are and when you were last online are shown only to players who have added each other as friends and to players in the same party or blood pledge. A trading partner and a parcel's recipient see the items and gold exchanged and the note on the parcel; party members see each other's name, class, level, whether they are online, where they are, health as a percentage and whether they handed their character to the party leader. Whispers, invitations, trades and parcels from players you blocked do not reach you.
Card numbers and other payment details are entered by you directly into the payment gateway’s window; the Operator neither receives nor stores them. We do not use advertising or analytics trackers or cookies.
Voice chat records only while you hold the microphone button in the chat window (your device asks for microphone permission the first time). Your voice and its text reach the other players where you are, like Say chat, or only your party, pledge or whisper recipient when you send it there. Turning speech into text is done by your device's or browser's speech recognition; depending on the browser (for example Google for Chrome, Microsoft for Edge) your voice may be sent to that browser's speech recognition service while you record and handled under that company's privacy policy. Chat auto-translate uses the translator on your device first (Chrome) and only otherwise asks Anthropic, through the Operator's server, to translate (see section 3). Turn off Settings › General › Chat auto-translate and no translation is requested.
※ Added November 6, 2026 (applies immediately): voice chat and chat auto-translate, optional features opened that day, are now described in sections 1, 2 and 3.
2. How long we keep it
- Cloud Save accounts and uploaded saves: until you delete the account. Deletion is immediate. Removing a single character from the account deletes its cloud saves right away.
- Google sign-in link (unique ID · email): until you unlink it or delete the account. The apps’ one-time sign-in codes expire after 10 minutes, are deleted as soon as they are used, and expired ones are deleted when the next code is issued.
- Character information on the game server (not linked to a cloud account): deleted automatically one year after the last connection.
- Live play positions and appearance: deleted one day after they were last sent. Say chat: deleted after 3 days.
- Blood pledges: pledge and membership records are deleted when you leave or the pledge is disbanded (and with the character's server record). Pledge chat is deleted after 3 days, the pledge news after 90 days, unanswered applications after 30 days, and records of pledge rewards after a year.
- Between players: whispers and party chat are deleted after 3 days, online status and place after a day, finished trades and records of items received after 90 days, records of items and gold moving between players (for growth checks) after a year, and handled reports after a year. A parcel not collected within 30 days goes back to its sender. Worn-gear details, friend and block lists and parties go with the character's server record (also when the account is deleted).
- Voice chat: your recorded voice and its record (text, channel, time and so on) are deleted after 24 hours; the text sent as chat is deleted after 3 days with that channel's chat. Chat auto-translate: lines and their translations are kept for 30 days so the same line is not translated twice (without who wrote them), then deleted; the request-limit records are deleted after an hour.
- Error reports: 90 days after the last occurrence. Support inquiries (Let's Talk conversations, Bugs & Suggestions reports and their screenshots): one year after they are resolved. Failed login records: 24 hours. Login handoff codes: deleted as soon as they are used; unused codes expire after two minutes and are deleted at the next server clean-up.
- Guardian consent: request codes a guardian does not confirm within 7 days are deleted. A consent record is deleted when the legal guardian withdraws consent (together with the linked characters' information), or once the server no longer holds any linked character and no game has used the consent for over a year. If the Operator, confirming by email or phone, does not obtain consent, the contact received is deleted without delay.
- Muk-jji-ppa event: the daily play records are deleted after 90 days and the victory gift records after a year, and both go with the character's server record.
- Shop: daily gift claims and the Moonblood Stone history are deleted after a year. Records of Moonblood Stones bought with money (credits and take-backs) and purchase records are kept for 5 years, like the order records below. When a character's server record is deleted, its Moonblood Stone balance and gift claims go with it.
- Order, payment and refund records of paid products: kept as the Korean Act on Consumer Protection in Electronic Commerce requires — records of contracts, withdrawals, payments and supply for 5 years, and records of consumer complaints and disputes for 3 years. They remain for that period even if the account or character is deleted. Orders that were never paid are deleted after 90 days.
- Where another law requires longer retention, we keep the information for that period.
3. Third parties, processors and international transfer
The Operator does not sell your information or provide it to third parties. The game server and database (the information in section 1) are stored on a server the Operator runs itself in the Republic of Korea. To run the service, some processing is entrusted to the providers below; for providers outside Korea, the information listed is transferred abroad.
| Provider · country · contact | What they do · information | When · how · retention |
|---|---|---|
| Cloudflare, Inc. United States (global network: the Cloudflare server nearest to you) | Passing connections to nrnrlv.com on to the Operator’s server, encryption (HTTPS), blocking attacks Information: everything exchanged between the Game or site and the server (the items in section 1), IP address, browser and app information (User-Agent) | On every connection, encrypted Retention: processed only while passing it on; security and incident logs follow Cloudflare’s policy |
| Telegram Messenger Inc. Outside Korea (data centers in several countries) | Operations alerts to the Operator: new support inquiries, Let's Talk messages, player reports, server status Information: inquiry and report numbers and categories, character name, level and class, platform and game version, the text of inquiries, conversations and replies, report reasons, notes and the reported chat lines | When an inquiry or report arrives and when the Operator looks it up, encrypted Retention: deleted by the Operator within 1 year after handling, like the inquiry records |
| Google LLC United States | Providing the Google sign-in screen and confirming the sign-in (when you use Google sign-in) Information: what you enter at Google goes to Google and is processed under Google’s privacy policy; we receive only the unique ID and email address Google confirms | When you use Google sign-in Retention: Google’s policy |
| Vercel Inc. United States and others (global delivery network) | Delivering the pages that send players from the old web addresses (neorangnarang.vercel.app · noxblood.vercel.app) to the new one Information: IP address and browser information of visits to the old addresses (access logs) | When you open an old address Retention: Vercel’s policy |
| The OMU music site (omu.co.kr) and its host Hostinger International Ltd. Outside Korea (Hostinger servers) | Cover pictures of the songs played in the Blood Moon Tavern Information: IP address and browser information sent when your device loads a cover picture straight from omu.co.kr | When a cover picture loads Retention: OMU’s and Hostinger’s policies |
| Anthropic, PBC United States | Chat auto-translate (when your device cannot translate a line itself, with the AI model Claude) Information: the chat lines to translate (including the text of voice chat) and the target language. Character names, IDs and IP addresses are not sent | When you read chat in another language, encrypted Retention: Anthropic’s policy |
| NICE Payments Co., Ltd. (나이스페이먼츠) Republic of Korea | Providing the payment window, processing payment approvals and cancellations and reporting their results (when you buy in the Shop) Information: order number, product name and amount, payment result | When you pay Retention: NICE Payments’ policy and the applicable laws |
| Korea PortOne Co., Ltd. (PortOne) Republic of Korea | Providing the payment window and reporting payment approvals and cancellations (when you buy in the Shop). Providing a legal guardian's phone identity check and reporting its result (when the guardian of a user aged 12–13 consents with an identity check, through the identity verification agency connected to PortOne) Information: order number, product name and amount, payment result. What the guardian enters in the identity check goes directly to PortOne and the verification agency; the Operator receives only the result (name · date of birth · whether verified · transaction number) | When you pay, when a guardian checks their identity Retention: the policies of PortOne and the verification agency and the applicable laws |
Information is sent over encrypted connections (HTTPS) when you use the service, and these providers process it only to provide their service. Shop payments go through the one payment service the operator has chosen (NICE Payments, or PortOne and the payment gateways connected to it). The operator sends that service only the order number, product name and amount; payment details entered in the payment window are processed by the payment service and the card companies, easy-pay services and the like under their own privacy policies. Passing connections through Cloudflare is needed to reach the Game, so if you do not want your information transferred abroad you can stop using the service and delete your account (see section 4). Google sign-in is optional; if you do not use it, nothing goes to Google.
※ Corrected on November 3, 2026: the server location now reflects the move of the game server to a server the Operator runs itself in Korea, and connection delivery (Cloudflare), operations alerts (Telegram) and song cover pictures (OMU) were added. The information processed and its purposes did not change.
4. Your rights
- You may request access, correction, deletion or suspension of processing. Send the request from Settings › Data › Support in the Game and we will handle it without delay.
- Delete your account: in the Game under Menu › Cloud Save › Delete Account, or right away on the account and data deletion page. An account created with Google is confirmed by signing in again with the linked Google account. Deleting the account also removes its Google link.
- Unlink Google: an account that has a password can unlink Google under Account · Cloud Save on the title screen. You can also remove the Game’s access in your Google Account (myaccount.google.com › Security › Third-party apps & services).
- Data on your device: delete it with Settings › General › Delete Character, by clearing the site data in your browser, or by uninstalling the app.
5. Security measures
- Passwords are stored only as non-reversible hashes, and login attempts are limited.
- The server database is kept where it cannot be reached from the web, and the operations tools require separate administrator authentication with limited sign-in attempts.
- All communication is encrypted with HTTPS.
6. Children under 14 and minors
The Game is rated 12+ (“12세이용가”) by the Game Rating and Administration Committee of Korea (GRAC) and may be used only by persons aged 12 and over, and the Operator does not knowingly collect personal information from anyone under 12. When the Game is first opened (and every 30 days after that), you pick your age: “14 or over” or “12–13”.
Under Article 22-2 of the Personal Information Protection Act, we process the personal information of children under 14 only after a legal guardian, such as a parent, has consented. If you pick “12–13”, the Game runs on that device only and sends no information to the game server until a legal guardian consents (game server sync, live play, blood pledges, between-player features, the Shop, Cloud Save, Google sign-in, support and error reports in section 1 are all off). The web version still downloads the game files from nrnrlv.com, so the web server's access log (IP address, time, the file requested) is kept.
A legal guardian consents through the QR code or address the Game shows (nrnrlv.com/g/<code>). On that page the guardian reads what is processed, why and for how long, marks their consent and then either confirms with a phone identity check that they are 19 or over (Enforcement Decree, Article 17-2(1)3), or tells the Operator by email, after which the Operator sends the consent details and confirms the guardian's reply (item 5 of the same paragraph; phone or paper under items 6 and 4). Nothing is collected from the child. What the consent record keeps and for how long is in sections 1 and 2.
The legal guardian may withdraw consent at the same address at any time (with a new identity check if they consented that way, otherwise by contacting the Operator). Then the Operator deletes, without delay, the server information of the characters and Cloud Save accounts linked to that consent (payment records the law requires us to keep remain for the periods in section 2), and the Game goes back to running on that device only. If we learn of personal information of anyone under 12, or of a child under 14 processed without a legal guardian’s consent, we delete it without delay. The legal guardian of a user under 19 may ask through a support inquiry to access, correct, delete or suspend the processing of that user’s personal information and to see their play and payment history; once we have confirmed the guardian, we handle it without delay.
7. Contact
Send questions, reports and requests about personal information from Settings › Data › Support in the Game. In Korea you can also seek advice on privacy infringement from the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118 in Korea) and the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).
Privacy officer: HANA LEE (representative of JENGA) · contact through Settings › Data › Support in the Game (Let's Talk).
8. Changes to this policy
If this policy changes, we announce it in the Game and on this page 7 days before it takes effect (30 days for important changes).
9. Revision history
- Added November 6, 2026 (applies immediately): Voice chat and chat auto-translate, optional features opened that day, are described in sections 1, 2 and 3. Voice chat recordings and their text reach the players in the channel and are deleted after 24 hours; chat lines the device cannot translate itself are translated by Anthropic (United States). This information is processed only when you speak through the microphone or read chat in another language.
- Effective November 12, 2026 (announced November 5, 2026): The Game has been rated 12+ by the Game Rating and Administration Committee of Korea (GRAC), so it is now for users aged 12 and over, and “6. Children under 14 and minors” says that children under 14 use the Game with a legal guardian’s consent and when such information is deleted. Sections 1, 2, 3 and 6 now also say that users who pick “12–13” use the Game on their device only, with nothing sent to the server, until a legal guardian consents; how that consent is obtained and confirmed (phone identity check or the Operator's confirmation) and withdrawn; and what the consent record keeps and for how long. PortOne's tasks now include the guardian's phone identity check.
- Corrected November 4, 2026 (applies immediately): The Operator is now named with its business registration details (JENGA, representative HANA LEE, business registration no. 878-39-01232), and “7. Contact” names the privacy officer. The information we process and why we process it have not changed.
- Effective November 10, 2026 (announced November 3, 2026): NICE Payments Co., Ltd. (payment window, payment approvals and cancellations) is added to the table in “3. Third parties, processors and international transfer”, and the Policy now says that Shop payments go through the one payment service the operator chooses, which receives only the order number, product name and amount.
- Corrected November 3, 2026 (applies immediately): “3. Third parties, processors and international transfer” now matches how the service actually runs: the game server and database are on a server the Operator runs itself in Korea, connections pass through Cloudflare, and support inquiry and report alerts reach the Operator through Telegram. The information processed and its purposes did not change.
- Effective November 10, 2026 (announced November 3, 2026): The “Support and Bugs & Suggestions” row now lists Let's Talk conversations and, for a report from Bugs & Suggestions, its title, an optional screenshot and the details shown on screen before sending (place · position, device · browser · screen size · graphics setting, language, recent error log). This information is received only when you send a report.
- Effective November 10, 2026 (announced November 3, 2026): The Game is now for users aged 15 and over, and “6. Users under 15 and minors” covers children under 14 and the requests of legal guardians.
- Version effective November 10, 2026 (announced November 3, 2026)
- Version effective November 4, 2026 (announced October 28, 2026)