Privacy Policy
JENGA (젠가; representative HANA LEE; business registration no. 878-39-01232; the “Operator”) complies with the Personal Information Protection Act of the Republic of Korea and related laws, and processes only the information needed to provide the game You & Me: Level Up (the “Game”). The Game is rated 12+ by the Game Rating and Administration Committee of Korea (GRAC) and is a service for users aged 12 and over.
1. Information we process and why
| Category | Items | Purpose |
|---|---|---|
| Stored on your device only | Character save, settings, your age answer (14 or over, or 12–13) and when you gave it, the guardian consent request code and its check value, save backups | Saving your progress. Never sent to a server. |
| Game server sync (about every 90 seconds while playing) | Random character ID, character information (name, class, gender, level and experience within that level, gold, alignment, location, kill · death · PK counts, play time, blood pledge, quest progress, summary of stats and gear), game version, platform, IP address, browser · app information (User-Agent), first and last connection time, the time the current level was reached | Delivering mail, notices and events; server-wide announcements; rankings; preventing abuse; service statistics |
| Cloud Save account (optional) | User ID, password (stored only as a non-reversible hash), login session and device identifier · platform, uploaded character saves (including earlier versions) and growth-check records, failed login records (IP) | Continuing a character on several devices, restoring saves, blocking tampered saves, preventing brute-force attacks |
| Google sign-in (optional) | Your Google account’s unique ID and email address, when it was linked and last used (the name, profile photo and other details Google sends along are not stored). When you sign in from the Windows or Android app through the browser: a one-time sign-in code (stored only as a hash), device identifier · platform and IP address. The first Google sign-in creates a Cloud Save account without a password and links it | Signing in with Google and linking it to a Cloud Save account so you can continue the same characters on any device; confirming it is you when the account is deleted; sending the sign-up welcome and account-deleted notices (see “Email” below) |
| Moving from an old web address to the new one (noxblood.vercel.app → neorangnarang.vercel.app → nrnrlv.com, nuriquest.com/noxblood → nrnrlv.com) | The character, settings and save backups stored on your device are handed over inside the browser in the part of the address after # and are not sent to a server. If you are signed in to Cloud Save, the old address uses your login session to get a one-time code (the server stores only the code's hash, the account, the time it was issued and expires, and the IP), and the new address sends that code with the device identifier · platform to get a new login session. The login session itself never goes into an address. | Continuing with the same character and Cloud Save sign-in at the new address |
| Paid purchases (when you use the Shop) | Order number, product name · contents · price, character ID and name, linked Cloud Save account, order · payment · delivery · refund times and status, the payment result reported by the payment service (status · amount · payment method type · transaction number · receipt link), platform, IP address. Your answer, before your first payment, to whether you are 19 or older, with its time and IP address; for users under 19, the legal guardian consent you marked at each payment and its time | Confirming payments and delivering products, withdrawals and refunds, applying purchase limits, handling disputes, preventing fraudulent payments, keeping transaction records, checking a legal guardian’s consent and applying the monthly limit to payments by users under 19, handling cancellations of minors’ payments |
| Shop · Moonblood Stones · daily free gift (when you use the Shop) | Moonblood Stone balance (and how much of it was bought) and its history (kind · amount · balance · time · related order · reason), purchases made with Gold or Moonblood Stones (product · price · time · platform · IP address), daily free gift claims (date · character ID · linked Cloud Save account · IP address · the gift) | Keeping Moonblood Stones and delivering purchases, applying purchase limits and stock, giving the free gift once a day per character and account and stopping repeated claims from one connection, handling inquiries and refunds |
| Gifts (when you send or receive a gift) | Sender’s and recipient’s character IDs and names, the gifted product and its order, the sender’s message (up to 60 characters), the times it was sent, collected or taken back | Delivering the gift by mail and showing the recipient who sent it and the message, applying the daily gift limits, taking gifts back on withdrawal or refund, preventing fraudulent payments and real-money trading |
| In-game offers (when you use the Shop) | Character ID, the kind of offer (an enhancement that dropped or broke, reaching a level, a full bag, a first draw, coming back after a while) and its product, when the offer opened and ends, and when its card was shown, opened, closed or bought from | Showing one product at a time that fits what is happening in the Game, with set intervals, so the same offer does not appear too often; sales statistics. Not sent outside the game server and not used for advertising |
| Live play (about every second in town, hunting grounds and the crypt · can be turned off in Settings) | Random character ID, the place you are in (town · hunting ground · crypt floor) and your position, movement and actions there (attacks · skills · jumps · death), health as a percentage, appearance (class · gender · level · advancement · how your gear and costume look · polymorph · alignment colour · blood pledge name · worn title), what you write in Say chat, platform | Showing your character to other players in the same place and passing on Say chat; checking reports of abuse or scams |
| Muk-jji-ppa event (if you take part) | Character ID, chances used each day · the extra chance for sharing · whether the early-adventurer chance was used, the state of a game in progress, wins and losses, victory gift records (time · Moonblood Stones given · gift mail · length of the game) | Applying the daily number of games, deciding games and delivering victory gifts (mail · Moonblood Stones), preventing abuse, handling inquiries |
| Ideas (if you take part: ideas · votes · comments · reports) | Character ID · name · class · level · server, the linked cloud account, each idea’s category, title and text and when it was posted or withdrawn, the ideas you voted for and when (by cloud account if you have one), your comments and when they were written or deleted, the comments you reported and when, the team’s replies, the status and adoption reward records (grade · reward · mail), and the IP address used to post an idea or comment | Running the Ideas board (showing ideas, vote counts and comments to other users together with their writer’s name · class · level), the team’s review, replies and adoption with reward mail (a thank-you gift to the users who voted for an adopted idea), daily limits on ideas, votes and comments and preventing double votes, handling reports and preventing abuse. To help the Operator review them, ideas and comments may be read with the AI model Claude (see section 3) |
| Blood pledges (from level 20 · if you join or found one) | The pledge's name, emblem, colour, introduction and notice; each member's character ID, rank, join time, contribution and pledge coins; attendance, donation and hunt records; applications (the pledge applied to and a short note); what you write in pledge chat; records of rewards given through pledge activities; the pledge news (joins, departures, donations and the like) | Running pledges (joining, ranks, pledge chat, attendance, donations, buffs, weekly missions, the hunt, the pledge shop), the pledge ranking, preventing abuse, checking reports of abuse or scams |
| Between players (another player's character, whispers, friends, blocks, parties, trades, parcels, reports) | Character ID, whether you are online and where you are (about every 4 seconds while playing · less often with the game in the background), full details of your worn gear, your appearance, combat power and worn title (when they change), what you write in whispers and party chat, your friend and block lists, your party and invitations and whether you handed your character to the party leader, trade and parcel records (the items and gold exchanged, with whom, when, and the note on a parcel), the box of items waiting for you and when you took them, reports (reason, what you wrote, recent messages) | Showing your character to other players, passing on whispers and party chat, telling friends whether you are online and where, holding trades and parcels on the server so nothing is lost or doubled, preventing abuse such as item duplication and checking growth, handling reports |
| Voice chat · chat auto-translate (optional · when you speak through the chat window's microphone or read chat in another language) | Voice chat: your recorded voice (up to 15 seconds at a time) and the text your device's or browser's speech recognition made of it, its length, recording format and size, the language spoken, the channel (Say · party · pledge · whisper) and a whisper's recipient, character ID and name, when it was sent. Chat auto-translate: chat lines your device cannot translate itself (including the text of voice chat) and the reader's language, the translation, character ID (for the per-minute limit) | Passing your voice and its text on to the other players in the channel so they can hear it, showing chat and voice chat written in another language in the reader's language, filtering abusive words, applying the sending and translation limits |
| Talking with AI Adventurers (when you use general chat where AI Adventurers are, whisper an AI Adventurer, or talk in a party an AI Adventurer is in) | Those chat lines (general chat in the same place, whispers with an AI Adventurer, that party’s chat), character names and random character IDs, levels and classes, whether you are away. Short notes AI Adventurers keep (for example “○○ asked where to enchant”) | Making the lines of AI Adventurers (AI characters added by the Operator) so they can answer you and spend time with you; spotting inappropriate chat and requests for items or real money; the AI Adventurers’ activity record (for the Operator’s checks) |
| Parties, duels, trades, friends and parcels with AI Adventurers (when you invite an AI Adventurer to a party, ask one for a duel or a trade, add one as a friend or send one a parcel) | Character IDs and names, the request, acceptance or refusal and its time, the place, the party’s members and how long the AI stayed, the duel’s result, the items and gold given and received in the trade, the friendship (mutual friends), the items, gold and note of a parcel sent to an AI Adventurer | Running the party, duel, trade, friendship or parcel; the AI Adventurers’ daily duel and trade limits; preventing abuse such as item duplication; the AI Adventurers’ activity record (for the Operator’s checks) |
| Error reports | Error message and where it occurred, game version, platform, character ID, User-Agent, IP address (for hourly rate limiting) | Fixing errors |
| Support and Bugs & Suggestions (optional) | Messages and conversations (Let's Talk), category, character name · ID, reply email (optional), game version, platform, IP address. When sent from Bugs & Suggestions, also a title, the details shown on screen before sending (place · position, device · browser · screen size · graphics setting, language, recent error log) and a screenshot (optional: the game screen when the window opened; chat and menus are not captured) | Answering (in Let's Talk, by in-game mail, and by email if you gave one), finding and fixing errors, reviewing suggestions, applying the sending limits |
| Email (the Operator’s mailbox [email protected]) | Emails you send to the Operator (sender address and name, recipients and copies, subject, text, attachments, time sent) and the Operator’s replies. For the notices the game sends: the address it goes to (your Google sign-in email, or the reply email you gave with an inquiry), its subject and text, and when it was sent and whether it went out (sending log) | Answering email inquiries; sending service notices such as the sign-up welcome, answers to your inquiries and confirmation that your account was deleted (no advertising); when the Operator asks for it, drafting a reply with the AI model Claude (see 3), which also looks at the characters, Let’s Talk inquiries and payment records linked to that email address |
| Partner creators (people who are not players: creators the Operator proposes a partnership to, or who apply) | Channel or account address, name and handle, subscriber / follower / post counts, the description published on the channel, the business contact email published there and where it was found, what an application says (content topics, message, time of consent, IP address), the mails exchanged, and the status and notes of the talks | Proposing and discussing partnerships, reviewing and answering applications, and never contacting again someone who refused. Channel information comes only from official APIs (YouTube Data API, Instagram) and what the channel publishes; email addresses are never collected by a program |
| Guardian consent (legal guardians of users aged 12–13) | The consent request the Game makes: the request code, a check value only the device knows (stored only as a non-reversible hash), platform, language, when it was made and when the Game last checked it. The consent record: the legal guardian's name, how and when they were confirmed, the identity check's transaction number (when confirmed by a phone identity check; the date of birth it returns is used only to confirm the guardian is 19 or over and is not stored, and no phone number is received), and when the Operator confirmed by email, phone or paper, that contact, the operator who confirmed and a note; the IDs of the characters played on that device after consent | Confirming and recording a legal guardian's consent under Article 22-2 of the Personal Information Protection Act; deleting the linked characters' information when consent is withdrawn |
What other players can see: server-wide announcements show a character's name and the item found and where; the in-game Ranking (the top 50 of characters active in the last 30 days, and your own place) shows a character's name, class (and whether it has advanced), level and rank. Characters restricted from the server are not shown in the ranking. With live play (on by default), other players in the same town, hunting ground or crypt floor see your character's name and appearance, level, class, blood pledge and title, your position, movement and actions, your health as a percentage, and what you write in Say chat. Turn off Settings › General › Other players and none of this is sent or received. A blood pledge's name, emblem, introduction, level, member count and its lord's character name are visible to everyone (pledge finder, pledge ranking), and the pledge name appears in the rankings and beside the character's name. The member list (character names, classes, levels, ranks, contribution, whether they are online), pledge chat, the notice and the pledge news are visible to the members of the same pledge; applications (character name, class, level, short note) to that pledge's lord and vice lords. When another player taps your character or picks it in the ranking, a pledge's member list or chat, they see your character card: character name, class, level, advancement and alignment, blood pledge, title, full details of your worn gear with your costume and appearance, combat power, health, attack and armour, kills and PK count, ranking place, and whether you are online. Where you are and when you were last online are shown only to players who have added each other as friends and to players in the same party or blood pledge. A trading partner and a parcel's recipient see the items and gold exchanged and the note on the parcel; party members see each other's name, class, level, whether they are online, where they are, health as a percentage and whether they handed their character to the party leader. Whispers, invitations, trades and parcels from players you blocked do not reach you.
Card numbers and other payment details are entered by you directly into the payment gateway’s window; the Operator neither receives nor stores them. We do not use advertising or analytics trackers or cookies.
Voice chat records only while you hold the microphone button in the chat window (your device asks for microphone permission the first time). Your voice and its text reach the other players where you are, like Say chat, or only your party, pledge or whisper recipient when you send it there. Turning speech into text is done by your device's or browser's speech recognition; depending on the browser (for example Google for Chrome, Microsoft for Edge) your voice may be sent to that browser's speech recognition service while you record and handled under that company's privacy policy. Chat auto-translate uses the translator on your device first (Chrome) and only otherwise asks Anthropic, through the Operator's server, to translate (see section 3). Turn off Settings › General › Chat auto-translate and no translation is requested.
※ Added November 6, 2026 (applies immediately): voice chat and chat auto-translate, optional features opened that day, are now described in sections 1, 2 and 3.
AI Adventurers are AI characters added by the Operator. They never pretend to be people and say they are AI when asked. The character info that opens when you tap one always carries an AI mark (“AI Adventurer” or “AI”). By default their names start with “AI·” and their name plates and party entries carry an AI badge, but depending on the Operator’s settings some or all of these marks may not be shown. Depending on the Operator’s settings, AI Adventurers may answer your whispers with a whisper, accept a party invitation and travel with you for a while (they never lead and take no part in loot sharing), accept a duel, accept a trade to buy or sell consumables at shop prices, become mutual friends when you add them, and take parcels. AI Adventurers hold no items or gold, so a parcel sent to one cannot be returned. AI Adventurers never whisper, invite or ask first. They are not in rankings or rewards. What you say with AI Adventurers (general chat in the same place, whispers you send them, chat in a party they are in) is sent to the AI model that makes their answers (see 3). Party invitations, duel or trade requests, friend requests and parcels themselves are not sent to the AI model. Please do not write personal information in chat. Turning off Settings › General › Other players stops live play and, with it, sending general chat where AI Adventurers are.
※ Added November 7, 2026 (applied at once, game notice the same day): AI Adventurers (what you say with them, whispers, parties, duels, trades, friends and parcels with them, and the AI marks) were added to sections 1, 2 and 3.
2. How long we keep it
- Cloud Save accounts and uploaded saves: until you delete the account. Deletion is immediate. Removing a single character from the account deletes its cloud saves right away.
- Google sign-in link (unique ID · email): until you unlink it or delete the account. The apps’ one-time sign-in codes expire after 10 minutes, are deleted as soon as they are used, and expired ones are deleted when the next code is issued.
- Character information on the game server (not linked to a cloud account): deleted automatically one year after the last connection.
- Live play positions and appearance: deleted one day after they were last sent. Say chat: deleted after 3 days.
- Blood pledges: pledge and membership records are deleted when you leave or the pledge is disbanded (and with the character's server record). Pledge chat is deleted after 3 days, the pledge news after 90 days, unanswered applications after 30 days, and records of pledge rewards after a year.
- Between players: whispers and party chat are deleted after 3 days, online status and place after a day, finished trades and records of items received after 90 days, records of items and gold moving between players (for growth checks) after a year, and handled reports after a year. A parcel not collected within 30 days goes back to its sender. Worn-gear details, friend and block lists and parties go with the character's server record (also when the account is deleted).
- Voice chat: your recorded voice and its record (text, channel, time and so on) are deleted after 24 hours; the text sent as chat is deleted after 3 days with that channel's chat. Chat auto-translate: lines and their translations are kept for 30 days so the same line is not translated twice (without who wrote them), then deleted; the request-limit records are deleted after an hour.
- AI Adventurers: the chat sent to make their lines and the result are deleted after 3 days, and the call record (time, model, usage) after 30 days. Notes AI Adventurers keep about you are deleted after 3 days, and at once when your character data is deleted. In the AI Adventurers’ activity record, chat lines and the other character’s name and ID are deleted after 3 days, and party, duel, trade, friend and parcel entries (time, place, the other character’s name and ID, result, a parcel’s items, gold and note) after 14 days (3–30 days by the Operator’s settings, never longer than 30 days). When your character data is deleted, your name and lines in the activity record are deleted at once. Whispers, party chat, trade and parcel records and friend lists with AI Adventurers are kept as long as those between players (see “Between players” above).
- Error reports: 90 days after the last occurrence. Support inquiries (Let's Talk conversations, Bugs & Suggestions reports and their screenshots): one year after they are resolved. Failed login records: 24 hours. Login handoff codes: deleted as soon as they are used; unused codes expire after two minutes and are deleted at the next server clean-up.
- Guardian consent: request codes a guardian does not confirm within 7 days are deleted. A consent record is deleted when the legal guardian withdraws consent (together with the linked characters' information), or once the server no longer holds any linked character and no game has used the consent for over a year. If the Operator, confirming by email or phone, does not obtain consent, the contact received is deleted without delay.
- Muk-jji-ppa event: the daily play records are deleted after 90 days and the victory gift records after a year, and both go with the character's server record.
- Ideas: an idea and its votes, comments and reports are deleted one year after the idea was posted, and a comment one year after it was written. Withdrawn ideas and deleted comments are deleted after 30 days (so that reports can still be handled), and the IP address used to post an idea or comment after 90 days. Claude’s review is deleted together with its idea, and what is sent to Claude is not kept separately on the Operator’s servers (only this month’s usage totals). When a character’s server records are deleted, its ideas, comments, votes and reports are deleted with them.
- Shop: daily gift claims and the Moonblood Stone history are deleted after a year. Records of Moonblood Stones bought with money (credits and take-backs) and purchase records are kept for 5 years, like the order records below. When a character's server record is deleted, its Moonblood Stone balance and gift claims go with it.
- Payment age check: the answer to whether you are 19 or older and the record of legal guardian consent marks are kept for 5 years for handling cancellations of minors’ payments and disputes, then deleted (after that you are asked again at your next payment).
- Gifts: the recipient and the message are kept with the gift’s order record, for the period of the order records below.
- In-game offers: records of offers shown, opened, closed or bought from are deleted after 400 days; the record of which offers opened (the latest one of each kind) is deleted together with the character’s server record.
- Order, payment and refund records of paid products: kept as the Korean Act on Consumer Protection in Electronic Commerce requires — records of contracts, withdrawals, payments and supply for 5 years, and records of consumer complaints and disputes for 3 years. They remain for that period even if the account or character is deleted. Orders that were never paid are deleted after 90 days.
- Email: mail received and replies sent in the Operator’s mailbox (Hostinger) are kept like support inquiries, for 1 year after they are handled (mail about payment or refund disputes for 3 years, like the order records above). The sending log of mails the game sent masks the address (ab***@…) and drops the content after 30 days, and is deleted after 180 days. When you delete your account, its email addresses are masked in the sending log at once; only the one account-deleted notice is sent, and the address is not kept after it. What is sent to draft an AI reply, and the draft, are not kept on the Operator’s server (only daily usage totals, for 60 days).
- Partner creators: deleted 1 year after the last contact or change (for a signed partnership, the contract term and the period the law requires). For someone who refused, only an irreversible hash of the email address is kept, so that we never write again.
- Where another law requires longer retention, we keep the information for that period.
3. Third parties, processors and international transfer
The Operator does not sell your information or provide it to third parties. The game server and database (the information in section 1) are stored on a server the Operator runs itself in the Republic of Korea. To run the service, some processing is entrusted to the providers below; for providers outside Korea, the information listed is transferred abroad.
| Provider · country · contact | What they do · information | When · how · retention |
|---|---|---|
| Cloudflare, Inc. United States (global network: the Cloudflare server nearest to you) | Passing connections to nrnrlv.com on to the Operator’s server, encryption (HTTPS), blocking attacks Information: everything exchanged between the Game or site and the server (the items in section 1), IP address, browser and app information (User-Agent) | On every connection, encrypted Retention: processed only while passing it on; security and incident logs follow Cloudflare’s policy |
| Telegram Messenger Inc. Outside Korea (data centers in several countries) | Operations alerts to the Operator: new support inquiries, Let's Talk messages, player reports, server status Information: inquiry and report numbers and categories, character name, level and class, platform and game version, the text of inquiries, conversations and replies, report reasons, notes and the reported chat lines | When an inquiry or report arrives and when the Operator looks it up, encrypted Retention: deleted by the Operator within 1 year after handling, like the inquiry records |
| Google LLC United States | Providing the Google sign-in screen and confirming the sign-in (when you use Google sign-in) Information: what you enter at Google goes to Google and is processed under Google’s privacy policy; we receive only the unique ID and email address Google confirms | When you use Google sign-in Retention: Google’s policy |
| Vercel Inc. United States and others (global delivery network) | Delivering the pages that send players from the old web addresses (neorangnarang.vercel.app · noxblood.vercel.app) to the new one Information: IP address and browser information of visits to the old addresses (access logs) | When you open an old address Retention: Vercel’s policy |
| The OMU music site (omu.co.kr) and its host Hostinger International Ltd. Outside Korea (Hostinger servers) | Cover pictures of the songs played in the Blood Moon Tavern Information: IP address and browser information sent when your device loads a cover picture straight from omu.co.kr | When a cover picture loads Retention: OMU’s and Hostinger’s policies |
| Hostinger International Ltd. Outside Korea (Hostinger mail servers, e.g. in Europe) | Running the Operator’s mailbox ([email protected]): receiving, sending and storing email Information: emails exchanged with you (addresses, names, subjects, text, attachments), and the address, subject and text of the notices the game sends | When email is sent or received, encrypted Retention: the email retention period in 2 (the Operator’s mailbox) |
| Anthropic, PBC United States | Chat auto-translate (when your device cannot translate a line itself, with the AI model Claude) Information: the chat lines to translate (including the text of voice chat) and the target language. Character names, IDs and IP addresses are not sent Making the lines of AI Adventurers (with the AI model Claude) Information: recent general chat lines where AI Adventurers are, whispers sent to an AI Adventurer and its answers, chat in a party an AI Adventurer is in, with those characters’ names, IDs, levels and classes, and the AI Adventurers’ notes. IP addresses and account information are not sent Drafting the Operator’s email replies (when the Operator presses AI reply in the webmail, with the AI model Claude) Information: the mail to answer and up to 8 earlier mails with the same address (addresses, names, subjects, text; attachments by name only), the names, classes, levels and last sign-in time of the characters linked to that address, the Let’s Talk inquiries left with that address and their answers, and those characters’ payment records (product, amount, status, time) Drafting the Operator’s partnership proposals (when the Operator asks for it, with the AI model Claude) Information: the creator’s channel name, address, subscriber count, public description and latest video titles, what their application says, the Operator’s notes and earlier proposals Helping the Operator review idea suggestions (when a new idea comes in or the Operator asks for a review, with the AI model Claude) Information: the idea’s category, title, text, vote count and comment count, the text of the comments under it (their writers shown only as “author” or “player”), and the titles of other ideas on the board. Character names, IDs, accounts and IP addresses are not sent | When you read chat in another language / when you talk with AI Adventurers (general chat in the same place, whispers, party chat) / when the Operator presses AI reply in the webmail or writes a partnership proposal / when an idea comes in on the “Ideas” board or the Operator asks for a review, encrypted Retention: Anthropic’s policy |
| NICE Payments Co., Ltd. (나이스페이먼츠) Republic of Korea | Providing the payment window, processing payment approvals and cancellations and reporting their results (when you buy in the Shop) Information: order number, product name and amount, payment result | When you pay Retention: NICE Payments’ policy and the applicable laws |
| Korea PortOne Co., Ltd. (PortOne) Republic of Korea | Providing the payment window and reporting payment approvals and cancellations (when you buy in the Shop). Providing a legal guardian's phone identity check and reporting its result (when the guardian of a user aged 12–13 consents with an identity check, through the identity verification agency connected to PortOne) Information: order number, product name and amount, payment result. What the guardian enters in the identity check goes directly to PortOne and the verification agency; the Operator receives only the result (name · date of birth · whether verified · transaction number) | When you pay, when a guardian checks their identity Retention: the policies of PortOne and the verification agency and the applicable laws |
Information is sent over encrypted connections (HTTPS) when you use the service, and these providers process it only to provide their service. Shop payments go through the one payment service the operator has chosen (NICE Payments, or PortOne and the payment gateways connected to it). The operator sends that service only the order number, product name and amount; payment details entered in the payment window are processed by the payment service and the card companies, easy-pay services and the like under their own privacy policies. Passing connections through Cloudflare is needed to reach the Game, so if you do not want your information transferred abroad you can stop using the service and delete your account (see section 4). Google sign-in is optional; if you do not use it, nothing goes to Google.
※ Corrected on November 3, 2026: the server location now reflects the move of the game server to a server the Operator runs itself in Korea, and connection delivery (Cloudflare), operations alerts (Telegram) and song cover pictures (OMU) were added. The information processed and its purposes did not change.
4. Your rights
- You may request access, correction, deletion or suspension of processing. Send the request from Settings › Data › Support in the Game and we will handle it without delay.
- Delete your account: in the Game under Menu › Cloud Save › Delete Account, or right away on the account and data deletion page. An account created with Google is confirmed by signing in again with the linked Google account. Deleting the account also removes its Google link.
- Unlink Google: an account that has a password can unlink Google under Account · Cloud Save on the title screen. You can also remove the Game’s access in your Google Account (myaccount.google.com › Security › Third-party apps & services).
- Data on your device: delete it with Settings › General › Delete Character, by clearing the site data in your browser, or by uninstalling the app.
5. Security measures
- Passwords are stored only as non-reversible hashes, and login attempts are limited.
- The server database is kept where it cannot be reached from the web, and the operations tools require separate administrator authentication with limited sign-in attempts.
- All communication is encrypted with HTTPS.
6. Children under 14 and minors
The Game is rated 12+ (“12세이용가”) by the Game Rating and Administration Committee of Korea (GRAC) and may be used only by persons aged 12 and over, and the Operator does not knowingly collect personal information from anyone under 12. When the Game is first opened (and every 30 days after that), you pick your age: “14 or over” or “12–13”.
Under Article 22-2 of the Personal Information Protection Act, we process the personal information of children under 14 only after a legal guardian, such as a parent, has consented. If you pick “12–13”, the Game runs on that device only and sends no information to the game server until a legal guardian consents (game server sync, live play, blood pledges, between-player features, the Shop, Cloud Save, Google sign-in, support and error reports in section 1 are all off). The web version still downloads the game files from nrnrlv.com, so the web server's access log (IP address, time, the file requested) is kept.
A legal guardian consents through the QR code or address the Game shows (nrnrlv.com/g/<code>). On that page the guardian reads what is processed, why and for how long, marks their consent and then either confirms with a phone identity check that they are 19 or over (Enforcement Decree, Article 17-2(1)3), or tells the Operator by email, after which the Operator sends the consent details and confirms the guardian's reply (item 5 of the same paragraph; phone or paper under items 6 and 4). Nothing is collected from the child. What the consent record keeps and for how long is in sections 1 and 2.
The legal guardian may withdraw consent at the same address at any time (with a new identity check if they consented that way, otherwise by contacting the Operator). Then the Operator deletes, without delay, the server information of the characters and Cloud Save accounts linked to that consent (payment records the law requires us to keep remain for the periods in section 2), and the Game goes back to running on that device only. If we learn of personal information of anyone under 12, or of a child under 14 processed without a legal guardian’s consent, we delete it without delay. The legal guardian of a user under 19 may ask through a support inquiry to access, correct, delete or suspend the processing of that user’s personal information and to see their play and payment history; once we have confirmed the guardian, we handle it without delay.
Payments by users under 19: before your first KRW payment, the Game asks whether you are 19 or older (the answer stays on the server and cannot be changed in the Game; if you answered wrongly, ask customer support to change it). If you are under 19, each payment asks you to mark that a legal guardian (parent) has consented, and a monthly payment limit applies. Characters under 14 playing with a guardian’s consent are treated as under 19 without being asked.
7. Contact
Send questions, reports and requests about personal information from Settings › Data › Support in the Game. In Korea you can also seek advice on privacy infringement from the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118 in Korea) and the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).
Privacy officer: HANA LEE (representative of JENGA) · contact through Settings › Data › Support in the Game (Let's Talk).
8. Changes to this policy
If this policy changes, we announce it in the Game and on this page 7 days before it takes effect (30 days for important changes).
9. Revision history
- Added November 9, 2026 (applied at once, announced in the Game): with the Shop update, Section 1 now lists the check, before payment, of whether you are 19 or older and the legal guardian consent marks of users under 19, gifts (recipient and message) and in-game offers (records of products offered to fit what is happening in the Game); Section 2 lists how long they are kept; and Section 6 describes payments by users under 19. This information is processed from the next update on, only when you pay, send a gift or the Shop shows an offer.
- Added November 9, 2026 (applied at once): Section 1 now lists the information processed for the Ideas event opened on November 6, 2026 (ideas · votes · comments · reports) and its purposes, and section 2 its retention. To help the Operator read and answer suggestions on the “Ideas” board, section 3 adds reviewing idea suggestions to the work entrusted to Anthropic (Claude). Only the idea’s category, title, text, vote count and comment count, the text of the comments under it and the titles of other ideas on the board are sent; character names, IDs, accounts and IP addresses are not. Claude’s review is only an opinion for the Operator: the Operator checks it and decides on adopting, holding and replying.
- Added November 8, 2026 (applied at once): “Appendix. For users outside Korea” was added, describing the legal bases, rights, protection of children and international transfer for users in the European Economic Area, the United Kingdom, Switzerland, the United States, Brazil and other countries, and translations of this policy into nine more languages were published. The information we process and why did not change.
- Added November 8, 2026 (applied at once, game notice the same day): with the Operator’s mailbox ([email protected]), section 1 adds email (mail you send and the Operator’s replies; the sign-up welcome, inquiry answers and account-deleted notices the game sends) and adds those notices to the purposes of the Google sign-in email; section 2 adds how long email and the sending log are kept; section 3 adds Hostinger, which runs the mailbox, and Anthropic (Claude) drafting the Operator’s email replies. No advertising email is sent. Sections 1 and 2 also add the information of creators we propose partnerships to or who apply, and section 3 adds drafting those proposals with Anthropic (Claude).
- Added November 7, 2026 (applied at once, game notice the same day): AI Adventurers (AI characters added by the Operator) were added; sections 1, 2 and 3 now describe the information processed to make their answers from what you say with them (general chat where they are, whispers sent to them, chat in a party they are in) and for parties, duels, trades, friends and parcels with them, how long it is kept, and what Anthropic does for it. The “AI·” name and AI marks of AI Adventurers may not be shown depending on the Operator’s settings; their character info always carries an AI mark.
- Added November 6, 2026 (applies immediately): Voice chat and chat auto-translate, optional features opened that day, are described in sections 1, 2 and 3. Voice chat recordings and their text reach the players in the channel and are deleted after 24 hours; chat lines the device cannot translate itself are translated by Anthropic (United States). This information is processed only when you speak through the microphone or read chat in another language.
- Effective November 12, 2026 (announced November 5, 2026): The Game has been rated 12+ by the Game Rating and Administration Committee of Korea (GRAC), so it is now for users aged 12 and over, and “6. Children under 14 and minors” says that children under 14 use the Game with a legal guardian’s consent and when such information is deleted. Sections 1, 2, 3 and 6 now also say that users who pick “12–13” use the Game on their device only, with nothing sent to the server, until a legal guardian consents; how that consent is obtained and confirmed (phone identity check or the Operator's confirmation) and withdrawn; and what the consent record keeps and for how long. PortOne's tasks now include the guardian's phone identity check.
- Corrected November 4, 2026 (applies immediately): The Operator is now named with its business registration details (JENGA, representative HANA LEE, business registration no. 878-39-01232), and “7. Contact” names the privacy officer. The information we process and why we process it have not changed.
- Effective November 10, 2026 (announced November 3, 2026): NICE Payments Co., Ltd. (payment window, payment approvals and cancellations) is added to the table in “3. Third parties, processors and international transfer”, and the Policy now says that Shop payments go through the one payment service the operator chooses, which receives only the order number, product name and amount.
- Corrected November 3, 2026 (applies immediately): “3. Third parties, processors and international transfer” now matches how the service actually runs: the game server and database are on a server the Operator runs itself in Korea, connections pass through Cloudflare, and support inquiry and report alerts reach the Operator through Telegram. The information processed and its purposes did not change.
- Effective November 10, 2026 (announced November 3, 2026): The “Support and Bugs & Suggestions” row now lists Let's Talk conversations and, for a report from Bugs & Suggestions, its title, an optional screenshot and the details shown on screen before sending (place · position, device · browser · screen size · graphics setting, language, recent error log). This information is received only when you send a report.
- Effective November 10, 2026 (announced November 3, 2026): The Game is now for users aged 15 and over, and “6. Users under 15 and minors” covers children under 14 and the requests of legal guardians.
- Version effective November 12, 2026 (announced November 5, 2026 · with the AI Adventurer items added November 7, 2026; before the email items)
- Version effective November 12, 2026 (announced November 5, 2026)
- Version effective November 10, 2026 (announced November 3, 2026)
- Version effective November 4, 2026 (announced October 28, 2026)
Appendix. For users outside Korea
The Game is offered worldwide from servers the Operator runs in the Republic of Korea. Sections 1 to 9 above apply to every user alike; this appendix adds what the laws of the country you live in require. The information we process and why are exactly as described in sections 1 to 3. This policy is also available in English, Japanese, Chinese (Simplified and Traditional), Thai, Indonesian, Spanish, Portuguese (Brazil), German and Turkish translations; if a translation and the Korean original differ, the Korean original applies.
European Economic Area (EEA), United Kingdom and Switzerland
- Controller: JENGA (젠가; representative HANA LEE; see the beginning of this policy). The privacy officer handles requests through “7. Contact”.
- Legal bases: processing needed to provide the Game, Cloud Save, the Shop and support is based on performing our contract with you (GDPR Article 6(1)(b)); the records needed to prevent cheating, hacking and abuse and to run the service securely (connection, failed-login, report and progress-verification records) on the Operator’s legitimate interests (f); keeping payment and refund records on legal obligations (c); and optional features you turn on, such as voice chat, chat auto-translate and Google sign-in, on your consent (a). You can withdraw consent at any time by turning the feature off or telling us through “7. Contact”; this does not affect processing before the withdrawal.
- Your rights: you may request access, rectification, erasure, restriction of processing, portability (receiving the information you provided in a machine-readable format) and object to processing based on legitimate interests. Send your request as described in “4. Your rights” and we will answer within one month. You may also lodge a complaint with the data protection authority of the country you live in.
- International transfer: information is stored on servers in the Republic of Korea. The European Commission and the UK Government have decided that the Republic of Korea ensures an adequate level of protection (adequacy decisions). The information that goes to providers in other countries, and why, is exactly as listed in the table in section 3.
- Under 16: the Game asks your age when it is first opened; users under 16 play on that device only, and nothing is sent to the server until a parent or legal guardian consents (as in section 6).
United States
- Children under 13 (COPPA): the Operator does not knowingly collect personal information from children under 13 without verifiable parental consent. If you answer that you are under 13 when the Game is first opened, the Game runs on that device only and sends nothing to the server until a parent or legal guardian consents. A parent or guardian may ask through “7. Contact” to review or delete the child’s information or to stop its further processing.
- Sale and sharing: the Operator does not sell personal information and does not share it for targeted (cross-context behavioral) advertising. We use no tracking tools or cookies for advertising or analytics.
- Categories of personal information (as classified by the California Consumer Privacy Act): identifiers (character name and ID, Cloud Save ID, Google sign-in email, IP address); commercial information (purchase and refund records); internet and game activity information (connection, play, chat and report records); and audio information (if you turn on voice chat). Their sources, purposes, retention and recipients are as described in sections 1 to 3.
- Your rights (California and other states): you have the right to know the information collected and its categories, sources and purposes, to request deletion or correction, and not to be discriminated against for exercising these rights. Send your request as described in “4. Your rights”. We may ask for account details to verify the request, and an authorized agent may make a request on your behalf. Users in other states (such as Virginia, Colorado and Connecticut) may exercise the rights their state’s law gives them in the same way.
Brazil
- We process information on the same bases as in the “European Economic Area” item above (LGPD Article 7), and you have the rights to confirmation of processing, access, correction, anonymization or deletion, portability, withdrawal of consent and information about with whom data is shared. Send your request as described in “4. Your rights” or file a complaint with the Brazilian National Data Protection Authority (ANPD). Users under 13 play on that device only until a parent or legal guardian consents.
Other countries
- The rights the law of the country you live in gives you remain fully available; send your request as described in “4. Your rights”. The Game asks your age when it is first opened, and users under 13 play on that device only until a parent or legal guardian consents.