Six Degrees Code Privacy Policy
Six Degrees Code Inc. (the “Company”) processes the personal information of users of all applications, games, websites, and related services provided by the Company (collectively, the “Services”) as described below.
1. Categories, Purposes, and Retention Periods
| Purpose | Information Processed | Retention Period |
|---|---|---|
| Account creation, authentication, and provision of the Services | Unity Player ID; guest, Apple, and Google account identifiers and authentication results; nickname; Service usage and progress; digital content, virtual currency, items, and settings. For users under 14, the legal representative’s name and contact information and records of consent and verification | Until account deletion or termination of the applicable Service |
| Purchase verification, fulfillment, restoration, and refunds | Store, product, order, and transaction identifiers; receipts or signed transaction information; verification and fulfillment status | Records concerning contracts, payments, and supply: 5 years |
| Advertising, rewards, and prevention of fraudulent use | Advertising, app, and device identifiers; IP address; device, operating system, and app information; advertising request, impression, click, and reward records; consent signals; access and error logs | Until account deletion, withdrawal of consent, or termination of the applicable Service. Where retention is required by law, for the applicable statutory period |
| Analytics and improvement of the Services | Installation and session identifiers; app, device, language, and region information; gameplay, error, performance, and purchase events | Until account deletion, withdrawal of consent, or termination of the applicable Service |
| Handling inquiries and rights requests | Email address, inquiry details, account and transaction identifiers, and handling records | Records concerning consumer complaints and dispute resolution: 3 years |
Records concerning labels and advertisements are retained for 6 months. The Company does not directly collect payment method information such as payment card numbers.
Information associated with optional features, including Apple or Google sign-in, advertising, and Analytics, is processed only when the relevant feature is used. Declining an optional feature does not prevent use of unrelated portions of the Services.
2. Methods of Collection
The Company collects information when users launch an app, use the Services, sign in with Apple or Google, make payments through the App Store or Google Play, make advertising or Analytics choices, or contact the Company by email. Certain technical information is automatically generated and transmitted through SDKs used to provide the Services.
3. Third-Party Disclosure, Processing Entrustment, and Overseas Transfers
A. Third-Party Disclosure
The Company does not disclose personal information to third parties without the user’s consent, except where the user has separately consented or where disclosure is permitted by law and made in response to a request following lawful procedures.
B. Processing Entrustment and Overseas Transfers
To provide functions required by each Service, the Company entrusts the processing of personal information to, or transfers personal information overseas to, the providers listed below.
| Recipient and Contact / Country | Purpose and Categories | Timing and Method / Retention Period |
|---|---|---|
| Unity Technologies S.F. dpo@unity3d.com United States, Belgium, Germany, Singapore, Australia, Brazil, Taiwan, and the Netherlands | Authentication, Cloud Save, Economy, Cloud Code, Analytics, LevelPlay, and IAP processing for Unity-based Services / account, Service usage, transaction, analytics, advertising, and technical information | Transferred over an encrypted network when the Service is used / until account deletion, fulfillment of the processing purpose, or expiration of the applicable contractual or statutory period |
| Google LLC Privacy inquiries United States | Google sign-in, UMP consent management, and AdMob advertising / sign-in identifiers and authentication results; advertising and device identifiers; IP address; consent and advertising events | Transferred over an encrypted network when the relevant feature is used / until fulfillment of the purpose, user deletion, or expiration of the period specified by Google’s policies |
| Apple Inc. Privacy inquiries United States | Apple sign-in and App Store purchase verification / sign-in identifiers and authentication results; transaction identifiers | Transferred over an encrypted network when the relevant feature is used / until fulfillment of the purpose, user deletion, or expiration of the period specified by Apple’s policies |
The legal basis for overseas transfers is Article 28-8(1)(1) (consent) or Article 28-8(1)(3) (performance of a contract) of the Personal Information Protection Act of the Republic of Korea. Users may refuse a transfer by not using the relevant feature or by deleting their account or withdrawing consent; however, related features such as sign-in, data storage, purchase verification, or advertising may be limited.
4. Destruction
Personal information is destroyed without delay when the retention period expires or the purpose of processing has been fulfilled. Information that must be retained by law is stored separately. Electronic files are deleted in a manner designed to prevent recovery, and paper records are shredded or incinerated.
5. Rights of Users and Legal Representatives
Users and their legal representatives or other duly authorized representatives may request access to, correction or deletion of, suspension of processing of, or withdrawal of consent regarding personal information, and may request account deletion. Requests may be made through the privacy settings or account deletion feature in the applicable app or by contacting support@sixdegreescode.com. The Company may request verification of the identity of the user or representative where necessary.
When a correction is requested, the Company will not use or disclose the relevant information until the correction is completed. If information previously disclosed to a third party is corrected, the Company will notify that third party of the result to the extent necessary. Upon account deletion, Service usage records, digital content, virtual currency, and items may not be recoverable.
Where consent is required to process the personal information of a child under 14, the Company obtains the consent of the child’s legal representative and verifies that consent. For this purpose, the Company may collect the legal representative’s name and contact information from the child. After providing the consent details to the legal representative, the Company verifies consent through a consent indication on a web page followed by a confirmation text message, mobile phone identity verification, an email response, a signed document, a telephone call, or another method prescribed by applicable law. The Company does not process personal information that requires consent until consent has been verified.
A legal representative may use the contact information above to request access to, correction or deletion of, suspension of processing of, or withdrawal of consent regarding the child’s personal information.
Users must not misappropriate another person’s personal information and should request correction if their information is inaccurate or changes.
6. Automatically Collected Information and User Choices
The Services may automatically process advertising identifiers, IP addresses, device, app, and operating system information, and usage, error, and advertising events. Users may change their advertising and Analytics choices or limit the use of advertising identifiers through the privacy settings in the applicable app, the Google UMP consent screen, and device settings for tracking or personalized advertising. Advertising choices and Analytics choices are separate. Non-personalized advertising may still be displayed when personalized advertising is declined.
7. Security Measures
The Company implements necessary technical and organizational safeguards, including access control, protection of data in transit, security reviews, and management of personnel and service providers that process personal information.
8. Chief Privacy Officer
- Data Controller: Six Degrees Code Inc.
- Representative Director: Lee Seo-hyeon
- Chief Privacy Officer: Kim Young-min
- Email: support@sixdegreescode.com
- Address: LB07, Unit 1312, 13F, Hi-Brand, 16 Maeheon-ro, Seocho-gu, Seoul 06771, Republic of Korea
- Website: https://www.sixdegreescode.com/
For consultation regarding a personal information infringement, users may contact the Personal Information Infringement Report Center (118 without an area code, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (+82-1833-6972).
9. Changes to This Policy
This Policy applies to all applications, games, websites, and related services operated by the Company. External links not controlled by the Company are governed by the privacy policies of their respective operators.
Changes to this Policy will be announced through the Services or the Company website at least 7 days before taking effect, or at least 30 days before taking effect if the changes materially affect users’ rights.