개인정보처리방침

최종 수정일: 2026년 6월 1일

This Privacy Policy explains how Oshizi ("Oshizi", "we", "us", or "our") collects, uses, stores, discloses, destroys, and protects information in connection with Oshizi websites, games, accounts, applications, pages, content, tools, and related services, including oshizi.com, AppleGame+, ColorTiles+, and any other Oshizi service that links to this Privacy Policy (collectively, the "Service").

This Privacy Policy is intended to describe Oshizi's processing of personal information under the laws of the Republic of Korea, including the Personal Information Protection Act, and other applicable privacy laws.

By using the Service, creating an account, playing a game, joining a room, submitting information, or otherwise interacting with the Service, you acknowledge the practices described in this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service and Community Rules.

1. Overview

Oshizi collects information needed to operate, secure, maintain, and improve the Service.

Some parts of the Service may be used without an account. Other parts may allow or require an account. Where accounts are available, account registration may require a username and password. Email address may be optional unless needed for account recovery, verification, security, support, or another feature.

We use information to provide gameplay, accounts, rooms, matchmaking, rankings, replays, preferences, security, abuse prevention, support, analytics, advertising, and related functions.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly, including:

account registration information, such as username and password;
optional email address, if you choose to provide it or if a feature requires it;
nicknames, room titles, messages, reports, feedback, forms, and support requests;
information you include in communications with us;
any other information you choose to submit through the Service.

You should not submit sensitive personal information unless it is necessary for your request.

2.2 Account Information

If you create an account, we collect and process information needed to create, authenticate, secure, and operate that account.

This may include:

username;
account ID;
password authentication data, such as a salted password hash;
optional email address;
email verification status, if applicable;
password reset tokens or reset records;
login timestamps;
session tokens or authentication cookies;
account settings;
account status, restrictions, security flags, and moderation history.

We do not store plaintext passwords. Passwords are used for authentication and are stored only in protected hashed form.

You are responsible for keeping your account credentials confidential.

2.3 Technical Information

When you access the Service, our systems and service providers may automatically receive technical information, including:

IP address;
browser type and version;
device type;
operating system;
language settings;
referring page;
requested URL;
request time;
connection metadata;
error logs;
security, rate-limit, and diagnostic information.

We use this information for hosting, security, debugging, abuse prevention, rate limiting, fraud prevention, and service integrity.

2.4 Browser Storage and Identifiers

The Service may use cookies, localStorage, sessionStorage, and similar technologies.

These may store or process:

language preference;
theme or display preference;
cookie-consent choices;
login session state;
authentication tokens or session cookies;
client ID or browser ID;
per-tab player ID;
matchmaking or reconnect identifiers;
room or game continuity data;
account settings;
anti-abuse or security state.

Some identifiers are account-linked when you are logged in. Other identifiers are pseudonymous and used to operate gameplay, reconnect behavior, matchmaking, replays, rankings, abuse prevention, and security.

2.5 Game Data

When you play AppleGame+, ColorTiles+, or another Oshizi game, we may collect and process game-related information, including:

account information;
gameplay identifiers;
nicknames;
room codes;
room settings;
host actions;
admission state;
scores;
rankings;
medals;
gameplay actions;
board states;
replay data;
spectator data;
matchmaking data;
reconnect data;
reports;
moderation data;
IP-related records;
anti-abuse signals.

If you play while logged in, game data may be linked to your account.

Some game data may be visible to other players, spectators, room hosts, or viewers of public result, ranking, replay, or share pages.

2.6 IP Addresses and Abuse-Prevention Data

We may process IP addresses and related network information to operate the Service and protect it from abuse.

We use IP-related information to:

operate multiplayer sessions;
enforce rate limits;
prevent spam, attacks, cheating, automation, and unauthorized access;
investigate security or technical incidents;
enforce account, room, matchmaking, IP, network, or service-level restrictions;
protect fair play and service integrity.

Where practical, we store IP-related records as cryptographic hashes or other pseudonymized records. Raw IP addresses may be retained in operational logs, security systems, rate-limit records, block lists, or similar systems where needed for security, abuse prevention, or service operation.

If we detect cheating, automation, attacks, evasion, spam, or other serious abuse, raw and/or hashed IP-related data may be retained as long as reasonably necessary to enforce restrictions and protect the Service.

2.7 Analytics and Advertising Data

We may use analytics and advertising services, subject to applicable law and your consent settings where required.

Analytics data may include page visits, events, device type, browser type, approximate location, language, referrer, and aggregate usage patterns.

Advertising providers may process information such as IP address, approximate location, browser and device information, ad impressions, and interactions to serve, measure, prevent fraud, or personalize advertising, depending on your consent settings and applicable law.

3. How We Use Information

We use information for the following purposes:

to provide, operate, maintain, and secure the Service;
to create, authenticate, manage, and protect accounts;
to provide login sessions, password reset, optional email verification, and account support;
to run gameplay, rooms, matchmaking, spectator features, rankings, medals, replays, and share pages;
to remember preferences and maintain session continuity;
to process reports, feedback, support requests, and privacy requests;
to detect, prevent, and investigate cheating, macros, bots, automation, spam, attacks, fraud, unauthorized access, ban evasion, and other abuse;
to enforce the Terms of Service and Community Rules;
to debug errors, monitor reliability, and improve the Service;
to measure aggregate usage and performance;
to provide and measure advertising where permitted;
to comply with legal obligations and protect legal rights.

4. Legal Bases

Where applicable law requires a legal basis for processing, we rely on one or more of the following:

performance of a contract, where processing is needed to provide the Service or account features you request;
consent, where required for optional cookies, analytics, advertising, personalized advertising, or certain communications;
legitimate interests, including service operation, security, abuse prevention, fair play, fraud prevention, debugging, and improvement;
legal obligations, where processing is required by law or legal process.

We use essential cookies and browser storage to provide core functions, such as login sessions, security, language settings, cookie-consent storage, game continuity, and reconnect behavior.

We may use optional cookies or similar technologies for analytics, advertising, and personalized advertising where allowed by your consent choices and applicable law.

Depending on your location and the Service, you may be able to accept, reject, or manage categories such as:

analytics;
advertising;
personalized advertising.

If you reject optional cookies, core Service functionality should generally remain available, but analytics, advertising, personalization, or measurement features may be limited.

You can change cookie choices through the cookie banner where available, or by clearing cookies and site data in your browser.

6. Disclosure of Information

We do not sell your personal information.

We may disclose information in the following circumstances:

to service providers that host, operate, secure, analyze, advertise, or maintain the Service;
to analytics and advertising providers according to your consent choices and applicable law;
to infrastructure, security, or anti-abuse providers where needed to protect the Service;
to comply with law, legal process, or governmental requests;
to enforce the Terms of Service, Community Rules, or other policies;
to protect the rights, safety, security, or property of Oshizi, users, service providers, or others;
in connection with a merger, acquisition, reorganization, asset sale, or similar business transaction.

Service providers may process information under their own terms, privacy policies, and data-processing obligations.

7. Third-Party Services

The Service may use or link to third-party services, including hosting providers, analytics providers, advertising networks, content recommendation services, embedded media providers, email providers, security providers, and external websites.

Examples may include Google Analytics, Google AdSense, Kakao AdFit, Taboola, or similar providers, depending on the Service and region.

Oshizi is not responsible for third-party websites, content, availability, security, or privacy practices. You should review the privacy policies of third-party services you use.

8. Retention and Destruction

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including service operation, account management, security, abuse prevention, fair play, legal compliance, dispute resolution, and enforcement.

Retention periods vary by data type and Service. In general:

account information is retained while the account remains active;
optional email address is retained while associated with an account or request, unless deleted or changed;
authentication sessions and reset tokens are retained for limited operational periods;
browser identifiers remain until they expire or you clear browser storage;
gameplay records may be retained to provide rankings, history, replays, records, moderation, anti-cheat review, and service integrity;
public rankings, result pages, replays, or shared records may remain available according to the feature design;
reports, moderation logs, restrictions, and anti-abuse records may be retained as needed to enforce rules and protect the Service;
raw IP logs are retained for limited operational or security periods where practical;
hashed or pseudonymized IP and security records may be retained longer for abuse correlation and service protection;
server logs are retained for limited operational, security, or debugging purposes;
analytics and advertising data are retained according to provider settings, consent choices, and applicable law.

If you delete your account or request deletion, we will delete or de-identify account information unless retention is required or reasonably necessary for security, fraud prevention, abuse prevention, legal compliance, dispute resolution, or enforcement of restrictions.

Some records may remain after account deletion if they are needed to protect service integrity, preserve public game records, investigate abuse, comply with law, or prevent evasion.

When personal information is no longer necessary for the purposes described in this Privacy Policy and retention is not required by law or legitimate operational need, we will delete, de-identify, or otherwise destroy it using reasonable methods appropriate to the type of information.

9. Security

We use reasonable technical, administrative, and organizational measures to protect information.

These measures may include HTTPS, access controls, password hashing, restricted administrative access, logging, monitoring, backups, rate limits, and other security controls.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If you believe your account or information has been compromised, contact us promptly.

10. International Processing

The Service and its service providers may process information in countries other than the country where you live. Those countries may have different data protection laws.

By using the Service, you understand that information may be processed and stored in other countries where we or our service providers operate.

11. Children

The Service is not intended for children under 13.

We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided personal information to us, contact us and we will take reasonable steps to delete it.

12. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information.

You may also have the right to withdraw consent where processing is based on consent.

You can exercise certain choices directly by:

updating account information where account settings are available;
changing or deleting optional email address where supported;
clearing cookies, localStorage, or sessionStorage;
changing browser privacy settings;
managing cookie-consent choices;
choosing not to submit optional information.

Because some Oshizi features use pseudonymous identifiers or public game records, we may need sufficient information to verify and locate the relevant data before responding to a request.

We may decline or limit a request where permitted by law, including where retention is necessary for security, abuse prevention, legal compliance, dispute resolution, public records, or service integrity.

13. Service-Specific Notes

Oshizi.com

oshizi.com may process account information, form submissions, comments or messages where available, analytics data, advertising data, server logs, and request metadata.

AppleGame+

AppleGame+ may process account information, gameplay identifiers, nicknames, room codes, room settings, host actions, admission state, scores, rankings, medals, gameplay actions, board states, replay data, spectator data, matchmaking data, reconnect data, reports, moderation data, IP-related records, and anti-abuse signals.

ColorTiles+

ColorTiles+ may process account information, gameplay identifiers, nicknames, room codes, room settings, host actions, admission state, scores, rankings, medals, gameplay actions, board states, replay data, spectator data, matchmaking data, reconnect data, reports, moderation data, IP-related records, and anti-abuse signals.

14. Personal Information Contact

For privacy requests, questions, complaints, or requests concerning personal information, contact:

contact@oshizi.com

Unless a separate privacy officer is designated, this contact is the primary contact for privacy-related communications.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Privacy Policy on this page and update the "Last updated" date.

Your continued use of the Service after an updated Privacy Policy is posted means that you acknowledge the updated Privacy Policy.

16. Contact

For privacy questions or requests, contact: