Abyss Survivor Privacy Policy

Privacy and service information

Effective: · Updated:

This policy covers GYUFORGE’s Android and iOS Abyss Survivor apps. Platform-specific practices are described below.

Android / Google Play

1. Scope

This policy applies to GYUFORGE's Android app Abyss Survivor: Cyber Rogue (심연의 생존자: 사이버 로그), package com.abyss.survivor. It is separate from GYUFORGE's general website privacy policy.

2. Information processed

  • Account: When you connect Google, we process its unique account identifier, a credential used for verification, the provided email address, display name and profile photo, an internal user ID, and session information. We do not receive your Google password.

  • Game progress: The device or signed-in account's server profile may store credits, ships and parts owned/upgraded/equipped, stage, achievement and story progress, attendance and rewards, gacha pity state, language and audio settings, and purchase-related state. Attendance records are also stored on the server.

  • Guest play: Progress without sign-in is stored in the app's local device storage. Android automatic backup is currently disabled, so guest progress may not be recoverable after uninstalling the app or clearing its data.

  • Payments: Google Play processes in-app purchases and subscriptions. When a signed-in account makes a purchase, GYUFORGE's server receives product IDs, purchase status and identifiers, and grant, spending, subscription and refund records to verify purchases, deliver rewards, prevent duplicate grants and process refunds. GYUFORGE does not directly receive or store card numbers or other payment-method details.

  • Ads: We use Google Mobile Ads (AdMob) and UMP for rewarded ads. During ad initialization and requests, Google may collect and share IP addresses (which can estimate general location), device/account identifiers such as advertising ID and app set ID, app interactions, and diagnostics for advertising, analytics, and fraud prevention. Internal tests use sample ads. Where required, consent or privacy choices are presented before ad requests. When applicable, you can change these choices through Ad privacy settings in the game settings. Android settings also let you reset or delete your advertising ID.

  • Technical data: The account API temporarily uses request IP addresses for rate limiting. Technical information needed to handle errors, security incidents and support requests may be processed. This does not claim use of a separate analytics SDK.

3. Purposes

We use data as needed to provide the game, authenticate Google accounts, save and restore progress, grant attendance rewards without duplicates, verify purchases and subscriptions, manage entitlements and refunds, provide rewarded ads and manage privacy choices, prevent abuse, provide support, and meet applicable legal obligations.

4. Third-party services

Google Sign-In/Identity and Google Play Services support sign-in; Google Play Billing supports purchases and subscriptions; Google Mobile Ads and User Messaging Platform support rewarded ads and consent choices. Each service may process data under its own policy.

Google Privacy Policy

5. Retention

  • Guest game data is stored on the device and may be erased by clearing app data or uninstalling the app.

  • Account identifiers, profile and attendance data are retained while the account is needed. The scope and duration of any retention after deletion are listed below.

The following describes what GYUFORGE may retain after account deletion and for how long. If a record does not exist, there is nothing to retain.

  • Game account identifiers, server profile, progress and settings, attendance and rewards, sessions, and internal-test purchase records not subject to a legal retention duty: deleted upon a verified full-account deletion request, with no additional retention period.

  • If a paid transaction actually occurs and Korean e-commerce record-retention law applies, contract, withdrawal, payment and delivery records: 5 years from creation of the record. Only the minimum legally required transaction record is kept separately, not the entire game account or progress.

  • Consumer complaint and dispute records subject to Korean e-commerce record-retention law: 3 years from creation of the record. Deletion-request emails and ownership-check materials outside that category are deleted after processing and reply, with no additional retention period.

Legally retained records are kept separately from other account data, used only for that purpose, and erased when the retention period ends. Google Play may separately retain its own purchase history, which GYUFORGE cannot delete.

Korean E-Commerce Act Enforcement Decree, Article 6

6. Account and data deletion

You may request deletion of your app account and server-stored game data by email. The app does not currently have a direct deletion function. The steps, ownership check and possible retained records are explained here:

https://gyuforge.com/account-deletion/abyss-survivor

7. Children and age

Please check the app's Google Play listing for its applicable audience and age information. For questions about a child's data or a parent/guardian request, contact us below.

8. Security

The account API applies authentication and access controls and requires HTTPS for remote account traffic. Session tokens are stored as hashes on the server. We design the service to process necessary information, although no transfer or storage method is perfectly secure.

9. International processing

Google services and account-server infrastructure may process information outside your country. This policy does not name an unverified storage region.

10. Changes

If the game's data practices change, we will update this page and its last-updated date. We review these disclosures against actual data practices when features such as ads or payments change.

11. Contact

GYUFORGE · [email protected] · https://gyuforge.com/

iOS / App Store

1. Scope

This policy describes account, game-save, App Store purchase and rewarded-ad data practices for GYUFORGE's upcoming iOS app Abyss Survivor: Cyber Rogue. Available features depend on the installed app version, and the information below is processed when the relevant features are used. The Android section and the general GYUFORGE website policy apply to their respective scopes.

2. Accounts and sign-in

Sign-in is optional. With Google sign-in, we process the account identifier and authentication information, the email address, display name and profile photo URL supplied by Google, an internal game user ID and session information. With Apple sign-in, we process Apple's account identifier and authentication information, an internal game user ID and session information. The current Apple sign-in does not request name or email permissions. A refresh token for revoking Apple access is stored encrypted on the server. We do not receive your Google or Apple password.

We use this information for sign-in, account linking and security, saving and restoring progress, purchase verification and account deletion.

3. Game progress and settings

The device stores credits, ships and parts owned/upgraded/equipped, stage, achievement and story progress, attendance and rewards, gacha state, language and audio settings, and purchase-related state. When signed in, progress and settings are synchronized to the account's server profile, and attendance/reward records are also stored on the server. These records support restoration, rewards, duplicate-grant prevention and purchased entitlements.

Guest progress remains on the device and is not synchronized as an account save. Recovery after deleting the app or losing data is not guaranteed. Device backup and restoration depend on device and operating-system settings. Advertising SDK data processing is separate from whether you sign in.

4. App Store purchases

iOS purchases and subscriptions are processed through Apple's App Store/StoreKit. For verification, restoration, credit/product/subscription grants, duplicate-grant prevention and refunds, the server processes product and transaction identifiers, purchase dates and state, subscription expiration/renewal state, grant/spending/refund records and game account binding information. GYUFORGE does not directly receive card numbers, bank account details or other payment-method details through this payment path.

5. Ads and privacy choices

We use Google Mobile Ads (AdMob) and User Messaging Platform (UMP) for rewarded ads. Google SDKs may process IP addresses and the general location inferred from them, advertising or app-/developer-bounded device identifiers, ads seen, app/ad interactions, and crash/performance information. Purposes include advertising, analytics and feature/performance improvement, subject to Google's service policies and privacy choices.

Where required, privacy messages appear before ad requests, and available choices can be changed through the game's advertising privacy settings. iOS tracking permission is chosen in the system prompt. You can keep playing if you decline tracking, and permitted ads may still be shown. After ATT is declined, Google Mobile Ads does not send IDFA in ad requests; this does not mean all other SDK data processing stops.

6. Security, support and providers

The account API temporarily stores request IP addresses to limit excessive requests. It also processes session and technical information needed for authentication, service requests, errors and security issues. If you contact us, we may process the content and contact information you provide to reply and verify ownership.

Google Sign-In supports Google authentication; Apple supports Apple authentication and App Store transactions; Google Mobile Ads and UMP support ads and privacy choices. We use Cloudflare infrastructure for the account API and data storage. Information needed for these services may be processed outside your country; we do not guarantee a particular storage country.

Google Privacy Policy · Apple Privacy

7. Account deletion

Start account deletion in the game's account settings and confirm it by reauthenticating with the Google or Apple account used to register. Confirmed deletion removes the server profile, progress, settings, attendance, sessions and sign-in identity records, and clears the name, email and profile photo URL. The app also cleans up the deleted account's local progress. If the result is uncertain, use the app's deletion-status check. Signing out or resetting progress is separate from account deletion.

Revoking external account access is separate from personal-data deletion. If incomplete, follow the app's instructions to check again or manage app access in Google/Apple account settings. The encrypted token needed for Apple revocation is removed when revocation succeeds; if it fails, its retention deadline is seven days after the deletion request.

Account deletion does not automatically cancel an App Store subscription, and billing through Apple may continue. Manage subscription changes and cancellation in the App Store. Apple's and Google's separately held account, transaction and advertising data are subject to their policies and management tools.

Manage App Store subscriptions

8. Retention and manual erasure

Account information and saved games are retained while providing the account, and the personal data and progress described above are removed following confirmed deletion. Minimum purchase/grant/spending/refund evidence, the pseudonymous internal user ID linking it and deletion-confirmation records may remain separately. Pseudonymous records are not anonymous, and we do not retain the entire game account or progress for this purpose.

  • Transaction, grant and refund evidence: five years from the latest confirmed related financial event.

  • Consumer complaint/dispute evidence, if any: three years from the latest confirmed related event.

  • Linked deletion/transaction audit records use the longer applicable period. A separate legal preservation requirement or unresolved purchase, restoration or dispute review may require keeping the necessary records separately until that reason is resolved.

After retention periods end, an operator reviews whether any further preservation reason applies and manually erases eligible records. Erasure is not automatic at the instant a period expires. Retained information is used only as needed for transaction verification, refunds, disputes and deletion confirmation.

9. Contact and changes

For privacy, deletion, children's information or parent/guardian requests: GYUFORGE · [email protected]

Refer to the app's age information on the App Store. When data practices change, we update this policy and its last-updated date.