SY LABS / PRIVACY

Privacy Policy

Play without signing in. Link an account when cloud backup is available and you want to use it. Advertising providers process their own data when ads are requested.

Effective / Updated · v1.0

The game is in development. Game features described here apply when they are available in your installed version; publishing these pages does not mean that every feature is already available.

Who is responsible

The Library’s Children (도서관의 아이들), including its game and this website, is operated by 신용 (SY Labs), Republic of Korea. Contact for privacy and support: cs@sy-labs.net. This policy covers our processing and identifies external providers; those providers also have their own policies.

Game progress and optional account linking

The game stores progress, puzzle states, achievements, preferences, and received books on your device. Local-only data is not sent to us merely because it is saved. When cloud backup is enabled, an internal user or installation identifier, linked provider account identifier, authentication information, save data, and synchronization timestamps are sent to our Cloudflare-hosted service to save and restore progress. Backup is not a separate gameplay analytics program. Account passwords are handled by the sign-in provider, not requested by us. Any email or display name actually supplied and retained for account support is used only for that purpose; provider permissions are shown during linking.

Rewarded advertising

Google AdMob and its consent platform may process IP addresses and approximate location derived from IP, device or advertising identifiers, ads viewed, ad interactions, product interactions, performance information, crash logs, other diagnostics, and privacy choices for ad delivery, measurement, analytics, security, and consent management. Some identifiers may be used for cross-app advertising tracking when permitted. This can occur even if the operator does not receive the underlying data. We do not request GPS location for advertising. Reward verification may process a reward transaction or session identifier, completion time, and reward status to prevent duplicate rewards. See how Google uses information from partner apps and Google’s Privacy Policy.

Website, delivered content, and support

Cloudflare processes connection information, such as IP address, request time, and technical request details, to deliver this website and online game content and protect the service. This legal website has no advertising, analytics scripts, contact forms, or cookies set by us. If you email us, we receive your email address, message, and any attachments you choose to send. We use them to answer your request and verify ownership where necessary. Please do not send passwords, sign-in tokens, or payment card details.

Device features and purchases

Device tilt, orientation, brightness, and touch input used for puzzles are processed on the device; raw sensor readings are not uploaded for backup or advertising by our game code. Microphone and camera collection are not part of the initial release. Initial Episode 1 has no in-app purchases, including no paid ad-removal product. We do not collect payment card information. We will update this policy before introducing materially different data processing.

Providers and international processing

Cloudflare provides hosting, network security, and, when enabled, game backend and storage services. Google provides AdMob and consent services. Apple, Google, or another sign-in provider selected in the app handles authentication when you link that account. Support email is handled through our email services, including Cloudflare Email Routing. These providers may process data in the United States and other countries where they or their subprocessors operate. We use applicable contractual safeguards and provide additional transfer notices or obtain consent where required. Refusing an optional transfer may prevent that online feature while leaving local play available. Provider information: Cloudflare, Apple, and Google. We do not sell cloud saves or support messages or provide them to advertisers for targeting.

Retention and deletion

Local saves remain until removed through the app or the device’s application-data controls. Cloud saves and linked account records remain while backup is in use, until you request deletion or the service closes. Validated deletion requests are completed from active systems within 30 days; any residual backup copies expire within 90 days and are not used for ordinary service. Operational and security logs are retained for no more than 90 days, reward verification records for no more than one year, and support correspondence for no more than three years after resolution. Information subject to a specific legal preservation duty or active dispute may be retained separately for the necessary period, with restricted use. Providers independently retain data under their own policies. Electronic data is deleted or made irrecoverable; any paper records are securely destroyed.

Your choices and rights

You can request access, correction, deletion, restriction, withdrawal of consent, or a copy of your data where applicable by emailing cs@sy-labs.net. We may ask for limited information to verify ownership, but never your password. See the support and deletion page. Uninstalling the app or unlinking a sign-in provider does not by itself delete a server backup. Advertising privacy choices are offered where required through the app’s privacy controls and device settings. On iOS, permission is requested before tracking requiring App Tracking Transparency authorization. Declining tracking is not consent to tracking by another identifier. Essential processing supports delivery and security; optional processing relies on consent where required by law. You may also contact your local data protection authority.

Children and security

The title refers to fictional characters; the service is not specifically directed to young children. Where law requires a parent or guardian’s consent, the relevant data processing requires that consent. If you believe a child’s information was provided without required permission, contact us for review and deletion. We use encrypted transport and access controls for online services. No storage or transmission method can guarantee absolute security.

Changes

We publish the effective date and revised policy on this page. Material changes are also announced through the app or website before taking effect, and new consent is obtained where required. This policy is available in English, Korean, and Japanese; statutory rights apply regardless of language.

↑ Back to top