Privacy Policy
Last updated:
In one paragraph
DOLLPICK can be played without creating an account. We do not ask for your name, phone number, address or contacts, and the app does not access your location, camera or photos. We create an anonymous account identifier to save your progress, and we use your device advertising identifier to show ads.
1. What we collect
a. Playing without an account (default)
- Anonymous account identifier (UID) — a random string created the first time you open the app. It is not linked to your name or email and does not identify you personally.
- Game progress — plushies you own, rooms and accessories, in-game currency (coins and gems), progress state and last play time, so you can continue after reinstalling or switching devices.
- Advertising identifier — your Google Advertising ID, used to serve ads and to confirm that a rewarded ad was actually watched.
- Access records — timestamps and error records produced while handling your requests.
- Usage time records — the start and end times of each app session and the app version (no information that could identify you personally).
b. Signing in with Google (optional)
- Your Google account email address and account identifier, used only to restore your progress on another device. We never receive or store your password — only the authentication token issued by Google.
c. Purchases
- Purchase records (product, time of purchase, and the order identifier issued by Google).
d. What we do not collect
- Name, date of birth, phone number, address, contacts, photos, call or message history.
- Location data — the app does not request location permission.
- Camera, microphone or file storage — the app does not request those permissions.
2. Why we use it
- Saving and restoring game progress, including moving to a new device.
- Showing ads and verifying that rewarded ads were watched.
- Verifying purchases, delivering purchased items, and preventing duplicate grants.
- Detecting and blocking abuse such as automation tools or currency tampering.
- Compiling usage statistics and improving the service (analysis of when and how long the app is used).
- Answering your enquiries.
3. Processors and third parties
We do not sell your information. We use the following processors to run the service.
- Google LLC (Firebase Authentication, Cloud Firestore, Cloud Functions) — storage and processing of the anonymous identifier, game progress and usage time records.
- Google LLC (Google AdMob) — ad delivery and processing of the advertising identifier.
- Google LLC (Google Play Billing) — payment processing and receipt verification.
You can read how Google handles this data at https://policies.google.com/privacy .
3-1. International transfer of personal data
Because of the processors named above, your personal data is stored and processed on servers outside Korea. The transfer relies on article 28-8(1)3 of the Korean Personal Information Protection Act (processing or storage entrusted to perform a contract with the data subject), and the items required by article 28-8(2) are disclosed here.
- Data transferred — anonymous account identifier (UID), game progress, advertising identifier, access records, usage time records, purchase records, and (if you sign in with Google) your Google account email address and account identifier.
- Where each service processes data (checked 2026-09-16)
- Cloud Firestore (game progress storage) — Republic of Korea (Seoul, asia-northeast3)
- Cloud Functions (server processing) — Republic of Korea (Seoul, asia-northeast3)
- Firebase Authentication (anonymous account identifier) — Google's global infrastructure, which cannot be pinned to a region (includes the United States)
- Google AdMob (advertising identifier) — Google's global infrastructure (includes the US)
- Google Play Billing (purchase verification) — Google's global infrastructure (includes the US)
- When and how — continuously, whenever the relevant feature runs while you use the service, over encrypted connections (HTTPS).
- Recipient — Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Privacy contact: https://support.google.com/policies
- Purpose and retention — used only within the purposes listed in "2. Why we use it", and kept for the periods listed in "4. How long we keep it".
- How to refuse the transfer, and what happens if you do — write to support@deltacorestudio.com. This transfer is, however, essential for saving your progress, serving ads and verifying purchases, so refusing it means we cannot provide the service and the request is handled as an account deletion.
4. How long we keep it
- Game progress — until you ask us to delete it.
- Payment and refund records — 5 years, as required by Korean e-commerce consumer protection law.
- Access records — 3 months, as required by Korean communications law.
- Usage time records — stored on our servers only as daily totals (number of sessions, usage time, and the start time and app version of that day's last session) and deleted automatically after about 60 days. The per-session markers used to avoid counting the same session twice (date, usage time, app version) are deleted automatically after 10 days.
5. Your rights
- You may ask to access, correct, delete, or restrict processing of your data. Write to support@deltacorestudio.com and we act without delay, telling you the outcome and the reasons within the period the law sets for that type of request (10 days at the latest).
- Even without a request, personal data that is no longer needed for its purpose is deleted without delay. Records we are legally required to keep (payment and access records) are stored separately from other data for that period.
- Instructions for deleting your account and game data are here: https://deltacorestudio.com/dollpick/en/delete-account
- If you do not want personalised ads, you can reset your advertising ID or opt out in your device settings (Android: Settings › Privacy › Ads).
6. Children
This game is not directed to children under 14 and we do not knowingly collect personal information from them. If we learn that we have collected such information, we delete it without delay.
7. How we protect the data
- Encryption in transit — all communication with our servers uses HTTPS.
- Access control — server rules restrict stored data so that it can only be read with your own account identifier, and currency grants and payment verification happen only on the server.
- Data minimisation — we do not ask for anything the service does not need.
8. Who is responsible
- Controller: Deltacore Studio
- Contact: support@deltacorestudio.com
9. Changes to this policy
If this policy changes we will tell you through an in-app notice or this page at least 7 days before it takes effect, and at least 30 days before any change that is materially unfavourable to you.
Until 2026-10-07 the previous version (effective 2026-08-15) applies. To get the full text of the previous version, email support@deltacorestudio.com.