Этот документ доступен на английском языке.

Privacy Policy

Effective date: November 16, 2026

This Privacy Policy explains how Myriad Codex ("we", "us") collects, uses, and protects your information when you use wawaspot (the website at wawaspot.com and our apps, the "Service").

1. Information we collect

When you sign in with Google

  • Your Google account email address, name, and profile picture
  • The nickname you choose, and the dates you agreed to the Terms of Service and confirmed your age
  • Whether you agreed to receive marketing messages

When you play

  • Game progress and saves, scores, rankings, and match results
  • Your SPOT balance and the history of SPOT you received and used
  • Items and name cards you own or equip

When you buy SPOT or a pass

  • Order number, product, amount, currency, and whether the order was refunded
  • Payments are processed by Xsolla (see section 4). We do not receive or store your card number.

Usage statistics

  • Play time, which game screens you used, game errors, and the hours of the day you were active
  • How you first arrived at wawaspot: the campaign tag in the link (utm values) or the domain of the website that linked to us. We do not store full addresses or search terms.
  • When you sign up: your country estimated from your browser's time zone, the language you use on wawaspot, and your device type and operating system
  • Page visit counts (home, game details, shop, ranking), counted as daily totals without identifying you

We do not use advertising cookies, device identifiers, or third-party analytics services, and we do not use your IP address to estimate your country.

Stored on your device

  • Your login session, language, and sound settings
  • How you first arrived (kept for up to 30 days until you sign up, then deleted)
  • A note that you already visited a page today, so a visit is not counted twice

2. How we use your information

  • To create and run your account and show your nickname, rankings, and records
  • To run games, save your progress, and judge results fairly on our servers
  • To give you SPOT, process purchases and refunds, and prevent fraud and cheating
  • To understand how the Service is used and improve it. We look at usage statistics only as totals, not to profile individuals.
  • To send you marketing messages, only if you agreed. You can withdraw your consent at any time.
  • To comply with the law and respond to lawful requests

Where laws such as the GDPR apply, we rely on: performance of our contract with you (account, games, purchases), our legitimate interests (security, fraud prevention, improving the Service), your consent (marketing messages), and legal obligations (keeping payment records).

3. How long we keep it

| Information | How long |
|---|---|
| Account, nickname, game saves, items, SPOT balance | Until you delete your account |
| Individual match results | 30 days (rankings keep only totals) |
| Personal usage statistics | 90 days, then only totals without personal information remain (up to 3 years) |
| SPOT history | 90 days |
| Purchase and refund records | 5 years, as required by law |
| Sign-ups that were not completed | 24 hours |

When you delete your account, we delete your personal information right away. Your past rankings and records are shown as "Deleted user". Purchase records are kept for the legally required period without your account.

4. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. This applies to residents of California and other U.S. states with privacy laws, who may exercise the rights in section 6 without being treated differently for doing so.

  • Supabase: hosts our database and login
  • Google: Google sign-in and our server hosting (Google Cloud)
  • Xsolla: sells SPOT and passes on our behalf as an authorized reseller and processes your payment. Xsolla processes your name, email, IP address, and payment details (such as the last digits of your card and your country) as an independent controller under its own privacy policy.
  • Authorities, when required by law

Other players can see your nickname, name card, rankings, and game records.

5. International transfers

Our servers are located in the United States. If you use the Service from another country, your information is transferred to and processed in the United States. Where required, we use appropriate safeguards such as standard contractual clauses.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your information, to object to or restrict certain processing, and to withdraw consent. You can delete your account at any time in Profile > Delete account. For other requests, contact us at support@myriadcodex.com. You may also complain to your local data protection authority.

7. Children

The Service is not directed to children under 13, and you must be at least 13 years old, or older if the law in your country requires a higher age, to create an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has signed up, contact us and we will delete the account and its information.

8. Security

We protect your information with access controls, encrypted connections, and by keeping game results and rewards on our servers. No method is completely secure, but we work to protect your information.

9. Changes

We may update this Privacy Policy. If the changes are significant, we will tell you in the Service before they take effect.

10. Contact

Myriad Codex
Representative: Jihyun Lee
Privacy Officer: Jihyun Lee (support@myriadcodex.com)
502, 7 Baekjegobun-ro 45-gil, Songpa-gu, Seoul, Republic of Korea
Email: support@myriadcodex.com