Privacy Policy

WorkMade Corp. (the Company), operator of Pastel Bridges Puzzle (the service), publishes this policy to protect personal information in accordance with applicable laws, including Korea’s Personal Information Protection Act.

This policy applies to Pastel Bridges Puzzle, its public documents and update policy service.

1. Information and purposes

Android advertising uses Unity LevelPlay with Meta Audience Network, InMobi and Liftoff Monetize, and InMobi Choice for advertising privacy choices where required. The Google AdMob, UMP and Unity Ads advertising descriptions below apply only to the existing iOS path. Descriptions of non-advertising Google services, including Google Play payments and distribution, still apply to those features. The service currently has no registration, login or Company-operated analytics server. Puzzle progress, paths, latest times and ratings, hint balances and grants, ad counts and active play time, tutorial state, language and feedback settings are stored locally to provide gameplay and resume functions. They are not sent to a Company progress server. The app does not ask for your name, date of birth, address, contacts, photos or precise location permission.

2. Payment verification and storage

This processing applies only to Android versions with product sales enabled. For purchase verification, restoration, refunds and duplicate prevention, the Company payment API receives and stores an installation identifier, app/package/product identifiers, purchase token, store transaction/order identifiers, status and processing times, and app-entry time. It does not receive card numbers or payment passwords. Transactions and purchase/refund notifications are verified with Google using Cloudflare Workers and D1. These records are separate from puzzle progress. The iPhone version does not contact this payment API or send purchase transactions to it. Ad SDK processing of advertising conversions or purchase tendencies is addressed separately below.

3. Android advertising processing

Enabled advertising providers may process IP addresses and approximate location derived from them, advertising/device identifiers, ad requests, impressions, clicks and video views, app interactions, diagnostics/performance data and privacy-choice signals for delivery, measurement, diagnostics and fraud prevention. Actual data and providers depend on region, age, choices, permissions and settings. Their official policies below describe processing, international transfers, retention and rights.

4. Android advertising privacy choices

On Android, required consent notices appear automatically only in the countries or regions where they apply. Where consent is not required, no popup is forced. After the region is confirmed, you can open Advertising privacy settings to save, change or withdraw provider choices voluntarily. Meta personalized ads may be served only when actual choices, including permission for data processing, device storage and personalization, adult confirmation, and provider requirements are satisfied. Eligible contextual advertising remains available without making these choices in supported regions. Refusing personalization or one provider does not exclude other eligible providers; no ad is requested if none is eligible. The game remains usable. Existing iOS consent screens and privacy choices follow the applicable regional and platform requirements.

5. Advertising SDK processing

The app uses Google AdMob and User Messaging Platform (UMP). The iPhone version also includes Unity Ads, Meta Audience Network, InMobi and Liftoff Monetize (Vungle) mediation SDKs. Providers may process IP addresses and approximate location, advertising/device and SDK user identifiers, ad impressions/clicks/conversions, app usage, diagnostic/performance information, device/network characteristics and privacy choices to deliver and measure ads, diagnose errors, prevent fraud and manage consent. Unity disclosures also include purchase history or tendencies and other usage information; this does not mean that the iPhone app offers payments. Processing depends on the OS, consent, provider and ad settings. The Company does not pass saved puzzle solutions, bridge paths or progress to ad SDKs, or supply names, emails, contacts or precise location as ad targeting inputs. External sites opened separately from advertisements follow their own operators’ policies.

6. Advertising privacy choices

Google UMP provides consent or privacy-choice forms where applicable. When available, choices may be changed through advertising privacy settings in the app. Tracking across other companies’ apps and sites on iPhone must follow applicable App Tracking Transparency permission and consent. Other identifiers must not be used to bypass denial of tracking. Declining ad consent or tracking permission does not restrict puzzle play. Ad availability and type may change; contextual ads may still involve information needed for communication, diagnostics and fraud prevention.

7. Support and public pages

When you email us, we use your sender address and the text and attachments you voluntarily provide to respond and resolve the issue. The app does not automatically attach device identifiers, progress or logs. Public documents and update policies are served through AWS S3 and CloudFront; requests transmit connection information such as IP address and browser information. Installed versions are compared locally and are not sent to the Company with device IDs or progress. Public documents contain no advertising or analytics scripts.

8. Processing grounds

Local information supports the game functions you request. Support information is used as necessary to handle your inquiry. Consent is used where required for advertising or tracking; other applicable grounds may include legitimate interests or legal obligations. You may withdraw applicable consent or object to processing.

9. External and international processing

Ad and consent requests may transmit the advertising information above to Google, Unity, Meta, InMobi, Liftoff and relevant advertising partners. Public-page requests send connection information to AWS. Android payment requests and store notifications send payment information to Cloudflare and Google. These providers may process data in countries including the United States; InMobi and Liftoff also include entities in Singapore. Provider roles can include independent advertising processing and processing on behalf of others. Their notices below describe applicable entities, transfers, safeguards and rights. The Company does not sell or send on-device puzzle progress to advertising providers. Withdrawal and international-processing inquiries may be made through settings or wm@worksmade.com; some ad services may become unavailable.

10. Retention and deletion

Local records remain until app data is deleted. Android allows system backup; backup, transfer and restoration after reinstall may occur depending on the OS and device settings. iOS backup and deletion may also depend on OS settings. The Company does not directly store, inspect or manage OS backups and cannot guarantee recovery. Uninstalling does not guarantee deletion of OS backup copies. Support information is deleted without undue delay after its purpose is fulfilled, except where disputes or legal obligations require retention for that purpose and period. Android payment records are retained as needed for restoration, refunds, disputes and applicable legal obligations. Removing the app does not delete server payment records. Contact support with an installation identifier or store order details to exercise applicable rights. Transaction evidence subject to legal retention may remain for that obligation after a deletion request. Information processed by advertising/consent providers and AWS follows their respective notices and applicable settings. InMobi currently states a general maximum of 13 months for Marketing Platform information, subject to exceptions for law, contract, disputes and anonymization. This is not a common retention period for all providers or Company support correspondence. OS settings and provider rights procedures can also be used to manage identifiers and consent information.

11. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, withdrawal of consent, objection or portability, and complain to a competent supervisory authority. We cannot remotely read, restore or delete local records we do not hold. You can use app-data deletion and device settings, or contact the email below. Withdrawal does not affect processing that was lawful before withdrawal.

12. Children, young people and safeguards

Additional regional protections may apply to information about children and young people. Parents or guardians may contact us about privacy requests. We minimize unnecessary collection and apply appropriate safeguards such as access restrictions and secure communication. Please also protect your device, backups and shared-device access.

13. Contact

For inquiries about this Privacy Policy or app use, please contact wm@worksmade.com.

14. Notice of changes

This privacy policy may change due to changes in law or Company policy. Important changes will be announced in the app or on distribution pages.