WorksMade Corp. (the “Company”) processes personal information and on-device game data related to YAHO KEYCAP as described below.
1. Data controller
- Data controller: WorksMade Corp.
- Privacy contact: YAHO KEYCAP Operations
- Email: wm@worksmade.com
2. Information not entered directly into the app
The first public release does not provide registration, login, paid purchases, customer profiles, or Company server synchronization. The Company does not ask users to enter their name, date of birth, telephone number, email address, account ID, password, precise location, contacts, photos, or payment information in the app.
This does not mean that no information is processed. Third-party SDKs such as Google AdMob may automatically process the information described below.
3. Game data stored on the device
- Campaign progress, clears, rewards, and YAHO MODE unlock state;
- YAHO MODE best and recent records and game results;
- coin balance, earnings, and spending;
- owned, new, or purchased keycaps and motifs and equipped combinations;
- music, effects, keycap-sound, and other settings;
- interstitial counters and rewarded-ad dates, tiers, and grant ledger; and
- data versions, migrations, and local runtime state.
This data is not sent to a Company server and cannot be remotely viewed, restored, or modified by the Company. Compatibility fields such as serverUserId are not used for an actual account or server connection in the first public release.
4. Information Google AdMob may process automatically
The app uses the Google Mobile Ads SDK and Google User Messaging Platform SDK for banner, interstitial, and rewarded ads. For ad delivery, frequency capping, consent management, measurement, analytics, security, and fraud prevention, Google may automatically collect and share:
- IP address and general location estimated from the IP address;
- app launches, screen or ad taps, ad impressions, video views, and other app or ad interactions;
- diagnostics such as launch time, crashes, errors, performance, and energy use;
- Android advertising ID, app set ID, iOS advertising identifier (IDFA, when permitted), and other device or account identifiers;
- device type, operating system, app version, language, region, and technical ad-request information; and
- advertising and privacy-consent status.
The Company does not use a separate first-party analytics SDK. Actual AdMob processing varies by region, device settings, consent choices, ad-serving mode, and Google policy. See the Google Privacy Policy and Google Mobile Ads data disclosure.
5. Purposes
- maintaining single-player progress, records, currency, collection, and settings;
- providing banner, interstitial, and rewarded ads and preventing duplicate rewards;
- checking privacy choices and gathering regional advertising consent;
- frequency capping, measurement, diagnostics, security, and fraud prevention;
- opening public terms, privacy, and open-source notices; and
- responding to inquiries and complying with legal obligations.
6. Sharing and external apps
When a user taps Share, the app passes a game introduction or best-record text and a public landing-page URL to the device’s sharing function. The data does not pass through a Company server. The user selects the destination in the operating system’s share sheet.
After transmission, storage, publication, deletion, and personal-data processing are governed by the selected app’s policy. Users can cancel the share sheet if they do not want to share.
7. External processing and international transfers
| Recipient or processor | Data | Purpose | Country and method | Retention |
|---|
| Google LLC and Google affiliates | Advertising, device, interaction, diagnostic, and consent information described in Section 4 | Ad delivery, consent, measurement, analytics, security, and fraud prevention | Transmitted over the network during app use to systems in the United States and other countries where Google operates | According to Google policy and the user’s settings and consent |
| Provider of a sharing app selected by the user | Text, record, and landing-page URL selected for sharing | User-requested sharing | Transmitted to the selected app and the countries where its provider processes data | Under that provider’s policy or until the user deletes it |
Google and sharing-app processing is governed by each provider’s terms and privacy policy. Users can limit processing where available through device advertising settings, `Ad Privacy Options` in app settings, canceling a share, or uninstalling the app. Refusing optional advertising consent may limit personalized ads or prevent ads from being served, but the core single-player game remains available.
8. Permissions and device features
- Internet: advertising and public policy pages;
- Vibration: game-input feedback;
- Advertising identifiers and Android advertising services: ad delivery, measurement, and fraud prevention; and
- iOS tracking permission: requested when required by iOS and processed according to the user’s choice.
The app does not request camera, precise-location, contacts, photos, or microphone permission.
9. Retention, deletion, and backup
On-device game data remains until the user clears app data or uninstalls the app. Because no copy exists on a Company server, the Company has no separate server game data to retain or delete, and deleted data cannot be recovered.
The Android app is configured to disallow cloud backup and device transfer of app data. Independent operating-system or manufacturer behavior may vary by device and version, and the Company cannot access or guarantee the result. Retention and deletion of information processed by Google AdMob or an external sharing app are governed by that provider’s policy and the user’s device or account settings.
10. User and guardian rights
- review or change advertising privacy choices in app settings;
- reset or delete the advertising ID or change tracking permission in operating-system settings;
- cancel the share sheet and delete shared content in the destination app;
- delete local game data by clearing app data or uninstalling; and
- contact wm@worksmade.com with privacy questions or objections.
Because the Company does not hold user accounts or server game data, it does not provide account-based access, correction, or deletion features. The Company will respond to inquiries to the extent verifiable under applicable law.
11. Children
The Service is not designed or operated for children, and the Company does not intentionally collect children’s personal information directly. The app has no age or personal-information entry feature. A guardian who becomes aware of possible processing involving a child may contact the Company by email.
12. Security measures
The Company reduces unnecessary processing and exposure through a serverless game-data design, third-party SDKs that use encryption in transit, minimum permissions, Android backup exclusions, and periodic reviews of dependencies and disclosures. Third-party SDK security is governed by each provider’s safeguards and policies.
13. Contact and remedies
Users may also seek assistance from a data-protection authority or dispute-resolution body in their country of residence.
14. Changes
This Policy may be revised because of changes to features, data processing, law, or third-party SDKs. Material changes will be announced in the app or on the public page before they take effect, with an effective date and change history. Urgent legal or security changes may be announced promptly after taking effect.
15. Language
This Policy is provided in Korean and English. If the versions differ, the Korean version controls to the extent permitted by applicable law. Mandatory data-subject rights remain unaffected.