Privacy Policy
How MetaRace v2 processes personal data, including public rankings, external providers, retention, deletion and your choices.
1. Controller and contact
- Operator
- NollPang
- Business registration
- 395-40-00428
- Mail-order registration
- 2026-Uijeongbu Songsan-0004 (Songsan 3-dong, Uijeongbu)
- Business / support address
- Room 204, 2F, 119 Dongil-ro, Uijeongbu-si, Gyeonggi-do 11726, Republic of Korea
- Service operations
- Jang Ju-hyeok (장주혁)
- Support
- admin@nollgames.com
NollPang (the “Company”) explains personal data processed for MetaRace v2, its accounts and support, and this policy website. Accounts and progress are not automatically combined with the separate NollPang puzzle game. Privacy contacts and rights-request details appear in section 9.
2. Data and purposes
Scroll the table horizontally to view all columns.
| Context | Data processed | Purpose |
|---|---|---|
| Starting, signing in or linking accounts | BACKND game identifiers including UID, guest or login method, Google or Apple authentication identifiers and tokens, and account information supplied for authentication | Authentication, account linking, access control and recovery support |
| Playing and saving | Nickname, selected country, theme and stage progress, race scores and records, tutorial progress, vehicles, frames, engines, wheels, drivers, upgrades and equipment, items, bolts and hearts, gifts, attendance, rewards, purchase grants and timestamps | Progress synchronization, upgrades and rankings, fulfillment and prevention of duplicate grants |
| Purchases, restoration and refunds | Store, product, order and transaction identifiers, purchase tokens and receipt verification data, payment status, time, amount and currency, grant, restoration and refund records | Transaction verification, fulfillment, restoration, duplicate prevention, support, refunds and statutory records |
| App and server connections | IP address, OS, device, app version and language, request times, connection, error, failure and suspected abuse records | Connections, troubleshooting, security and stability |
| Error and crash reports (from first app launch) | For each app session, a session identifier, start time, device, OS and app version; for exceptions, crashes and app-not-responding (ANR) events in the app, error details, code location (stack trace), time of occurrence and app state at the time (such as background state and screen orientation); memory dumps for analyzing native crashes (kept only while being processed); device model, CPU, GPU, memory, storage and screen information and whether the device is rooted; Crashlytics and Firebase installation identifiers; and the analytics events recorded just before the error | Finding and fixing the causes of errors; measuring and improving stability, such as the share of users and sessions without crashes |
| Analytics (from first app launch) | App-instance and account-linked identifiers, account type and creation date, progress band and payer status, first launch, loading steps and Terms notice confirmation, session, tutorial, race start/completion/exit, item, currency, purchase, advertising and reward events, crash occurrence events, device and app data and approximate IP-based region | Difficulty, stability, usage and performance analysis; early drop-off and loading delay checks; investigation of missing or duplicate processing |
| Unity basic usage statistics | Device, app and OS information, installation and device identifiers, IP address and basic usage events | Game-engine service usage and quality measurement |
| Advertising | Available advertising identifiers, IP, device and app information, ad requests, impressions, clicks, revenue and reward events, consent and privacy signals | Ad delivery, measurement, frequency management, fraud prevention and rewards |
| Support and rights requests | Reply email, game UID, nickname, messages and attachments, relevant order identifiers and minimum verification information | Support, refunds, account recovery, privacy rights and disputes |
| Policy website visits | IP address, browser, requested page, time and other request information processed by GitHub | Page delivery, hosting and security |
Data comes from your entries, app, server and SDK operation, and responses from login and store providers. The selected country is an in-game display choice, not precise GPS location. Analytics identifiers can be linked to game accounts; we do not describe all analytics as anonymous.
The app does not directly request Google or Apple passwords or full payment card numbers. Do not include passwords, verification codes, national identity numbers or full card numbers in support material.
3. Legal basis and public information
Authentication, game saving, rankings, fulfillment and support are processed as necessary to perform the service contract; statutory transaction records are retained to meet legal duties. Security and troubleshooting, including Firebase Crashlytics error and crash reports, use an appropriate legal basis and necessary scope. Firebase analytics is processed from the first app launch to the extent necessary to check errors and stability and improve the service; you may request suspension at any time under section 7. Advertising, analytics and transfers requiring separate consent follow that procedure. Publication of this policy or acceptance of the Terms does not replace required separate consent.
Public rankings may show your nickname, selected country, race scores, records, position and display information such as the selected driver. Email addresses, authentication tokens and purchase receipts are not shown in rankings. Avoid using your real name or contact details in a public nickname.
We do not disclose data beyond the described processing without a legal basis. Where separate disclosure requires consent, we identify the recipient, purpose, data and retention. Lawful court or authority requests are handled only within the law.
4. Processors and external providers
Scroll the table horizontally to view all columns.
| Provider | Role | Information |
|---|---|---|
| AFI, Inc. / BACKND | Game authentication and account linking, progress and ranking storage, server operation and purchase verification | BACKND Privacy Policy |
| Google LLC / Firebase Analytics and Google Analytics | Analysis of app, race, purchase, advertising and reward events | Firebase processing · Google Privacy Policy |
| Google LLC / Firebase Crashlytics | Collection and analysis of app error and crash reports | Firebase processing · Google Privacy Policy |
| Unity Technologies / Unity Analytics and basic statistics | Basic usage and quality measurement according to the released version’s settings | Unity game-player policy |
| Google LLC / AdMob and connected advertising providers | Ad delivery, measurement, fraud prevention and privacy choices. Unity Ads and other networks may participate depending on the released version and configuration. | Google partner services · Unity game-player policy |
| Google login and Google Play; Apple login and App Store | Selected account authentication, payments, purchase verification and refunds | Google · Apple |
| GitHub, Inc. / GitHub Pages | Policy website hosting and request handling | GitHub Privacy Statement |
We restrict processing beyond the entrusted purposes and apply necessary protection and oversight. Advertising, login and store providers may also act as independent controllers for their services.
5. Retention and deletion
Scroll the table horizontally to view all columns.
| Data | Retention or deletion |
|---|---|
| Accounts, authentication, progress and rankings | Retained as needed during use. A valid withdrawal, deletion request or fulfillment of purpose triggers deletion without undue delay. BACKND processing cycles may apply. |
| Contracts, withdrawal, payment and supply records | Relevant records under Korean electronic-commerce law: five years. |
| Consumer complaints and disputes | Relevant records under Korean electronic-commerce law: three years. |
| Display and advertising records | Relevant records under Korean electronic-commerce law: six months. |
| Ordinary support requests | Deleted when resolution and follow-up purposes are fulfilled; statutory periods above apply to transaction and consumer disputes. |
| Analytics, advertising and technical records | Retained for the necessary purpose and configured provider retention, then deleted or anonymized upon purpose completion or a valid request. Support can explain account-specific retention and deletion scope. Firebase Crashlytics error reports are kept for 90 days, after which their removal from live and backup systems begins. |
| Operational and backup records | Removed according to deletion processing and backup cycles. Lawfully required transaction, security or dispute records are separately restricted to the necessary scope and period. |
Electronic files are deleted by methods designed to prevent recovery; paper, if used, is shredded or destroyed. Statutory records have restricted access, are used only for their retention purpose and are deleted when the period ends. Changing an ad identifier or uninstalling does not automatically erase previously stored analytics or advertising records.
6. International processing
BACKND processes game accounts and progress according to its service agreement and configuration. Google Analytics, Firebase Crashlytics, AdMob, selected Google or Apple login and payment, Unity basic statistics, versions using Unity Ads, and GitHub Pages can involve international processing.
Scroll the table horizontally to view all columns.
| Recipient and contact | Data and purpose | Location, timing, method and retention |
|---|---|---|
| Google LLC · Privacy contact | Analytics, advertising and account-linked identifiers, IP, device, app, usage, purchase and advertising events, error and crash reports and choice signals / analytics, ads, error analysis and security | United States and other countries disclosed by Google. Network transmission when the feature operates. Section 5 and provider retention and deletion rules apply. |
| Unity Technologies · Privacy contact | Advertising, installation and device identifiers, IP, device, app, basic usage, ad-interaction data and choice signals / basic statistics and the applicable ads, measurement and security | United States and other countries disclosed by Unity. Transmitted when basic-statistics features or included Unity Ads features operate. Purpose completion, valid requests and provider rules apply. |
| Google / Apple · Google · Apple | Selected authentication, purchase and transaction data / linking, payment and refunds | United States and other countries disclosed by each provider. Transmitted when the selected login or store feature is used. Contractual and statutory retention applies. |
| GitHub, Inc. · Privacy contact | IP, browser and request information / website delivery and security | United States and other disclosed facilities. HTTPS transmission on a page visit. Provider web-service retention applies. |
International entrusted processing or storage necessary for the contract must meet applicable legal requirements; transfers requiring separate consent follow that procedure. Ask questions, object or request suspension through admin@nollgames.com. Depending on the request, necessary login, payment or online features may become unavailable. We do not classify all advertising and analytics as mandatory processing.
7. Advertising, analytics and choices
Advertising uses AdMob consent and privacy flows and device settings. Where required for your region or status, “Ad privacy choices” appears in app Settings and opens the available provider controls. Restricting personalized ads or denying tracking does not eliminate all processing for delivery, measurement and security.
Use Android’s available advertising-ID reset or deletion controls or iOS Settings > Privacy & Security > Tracking. Menu names and options depend on OS and release version.
Firebase analytics operates from the first app launch. Firebase Crashlytics error and crash reports are not linked to game accounts, so they cannot be located, suspended or deleted for an individual player; their removal begins after 90 days. To request suspension or withdrawal concerning Firebase or Unity analytics, or deletion of existing analytics or advertising information, contact admin@nollgames.com. We verify the account and scope and explain the result and any lawful restriction. Terms acceptance alone does not justify processing requiring separate consent.
The app stores login, language, sound, Terms choices, progress and unfinished operations on the device. Clearing storage can affect preferences and guest access; it is different from deleting the server account. These policy pages contain no Company-added advertising or analytics scripts or tracking cookies. GitHub separately handles website requests.
8. Access, correction, deletion and objection
You may request access, correction, deletion, suspension and withdrawal of consent, including through an authorized representative, at admin@nollgames.com. After minimum necessary verification, we respond without undue delay within applicable deadlines or explain the legal basis and scope of a restriction.
Use Settings > Delete Account to request withdrawal of your MetaRace v2 account after confirmation. If the app is inaccessible, use the email path on the account and data deletion page. We confirm the scope of deletion of server accounts, progress, rankings and inventory, and additional analytics or advertising provider requests. Statutory transaction and dispute records are retained separately under section 5.
Uninstalling, logging out or unlinking Google or Apple does not delete the entire server account. Deleting MetaRace v2 does not delete other games or your Google or Apple account. A new purchase or waiver of refund rights is not a condition of deletion.
9. Children, safeguards and complaints
Where a child’s information requires a guardian’s consent, the applicable consent and verification requirements must be followed. If we discover processing without a lawful basis, we take appropriate verification, deletion and protective steps. Guardians may contact us below.
We apply necessary safeguards including encrypted connections, authentication, access controls and limited permissions. You may request human review of disputed record, reward or abuse-related decisions.
Scroll the table horizontally to view all columns.
| Role | Contact person | |
|---|---|---|
| Privacy officer | Park Sang-wook (박상욱), Privacy Team | admin@nollgames.com |
| Privacy requests and contact | Park Jun-sik (박준식), Privacy Team | admin@nollgames.com |
| Service operations | Jang Ju-hyeok (장주혁) | admin@nollgames.com |
You may also contact the Korean Privacy Infringement Report Center, the Personal Information Dispute Mediation Committee, or your local data-protection authority. Your right to complain is not restricted.
10. Updates and application
Revised November 5, 2026. Starting with the next app update, Firebase Crashlytics collects app launch, error and crash information; this revision adds that data, its basis, the provider, its retention, international processing and your choices.
Revised October 29, 2026. Starting with the next app update, Firebase analytics operates from the first app launch; this revision states when analytics data is collected and the basis for processing it.
Prepared October 20, 2026. This document updates the Company name and support address and describes BACKND accounts and saving, Firebase analytics, advertising, purchases, rankings and deletion. The next app update will link here. This policy does not retroactively authorize new processing or additional collection without required consent.
Changes are announced in advance through accessible website or in-app notices, including the reason, contents and application time. Material changes receive sufficient advance notice and any required separate consent. A name change alone does not mean a transfer of personal data to another business. 한국어 버전