Privacy Policy
PlaySnack (the “Service”, operated by PlaySnack, an individually run service) keeps this Privacy Policy to protect your personal information under Korea’s Personal Information Protection Act and to answer questions quickly.
The Service needs no sign-up. To play, we do not ask for your name, phone number or email, we set no cookies, and we use no advertising or third-party analytics tools.
1. Why we process information
- Running rooms you play together: telling devices apart, showing nicknames, scoring and ranking, showing a finished game’s result again
- Improving the Service: anonymous totals (such as how many games finished), error reports, reading feedback you send
- Preventing abuse: limiting request floods and repeated PIN guesses
- Paid passes: when you buy a pass, confirming it so you can use it, and handling refunds
- Answering questions you email us
2. What we process
| Area | Items | How |
|---|---|---|
| Rooms | Nickname (typed or auto-assigned), a random number created per browser, in-game input (answers, votes, drawings, guesses, quizzes and polls you write) | Sent automatically when you join and play |
| Friends-room results | Nicknames, scores, quiz questions and each player’s picks | Saved automatically when a friends-room game ends |
| Event rooms | Event code, event name, room address, the organizer device’s random number, saved setup (games, PIN on/off, poll questions and options) | When an organizer sets up an event room |
| Anonymous stats | Once a day the browser’s random number (counted only in a form that cannot be reversed), usage ranges, event totals, error text with personal details removed | Sent automatically while you use the Service |
| Send feedback | Kind and text of the note (up to 500 characters), the screen and game it came from, device type (phone, tablet, computer) with OS and browser name, language, screen size | When you send a note with “Send feedback” |
| Connection data | IP address, browser information (processed by Cloudflare, which serves the Service) | Automatically on access |
| Paid passes | Order number, the pass bought and its dates, payment status (only if you buy a pass) | Passed to us by Lemon Squeezy when you buy |
| Contact | Email address and message | When you email us |
Please do not put your real name or contact details in a nickname or a note. We recommend a nickname. If your browser sends Do Not Track (DNT) or Global Privacy Control (GPC), no anonymous stats are sent or counted.
The name, email, billing country and card or other payment details needed to pay for a pass are collected and processed directly by Lemon Squeezy, our reseller, and its payment processor (Stripe). The Service does not receive card numbers or other payment details.
3. Retention and deletion
| Item | Kept for |
|---|---|
| Nicknames, scores and game input while a room is open | Deleted when the last person leaves (basic room data: 24 hours after the last connection) |
| Friends-room results | 7 days |
| Wrong-PIN records (a non-reversible value derived from the IP) | 7 days |
| Event-room data | 30 days after the event ends |
| Daily anonymous stats and error text | 90 days (daily device-count estimates: 100 days) |
| Monthly and all-time totals | For as long as the Service runs; they are totals that cannot identify anyone |
| Feedback notes | The latest 500 are kept; older notes are deleted automatically |
| IP for rate limiting | Not stored (used once in memory). For “Send feedback”, a non-reversible value derived from the IP is kept for one day to stop repeated sends |
| Paid-pass order data | 1 year after the pass ends (for refunds and questions) |
| Contact emails | 1 year after the request is handled |
| Values on your own device (nickname, settings, history) | Until you clear your browser data (not on our servers) |
Expired data is removed by automatic expiry in storage or by the operator, and electronic files are deleted so they cannot be recovered.
4. Processors and international transfers
The Service runs on the infrastructure and services below. These companies are outside Korea, so information is transferred over the network whenever you use the Service.
| Recipient | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. | USA (global data centers · Cloudflare’s network and its D1 database) | IP address, browser information, room data (nickname, random number, game input), friends-room results, event-room data, feedback notes, anonymous totals, cleaned error text | Website and room servers, stats and result storage | As in section 3 |
| Lemon Squeezy, LLC (payments: Stripe, Inc.) | USA | Name, email, billing country, payment details, order history (only if you buy a pass) | Selling passes, payment, receipts and taxes (Lemon Squeezy is the Merchant of Record) | Per Lemon Squeezy’s privacy policy |
| Apple Inc. | USA | IP address, browser information | Playing a song preview straight from Apple when you tap “Listen” in the song World Cup | Per Apple’s privacy policy |
| Google LLC (Gmail) | USA | Email address, message | Receiving your questions | 1 year after the request is handled |
- When and how: each time you use the Service, over encrypted connections (HTTPS / WSS)
- How to refuse: stop using the Service. Song previews connect to Apple only when you tap “Listen”, and nothing goes to Lemon Squeezy unless you buy a pass.
- The “Support” (Ko-fi) link takes you to Ko-fi, where Ko-fi’s policy applies.
- We do not sell personal information or share it with third parties for advertising.
5. Cookies and on-device storage
The Service sets no cookies. Values such as your nickname, language and sound settings, and the random number for anonymous stats live in your browser’s storage (localStorage and sessionStorage) and go away when you clear this site’s data.
6. Your rights
You may ask at any time to access, correct, delete or stop the processing of your information.
- Change your nickname any time in a room’s lobby or on the create screen.
- Clear values on your device (nickname, random number, settings) by deleting this site’s data in your browser.
- Turn on DNT or GPC to opt out of anonymous stats.
- Friends-room results are deleted automatically after 7 days. To have one deleted sooner, email [email protected] and we will delete it within 3 days.
- Send any other request to [email protected].
- There are no accounts, so we cannot look people up by name; including the room link or a screenshot helps us act quickly.
7. Children
The Service does not ask your age and does not collect names or contact details from children under 14. Children should use a nickname, not their real name.
8. Security measures
- All traffic is encrypted with HTTPS / WSS.
- IPs used for rate limiting are not stored; wrong-PIN records keep only a shortened, non-reversible value.
- The stats browser number is hashed with a secret key into a count-only structure; the original is not stored.
- Error text has addresses, emails, numbers and Korean text removed before it is stored.
- The admin screen is password-protected, and the password lives in the host’s secret settings, not in code.
- Access to personal information is limited to the operator.
9. Privacy officer
- Contact point: PlaySnack Privacy
- Contact: [email protected]
10. Remedies
For reports or advice about privacy violations in Korea:
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Supreme Prosecutors’ Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
11. Changes
This policy takes effect on October 30, 2026. We announce changes on the Service at least 7 days before they take effect.