Hanpanmadang values your personal information and processes only the minimum needed for the game service.
1. Information we process
- At sign-up: nickname, email, password (stored as an irreversible hash)
- When using the service: per-game records (weekly and all-time bests, 1:1 wins/draws/losses), point balance and history, weekly ranking reward history, owned cosmetic items, equipped cosmetics and garden layout (including garden visibility and save number), farm (crops planted and when, crops in storage, daily sales, auto-farming time), friend invites (your invite code, who invited whom and when, progress, the inviter's link and reward counts, and an irreversible hash of a device identifier used to check whether accounts were made on the same device), garden invite links (only an irreversible hash plus creation and expiry times), check-in dates and streaks, login tokens per logged-in device (stored as irreversible hashes; kept 180 days after last use, at most 1 year from login), and random device numbers of devices that logged in successfully (hashed; used so that device can still log in when someone else's repeated wrong passwords temporarily block logins; the latest 20 per account)
- Fair record checks: start tickets issued when a game begins (kept 21 days) and summaries of received records (game, score, time taken, whether a start ticket was used, input device type (phone or PC), time — kept 30 days to detect abuse, then deleted automatically)
- App usage points: usage signals sent every minute while you use the App (number of interactions in the last minute and a random device number) and daily minutes used
- Counting visitors (including guests): presence signals sent every 30 seconds while the App, website or guide pages are on screen (a random number for this session, a random device number, and app/web type) are used to count current users and daily visiting devices. Session numbers are kept only briefly in server memory and not stored; device numbers are converted to irreversible hashes and used only to count daily visits. When you open, start or finish a game, the signal also includes the step and game name, and the server keeps only daily totals of opens, starts and finishes (not who did them). Search and ad crawler bots are excluded by browser name, and browser names are not stored. Other users only see the current number of users online
- Ads: to serve ads and verify rewards, Google AdMob (app) and Google AdSense (web) may process advertising identifiers, cookies and device information, and we keep rewarded ad viewing records (verification number and time)
- Stored only on this device: play counts and time, settings
- When playing online matches: nickname, cosmetics, moves and inputs during the match, results and staked points, connecting IP address
- Settings: sound and vibration preferences
2. Purposes of use
Used only to identify accounts, log in, provide game records and weekly rankings, grant points and ranking rewards, match opponents and run online matches, and prevent excessive access and abuse. The operator does not use user information for advertising or marketing or sell it to anyone. In-app ads are served by Google AdMob, which processes advertising identifiers and the like under its own policies.
2-1. Information visible to other users
For signed-up users, their nickname, game records(best scores, match win rate and games played), and cosmetics (avatar, frame, nickname color)are visible to other users in the rankings. Gardensare visible according to the visibility the user chooses: 'Public' (the default) lets anyone see it from the rankings' garden visit screen, 'Link only' lets only people with the user's garden invite link see it (no login needed), and 'Only me' is visible only to the user. Invite links can be forwarded by recipients, expire after 7 days and can all be canceled at any time (switching to Only me or deleting the account blocks them all). Screens already viewed or screenshots can't be recalled. In online matches, your opponent sees your nickname and cosmetics. Your email and point balance are never shown. Guests do not appear in rankings.
3. Storage location and retention
- Accounts, records, points, cosmetics and garden layouts are stored on the Hanpanmadang server (Seoul) and destroyed immediately upon account deletion. Backups for outage recovery are kept on the server and in separate storage in the same Seoul region (Amazon S3, encrypted) and deleted automatically within 7 days.
- Match results (game, outcome, staked points, number of moves, time) are kept with the account for point settlement and abuse checks, and their link to the account is removed on deletion (same for ad viewing records). Inputs during a match are processed only during the match and not stored.
- Per-device play counts and settings are stored on your device (app or web browser) and are erased when you delete the app or clear site data.
- Server access logs (IP address, access time) are kept for 14 days for security and incident response, then deleted automatically.
- Daily visit records (device number hash, app/web type, whether signed up, first visit time), daily peak concurrent users, and daily game step totals (opens, starts and finishes) are kept for 31 days, then deleted automatically.
- Friend invites: hashes of device identifiers used in invite sign-ups are kept for 1 year (not linked to accounts) to prevent re-registering on the same device for rewards after deleting an account, then deleted automatically. The inviter's link and reward counts are kept for 60 days to apply the 30-day limit, and are deleted if the inviter deletes their account.
4. Processors
The Hanpanmadang server (accounts, rankings, online matches) runs on Amazon Web Services (Seoul region). Ads are provided by Google AdMob (app) and Google AdSense (web), under Google's privacy policy. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this site or other sites. You can turn off personalized ads in Google Ad Settings (https://adssettings.google.com). We do not otherwise provide personal information to third parties.
5. Your rights
You can change your nickname or delete your account at any time in [Settings]. After uninstalling the app, you can log in on the web version to delete it (see https://hanpanmadang.com/delete.html).
As a guest, no account or game records are stored on the server (records stay on your device). However, using server features such as viewing rankings or online matches leaves the access logs in section 3 (IP address, access time), and Google (AdMob, AdSense) may process advertising identifiers, cookies, and device and network information to show ads regardless of login.
6. Children's privacy
This service is not directed at children. Users under 14 cannot sign up (we confirm age 14+ at sign-up and record the time of consent on the account). Guests provide no account information, but the access logs and ad provider processing in section 5 still apply.
7. Contact
support@hanpanmadang.com
Effective date: October 27, 2026