Privacy Policy

Upcoming Philippine soft-launch policy — announced September 28, 2026; effective October 5, 2026. The Philippine minimum age changes from 14 to 13 on that date. Until then, the minimum age remains 14. The South Korean minimum age remains 14.

Effective: August 19, 2026 · Last updated: September 28, 2026

LuckBoxer ("we", "us") respects the privacy of everyone who plays RandomFortress (the "Service"). This policy explains what information we collect, why we collect it, and how we use, store, and delete it.

1. Information We Collect

We never collect or store payment instrument details such as card or bank account numbers. All payments are processed by Google Play and the App Store.

The Philippine soft launch is intended for people aged 13 and over. In South Korea, the minimum age remains 14. We do not knowingly collect personal data from people below the applicable minimum age.

2. How We Use It

• Identifying you and managing your account and session
• Providing the game — saving progress, calculating rankings, matchmaking, delivering mail and notices
• Processing in-app purchases, verifying entitlements, handling refunds and disputes
• Detecting and acting on abuse or unauthorized access
• Diagnosing errors and improving quality, content, and game balance
• Serving advertising, including personalized ads where you have consented
• Responding to your enquiries and sending service announcements

3. Retention

We delete personal data as soon as its purpose is fulfilled, except where Korean law requires longer retention:

Deletion timing and exceptions — A successful deletion response confirms removal of the account, progress, ranking and mailbox records used by the service. Temporary records used to reconcile match results are not removed immediately. They become eligible for cleanup 24 hours after creation and are deleted in batches by a daily job at 03:30 Korea Standard Time. Delays, failures or a backlog may extend retention; complete deletion within 24 hours is not guaranteed.

Backup copies — Recovery backups created before deletion may still contain the data. Backups become eligible for deletion 30 days after creation and remain recoverable for 7 days after the storage service deletes them. Storage deletion is asynchronous, so this is not a guarantee of complete deletion within exactly 37 days. Payment records retained by law follow the separate terms below.

Purchase records after deletion — when you delete your account, your service account records are removed. Purchase records that we are legally required to retain are kept separately from your account data and are destroyed once the retention period ends.

External authentication retention — The backup periods above apply to the RTDB backups we manage. According to Firebase guidance, authentication data may take up to 180 days to be removed from live and backup systems after the customer initiates deletion of the user.

4. Disclosure to Third Parties

We do not sell or rent your personal data. We disclose it only where required by law or where you have separately consented.

5. Processors and International Transfers

We use the following processors to operate the Service. Some of them store data outside the Republic of Korea. For questions about transfers or exercising your privacy rights, contact support@luckboxer.com. Section 6 explains how to exercise your rights.

Processing locations — The provider locations below do not describe every country where data is processed or stored. Our Realtime Database and Functions use Singapore (asia-southeast1), and our BigQuery analytics export uses Australia (australia-southeast1). Firebase Authentication processes data in the United States; other services follow their service-specific location policies. These locations are not an exhaustive list of international transfers.

Transfers occur over the network while you use the Service, and data is retained until the processing agreement ends or the purpose is fulfilled.

6. Your Rights

• Access and correction — you can view your information in the game and change your nickname.
• Deletion — go to Settings → Delete Account in the game. A successful deletion removes your service account records and cannot be undone by you. Temporary record and backup exceptions are explained above. You may also request it through our account deletion page.
• Objection and restriction — notifications and personalized advertising can be turned off at any time in your device or in-game settings.

To exercise these rights, contact support@luckboxer.com. We act without undue delay.

7. Advertising Identifiers

We show advertising to keep the Service free. Personalized ads may use your advertising identifier.

• Android — reset or delete your advertising ID under Settings > Google > Ads.
• iOS — we request App Tracking Transparency (ATT) permission on first launch. You can change it any time under Settings > Privacy & Security > Tracking. Declining does not restrict your use of the Service.

8. Deletion of Data

Personal data is destroyed without delay once its retention period expires or its purpose is fulfilled. Electronic records follow the temporary record and backup retention process described above before deletion is final.

9. Security Measures

• Encryption in transit (HTTPS/TLS)
• Least-privilege, authenticated access to servers
• Server-side validation of player data so that clients cannot tamper with it
• Minimizing the number of people who handle personal data

10. Contact

11. Changes to This Policy

We announce changes on this page and in-game at least 7 days before they take effect, or 30 days in advance where the change materially affects your rights.