Privacy Policy

1. In one minute

This website collects nothing. No cookies. No analytics. No advertising. No tracking pixels. No embedded fonts, maps, videos or scripts loaded from anyone else's server. Your browser talks to this site and to nothing else. There is no consent banner because there is nothing to consent to.

Our games are different, and this policy is specific about how. A mobile game that shows advertisements has to tell advertising companies something about the device it runs on. Ours do. Section 6 names the items, the companies that receive them, the country each one goes to, and the switch that turns it off.

No egg with wings game has been released yet. As of the Last updated date above, nothing is on the App Store or Google Play. The game sections describe the processing that begins the day the first game ships; they are published now so you can read them before you install anything.

We never ask you for your name, your email address, your phone number, your postal address or your payment details. We do not operate a login. Where a game sells anything, Apple or Google takes the payment; we never see your card.

2. Who is responsible

egg with wings (Korean: 애그위드윙스) is the trading name of an independent game developer based in the Republic of Korea.

Operator

[[OPERATOR_LEGAL_NAME_EN]], trading as egg with wings (애그위드윙스)

Korean business registration number (사업자등록번호)

[[BUSINESS_REGISTRATION_NUMBER]]

Contact for anything on this page

support@eggwithwings.com

Department handling personal-information protection work and related complaints (개인정보 보호업무 및 관련 고충사항 처리 부서)

Function responsible for personal-information protection and privacy complaints

Personal Information Protection (개인정보 보호 담당)

Contact

support@eggwithwings.com

Representative in Korea

Article 31-2 of the Personal Information Protection Act requires a personal information controller with no address or place of business in Korea to designate a domestic representative. We have both, so it does not apply to us.

Representative in the European Union

[[EU_REPRESENTATIVE]]

egg with wings has no establishment in the European Union. Article 27 of the GDPR requires a controller outside the Union to designate a representative in the Union unless its processing is occasional and low-risk. A live game processing advertising identifiers across an EU user base is unlikely to qualify as occasional. This will be settled before any game is distributed in the EEA; until then, no egg with wings game is available there.

3. Two different things, two different answers

This policy covers two operations that have almost nothing in common, so each of them gets its own answer:

Advertisements shown inside a game may open a third party's website. That website is not ours and this policy does not cover it.

4. This website

The site you are reading is a set of static HTML files. It has no database, no login, no comment form, no newsletter signup, no shopping basket and no server-side code of any kind.

It sets no cookies — not first-party, not third-party, not "strictly necessary". It uses no localStorage or sessionStorage for tracking. There is no analytics package, no tag manager, no heatmap, no session recorder, no advertising pixel and no A/B testing tool.

It makes no third-party network requests. Fonts are self-hosted from eggwithwings.com. There is no font CDN, no script CDN, no embedded video, no embedded map, no social sharing widget and no external image. That is deliberate. A page that exists to publish a privacy policy should not hand its readers' IP addresses to a third party while it is being read.

What the hosting provider necessarily sees, and for how long. The site is served on Cloudflare Pages by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Like every web server on the internet, that provider processes the IP address, the requested URL, the user-agent string and the timestamp of each request in order to deliver the page, to serve it over HTTPS, and to defend against denial-of-service attacks. Those request logs are kept for the period set by that provider's own log-retention policy, and by nobody else's. We do not receive them, we do not query them, and no report is generated from them for us — so we cannot shorten that period and we do not claim a number of our own. The lawful basis for that unavoidable processing is our legitimate interest in operating and securing a website (GDPR Article 6(1)(f)).

If you email us, we hold your message and your email address for as long as it takes to deal with it and to keep a record of what was said, and no longer than three years from the last message in the thread. We use it for nothing else. Mail is handled on iCloud+ by Apple Services Pte. Ltd., 7 Ang Mo Kio Street 64, Singapore 569086 — the Apple entity that provides iCloud to users in Korea.

5. Our games

5.1 Nothing is released yet

As of the Last updated date, egg with wings has not published a game. The disclosures below describe what our games will do. Publishing them now means the policy is already accurate on the day the first game ships.

Where a row below applies to only one of these, the table says so.

5.2 What our games never do

Our games do not collect, and do not ask for: your name, your email address, your postal address, your phone number, your date of birth, your contacts, your photos or media library, your camera, your microphone, your precise (GPS) location, your health or fitness data, your financial account details, your files, your browsing history outside the game, or biometric data. Our games request no runtime permission beyond network access.

Our games contain no free-text chat and no user-chosen display names. There is no keyboard in them. This is a permanent design rule, not a launch limitation — which means there is no user-generated content for us to store, moderate or disclose.

We process no sensitive personal information and no unique identifying information. We process nothing within PIPA Article 23 (민감정보) and nothing within PIPA Article 24 (고유식별정보 — resident registration numbers and their equivalents), and there is no route by which a player could disclose sensitive information to us, because there is no free-text field anywhere in a game.

We create and process no pseudonymised information within the meaning of PIPA Articles 28-2 and 28-3. We make no additional use or provision of personal information without consent under PIPA Articles 15(3) and 17(4). If either changes, we will state the purpose, the retention period, the recipients, the entrustment arrangements and the safeguards here, in advance.

6. What the games collect, and why

You type nothing into our games, so everything below is collected automatically by software libraries (SDKs) built into the game by us, at the moment the game runs.

No crash reporter is integrated, so no crash diagnostics are collected. No egg with wings game contains Crashlytics or any other crash-reporting SDK, and there is no row for crash and error diagnostics in the table above because there is nothing to describe. If a crash reporter is ever added, this policy, the App Store privacy labels and the Google Play Data safety form all change on the day it ships, and the row returns to the table above.

We do not sell your personal information for money. Under the California Consumer Privacy Act as amended (CCPA/CPRA), disclosing an advertising identifier to an advertising partner for cross-context behavioural advertising may nonetheless count as a "sale" or "share". You can opt out of it at any time using the controls in section 9. We do not knowingly sell or share the personal information of anyone under 16.

7. Who receives it

The companies listed below are the recipients of data collected through SDKs built into our games. Each also processes that data under its own published policy, and you can exercise rights directly against them.

Advertising demand. Advertisements reaching you through AppLovin MAX may be bought by advertisers and demand-side platforms connected to the AppLovin Exchange, and — because our games use AppLovin's mediation — by any advertising network we enable inside it. The table above is the complete list: today, of every network and provider we plan to enable; from the first release, of every one actually enabled. We update it on the same day we enable another; there is no grace period.

Equal protection by the recipients. We share data with the third parties named above only under each provider's own published data-processing and privacy terms, which we accept as a condition of integrating its SDK and which bind how that provider may use what it receives. On the basis of those terms we confirm that any third party with whom our games share user data will provide the same or equal protection of user data as is stated in this privacy policy, and we do not integrate a provider whose published terms fall short of it. We do not audit their systems; if we learn that a provider is not meeting those terms, we remove it, and the table above is updated on the same day.

We may also disclose information where we are required to by law, by a court order or by a lawful request from a public authority, or where it is necessary to establish, exercise or defend a legal claim.

8. Sending data outside Korea

Our games are operated from the Republic of Korea. Every advertising and analytics provider we use is based outside Korea, so personal information is transferred abroad. The following is disclosed under Article 28-8(2) of the Personal Information Protection Act.

Legal basis for the transfer. In Korea we ask for your separate, unbundled consent to the overseas transfer under PIPA Article 28-8(1)(1), through the consent screen described in section 13. We do this rather than relying on the disclosure route in Article 28-8(1)(3)(a), because that route reaches only entrustment and storage, and at least one of our advertising recipients uses the data for its own purposes.

You may refuse. You can refuse the overseas transfer. Refusing means advertising will be non-personalised and, where the transfer is what makes a feature work, that feature will be unavailable; the game itself will still run. To refuse, use the controls in section 9, reopen the consent screen from the game's settings, or write to support@eggwithwings.com. You can stop all transfers by uninstalling the game.

For users in the EEA, the UK and Switzerland, transfers to the United States by our providers rely on those providers' own safeguards: the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and/or certification under the EU–US Data Privacy Framework, as set out in their published policies.

Transfers into Korea from the EEA need no additional safeguard. The European Commission's adequacy decision for the Republic of Korea was renewed on 2026-07-23.

9. Advertising identifiers, and how to switch them off

Our games use no web cookies — there is no browser involved. What they use instead is the operating system's advertising identifier and, for analytics, an app installation identifier. Under Article 30(1)(7) of the Personal Information Protection Act these are automatic collection devices, and you are entitled to refuse them.

Advertisements still appear after you refuse; what changes is that they are no longer personalised. Advertising is what funds a free game.

10. Behavioural advertising

This section states, in one place, what is collected for online tailored advertising (행태정보) and how to refuse it.

Items collected

Advertising identifier (IDFA / GAID); records of advertisements requested, shown, watched, dismissed and clicked; approximate location derived from IP address; device and operating-system information; in-game activity used to infer interest

Method of collection

Automatically, by advertising SDKs built into the game, while the game is running

Purpose

Selecting and delivering advertisements likely to be relevant; limiting how often you see the same one; measuring advertising performance; preventing ad fraud

Retention and use period

Per each provider's retention policy — see sections 7 and 8

Who else may collect it

AppLovin Corporation; Google LLC; and the advertising networks enabled inside AppLovin MAX, listed in section 7

How to refuse or withdraw

The device and provider controls in section 9, or by reopening the consent screen in the game's Settings

We do not use behavioural advertising data to make any decision that produces a legal effect concerning you or similarly significantly affects you. There is no automated decision-making of that kind anywhere in our games — nothing within PIPA Article 37-2 (a wholly automated decision, including one made by a system applying artificial-intelligence technology, that significantly affects a data subject's rights or obligations), and nothing within GDPR Article 22.

Advertisements are selected and delivered automatically by the advertising providers' own systems. That is automated, but it is not a decision that significantly affects your rights or obligations, and it is not within either of those provisions.

11. Children and minimum age

Our games are not directed to children, and we do not knowingly collect personal information from them.

Minimum age

You must be at least 14 years old to use an egg with wings game. Two adjustments:

• In the European Economic Area, if the age of digital consent in your country is higher than 14, that higher age applies to you. It ranges from 13 to 16 depending on the Member State — in Germany, for example, it is 16.
• Where a game carries an official age rating higher than 14, the rating governs. In Korea, a game rated 15세이용가 by the Game Rating and Administration Committee may not be used below 15.

The same minimum age is stated in our Terms of Service. The two documents are kept consistent deliberately; if you find them disagreeing, tell us and we will fix it.

How the age rule is applied

• A neutral age screen is shown at first launch. It is neutral in the technical sense used by regulators: it does not suggest which answer unlocks more of the game, and it does not let you retry until you get in.
• We do not store your date of birth. The screen produces a yes/no answer about whether you are above the minimum age, and that answer stays on your device.
• If the answer is below the minimum age, the game does not proceed to the consent screen and no advertising or analytics identifier is used.
• Our games are not enrolled in Google Play's Designed for Families programme or in Apple's Kids Category, and their Google Play target audience is declared as 13 and over — never "children" and never "unknown age".

By jurisdiction

• Korea. We do not knowingly collect personal information from a child under 14 without the consent of a legal representative (PIPA Article 22-2). Our games are built so that this situation does not arise: a user below the minimum age is not taken through the consent flow at all. Failing this obligation is a criminal offence in Korea, not merely an administrative one — up to 5 years' imprisonment or a fine of up to KRW 50,000,000 (PIPA Article 71(3)) — which is why the age screen is a gate rather than a notice.
• United States. Our games are not directed to children under 13 and we do not knowingly collect their personal information (COPPA).
• EEA / UK. Our games are not intended for users below the applicable age of digital consent.

If you believe a child has given us personal information, write to support@eggwithwings.com and we will delete it and instruct our providers to delete it.

12. Your rights, and how to use them

Korea — PIPA Articles 35 to 37

You may request access to your personal information, correction of it, deletion of it, or suspension of its processing, and you may withdraw a consent you have given. You may act through a legal representative or an agent, using the power-of-attorney form in Annex 11 of the Notice on Methods of Personal Information Processing (개인정보 처리 방법에 관한 고시, Personal Information Protection Commission Notice No. 2025-5, in force 2025-04-11). The legal representative of a child under 14 may exercise these rights over the child's personal information.

In exercising these rights, you must not infringe another person's privacy in the personal information we process, in breach of PIPA or any other applicable statute.

EEA and United Kingdom — GDPR / UK GDPR Articles 15 to 22

Access, rectification, erasure, restriction of processing, data portability, and objection to processing — including an unconditional right to object to processing for direct marketing. You may withdraw consent at any time, without that affecting the lawfulness of processing carried out before you withdrew it. You are not subject to any solely automated decision with legal or similarly significant effects, because we make none.

California — CCPA / CPRA

The right to know what is collected and disclosed, to delete it, to correct it, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of these. We honour the Global Privacy Control signal where our providers receive it.

How to exercise them

Email support@eggwithwings.com. An agent may act for you by attaching the Annex 11 power of attorney to an email to the same address.

What to include in your request. Our games hold no account, and for trimweight there is no server at all, so for most requests nothing we hold connects a request to a person and we cannot identify you on our own. Include your advertising identifier (section 9 shows where to find it) along with the game and platform concerned, and we will pass the request to the right provider on your behalf. Where a game does have a backend account, we can act on the account identifier directly.

We respond within 10 days for a PIPA access request (PIPA Article 35(3)) and within 30 days for everything else, extendable once where a request is complex, in which case we will tell you why. There is no charge.

You may also exercise your rights directly against our providers, using the links in section 7.

13. Consent, and how to change your mind

Where the law requires consent, our games ask before the relevant SDK is initialised, not after.

You can decline and still play. The game runs as it always does, with non-personalised advertising.

14. Security

PIPA Article 29 and Article 30 of its Enforcement Decree require us to describe the measures we take to keep personal information safe. This section separates what is in place today from what is committed before the first game is released. Describing a measure as operating before it operates would be a misstatement in its own right.

14.1 In place today

• The website is served over HTTPS only, and it stores nothing. It has no database, no login, no form and no server-side code, so it holds no personal information that could be reached.
• We create no printed records containing personal information.
• No egg with wings game has been released, we operate no game server, and no advertising, analytics or backend account has been created. There is therefore no provider console to restrict access to and no access log to keep today — the accounts those controls would apply to do not exist yet.
• The only personal information anyone processes for us today is the request logs the hosting provider necessarily keeps (section 4) and the email correspondence in the support mailbox, which has been live since 26 July 2026. Both are handled by the named processors in section 4 under their own security measures.

14.2 Committed before the first release

Each of the following will be in place before any egg with wings game processes personal information, and not after:

• a written internal management plan (내부관리계획) under PIPA Article 29 and Enforcement Decree Article 30, covering who may access what, how access is granted and withdrawn, and how a breach is handled;
• minimum-necessary access to every provider console, with multi-factor authentication enforced on each one from the day it is created;
• retention and periodic review of access logs;
• encrypted transport (HTTPS/TLS) for everything leaving a game;
• trimweight will store nothing on any server we control — its saved data will live on your own device and be removed when you uninstall;
• for the title that will have a backend, the game client will never write to the database directly. Every action that changes a balance or a state goes through an HTTP API we operate, which validates it. This exists for anti-cheat reasons, and it is also what keeps the number of places your data can be reached from small;
• a standing procedure that updates this policy on the same day an advertising, analytics or attribution provider is added or changed, and a periodic check that this policy matches what is actually processed.

14.3 If a breach occurs

We will notify affected users without delay with the items PIPA Article 34(1) requires, and report it to the Personal Information Protection Commission or KISA within 72 hours where Article 34(3) and Enforcement Decree Article 40 require it — which includes any breach caused by hacking or external unlawful access, however few records are involved. In the EEA and UK we will notify the supervisory authority within 72 hours under GDPR Article 33.

From 11 September 2026, PIPA Article 30-3 makes the proprietor personally the statutory final person responsible (최종적인 책임자) for the safe processing of personal information (Act No. 21445, promulgated 2026-03-10). That is who answers for the commitments in 14.2.

15. How long we keep things, and how they are destroyed

Retention periods are given per item in sections 6 and 8. In summary:

Destruction procedure (파기절차). Where a retention period expires or the purpose of processing is achieved, the information is destroyed without delay. For data held by our providers this happens through each provider's automated retention controls; where it does not happen automatically, we instruct the provider to delete it. Information that must be kept longer under another statute is stored separately from live data and used for nothing but that statutory purpose.

Destruction method (파기방법). Electronic records are deleted by a technical method that makes them unrecoverable. We create no printed records containing personal information.

16. Complaints

Please write to us first — support@eggwithwings.com. We would rather fix it than be told about it by a regulator.

If that does not resolve it:

Korea

• 개인정보 침해신고센터, KISA — privacy.kisa.or.kr, tel. 118
• 개인정보보호위원회 (Personal Information Protection Commission) — pipc.go.kr
• 개인정보 분쟁조정위원회 — kopico.go.kr, tel. 1833-6972
• 대검찰청 사이버수사과 — spo.go.kr, tel. 1301
• 경찰청 사이버수사국 — ecrm.police.go.kr, tel. 182

A person whose rights or interests are harmed by an action or an omission of ours on a request under PIPA Article 35 (access), Article 36 (correction or deletion) or Article 37 (suspension of processing) may apply for an administrative appeal under the Administrative Appeals Act (행정심판법).

EEA / UK — you may lodge a complaint with the supervisory authority of the country where you live, where you work, or where the alleged infringement took place.

California — you may contact the California Privacy Protection Agency or the California Attorney General.

17. Changes to this policy

We update this page whenever we add or remove a data recipient, change what is collected, or change why. The Last updated date at the top changes with it.

Our convention, so you can tell a typo fix from a real change:

• Material changes — a new recipient, a new category of data, a new purpose, or a new overseas transfer — are announced at least 7 days before they take effect, both on this page and inside the affected game. Where a material change requires consent under Korean law, we ask for consent afresh rather than treating silence as agreement.
• Non-material changes — wording, formatting, a corrected link — take effect on publication and are listed in the table below.
• We do not silently rewrite. Every version that has been live is listed. The superseded text is not stealth-edited into the current one.

Change history

18. Contact

Anything on this page

support@eggwithwings.com

Personal-information protection work and related complaints (개인정보 보호업무 및 관련 고충사항)

Personal Information Protection (개인정보 보호 담당) — support@eggwithwings.com

Player support

/support/

Terms of Service

/terms/