This is an English translation for convenience. If it differs from the Korean original, the Korean original prevails.
Hazma (Representative: Jangwon Kim; hereinafter the "Operator"), in operating the web game Feiven (hereinafter the "Game"), establishes this Privacy Policy in accordance with the Personal Information Protection Act (개인정보 보호법) to protect users' personal information and promptly resolve related grievances. The Game processes only the information strictly necessary for providing the Game and selling paid items.
Effective Date: October 28, 2026. (Previous policy effective: October 13, 2026)
Announced 7 days prior to enforcement, effective from October 28, 2026. The amendments are as follows:
| When | Items |
|---|---|
| Starting as a guest | Nickname (account name), confirmation of being age 14 or older and timestamp of confirmation |
| Username + password account | Account name, password (stored only as an irreversible hash value), confirmation of being age 14 or older and timestamp of confirmation, password recovery code (hash value) |
| Logging in with Google or ChatGPT (OpenAI) account | Unique account identifier (sub) and display name provided by the respective service, confirmation of being age 14 or older and timestamp of confirmation. An email address may be received during login verification, but it is not stored. |
| Information generated automatically during Game use | Connection IP address, connection and disconnection timestamps, login token, device identifier (a random value generated per browser; received upon login and used solely to verify whether the same account is connected from another device, discarded from the server upon disconnection, and not stored), service usage records (gameplay records including levels, hunting, item acquisition and trading, quests, guilds, etc.), chat logs (including whispers), friends and mailbox, last connection timestamp |
| Reporting another user or being reported | Character names, account names, and connection IP addresses of the reporter and the reported person, reason and content of the report, last 5 lines of chat of the reported person |
| Payment for paid items | Order number, account name, item, payment amount, payment and cancellation timestamps, payment status, PG and store transaction numbers, Rubies top-up and usage history |
| Purchasing Rubies in the Google Play app or Steam app | Google Play: purchase token (used solely for purchase verification and retained only as a hash value) and Google order number. Steam: Steam account ID (used solely for purchase verification and not stored) and Steam transaction number. Payment methods such as credit cards, as well as names and email addresses, are handled directly by each store, and the Game does not receive them. |
| Opening the Rubies top-up payment window | Purchaser name, mobile phone number, email address. If entered directly into the top-up window, this information is passed immediately to the payment window (Bootpay or PortOne / PG companies) and is neither transmitted to nor stored on the Game server. Used by the PG companies for payment approval, sending receipts, and identity verification. |
| Topping up Rubies via bank transfer (direct bank deposit) | Depositor name (order code or sender name entered by the sender), receiving bank, deposit amount, and deposit timestamp recorded in the bank transaction history of the Operator's account. Used solely by the Operator to verify the deposit by matching the order code and amount. To expedite deposit verification, bank app deposit notifications (depositor name and amount) received on the Operator's mobile phone may be forwarded to the Game server to automatically match the order code and amount; these notification texts are discarded immediately after matching and are not stored. Only the order code is stored on the Game server. |
| Refunding a bank transfer top-up | Bank name, account number, and account holder name of the refund account. Received via email and used solely by the Operator to transfer funds. |
| Inquiries regarding refunds or personal information | Submitted email address and inquiry content |
| Posting on the Wiki feedback board | Nickname, post content, Wiki page where the post was made, hash value of the connection IP address (the original IP is not stored) |
Payment method information such as credit card numbers is processed directly by the PG companies or stores (Google Play, Steam) in the payment window, and the Game does not receive or store it. The Game server does not collect or store resident registration numbers, real names, phone numbers, addresses, or sensitive information.
The above information is strictly necessary for executing and performing the Game service contract and is processed pursuant to Article 15, Paragraph 1, Item 4 of the Personal Information Protection Act (개인정보 보호법). Payment records are retained in accordance with the Act on the Consumer Protection in Electronic Commerce (전자상거래 등에서의 소비자보호에 관한 법률). The information is not used for advertising, marketing, or sale of data, nor is it pseudonymized or additionally used or provided for purposes beyond the original scope.
Personal information is retained only for the periods specified below and is destroyed without delay once the retention period expires or the purpose of processing is fulfilled.
| Information | Retention Period |
|---|---|
| Account, characters, game records, friends, last connection timestamp, confirmation records of being age 14 or older, password recovery code | Until account deletion |
| Until the mailbox storage period expires or until account deletion | |
| Login token | 30 days from issuance (deleted immediately upon logout, password change, or account deletion) |
| Server logs (connection IP address, connection and disconnection, chat, gameplay records) | Automatically deleted after 14 days |
| Daily connected account statistics, Exchange transaction records (character names) | Automatically deleted after 90 days |
| Report records and report-related IP addresses | Until the reported account is deleted. If the reporter deletes their account, the reporter's name and IP address are deleted and only the report details are retained. |
| Blocked IP addresses | Until unblocked (if the account is deleted, the account name is replaced with an unrecognizable value) |
| Wiki feedback board posts | For the duration of the board's operation. Deleted posts or posts requested for deletion will be completely purged upon notification via email. |
| Database backups created upon season reset | Used solely for disaster recovery and destroyed within 1 year from the creation date |
However, records required to be retained by law are preserved for the statutory periods even after account deletion. In such cases, the account name is converted into an unrecognizable value (a random value beginning with deleted:) and the records are not used for any purpose other than those prescribed by law.
We do not provide users' personal information to third parties. However, personal information may be provided within the relevant scope if specifically required by law or requested by investigative agencies in accordance with legally prescribed procedures.
We outsource the following tasks and establish contractual provisions prohibiting processing beyond the delegated scope, requiring safety measures, restricting sub-outsourcing, and governing supervision and liability for damages, and monitor compliance. Any change in the outsourced entities or delegated tasks will be announced promptly via this policy.
| Recipient | Delegated Tasks |
|---|---|
| Fly.io, Inc. | Operation and maintenance of Game servers and databases (Server location: Tokyo region, Japan). See Section 6, Cross-Border Transfer |
| Bootpay Co., Ltd. (Bootpay) | Payment gateway integration: transmitting payment requests (including purchaser name, mobile phone number, and email) and results, payment inquiry, approval, and cancellation |
| Korea PortOne Co., Ltd. (PortOne) | Payment gateway integration: transmitting payment requests (including purchaser name, mobile phone number, and email) and results, payment inquiry, and cancellation |
| Electronic payment gateway companies (PG companies, displayed in the payment window) connected via Bootpay and PortOne payment channels | Payment processing (approval and cancellation of payment methods such as cards, purchaser verification, and sending payment receipts) |
Because the Game servers are located overseas, personal information is processed and stored abroad as described below in order to perform the Game service contract (Article 28-8, Paragraph 1, Item 3 of the Personal Information Protection Act (개인정보 보호법)).
| Recipient | Fly.io, Inc. (U.S. corporation) · Contact: compliance@fly.io |
|---|---|
| Country of Transfer | Japan (stored in the Tokyo data center). The operating company is located in the United States. |
| Items Transferred | All information listed in Section 1 (excluding payment method information and refund inquiry emails) |
| Timing and Method of Transfer | Transmitted via encrypted communication (HTTPS and WSS) upon each connection and use of the Game |
| Purpose of Use | Operation and maintenance of Game servers and databases |
| Retention Period | Identical to the retention periods in Section 3 (destroyed upon termination of the outsourcing contract) |
| Method of Refusal and Disadvantages | As the Game is operated solely on these servers, if you do not agree to the cross-border transfer, you may choose not to sign up or you may delete your account. In this case, you will not be able to use the Game. |
When using the features below, the user's browser connects directly to the relevant company, and any information processed by that company is governed by its own privacy policy. The Game does not receive any information from them other than what is described below.
The Game does not accept registrations from children under the age of 14. Age confirmation of being 14 years or older is conducted upon initial registration (starting as a guest, creating a new account, or first login with an external account); if unconfirmed, no account will be created. Accounts created prior to the introduction of this confirmation will be prompted to verify once at the next login, and users cannot create characters or access the Game prior to confirmation. If it is discovered that a child under 14 has registered, the relevant account and personal information will be deleted without delay.
Users may at any time request access to, correction or deletion of, suspension of processing of, or withdrawal of consent regarding their personal information.
An account reported by 10 or more distinct users (counted as one person only if both account and connection IP are unique) will be automatically suspended and its connection IP blocked to protect other users. If you object to this decision or request an explanation, please contact us at hasung@playfeiven.com. The Operator will personally re-examine the case and notify you of the result.
The Game does not use cookies, nor does it use advertising or visitor analytics tools, nor does it collect behavioral information from other websites. Instead, the Game stores login tokens, device identifiers (Section 1), and game settings (audio, display, hotkeys, window positions, etc.) in the browser's local storage (localStorage). Logging out deletes the login token, and clearing this site's data in browser settings deletes all stored data (clearing data requires logging in again, and guest accounts cannot be accessed again unless linked).
The Data Protection Officer is responsible for overseeing personal information processing and handles user inquiries, complaints, damage relief, and access requests.
For counseling or damage relief regarding personal information infringement, you may contact the following institutions:
This policy takes effect on October 28, 2026. Any amendments will be announced at least 7 days prior to enforcement (or 30 days prior in the case of significant changes affecting users) on this page and through in-game announcements. Previous versions of the policy (effective October 13, October 6, and October 3, 2026) are available upon request via email.