Privacy Policy

Version
2026-10-15
Effective
2026-10-15

The Korean version is the governing text; this English version is a translation for convenience.

Article 1 (General)

Doorani (the “Operator”) runs the game “DOORANI INC.” and its website (the “Service”) and processes players' personal information under the Korean Personal Information Protection Act and other applicable laws. This policy explains what personal information we process, why, and when we delete it.

Article 2 (What we process and why)

We process the information below only for the purposes below. You may decline the required items, but then no account can be created and you can't use the game (it is online-only). There are no optional consent items.

CategoryItemsPurpose
Account
(required)
The identifier and email address of the Google or Apple account you sign in with, account identifiers used in the Service, records of your consent to the Terms and this Policy, sign-in records Identifying you and signing you in, managing, protecting and recovering your account, service notices
Profile
(required)
Your in-game profile such as your player name, date of birth, your device's time zone Display in the game, confirming you are 14 or older, birthday features
Gameplay records Game progress, currency changes, records of in-game activity Providing the Service, keeping your progress, preventing abuse, handling support requests and disputes
Chat and reports Chat messages and photos posted in chat, report and block records (including photos attached to reports) Providing chat, protecting players, handling reports and restrictions
Voice Voice information may be collected and used to deal with abusive players Dealing with abusive players, handling reports and restrictions
Support requests Request and reply text and attached photos, with the attached device and app information and network status information Answering requests, finding the cause of errors and connection problems, confirming identity
Device and connection information IP address, connection records, device identifiers (including one that survives reinstalling the app), device, operating system and app information, language and region settings, network type Security, preventing abuse and the dodging of restrictions, error analysis, improving service quality
Usage statistics App usage records, error and diagnostic records Error analysis, improving the Service
Push notifications
(Android and iOS, when you allow notifications)
Push notification token Sending app push notifications
Payments Store transaction information (transaction number, item, amount, payment and refund times, and so on), coin purchase and use history. We do not receive card numbers or other payment details Delivering coins, handling refunds and withdrawals, keeping records required by law, preventing abuse

Article 3 (How long we keep it)

  1. Personal information is kept until you delete your account, and is destroyed without delay once its purpose is fulfilled. When you delete your account, it is immediately taken out of the Service and is no longer visible to other players.
  2. However, the information below is kept for the period in the table to prevent abuse, handle disputes and meet legal requirements, and then destroyed. Records past their period are destroyed even if you don't delete your account.
Information keptRetention periodReason or legal basis
Abuse-prevention information (account and device identifiers, restriction records) and gameplay records 1 year from account deletion Preventing abuse such as getting around a restriction, handling disputes
Report handling records (including photos and voice information attached to reports), usage statistics and error records 1 year (report records from when handling is finished, statistics and error records from collection) Spotting repeat violations and handling appeals, error analysis
Chat messages 3 months from when they were sent Checking reports and protecting players
Photos posted in chat Until the player who posted them or the operator deletes them, or until the account is deleted Providing chat, checking reports and protecting players
Push notification token Until you turn notifications off, the token changes, you remove the app, or you delete your account Not kept beyond the purpose of sending notifications
Service access records (sign-in records, IP addresses) 3 months Korean Protection of Communications Secrets Act
Records of contracts and withdrawals, records of payment and supply of goods (including coin purchase and use history) 5 years Korean Act on Consumer Protection in Electronic Commerce
Records of consumer complaints and dispute handling (support inquiry records, including attached photos) 3 years
Records of labeling and advertising 6 months
  1. Coin payments happen in each store (Apple, Google, Microsoft, Valve), and the payment records those stores hold are kept under each company's own policy.
  2. Information kept because the law requires it is stored separately from other information and used only for that purpose.
  3. What happens when someone turns out to be under 14 is covered in Article 4.

Article 4 (Children under 14)

This service is available only to people aged 14 or older. We do not accept sign-ups from children under 14 and have no parental consent process. If the date of birth entered at sign-up is under 14, sign-up is not completed and that account is restricted from using the service. The same applies if we learn after sign-up that a player is under 14. To stop people from simply changing the date of birth and signing up again, we keep the account rather than deleting it; the information received up to that point (sign-in identifier and email) and the record that the player was found to be under 14 are used only for this restriction, kept as set out in Article 3, and then destroyed. You can ask for the account to be deleted as described in Article 9.

Article 5 (Sharing with third parties)

We do not provide players' personal information to third parties, except where a law specifically requires it or an investigative authority requests it through the procedure set by law.

Signing in happens on Google's or Apple's own screens, and payments happen in each store (Apple, Google, Microsoft, Valve); each company's privacy policy applies there. From those steps we receive only the sign-in identifier and email, and purchase confirmation details.

Article 6 (Processors and transfers abroad)

We entrust the processing of personal information to the companies below to provide the Service, and some of this processing happens outside Korea. Transfers take place over the network whenever you use the Service. If you do not want your information transferred abroad, you can stop it by deleting your account, but you will then be unable to use the Service.

Recipient (contact)CountryItems transferredPurposeRetention
Epic Games, Inc. (privacy policy) United States Service user identifiers, room membership and the profile shown in rooms, voice (relayed in real time), IP address Managing rooms, relaying voice chat, connecting players Until the contract ends or the account is deleted (per Epic's policy)
Amazon Web Services, Inc. — CloudFront, S3, Route 53 (privacy policy) Republic of Korea, United States and other AWS CloudFront edge locations Connection information to and from the game server and website (IP address, device information, request contents) Relaying connections, website hosting, domain name service Until the contract ends (per AWS's policy)
Amazon Web Services, Inc. (privacy policy) Republic of Korea (Seoul region) All information in Article 2 Running and backing up the game server and database Same as Article 3
Apple Inc. (privacy policy) United States The token needed to disconnect Sign in with Apple Revoking Sign in with Apple when an account is deleted or unlinked Until the revocation is processed
Google LLC (privacy policy) United States Website visit data (Article 8 — only while in use) Website visit statistics Per the Google Analytics retention setting
Google LLC — Firebase Cloud Messaging (privacy policy) United States Push notification token and notification content Delivering push notifications to the Android and iOS apps (for iOS, through Apple's push notification service) Until you turn notifications off, the token changes, you remove the app, or you delete your account (per Google's policy)

If we entrust sending service emails to another company, we will add it to this table and announce it in advance.

Article 7 (Information collected automatically)

  • When the game talks to our server it automatically sends the “device and connection information” and “usage statistics” in Article 2. Because this is needed to provide and secure the Service it can't be turned off separately; if you don't want it collected, you can delete your account as described in Article 9. The game contains no advertising identifiers and no advertising or analytics SDKs.
  • The network status information attached to support requests is recorded only on your device for a short time and sent to our server only when you send a support request.
  • The game stores what it needs to run, such as settings and sign-in information, on your device. Deleting your account wipes the game data on the device as well.
  • The device identifier that survives reinstalling the app is used only to stop restrictions from being dodged.
  • When you allow notifications on Android or iOS, the game sends your push notification token to our server and keeps it. You stop receiving notifications by turning them off in your device settings or in the in-game settings, and the game works fully without them.

Article 8 (Website analytics)

  • This website has no sign-up, input forms or comments.
  • Amazon Web Services (CloudFront and S3), which hosts the website, may process technical records such as visitors' IP addresses for security and to deliver the site.
  • We may use Google Analytics (GA4) to see visit statistics. Only while it is in use do pages load Google's script, and Google uses cookies to collect information such as the pages visited, where visitors came from, approximate region, and browser and device type. Ad personalization and Google signals are turned off. While it is not in use, the website sets no cookies and sends nothing to Google.
  • You can refuse this collection by blocking cookies in your browser or using the Google Analytics opt-out browser add-on; the website still works normally.
  • Website visit data is never linked to game accounts.

Article 9 (Deleting your account and data)

1. Delete in the game

  1. On the outpost screen, tap the Settings (gear) button at the bottom.
  2. Tap [Delete account] (the red text button just above [Support]), read the warning, then tap [Continue] → [Delete]. The button is hidden during expeditions, so do this at your outpost.

The account is deleted on the spot and this cannot be undone. All currency and progress — dooranium, coins, materials, specimens, research, collected data and your decorated outpost — is lost, and your player name is freed for others to use. The game data stored on that device is wiped as well.

2. Request without the app

If you've removed the app or can't sign in, email doorani.com@gmail.com with “Account deletion request” from the email address of the Google or Apple account you used to sign in to the game. We delete the account after checking the following, and reply with the result.

  • That the sending address matches the email registered to the account (if you used Apple's “Hide My Email”, we confirm by having you reply to a message sent to that relay address)
  • If that isn't enough to confirm it's you, we may ask for more details such as your player name, outpost name and roughly when you started

We handle requests within 10 days of receiving them, and tell you the reason if we can't.

3. Disconnecting in Google or Apple settings is not deletion

Removing DOORANI INC. under “Third-party apps & services” in your Google Account, or under “Sign in with Apple” in your Apple ID settings, only stops that sign-in method. It does not delete your DOORANI INC. account or data. To delete them, use option 1 or 2 above.

4. What remains after deletion

  • Abuse-prevention information (account and device identifiers, restriction records) and gameplay records: 1 year from the deletion date
  • Report handling records, chat messages, service access records, usage statistics and error records, support inquiry records, and the payment and withdrawal records the law requires us to keep: the periods in the Article 3 table, whether or not the account is deleted
  • Information that is part of other accounts' records — such as gifts another player already received or minigames you played together — stays with those accounts, but the deleted account only appears as “Deleted account”.

When these periods end, the information is destroyed as described in Article 10. Signing up again with the same Google or Apple account creates a new account that is not connected to your previous progress.

Article 10 (How we destroy data)

Personal information whose retention period has ended, or whose purpose has been fulfilled, is destroyed without delay. Electronic files are deleted in a way that cannot be recovered, and copies in backups are deleted on the backup retention cycle. Information kept because the law requires it is stored separately from other information and used only for that purpose.

Article 11 (Your rights and how to use them)

  • You can at any time access your personal information, have it corrected or deleted, ask us to stop processing it, and withdraw your consent.
  • Send a request through Settings → Support in the game or to doorani.com@gmail.com; we handle it within 10 days after confirming your identity. Correcting your date of birth and unlinking a sign-in account are also requested through support.
  • You can withdraw consent and delete your account as described in Article 9.
  • You can also exercise these rights through a legal representative or someone you authorize; we will check the authorization.
  • We may be unable to delete information the law requires us to keep, and will tell you why if so.

Article 12 (Security measures)

We take the following measures to keep personal information safe.

  • Access control: access to systems that process personal information is given only to the minimum number of people who need it, and is managed.
  • Encryption: communications and credentials are encrypted.
  • Access records: records of access to and processing in systems that handle personal information are kept.

Article 13 (Privacy officer)

Privacy officerHead of Development
Contactdoorani.com@gmail.com · In-game Settings → Support

Article 14 (Getting help)

If you need advice or a remedy for a privacy infringement, you can contact these Korean bodies:

Addendum

This policy takes effect on 2026-10-15.

Previous versions

No previous versions.