Mobile games

Privacy Policy

What information the mobile games published by Pong Studio receive, what it is used for, and when it is deleted. This policy covers all four games.

Last updated: 2026-09-26

1. What this covers

This policy applies to the following mobile games published by Pong Studio. It does not apply to our websites (pongvn.com and its web products), which have a separate privacy policy.

Shooo Yokai: Roguelike Defense · Pocha Moonlight · Decor Sprout · Sprout Journey: High Climb

The games differ slightly in what they collect. Those differences are set out per game in the tables in sections 3 and 5.

2. What we receive

None of the four games ask for your name, email address, phone number or postal address. There is no sign-up: an account is created automatically when you install the app.

That means what links you to your account is a device identifier, plus a linked-account identifier if you connect an account. Both are deleted with your account.

• Device identifier — used to create your account and to let you continue on the same device.
• Linked-account identifier — created only if you connect a Google or Apple account. We receive the identifier that service issues for our app, and use it solely to recognise the same account on another device. We do not receive your name, email address or phone number; if that ever needs to change we will update this policy and give notice first (section 13).
• Discord account identifier — created only if you link Discord in Shooo Yokai: Roguelike Defense or Pocha Moonlight. We receive the user ID Discord provides and use it only to add you to our official Discord server, assign your role there, and grant the join reward. We do not receive your email address, friends list or list of servers, and the Discord sign-in token is used once to add you to the server and is never stored. If you unlink or delete your account we erase this identifier and keep only the converted value described in section 7, so the join reward cannot be claimed twice.
• Game progress — nickname, level and progress, balances and items, friends, ranking entries.
• Purchase records — created only if you make a purchase. We store the receipt number issued by the store, along with the product, amount and time. Payment details such as card numbers are handled by the store and never reach us.
• Usage records — sign-in times, app version, operating-system (OS) type and version, game language setting, error reports, and aggregate records of key in-game actions.
• Advertising identifier — used only in games where ads are actually served. In games that use Firebase it is also used to attribute installs and measure ad performance. On iOS it is used only if you allow App Tracking. This is the identifier provided by your device, and you can reset or disable it in your device settings.
• Push notification token — collected in Shooo Yokai: Roguelike Defense and Pocha Moonlight so we can send service notices as notifications. Along with the notification token that Google Firebase issues for your device, we receive your game language, your device's time zone, your app and operating-system versions, and your in-game notification settings (whether notifications are on, and whether night-time notifications are allowed). We use the game language to send notices in that language, and the time zone to hold notices sent between 9 p.m. and 8 a.m. until 8 a.m. unless you allow night-time notifications. We send only service notices such as maintenance, updates and outages — never promotional notifications. We do not send them if you turn notifications off in the game settings or block them on your device, we stop sending to a device when you log out, and we delete the token when you delete your account. Notifications the game schedules for itself (for example, when your Energy or lives are full again) are scheduled and shown on your device only, and no information reaches us for them.

3. What differs between games

This table lists the features each game offers. Where a feature is not yet live in a given game, we collect nothing related to it until it ships. Before adding such a feature we update this table and section 5 and give notice, and any processor involved in that feature is added to section 5 at the same time.

4. Why we use it

• To create and maintain your account, and to carry your progress across a reinstall or a new device
• To run the game and features such as friends and rankings
• To verify purchases, deliver what you bought, and handle refunds and disputes (including providing information needed for the store's refund review and recovering in-game currency granted for refunded purchases)
• To find and fix errors, and to see in aggregate where players get stuck so we can improve the game
• To prevent abuse and fraudulent payments
• To show ads and to grant rewards for rewarded ads, in games that have them
• To send service notices such as maintenance, updates and outages as notifications, in games that have them

5. Processing we entrust to others

Running the games requires the external services below. We do not sell your information, and we do not share it for purposes beyond those described here. In-game activity records are stored only on our own servers and are not shared with the processors below. The exception is games that use Firebase — all four games send basic usage events such as app launches and sessions, tutorial progress steps, and crash reports to Google Firebase, so we can fix errors and find where players get stuck. Depending on the game, level-milestone steps and verified purchase conversions are sent as well to measure ad performance (see the table below).

Purchase usage information for refund reviews — If you request a refund from Apple App Store, Apple requests information from us about that purchase. We only send ① whether the purchased item was delivered, ② how much of the in-game currency and benefits granted by that purchase you have used (percentage), ③ whether a free trial was provided before the purchase, and ④ our refund opinion based on the extent of use. We do not send names, device identifiers, or raw game progress records. Apple uses this information for refund reviews under its own policy. We do not send this information to Google Play.

We are a company incorporated in Vietnam. Most of these providers operate servers in other countries, including the United States, so information is transferred to Vietnam and onward to those countries. What is transferred is listed in the "What they receive" column, the purposes are those in section 4, and each provider retains it under its own policy. If you do not wish your data to be transferred, you can stop using the games that include those features, or disable the advertising identifier in your device settings.

6. How long we keep it

We keep it while your account exists. When you delete your account we irreversibly erase everything that can identify you. What remains after that is described in section 7.

Where the law requires records to be kept for a set period, we keep them for that period. Under Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce (Republic of Korea), records of payments and of the supply of goods are kept for 5 years and records of consumer complaints and dispute resolution for 3 years.

7. What remains after account deletion

After an account deletion request has been completed, we retain the following records in a form that cannot identify you:

• Purchase receipts
• The grant and spend ledger for paid currency (in games that have one)
• Game records — progress and in-game balances, kept as statistics
• Discord join-reward record (only if you linked Discord) — a value converted from your Discord user ID that cannot be turned back into the original

We retain them to (1) handle refunds and payment disputes, (2) prevent fraudulent re-grants from re-submitted receipts, (3) meet tax and accounting record-keeping obligations, (4) analyse statistics for tuning game difficulty and in-game economy, and (5) stop the same Discord account from claiming the join reward again.

The only user-related value remaining in these records is a single internal ID number; because account deletion irreversibly removes everything linking that number to a device or a person, the records are retained in a form that cannot identify an individual — and that link cannot be restored by us either. We do not use these records to restore an account or to re-grant items.

The Discord join-reward record does not keep even the internal ID number — only the converted value above. That value cannot reveal your Discord account; it is used only to check, if the same Discord account is linked again later, whether the reward was already granted.

Purchase and supply-of-goods records are kept for 5 years, and records of consumer complaints or dispute resolution for 3 years, as required by Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce (Republic of Korea). Game records, which by then cannot identify anyone, may be kept as statistics without a time limit.

8. Your rights

You may ask to access, correct, delete, or stop the processing of your information. Contact us at the address below and we will act on it.

• Deleting your account — you can do this inside the game, and if you have already uninstalled the app you can request it at the contact address below. Per-game pages: Shooo Yokai: Roguelike Defense · Pocha Moonlight · Decor Sprout · Sprout Journey: High Climb.
• Grace period — we do not delete immediately. Deletion happens after 7 days, and you can reverse it by opening the app before then.
• Verifying it is you — because there is no sign-up, we cannot identify you by username and password. A web deletion request must include the UID (or friend code) shown in the game. Requests that only include a nickname are not processed.

9. Erasure

Once deletion is final, we irreversibly erase the identifier linking your device to the account, your nickname and other information that could identify you, together with your friend relationships, ranking entries, sessions and push notification token. This cannot be undone — not even by us — and starting again always creates a new account. Any game records that remain are kept only in the non-identifying form described in section 7.

Progress stored on your device is reset when you uninstall the app or start over.

10. How we protect it

• Traffic between the app and our servers is encrypted.
• We do not store payment details such as card numbers. Payments are handled by the stores.
• Only the minimum number of people needed to operate the service can access the data, and that access is logged.

11. Children

None of the four games are directed at children. We do not knowingly collect information from children under 14 (or under 13 or 16, depending on the country).

If we learn that a child's information has been collected without a guardian's consent, we delete it without delay. If you believe this has happened, please tell us at the contact address below.

12. Contact

Please send privacy questions, complaints and requests to the address above. We reply within 3 business days.

Users in the Republic of Korea may also contact the Korea Internet & Security Agency Privacy Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office Cybercrime Division (spo.go.kr, 1301), or the National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).

13. Changes to this policy

We will post any change on this page at least 7 days before it takes effect, and at least 30 days before if the change is to your disadvantage.

If what a game collects or who we entrust it to changes, we update this policy and give notice before the change takes effect.

Previous revision — announced 22 September 2026, effective 22 October 2026: added push notices (push notification token · Google Firebase Cloud Messaging) to sections 2, 3, 4, 5 and 9. Because this revision adds information we receive, we are giving 30 days' notice.

Previous revision — announced 24 September 2026, effective 14 October 2026: added all four games' Firebase integration (install attribution, ad performance measurement, crash diagnostics) to sections 2 and 5.

Previous revision — announced 25 September 2026, effective 25 October 2026: added Google signals for Shooo Yokai: Roguelike Defense (aggregate statistics and advertising audiences associated with Google accounts) to section 5. Because this revision adds new processing, we are giving 30 days' notice.

Latest revision — announced 2026-09-26, effective 2026-10-03 (7 days after announcement): moved these pages from pongvn.com to games.pongvn.com and split the contact address into per-game addresses (cs-tg@, cs-pm@, cs-sb@, cs-sh@pongvn.com). This revision collects nothing new, so we are giving 7 days' notice.

Game legal · Privacy Policy · Terms of Service · games@pongvn.com