Privacy Policy

Effective November 12, 2026 · Bean Squad (젤리 스쿼드) for Android and iOS · MintC Inc.

This policy explains what information MintC Inc. (“we”, “us”) processes when you play Bean Squad (Korean title 젤리 스쿼드; package and bundle com.mintc.pawsquadron, “the Game”), why, for how long, and the choices you have.

1. At a glance

There is no sign-up. We never ask for your name, email address, phone number or date of birth.
The first time the Game reaches our server, the server makes a guest account for it. Purchases, ad rewards and paid draws are tied to that account.
Your game progress is kept on your device, not on our server.
Payments are made through Google Play or the App Store. We never receive your card or bank details.
The Game shows rewarded video ads from Google AdMob only when you choose to watch one.
We do not sell your personal information.

2. Information we process

Everything below is created or collected automatically while you use the Game.

What	Why	How long
Guest account: an account identifier our server assigns, a random installation identifier made on your device, a secret made on your device (we keep only its SHA-256 hash), and when the account was made.	To recognise the Game without a sign-in screen and keep purchases, ad rewards and paid draws on one account; to count the account's age for game rules.	Until the account is deleted.
Purchase records: the store (Google Play or the App Store), the transaction ID, the product, the price and currency the store reports, the time, the state (delivered, refunded, cancelled) and whether it was a test or a real purchase.	To check that a purchase is genuine, deliver it once, handle refunds and subscription renewals, prevent fraud, and keep accounting records.	Kept as transaction records (for example, Korea's Act on Consumer Protection in Electronic Commerce requires 5 years). When the account is deleted, the link to it is removed.
Deliveries: what each purchase, subscription period, subscription daily reward and multi-day pack delivered or took back, and which shop offers were opened for the account.	To deliver what you bought exactly once, including packs that arrive over several days and subscription benefits.	Until the account is deleted.
Paid random draws: each draw (which box, how many, what it cost, what it gave, the country), draw counts used for guarantees and stamps, and box keys.	To run draws on the server with the odds shown in the Game, apply guarantees, answer questions and disputes, and turn paid draws off where they are not offered.	Each draw's record: 90 days. Counts and keys: until the account is deleted.
Ad reward checks: a one-time code made before a rewarded ad, Google's signed confirmation that the ad was watched (ad unit, transaction ID, time) and the reward slot.	To confirm the ad was watched before giving the reward, and apply daily limits.	90 days (unused codes: one day after they expire). Deleted with the account.
Play records: first launch, sessions, tutorial steps, stage starts and results, upgrades, unlocks, shop offers shown, purchase results, ad views and rewards with the earnings AdMob estimates for them, store review prompts, patrol and daily reward claims. Each record carries event and session identifiers, the device time, platform, app version, device language, distribution channel and a country code our hosting provider derives from the connection. No IP address and no advertising identifier.	To understand how the Game is played, find difficulty and quality problems, and measure purchases and ads.	Individual records: 180 days. Daily activity per installation: 400 days. Totals with no installation or account in them are kept.
Launch reports, sent before the guest account signs in: the installation identifier, a random per-launch identifier, how far the launch got and why it stopped, the time it took, platform, app version and distribution channel.	To find installations that cannot reach the server or sign in.	180 days. Deleted with the account once the installation has signed in to it.
Install source. Android: from Google Play Install Referrer, a source category, whether an ad click was present, a short tag and the campaign source, medium and name (up to 36 characters each); we do not keep the raw referrer or the click identifier. iOS: we send Apple's AdServices token to Apple and keep whether the install came from Apple Ads and, if so, the campaign, ad group and keyword numbers.	To see which advertising leads to players (advertising measurement).	Until the account is deleted.
Technical data: your IP address and basic request information, processed by our hosting provider (Cloudflare) to deliver and protect the service. To limit how many accounts can be made, we keep a keyed hash of the IP address, never the address itself.	To run the service and keep it secure.	The hash: about a day. We do not store IP addresses in our databases.
Emails you send us: your email address and what you write.	To answer you and handle requests.	One year after the request is closed.

3. What stays on your device

Your progress, in-game currencies, items and settings are saved only on your device. Uninstalling the Game or clearing its data removes them, and we cannot restore them.
If you allow notifications, the Game schedules reminders (for example when patrol rewards are full) on the device itself. No push token or schedule is sent to us.
Where the law requires it, the Game asks Google Play or Apple for an age-range signal on the device and uses it only to hold purchases that need a parent's approval. The signal is not sent to our server.
When the Game asks for a store rating, it uses the store's own rating sheet; we only record that it was asked.

4. Ads and your choices

The Game shows rewarded video ads through Google AdMob, only when you tap to watch one. Google may collect your device's advertising identifier, IP address, device and app information and ad interactions to show and measure ads, as described in How Google uses information from sites or apps that use its services.

In the European Economic Area, the United Kingdom and Switzerland, the Game asks for your consent through Google's consent form before any ad is requested. If you refuse, no ads are requested.
On iPhone and iPad, the Game asks through Apple's App Tracking Transparency. If you decline, or tracking is restricted, ads are not personalised. You can change this in Settings › Privacy & Security › Tracking.
On Android you can reset or delete your advertising ID, or opt out of personalised ads, in your device settings (Settings › Google › Ads, or Settings › Privacy › Ads).
Subscribers to the Privilege Pass receive rewarded-ad rewards without watching the ad.

5. Google Analytics for Firebase

The Game uses Google Analytics for Firebase so that we and our linked Google Ads account can measure installs and advertising. The Game itself sends only a few events (finishing the tutorial, and a store rating prompt with its trigger and the days since install) and three properties (install source, country, build). The Firebase SDK also records its own basic events, such as first open, sessions and in-app purchases. Firebase uses an app-instance identifier and basic app, device and approximate location information; on Android it may use the advertising ID. Our game code does not send our account identifier or purchase receipts to Firebase.

In the European Economic Area, the United Kingdom and Switzerland (and wherever we cannot tell the region), Firebase collection waits for your answer in Google's consent form and stays off if you refuse. Elsewhere it starts when the Game starts. Ad personalisation signals follow your App Tracking Transparency answer on iOS. The data is processed by Google LLC under Google's Privacy Policy.

We use these providers to run the Game. They may process information outside your country, under their own safeguards.

Provider	What they do	Information	Where
Cloudflare, Inc.	Hosts our game server and databases (Workers, D1) and this website.	Everything in section 2 except emails.	United States and other countries where Cloudflare runs data centres.
RevenueCat, Inc.	Checks purchases and subscription status with Google Play and the App Store.	Our account identifier, store receipts and transaction details, products, prices.	United States.
Google LLC	Google Play payments, AdMob ads, Firebase analytics, Install Referrer; our support email (Google Workspace).	Purchase details, information in sections 4 and 5, emails you send us.	United States and other countries where Google runs data centres.
Apple Inc.	App Store payments; Apple Ads attribution (AdServices).	Purchase details; the AdServices token.	United States and other countries.

We also disclose information to authorities where the law requires it.

7. Deletion

When a retention period ends, or an account is deleted, we delete the information without delay in a way that cannot be recovered.
Deleting an account deletes its guest account, deliveries, draw records, counts and keys, ad reward checks, play records and launch reports, and install source, and asks RevenueCat to delete the matching customer. Purchase records are kept as transaction records with the link to the account removed.
How to delete your account — in the Game, or by email — and exactly what is deleted are on the Delete account page. Requests by email are done within 30 days.
Information Google collects for ads and Firebase is held by Google; see sections 4 and 5.

8. Your rights

You can ask us to access, correct or delete your information, or to stop processing it, by writing to support@mintcinc.com. Depending on where you live (for example the EU, the UK, Korea or California) you may have further rights, including to object, to data portability, and to complain to your data protection authority. We answer within 10 days (deletion within 30 days). You can also act through a representative.

9. Children

The Game is not directed to children under 13 (under 14 in Korea), and we do not knowingly collect their personal information without a parent's or guardian's consent. If you believe a child has given us information, contact us and we will delete it.

10. Security

All communication is encrypted (HTTPS).
Our server accepts only tokens it signed itself, and keeps only a hash of each installation's secret.
Access to the server data is limited to the people who run the service.
Payments go only through Google Play and Apple; we never receive payment details.

11. This website

This website uses no cookies, no scripts and no analytics. Our hosting provider processes your IP address to deliver the pages.

12. Changes

If we change this policy we will post the new version here with a new effective date, and tell you in the Game before a significant change takes effect.

13. Contact

MintC Inc. · Privacy contact (Personal Information Protection Officer): Junseong Park (박준성) · support@mintcinc.com

A question about your information? Write to support@mintcinc.com.