Last updated / effective date: October 3, 2026
Critter Pivot: Block Puzzle (“Critter Pivot,” “the game,” or “we”) is operated by SUNGSOON KWON (권성순), an individual developer based in the Republic of Korea.
App name: Critter Pivot: Block Puzzle
Android package: com.critterpivot.game
Developer and privacy contact: SUNGSOON KWON
Email: bricksnake@naver.com
Critter Pivot does not require account registration or sign-in.
Installing the game or selecting an age band does not itself constitute consent to optional online ranking or advertising.
The game may store:
game records and scores
sound and other settings
selected nickname and country code
randomly generated Player ID (UUID)
game-record identifiers
leaderboard-submission preferences
pending leaderboard submissions where applicable
selected age group
advertising and privacy choices
ranking-status information where applicable
the original Privacy Recovery Code issued for your ranking record
The game uses an age band rather than a full date of birth.
The Player ID is app-generated and is not an IMEI or other hardware identifier.
Linked information is not necessarily anonymous.
When online ranking is enabled and you choose to participate, we may process:
nickname
selected country code
Player ID (UUID)
score and reached level
game, run, and submission identifiers
play and submission time
app version
submission and integrity-verification information
ranking position or ranking-status information where applicable
a verification value/hash derived from the Privacy Recovery Code
a one-time Deletion Request ID and request status
We use this information to:
provide online rankings
provide MY RANK
distinguish ranking records
determine whether a submitted score qualifies for the retained Top 1000
validate ranking submissions
prevent duplicate or fraudulent submissions
protect the ranking service
handle privacy and deletion requests
The selected country is a profile choice and is not verified residence, current location, nationality, or citizenship.
Do not use your real name, email address, telephone number, or sensitive information in your nickname.
Critter Pivot uses Google AdMob / Google Mobile Ads SDK and Google UMP.
Depending on age, settings, consent, region, device settings, and service configuration, Google advertising services may process:
advertising, device, and app identifiers
IP address
approximate location inferred from IP
app and advertising interactions
diagnostic and performance information
related device and operating-system information
applicable privacy and consent choices
Critter Pivot does not request precise GPS location.
Rewarded advertisements are optional where offered.
Critter Pivot uses Google Play Integrity and related backend services to help:
verify app integrity
verify ranking submissions
detect modified or abusive clients
prevent fraudulent submissions
protect the leaderboard
Google may process app information, licensing status, request hashes, device-integrity signals, and related attestation information as part of this process.
Critter Pivot does not use Google Play Integrity as a player identity-verification service.
If you contact us, we may process:
your email address
your message
information or files you voluntarily provide
We use this information only as necessary to respond to your request and meet applicable obligations.
Do not send passwords, identity documents, payment information, or unnecessary sensitive information.
We may process information to:
provide gameplay and save preferences
provide online ranking results
provide optional ranking submissions
provide MY RANK
determine retained ranking positions
validate submissions
prevent duplicate or fraudulent submissions
provide advertising to eligible adult users
manage applicable advertising privacy choices
diagnose technical issues
protect the service
handle support and privacy requests
meet applicable legal obligations
We do not sell personal information for monetary compensation.
Online ranking is optional.
Critter Pivot uses different ranges for public ranking display and server ranking retention.
The public Global Ranking displays only:
Rank 1 through Rank 100
Public leaderboard entries may display:
ranking position
nickname
selected country/flag
score
reached level
record date
The public leaderboard does not display:
original Player ID (UUID)
Privacy Recovery Code
Recovery Code verification value/hash
Deletion Request ID
Ranking records from Rank 101 through Rank 1000 may remain stored on the server for:
ranking operation
ranking-position calculation
MY RANK
submission validation
related service management
These records are not displayed on the public Top 100 leaderboard.
A user whose retained ranking is between Rank 101 and Rank 1000 may see the actual ranking position through MY RANK.
Critter Pivot retains ranking records only within the applicable Top 1000.
If:
a newly accepted ranking submission does not qualify for the retained Top 1000; or
an existing ranking record is pushed below Rank 1000,
the ranking record may be not retained or deleted before the normal 365-day maximum retention period expires.
When a user has a valid accepted ranking submission but does not have a retained Top 1000 ranking position, MY RANK may display:
>1000
instead of an exact ranking number.
A user who has never completed a valid accepted ranking submission is not treated as “>1000” and may instead be shown as not ranked, not registered, not synced, or another applicable non-ranked status.
Limited ranking-status information may be retained where necessary to distinguish a valid >1000 status from a user who has never completed a valid ranking submission.
Removal of a ranking record from the retained Top 1000 does not necessarily mean that all separate privacy-request, security, integrity-verification, or temporary service-management information is deleted at the same time.
Those records follow their own purposes and retention rules described in this Privacy Policy.
The Rewarded Ads setting is independent from Banner Ads and Global Ranking and is not required for online ranking participation.
When online ranking registration is successfully completed for the first time, the game issues one Privacy Recovery Code linked to the Player ID (UUID).
The original Recovery Code is shown on the user's current device.
The user should keep a separate copy in a safe place in case the device is lost, replaced, or reinstalled.
The server does not store the original Recovery Code.
The server stores only a verification value/hash needed to validate the code.
The Recovery Code is not included in public ranking responses.
The Recovery Code is not included in ordinary logs.
The Recovery Code is not included in deletion-request emails.
The Recovery Code is used to identify existing ranking privacy records and handle privacy requests.
It is not a general game-progress or account-recovery credential.
The user can start a privacy deletion request from the PRIVACY screen.
After ownership verification, the user must explicitly confirm DELETE MY DATA.
The deletion or withdrawal request is received when that final confirmation is successfully accepted by the server.
The server issues a one-time Deletion Request ID linked to the Player ID.
The Deletion Request ID is valid for 30 days for request identification and verification.
This 30-day period is not a waiting period before deletion.
The game may prepare an optional email draft containing:
game name
Player ID (UUID)
Deletion Request ID
Sending the email is not required for the request to be received.
After acceptance:
the affected ranking information is excluded from public display
new ranking submissions associated with the privacy record are blocked
deletion and cleanup procedures proceed
This does not mean that every provider-controlled infrastructure copy is physically erased at the same instant.
On a new installation, the user may enter the separately saved Privacy Recovery Code.
The server verifies the code against the stored verification value and identifies the prior Player ID.
This identifies the existing privacy record and does not merge the prior Player ID into a newly created profile.
After successful verification, the user can explicitly confirm DELETE MY DATA and complete the same server-side deletion or withdrawal process.
Email remains optional.
The Recovery Code itself is not sent by email.
If the Recovery Code has also been lost and automatic verification is not possible, contact:
bricksnake@naver.com
We will request only information reasonably necessary for a separate verification process.
A valid deletion or withdrawal request is processed without waiting for the normal ranking-retention period to expire.
Critter Pivot uses Google AdMob, Google Mobile Ads SDK, and Google UMP.
Eligible adult users may separately control Banner Ads and Rewarded Ads through the app's privacy settings.
The app's Banner Ads ON/OFF setting is a game feature setting and is separate from Google UMP consent and other advertising privacy choices.
Turning Banner Ads ON does not override applicable:
privacy requirements
consent requirements
regional requirements
device requirements
service configuration requirements
Actual advertising requests are made only where permitted by the applicable Google UMP status and other relevant requirements.
Because Banner Ads ON is one of the app-level conditions for online ranking submission, turning Banner Ads OFF also prevents new online ranking submissions.
Turning Banner Ads OFF does not by itself delete ranking records already accepted by the server.
Existing ranking records remain subject to the Top 1000 retention structure and the retention/deletion rules described in this Privacy Policy.
The Rewarded Ads setting is independent from Banner Ads and Global Ranking and is not required for online ranking participation.
Where advertising is enabled for an eligible adult user, Google services may process:
advertising, device, and app identifiers
IP address
approximate location inferred from IP
app and advertising interactions
diagnostic and performance information
related device and operating-system information
Critter Pivot does not request precise GPS location.
Rewarded advertisements are optional where offered.
Turning an advertising format OFF stops new advertising requests for that format.
It does not retroactively delete information already processed by an advertising provider.
Gameplay cannot proceed.
Advertising and online ranking are unavailable.
Privacy-request and deletion channels remain available where needed to exercise privacy rights regarding historical or incorrectly created information.
Local gameplay only.
The following features are disabled:
Banner Ads
Rewarded Ads
other advertising
online ranking
Users aged 14–17 cannot enable Banner Ads, Rewarded Ads, or Global Ranking.
Eligible adult users may control Banner Ads, Rewarded Ads, and Global Ranking through the app's privacy settings.
For a newly selected adult age group:
Banner Ads start OFF
Global Ranking starts OFF
Rewarded Ads are controlled separately
Online ranking submission is available only when both of the following app settings are ON:
Banner Ads
Global Ranking
If Banner Ads is OFF, Global Ranking cannot be enabled.
Turning Banner Ads OFF after Global Ranking has been enabled:
stops new ranking submissions
clears locally queued ranking submissions
blocks retries
may cause late responses from earlier requests to be ignored
Turning Global Ranking OFF also stops new ranking submissions and clears locally queued submissions.
Turning Banner Ads or Global Ranking OFF does not by itself delete ranking records already accepted by the server.
Rewarded Ads are independent from Banner Ads and Global Ranking and are not required for online ranking participation.
The Banner Ads setting is separate from Google UMP consent and other advertising privacy choices.
Turning Banner Ads ON does not override applicable privacy, consent, regional, device, or service requirements.
Actual advertising requests are made only where permitted by applicable Google UMP status and other relevant requirements.
Becoming an adult does not automatically enable Banner Ads, Rewarded Ads, or Global Ranking.
A stored OFF choice remains OFF.
If age is unknown or has not been selected, gameplay or online processing that depends on the age decision is deferred.
The game asks for an age band rather than a full date of birth.
Where available, users may manually open privacy-management options to review or change prior choices.
Opening or changing those options does not by itself enable advertising or online ranking.
If historical or incorrectly created server data exists for a child under 14, the user or the child's legal representative may use the available privacy-request channel to exercise applicable rights.
Critter Pivot uses the following services.
Used for:
ranking storage
ranking retrieval
ranking-position management
backend processing
security
submission validation
related service operations
Used for:
app integrity verification
submission integrity verification
abuse prevention
Used for:
advertising
advertising delivery
measurement
diagnostics
fraud prevention
Used for:
advertising privacy messages
applicable consent and privacy-choice management
Used for:
support correspondence
privacy correspondence
privacy-rights requests
We do not sell personal information for monetary compensation.
We use Google Cloud/Firebase for online-ranking storage and retrieval, ranking-position management, backend functions, security, and related service operations.
For customers billed in the Republic of Korea, the Google Cloud contracting/reseller entity is:
Google Cloud Korea LLC
Under the Cloud Data Processing Addendum (CDPA), Google acts as the processor of Customer Data and may include Google LLC and relevant global affiliates.
The primary location of our Cloud Firestore database and the primary execution region of ranking-related Cloud Functions are:
Seoul, Republic of Korea (asia-northeast3)
Supporting operations such as the following may involve processing outside the Republic of Korea:
security
maintenance
technical support
system telemetry
Cloud Logging
subprocessor activities
For the Google Cloud/Firebase processing described here, overseas processing or outsourcing is disclosed under Article 28-8(1)(3) of the Korean Personal Information Protection Act to the extent necessary to provide the optional online-ranking service.
Google Cloud does not provide a project-specific list of countries in which data is actually processed in its dynamic global environment.
We therefore conservatively disclose potential processing countries based on Google's official Google Cloud Platform Subprocessors information for the Google Cloud/Firebase services and common support and maintenance scope we use.
United States, Argentina, Australia, Austria, Belgium, Brazil, Bulgaria, Canada, Chile, Colombia, Czech Republic, Denmark, El Salvador, Finland, France, Germany, India, Indonesia, Ireland, Israel, Italy, Japan, Luxembourg, Malaysia, Mexico, Netherlands, New Zealand, Philippines, Poland, Portugal, Romania, Singapore, Slovakia, South Africa, Spain, Sri Lanka, Sweden, Switzerland, Taiwan, Thailand, United Kingdom.
This list does not mean that every user's personal information is actually processed in every listed country.
Some locations may relate only to technical support or other conditional service operations.
Data
Online-ranking information described in this Privacy Policy and minimum connection, error, verification, and security information needed for service operation.
Timing and method
When online-ranking services, server requests, technical support, or related service operations occur, through encrypted communications such as TLS and Google Cloud infrastructure.
Recipients
Google, including relevant Google affiliates, and relevant subprocessors identified in Google's official Google Cloud Platform Subprocessors information.
Google Cloud data-protection contact:
https://support.google.com/cloud/contact/dpo
Relevant Google Cloud subprocessor names, processing locations, and activities are available at:
https://cloud.google.com/terms/subprocessors
Purpose
Ranking storage and retrieval, ranking-position management, backend functions, security and abuse prevention, service maintenance, technical support, Cloud Logging, and related operations.
Retention
According to the game's retention rules and the service provider's necessary operational and deletion lifecycle.
Refusal and Effect
Users may:
keep Global Ranking OFF
keep Banner Ads OFF
decline to use online ranking
Because Banner Ads ON is one of the app-level conditions for online ranking submission, keeping Banner Ads OFF also prevents new ranking submissions.
Turning Banner Ads or Global Ranking OFF does not by itself delete ranking records already accepted by the server.
Online ranking will be unavailable, but permitted local gameplay is not affected.
Rewarded Ads are not required for online ranking participation.
Google Cloud Platform Subprocessors
https://cloud.google.com/terms/subprocessors
Cloud Data Processing Addendum
https://cloud.google.com/terms/data-processing-addendum
Google Cloud data-protection contact
https://support.google.com/cloud/contact/dpo
The CDPA's “up to 180 days” deletion period concerns Google's underlying-system deletion process after a deletion instruction.
It is not Critter Pivot's maximum 365-day ranking-data retention period.
Google Play Integrity, AdMob, and UMP are separate processing relationships.
The Google Cloud/Firebase potential-country list above is not automatically applied to those separate services.
Ranking records retained within the applicable Top 1000 are kept for:
up to 365 days from the player's last accepted new ranking submission.
The 365-day period is a maximum normal retention period and does not guarantee that every ranking record will remain stored for the full 365 days.
A ranking record may be deleted earlier when:
it falls outside the retained Top 1000
a valid DELETE MY DATA or withdrawal request is accepted
deletion is otherwise required by applicable law
If a newly accepted ranking submission does not qualify for the retained Top 1000, the full ranking record may not be retained.
Only an accepted new ranking submission refreshes the 365-day retention reference date for a ranking record that remains stored.
The following actions do not refresh the retention date:
ranking reads
MY RANK reads
challenge issuance
failed submissions
rejected submissions
duplicate retries
retry attempts that do not result in a newly accepted ranking submission
After the 365-day period expires, ranking records and related ranking-management information that remain stored become eligible for deletion through the applicable cleanup process.
Limited ranking-status information used to distinguish >1000 from a user who has never completed a valid ranking submission may be retained only as necessary to provide that status and related privacy functionality, and for no longer than the applicable maximum retention period unless another lawful retention requirement applies.
Recovery Code verification data and temporary deletion-request information are retained only as long as necessary for their privacy-request purpose.
Deletion Request IDs are valid for 30 days for request identification and verification.
This is not a deletion waiting period.
The 365-day rule is Critter Pivot's maximum normal ranking-retention period.
It is separate from Google Cloud's underlying-system deletion lifecycle.
Security logs and verification records are retained only as necessary for:
security
troubleshooting
fraud prevention
applicable legal obligations
A challenge or token validity period is not the retention period of ranking records.
Support and privacy correspondence is retained only as necessary to:
process the request
document its outcome where needed
meet applicable legal obligations
When information under our control is no longer needed and no lawful retention basis applies, it is deleted or irreversibly anonymized.
Provider-controlled copies may follow the provider's applicable deletion lifecycle.
Users can request deletion of ranking and related privacy records associated with their Player ID.
Privacy contact:
bricksnake@naver.com
The game provides a privacy deletion flow from the PRIVACY screen.
After server-side validation, the game may prepare an optional email draft containing:
game name
Player ID (UUID)
one-time Deletion Request ID
The deletion or withdrawal request is received when the user explicitly confirms DELETE MY DATA and that final confirmation is successfully accepted by the server.
Email is optional.
Opening, sending, or not sending the optional email draft does not determine whether the server has received the request.
The one-time Deletion Request ID is valid for 30 days for request identification and verification.
It is not a deletion waiting period.
If the original device is lost, replaced, or reinstalled, the user may enter the saved Privacy Recovery Code on a new installation.
If verification succeeds:
the server identifies the prior Player ID
the prior Player ID is not merged into a new profile
the user can explicitly confirm DELETE MY DATA
a one-time Deletion Request ID can be issued
The Recovery Code itself is not sent by email.
If both the original device and Recovery Code are unavailable, contact us.
We may request only the minimum additional information reasonably necessary to identify the record and verify authority.
A verified deletion request may cover:
nickname
selected country code
score
level
related identifiers
ranking-status information
related ranking information
related management information under our control
Uninstalling the game or clearing app data does not delete server records.
Subject to applicable law, users may request:
access
correction
deletion
restriction of processing
data portability where applicable
withdrawal of consent
Users may also complain to a competent data-protection authority.
Contact:
bricksnake@naver.com
Verification is limited to information reasonably necessary to:
locate the relevant record
establish ownership or authority
process the request
Google Cloud/Firebase international processing is described in Section 8 above.
Other providers, including Google Play Integrity, AdMob, and UMP, may separately process information outside the Republic of Korea under their applicable service arrangements.
The Google Cloud/Firebase potential-country list is not automatically applied to those separate services.
Critter Pivot uses safeguards including:
HTTPS transmission
server-side validation
restricted access controls for ranking services
ranking-submission integrity verification
encrypted device-side storage for the Privacy Recovery Code using Android Keystore / AES-GCM
The server does not store the original Privacy Recovery Code.
The server stores only the verification value/hash needed for verification.
No electronic storage, transmission, or security method can guarantee complete protection against every possible incident.
Google Privacy Policy
https://policies.google.com/privacy
How Google uses information from sites or apps
https://policies.google.com/technologies/partner-sites
Firebase Privacy and Security
https://firebase.google.com/support/privacy
Google Cloud Platform Subprocessors
https://cloud.google.com/terms/subprocessors
Cloud Data Processing Addendum
https://cloud.google.com/terms/data-processing-addendum
Google AdMob
https://support.google.com/admob/topic/9756841
Google Play Integrity
https://developer.android.com/google/play/integrity
NAVER Privacy Policy
https://policy.naver.com/policy/privacy.html
We may update this Privacy Policy when:
game functionality changes
online-ranking functionality changes
advertising functionality changes
service providers change
information-processing practices change
applicable legal requirements change
Additional notice or renewed consent will be provided where legally required.
Privacy contact:
bricksnake@naver.com