Privacy Policy
Effective: at launch · draft v0
This is a pre-review draft. It will be replaced by the final version before launch.
Google advertising and cookies
We integrate Google AdSense. Third-party vendors, including Google, may use cookies to serve ads based on prior visits to this or other websites. Google and its partners may use advertising cookies for personalization and measurement. Ad serving depends on site approval, account settings and applicable consent requirements.
Google ad personalization settingsHow Google uses informationParticipating vendors' opt-out choices
1. What we collect
Depending on how you sign in, we process Google or Privy account identifiers and the name, email, email verification status and wallet address provided, plus your profile (handle and display name). Previously linked TokenPost identifiers may remain; new TokenPost sign-ins are disabled. We also process service activity (play time, game events and the point ledger), game saves, purchase, gift and funding records, and messages or content you submit. Developer submissions include a contact email, game URLs, device support information and review materials. Paid point top-ups and card payments are not currently offered.
2. Why
To provide sessions, points, game saves, gifts and funding; review developer submissions and contact developers; respond to support requests; measure quality (play time and retention statistics); prevent abuse; and meet legal obligations.
3. Retention
Account data and the point ledger are kept until account deletion; the guest cookie for up to 400 days; play measurements for as long as the statistics require, or longer where law demands.
4. Processors and third parties
We use Supabase (database and file storage), Vercel (hosting), and Google or Privy for your chosen sign-in method. SDK-connected games may receive a per-game pseudonym, handle and display name instead of your internal account ID. External games load from their developers' servers and may independently process your IP address, browser information and other data; check their privacy policies. Public profiles and leaderboards may display your handle, display name and activity. See the advertising section above for Google advertising practices.
5. Your rights
You may request access to, correction of, or deletion of your data via the contact below.
6. Contact
Privacy inquiries: cs@tokenpost.kr
7. Cookies and browser controls
We use ta_session for sign-in sessions (up to 30 days), and ta_oauth for sign-in verification (up to 10 minutes). The random ta_aid identifier distinguishes signed-out browsers for play and return-visit measurement and lasts up to 400 days. Language preferences and sign-in providers may also use cookies or browser storage. You can delete or block stored data in your browser; this may affect sign-in, language preferences and game saves. Where Google's advertising consent message applies, you can change your choices in that message or through Privacy & cookie settings in the site footer when available. Sign-in and game storage are managed separately from advertising consent.