Privacy Policy
This is a reference translation. The Korean version is the binding text. If the two differ, the Korean version prevails.
The MiddleMan Co., Ltd. (“the Company”) operates the game Arcarune (“the Service”) and handles users' personal information as described below.
Request account and data deletion
1. What we collect
The Service asks only for what it needs to recognise an account.
From social login
| Item | What it is |
|---|---|
| Login provider | Which of Google, Kakao or Apple you signed in with |
| Provider identifier |
A number that does not change within that service (Google calls it
sub). It is not an email address.
We use it only to recognise that the same person signed in again.
|
| Display name | The name shown in the game. Left blank if the provider does not supply one. |
Google sign-in does not give us your email address.
The only scopes we request are openid and profile.
Asking for information we will not use would only create an obligation to keep it safe.
What builds up as you play
Records the game itself creates — level and experience, stamina, the cards and runes you hold, deck composition, currency balances and the ledger of changes, battle records, and the times your account was created and updated.
What is recorded automatically
The web server keeps access logs (time of access, IP address, request path, browser information). We use them to trace faults and to prevent abuse.
What we do not collect
Legal name, date of birth, phone number, postal address, email address, profile photo and payment details are neither collected nor stored. The Service has no payment feature.
2. Why we use it
- To find your account when you sign in again
- To save your progress so you can continue where you left off
- For features shared with other users, such as rankings, guilds and friends
- To respond to faults and to prevent abuse and account theft
We do not use it for any other purpose. If the purpose changes we will say so in advance and ask for your consent.
3. How long we keep it
- Account information and game records — until you close your account (see section 7)
- Access logs — three months
When you close your account we destroy the data without delay. Where the law requires us to keep something, we store it separately for that period and then destroy it.
4. We do not give it to third parties
We do not provide users' personal information to third parties. The only exception is a lawful request from an investigative authority made through proper legal procedure.
5. Processing we entrust to others
| Entrusted to | For |
|---|---|
| Amazon Web Services | Running the server and database (Seoul region) |
| Cloudflare | Domain routing and traffic relay |
Google, Kakao and Apple are the parties that confirm your sign-in. The Company does not hand them your information; rather, within the scope you consented to, we receive an identifier that they confirm.
Cloudflare operates servers worldwide, so traffic may pass through servers outside Korea. No personal information is separately stored in that process.
6. Cookies
We use one session cookie (JSESSIONID) to keep you signed in.
It is set so that scripts in the browser cannot read it (HttpOnly), and it
disappears when you close the browser or sign out.
We use no advertising or analytics cookies.
7. Your rights · Request account and data deletion
You may at any time ask to see, correct, delete, or stop the processing of your personal information. Tell us at the contact address below and we will act without delay.
1. Inside the game (recommended)
Open Menu → Settings → Delete account and type your own nickname into the confirmation box.
2. By email
If you have already uninstalled the app, or cannot sign in, write to us instead.
| Send to | contact@themiddleman.co.kr |
|---|---|
| Subject | Arcarune account deletion request |
| Please include | Your in-game nickname and the sign-in method you used (Kakao, Google or Apple) |
Sending from the email address of the social account you signed up with is the fastest way for us to confirm it is you. We may ask for more details if we cannot.
3. When is it deleted?
A request starts a 7-day grace period. If you sign in again with the same account during those days and choose Cancel deletion, everything is kept and you can carry on playing.
After 7 days it cannot be undone. The data is destroyed without delay once the grace period ends.
4. What is deleted
Everything attached to the account:
- The social sign-in identifier and your nickname
- Your cards, runes and decks
- Currencies (gold, mythstone and so on) and their ledger
- Stage progress, battle records, quests, achievements and the codex
- Mail, friendships and legion membership
- Purchase history, including receipt identifiers
5. What remains
| What | For how long | Why |
|---|---|---|
| An empty, nameless account slot | Until the service closes | Other players' match and legion-war records point at this slot. The personal data is already erased; only a number remains, shown without a name |
| Other players' match records | Kept as their own records | They belong to the opponent. They contain no personal data of the deleted account |
| Server access logs | 3 months | Incident response and abuse prevention. Destroyed once the period passes |
| Records required by law | The period the law sets | Only where Korean e-commerce law and similar statutes require retention; stored separately, then destroyed |
6. Partial deletion
At present we offer full account deletion only. If you would like a specific item removed, write to the address above and we will tell you what is possible.
8. How we keep it safe
- Everything to and from the Service is encrypted with HTTPS
- The database is not exposed to the internet; it is reachable only from inside the server
- We keep the number of people who can reach personal information to a minimum
- We never receive a password, so there is no password to leak
9. Children under 14
We do not collect personal information from children under 14 without the consent of a legal guardian. If we find that we have, we destroy it without delay.
10. Company details and privacy officer
| Company | 주식회사 더미들맨 (The MiddleMan Co., Ltd.) |
|---|---|
| Representative | 조성관 (Cho Seongkwan) |
| Business registration number | 414-88-03752 |
| Mail-order business registration | 제2026-화성병점-0633호 |
| Address | 경기도 화성시 병점구 경기대로 990, 102동 801호 (병점동, 병점역SK뷰아파트) / 990 Gyeonggi-daero, Byeongjeom-gu, Hwaseong-si, Gyeonggi-do, Republic of Korea |
| Telephone | 070-4323-0010 |
| Privacy officer | 조성관 (Cho Seongkwan) |
| contact@themiddleman.co.kr |
For questions, complaints or remedies concerning personal information, please use the contact details above.
You may also report a privacy infringement or seek advice from the following Korean authorities.
- Privacy Infringement Report Centre (privacy.kisa.or.kr / 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Supreme Prosecutors' Office, Cyber Investigation Division (spo.go.kr / 1301)
- National Police Agency, Cyber Bureau (ecrm.police.go.kr / 182)
11. Changes to this policy
When the content changes we announce it inside the Service 7 days before it takes effect, and 30 days before if the change is to users' disadvantage.
Effective 1 September 2026 · Terms of Service