Privacy Policy
Moonberry: Hearth & Rift collects anonymous usage statistics and error reports only if you have agreed. If you don't agree, the app sends nothing off your device. Your game progress always stays on your device.
Effective date: 2026-09-13 · Last updated: 2026-10-19
1. What this policy covers
This policy applies to Moonberry: Hearth & Rift, an Android game made by Pixel Rune (the "app"), and to our two websites, company.pixel-rune.com and game.pixel-rune.com.
The app and the websites handle different information. The app collects anonymous usage statistics and error reports, and only if you have agreed. The websites keep web server access logs and what you send through the contact form, and nothing else. We explain each one separately below.
2. What the app collects, with your consent
The first time you start the app, it asks whether you want to send usage statistics and error reports. Until you agree, none of the information below is collected or sent. You can withdraw your consent at any time later in the game's options.
The analytics tool (Firebase) is built into the app. The library gets ready when you open the app, but its collection features start out turned off. Before you agree, it doesn't create, store or send any records. Collection is turned on only after you agree.
If you agree, we collect the four kinds of information listed here. None of it identifies you directly the way a name, email address, phone number or home address would, and we have no way of knowing who you are.
- App identifiers. These are random values created for each install (the Firebase app instance ID and the Crashlytics installation ID). They tell one install apart from another, not one person from another. They are removed when you delete the app, and a new install gets different values.
- Device and app details. Your device model, OS version, app version, language setting, screen size, and the country you connect from. The country is estimated from your IP address, and the IP address itself is not stored.
- Gameplay events. Things that happen in the game, such as starting a raid, extracting, dying, entering a chapter, defeating a boss, rebuilding the village, and accepting or completing a quest. Each event comes with numbers such as the chapter number and your progress at that moment.
- Error reports. When the app crashes or hits an error: where the error happened (the stack trace), the state of the device (such as memory and storage), the app version, and a list of the game events that happened just before the error.
3. What the app does not collect
We keep collection to a minimum. Whether or not you agree, the app never collects the following:
- Advertising ID (AAID). We don't use it. Collection of the advertising ID is explicitly turned off in the app's settings, and the app doesn't declare the permission for it (com.google.android.gms.permission.AD_ID).
- Ads. The app has no ad network.
- Your name, email address or account. There are no accounts and no sign-in.
- Your location. The app doesn't use precise location or GPS. The only location information is a country-level estimate.
- Your contacts, photos, files, microphone or camera. The app doesn't access them.
- Your save data. Your progress, such as your level, materials, quest progress and settings, is stored only on your device and never sent. We can't see it.
- In-app purchases. There are none. You buy the game once, and that's it.
4. Why we collect it
We use usage statistics only to improve the game. They show us which chapters players get stuck in and which parts feel too hard or too slow, so we can adjust the difficulty and structure.
We use error reports to find and fix problems that make the app close or freeze.
We don't use any of this information for advertising, marketing or profiling, and we don't sell it to anyone.
5. Giving and withdrawing consent
The app asks for your consent the first time you start it. Until you agree, collection is turned off, so nothing is collected or sent. If you don't agree, you can still use every feature of the game.
Even after you agree, you can turn off "Send Usage Stats" in the game's options. Sending stops right away.
Withdrawing consent stops future collection. Records that were already sent are not linked to anything that identifies a person, so we can't pick out and delete the records of one particular user. Instead, they are deleted automatically when the retention periods in section 9 run out (2 months for usage statistics and 90 days for error reports).
6. Permissions the app requests
The installed app has four permissions in total. We confirmed this list by reading the built app package (APK) directly, and an automated check compares it again with every release.
The app doesn't request location, contacts, storage, camera, microphone or phone permissions.
The analytics library tries to add three advertising ID permissions (com.google.android.gms.permission.AD_ID, android.permission.ACCESS_ADSERVICES_AD_ID and android.permission.ACCESS_ADSERVICES_ATTRIBUTION) and an install referrer permission (BIND_GET_INSTALL_REFERRER_SERVICE) by default. We explicitly removed them when building the app.
These are the four permissions the app has:
- Internet (android.permission.INTERNET). Used only to send usage statistics and error reports if you have agreed. The game itself runs without an internet connection, and nothing is sent through this permission before you agree.
- Network state (android.permission.ACCESS_NETWORK_STATE). The analytics library requests this to check for a connection before sending.
- Wake lock (android.permission.WAKE_LOCK). The analytics library requests this to schedule and finish sending. The app doesn't use it to turn on your screen or wake your device.
- An in-app signature permission (your package name followed by DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION). The Android support library (AndroidX) adds this on its own. It is used only inside the app and doesn't access any of your information.
7. Information on our websites
Access logs. Our web server keeps standard logs: IP address, browser type (User-Agent), time of the request, and the address requested. We use them to check for outages and to respond to intrusions and abuse. They are deleted automatically after 14 days at most.
Contact form. When you send a message, we store your name, email address, company name (optional), subject and message, along with the IP address and User-Agent at the time you sent it. We use this to answer you and to block spam and repeated submissions. It is deleted 1 year after we receive it, or right away if you ask us before then.
Cookies. We use only session cookies, to keep you signed in and to prevent forged requests (CSRF). There are no advertising or tracking cookies and no third-party cookies. We don't put any analytics tools on our websites.
8. Service providers and transfers outside Korea
If you agree, the usage statistics and error reports we collect are processed by Firebase (Google Analytics for Firebase and Firebase Crashlytics), a service of Google LLC. We have engaged Google LLC to process this information for that purpose.
Pixel Rune is a Korean company. This information is stored in data centers that Google runs outside Korea, including in the United States. The information transferred is described in section 2, the purpose in section 4, and the retention period in section 9. If you don't want your information transferred outside Korea, you can choose not to agree or withdraw your consent as described in section 5. You can still use every feature of the game.
Apart from this, we don't give the information we collect to third parties or have anyone else process it.
The app is distributed through Google Play. Information that Google handles when you install, buy or get a refund for the app (such as purchase history and device information) is covered by Google's privacy policy. We don't receive that information.
9. How long we keep information
Individual event records in the usage statistics are set to be deleted automatically 2 months after they are collected. After that, only totals remain, such as the number of users per day, and totals don't single out any person.
Error reports are deleted 90 days after they are collected.
Website access logs are deleted after 14 days, and contact form messages after 1 year.
10. Children's privacy
The app is not directed at children under 14. We don't collect age, so we can't tell whether a user is a child, and the information we collect is limited to values that can't directly identify a person.
If you find that a child under 14 agreed on the consent screen without the consent of a parent or legal guardian, turn off "Send Usage Stats" in the game's options or delete the app. Collection stops right away. Records already sent are deleted automatically when the periods in section 9 run out. If you need help, contact us using the details below.
11. Your rights and how to use them
Your game data is on your device, so you can delete it yourself. Delete the app, or clear its storage and data from the app info screen in your device settings. Deleting the app also removes the app identifiers.
For information on our websites, such as contact form messages, you can ask to see, correct or delete it, or ask us to stop processing it. Send your request using the contact details below. We will handle it without delay, within 10 days at the latest, and let you know the result.
If you disagree with how we handled your request, you can file a report with the Personal Information Infringement Report Center of Korea's Personal Information Protection Commission (phone 118, no area code needed).
Records sent with your consent are not linked to anything that identifies a person, so we can't find, show you, or pick out and delete the records of a particular user. Here is what you can do instead:
- Turn off "Send Usage Stats" in the options. Processing stops right away.
- Delete the app. The app identifiers are removed with it.
- Records already sent are deleted automatically when the periods in section 9 run out.
12. How we protect information
Our first line of protection is collecting as little as possible. The app doesn't collect information that directly identifies you, so even if records were leaked, no one could tell who you are from them.
Usage statistics and error reports are encrypted in transit when the app sends them. The collected records can be viewed only through our Firebase account, and only the people who need access have it.
Our websites encrypt all traffic with HTTPS. Admin screens are open only to authenticated administrators, and access logs are kept only for a short time.
13. Changes to this policy
If we change this policy, we will update the effective date and the last updated date on this page. If a change is significant and works against you, we will post a notice on this page 7 days before it takes effect.
Contact
- Company
- Pixel Rune
- Privacy officer
- Pixel Rune 대표
- moonberryhearthrift@gmail.com
- Contact form
- Send through the contact form