Privacy Policy

1. Data we process and why

• Google sign-in (optional)

  Data

  Account identifier (google:ID number), name, email, profile picture

  Purpose

  Keeping you signed in, syncing records across devices

  Retention

  Name, email and picture are not stored on our servers, only in an encrypted sign-in cookie in your browser for up to 30 days / the account identifier is kept with the synced records below until you ask us to delete it

• Synced records (signed in)

  Data

  Owned identities and E.G.O with uptie levels, Limbusdle wins, streaks and guess distribution, earned badges

  Purpose

  Using the same records on several devices

  Retention

  Until you ask us to delete them (you can clear your owned list yourself)

• Contact form (optional)

  Data

  Category and message, reply email (optional), page you came from, language, account identifier if signed in, browser info (User-Agent), IP hash

  Purpose

  Reading and answering your message, reproducing bugs, preventing spam

  Retention

  Until you ask us to delete it, so we can follow up on the same issue / IP hash: 30 days

• Game result submission (automatic)

  Data

  Limbusdle results, exam scores, world cup results, party builder lineups, random browser identifier, IP hash

  Purpose

  Statistics and rankings, preventing double counting and abuse

  Retention

  Statistics: while the Site operates / IP hash: 30 days

• Hall of Fame entry (optional)

  Data

  Nickname, streak, guess count, time of record, IP hash

  Purpose

  Public Limbusdle hard-mode ranking

  Retention

  Until you ask us to delete it (only the last 30 days are shown) / IP hash: 30 days

• Custom puzzles

  Data

  Puzzle title, answer identity, IP hash

  Purpose

  Serving the puzzle through its share link

  Retention

  While the Site operates / IP hash: 30 days

• Collected automatically

  Data

  Pages visited, device and browser type, feature usage events (without IP or identifiers), server access logs

  Purpose

  Usage statistics, troubleshooting, improving the Site

  Retention

  Google Analytics up to 14 months / feature usage events 90 days / server access logs 7 days

• IP hash: your IP address turned into a one-way keyed hash (HMAC-SHA-256). We never store the IP address itself, and use the hash only to stop repeated submissions from the same place in a short time.
• Random browser identifier: a random value created in your browser storage. It is not linked to your name, email or account, and is used only so the same record is not counted twice.
• Hall of Fame nicknames and custom puzzle titles are visible to other users. Do not put your real name or other identifying information in them.

2. Retention and deletion

• We delete data without delay once its retention period ends or its purpose is fulfilled.
• A daily automated job deletes IP hashes older than 30 days.
• Files are deleted so they cannot be restored. Database backups kept for disaster recovery may still hold deleted data for up to 30 days before it is removed automatically.
• Statistics are not linked to information that directly identifies you, such as your name or email.

3. Service providers and international transfers

The Site runs on the services below instead of its own servers. Their servers are outside Korea, so your data is transferred abroad as described here.

• Cloudflare, Inc. (PrivacyQuestions@cloudflare.com)

  Country

  United States and countries with Cloudflare data centers

  Data

  All data stored on our servers listed in section 1, server access logs

  Purpose

  Hosting, database storage, sending contact notification emails, access logs

  When and how

  Sent over the network whenever you use the Site

  Retention

  As in section 1

• Google LLC (Privacy Policy)

  Country

  United States

  Data

  Message, reply email, page you came from, account identifier

  Purpose

  The operator's contact inbox (Gmail)

  When and how

  Sent by email when you submit the contact form

  Retention

  Until you ask us to delete it

• Google LLC (Privacy Policy)

  Country

  United States

  Data

  Pages visited, device and browser info, cookie identifiers

  Purpose

  Google Analytics usage statistics

  When and how

  Sent over the network when you visit a page

  Retention

  Up to 14 months

• Google LLC (Privacy Policy)

  Country

  United States

  Data

  Advertising cookies, device and browser info, visit history

  Purpose

  Serving ads through Google AdSense

  When and how

  Sent over the network when you visit a page

  Retention

  Per Google's policies

If you do not want your data transferred abroad, you can avoid signing in, the contact form and Hall of Fame entries, and block analytics and advertising cookies in your browser. Access to the Site itself goes through Cloudflare, so the Site cannot be used without it.

If you sign in with Google, Google handles the sign-in and the Site only receives the name, email, profile picture and ID number Google passes on. YouTube videos on recommended party pages use privacy-enhanced mode; YouTube (Google) may collect data once you play a video.

4. Cookies and browser storage

• Cookies set by the Site: a sign-in cookie (names starting with authjs, only when signed in, up to 30 days) and a language cookie (NEXT_LOCALE).
• Third-party cookies: Google Analytics (usage statistics), Google AdSense (ads), YouTube (when you play a video).
• Browser storage (localStorage): owned identities, Limbusdle records, tier maker and random dungeon progress, theme, the random browser identifier and similar. Anything not sent to our servers stays only in that browser.
• You can block cookies or clear storage in your browser settings. Some features, such as staying signed in or saved records, will then stop working.

5. Advertising

• The Site shows ads through Google AdSense.
• Third party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
• You may opt out of personalized advertising by visiting Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalized advertising at www.aboutads.info.
• Learn how Google uses information from sites that use its services.
• Users in the European Economic Area, the UK and Switzerland are asked for consent through Google's consent message before advertising cookies are used.

6. Your rights

• You can ask to access, correct, delete or stop the processing of your personal data at any time.
• Send your request to limbusdeck@gmail.com or through the contact page. We will act on it within 10 days and tell you the result.
• To delete signed-in records (owned identities, progress, badges), please send the request from the contact page while signed in. We do not store your email, so a signed-in request is how we identify your account.
• To remove a Hall of Fame entry, tell us the nickname and the date of the record.
• You can also clear your owned list yourself (My Pool, clear all), sign out, or clear your browser storage.
• A legal representative or someone you authorize may make requests on your behalf.

7. Children under 14

The Site is not intended to collect personal data from children under 14. If you are under 14, please do not sign in, use the contact form or submit Hall of Fame entries. If we learn that we received such data without a legal guardian's consent, we will delete it without delay.

8. Security measures

• All traffic is encrypted with HTTPS.
• Sign-in cookies are encrypted with a server secret.
• IP addresses are never stored as-is, only as keyed hashes.
• Admin features are limited to the operator's account.
• Secrets are kept in Cloudflare's secret storage, not in the code.

9. Privacy contact and complaints

• Privacy officer: Limbus Deck operator (limbusdeck@gmail.com)

For help with a privacy violation, you can also contact these Korean agencies:

• Personal Information Infringement Report Center: 118 (in Korea), privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Supreme Prosecutors' Office: 1301 (in Korea), www.spo.go.kr
• Korean National Police Agency: 182 (in Korea), ecrm.police.go.kr

10. Changes to this policy

This policy takes effect on October 6, 2026. If we change it, we will post the changes and their effective date on this page.