Under Hatch
Privacy Policy

ModooLabs, the operator of Under Hatch (언더 해치), values your privacy and complies with applicable laws, including the Personal Information Protection Act of the Republic of Korea. This Privacy Policy explains what information is collected and processed through the app and for what purposes it is used.

01Information We Collect and Process

Under Hatch can be used without creating a separate account. However, the following information may be processed to provide leaderboard and battle server records, advertising, in-app purchase, app update and time check, and inquiry features.

1) Google AdMob Advertising

The app uses Google AdMob to show rewarded ads only. Rewarded ads play only when you tap a button yourself, such as Emergency Repair or Double Reward; the app does not show banner or interstitial ads. In the course of serving ads, Google and its partner ad networks may automatically collect or process the following information:

• Advertising identifier — the Android Advertising ID or the iOS Identifier for Advertisers (IDFA). The IDFA is used only if you allow tracking in response to the request described below.
• IP address and approximate location derived from the IP address
• Device type, model, operating system, and language settings
• App version and ad SDK information
• Ad impressions, clicks, view completion, and reward status
• App launch and ad interaction information
• Technical information needed for ad fraud prevention and security
• Error, diagnostic, and performance information

This information may be processed to serve ads, limit ad frequency, provide personalized or non-personalized ads, measure ad performance, prevent ad fraud, and improve the service.

Ad content rating — For all users, the app limits ad content to a maximum rating of PG (parental guidance). Mature or suggestive ads (T or MA ratings) are not requested.

iOS tracking request (App Tracking Transparency) — On iOS, Apple's tracking permission prompt is shown the first time you launch the app. If you do not allow tracking, the advertising identifier (IDFA) is not provided; ads will still be shown, but they will be non-personalized. You can change this choice at any time in your iPhone's Settings → Privacy & Security → Tracking.

Users in the European Economic Area (EEA), the United Kingdom, and Switzerland — Users in these regions are asked whether they consent to personalized ads through Google's User Messaging Platform (UMP) the first time they launch the app. You can still play the game if you decline. However, depending on your consent status and Google's determination, ads may be limited or may not be shown, and in that case you may not be able to receive the rewards given for watching ads. You can change your choice at any time in the app's Settings → Ad Privacy Settings.

Depending on your age, region, consent status, and device settings, personalized ads may be shown. You can opt out of personalized ads or reset/delete your advertising identifier through Google My Ad Center, the ad settings on your Android device, or the tracking settings on your iPhone.

Menu names may vary by device and Android version, but these settings are generally found at:

• Android Settings → Google → Ads (or Ads privacy)
• Turn off ads personalization
• Reset or delete advertising ID
• iPhone Settings → Privacy & Security → Tracking → turn off tracking for this app
• Google My Ad Center
• Google Privacy Policy

Even if you turn off ads personalization, ads will still be shown, but they may be non-personalized ads that are not based on your interests.

2) In-App Purchases (Google Play · Apple App Store)

You can purchase digital goods such as diamonds, passes, and bundles through the Google Play billing system on Android or Apple App Store in-app purchases on iOS.

Payments and payment methods are handled directly by Google Play or Apple. The developer does not access or store your payment method information, such as credit card numbers, bank account numbers, or payment passwords.

The following minimal purchase information may be processed to verify purchases, deliver items, restore purchases, prevent duplicate delivery, handle refunds, and prevent fraudulent transactions:

• Product ID
• Order number or transaction ID
• Purchase token
• Date and time of purchase
• Payment and purchase status
• Cancellation, refund, or revocation status
• Whether the item has been delivered and consumed

Purchase verification server — To confirm that a purchase is valid, right after the purchase the app sends the following information to a verification server operated by the developer (Google Cloud Functions, Seoul region):

• Purchase token (Android) or the Apple-signed transaction information (iOS)
• Product ID, product type, app package name / bundle ID, and platform (Android/iOS)

The verification server checks this information through a Google Play Developer API lookup or by verifying Apple's receipt signature, and returns the result (whether the item can be delivered) to the app. The original purchase token and the Apple-signed transaction information (receipt) are not stored.

However, to prevent the same purchase from being delivered more than once or being reused on another account, the verification server stores the following information for each purchase as a purchase record on the server:

• Purchase identifier (the purchase token or transaction number converted into a hash value; the original cannot be recovered)
• Anonymous account number
• Product ID
• Purchase time
• Whether it was a test purchase
• Time of recording

When an error occurs, the product ID and the error type may be recorded in the server logs to help diagnose the cause; purchase tokens and transaction information are never logged. Separately, a delivery record (the purchase ledger used to prevent duplicate delivery) is also stored on your device.

3) Game Progress Data

The following data may be generated as you play:

• Captain name (an in-game nickname you enter yourself)
• In-game currency such as coins, diamonds, steel plates, and parts, and owned items
• Turret and ship upgrade information
• Stage clear records and Hell difficulty records
• Pass progress and reward claim records
• Patrol reward and daily gift claim records
• Game settings

Game progress data is stored in local storage on your device. There is currently no account linking or cloud backup feature, so if you change devices or delete the app or its data, your records may not be recoverable. Only some records used for the leaderboard and battle features are stored on the server described in 4) below.

The captain name is a nickname used within the game and is stored on your device. However, if you use the leaderboard or battle features, it is also stored on the server described in 4) below and shown to other users. A name that does not meet our operating standards may be changed automatically, or changed or reset by the developer. We recommend that you do not enter personal information, such as your real name or contact details, as your captain name.

4) Leaderboard and Battle Server (Google Firebase)

To manage records and rankings for Ranked, Endless, and Battle modes, the app uses a server operated by the developer (Google Firebase: Anonymous Authentication, Cloud Firestore, and Cloud Functions). You do not need to sign in or register separately to use these features; the app automatically creates an anonymous account without any name or contact details. In this process, the following information is stored on the server:

• Anonymous account number (the identifier assigned by Firebase Anonymous Authentication) and a game ID generated by the app on your device
• Captain name (a nickname you enter yourself, up to 12 characters)
• Ranked and Endless records, such as stage clear records, damage taken, clear time, and number of attempts
• Battle trophies, combat power, and the fleet setup used in battles (weapons, upgrade levels) and skin information
• Feature usage records managed by the server, such as the number of daily battles, arena points, and whether the weekly reward has been granted
• Cosmetic information shown on the leaderboard and in battles, such as titles, ranks, and profile borders
• The number of skin fragments owned and the number of rounds played per day toward earning skin fragments
• Battle reports (battle results for the most recent 30 battles, such as win/loss, trophy changes, and the captain names, combat power, and damage of you and your opponent)
• Mail claim records, arena shop purchase records, and Ranked and Endless round start records
• Last access time
• Purchase verification records (see the purchase verification server item under 2) In-App Purchases above)
• Communication records sent with server requests, such as your IP address (processed by Google; the developer does not use them to identify users)

Who can see it — Your captain name and your stage, trophy, combat power, and ranking information are shown to other users on the leaderboard. In battles, your captain name, trophies, combat power, fleet setup, skins, and rank, title, and profile border may be used as opponent information for other users and shown to them. Battle reports also store the opponent's captain name and combat information, and even if you change your name, your previous name inside battle reports that have already been stored may not change. The anonymous account number and game ID are not shown on the app screen, but they are included in the server documents because of how the leaderboard data is structured. Your real name, contact details, payment information, and advertising identifier are not stored on this server.

Ranking and battle records are managed by the server, and the app is restricted from writing to the server directly. Past records of the weekly leaderboard are preserved so that they can be viewed as this week's and last week's rankings. If you delete and reinstall the app, a new anonymous account is created and new records appear on the leaderboard; the records of the previous account may remain until you request their deletion. Battle reports are kept only for the most recent 30 battles per user, and other records may be kept on the server until you separately request their deletion.

• Privacy and Security in Firebase

5) Game Usage Records (Google Firebase)

Starting with app version 1.0.9, to improve the service and balance the game, the app sends the following usage records to the same Firebase server (Cloud Functions) described in 4) above. These records do not include your real name, phone number, email address, or advertising identifier. However, the Captain name you choose yourself is stored on the server together with the identifiers.

• Sessions: the time you open the game and how long you play
• Battles: mode and stage, whether you cleared, failed, or quit midway, time taken, level reached, and weapons used
• Ads: where you watched an ad and whether you watched it to the end
• Progress: whether you watched the opening and tutorial, and the number of times you could not start because you were out of energy
• A once-a-day record of the currencies you hold (diamonds and coins)
• Device information: operating system (Android/iOS), app version, game language, and the date the app was first installed
• Identifiers: the anonymous account number created automatically by the game, your in-game player ID, and your Captain name (the nickname you choose yourself)

Purpose of use — The records are used to adjust stage difficulty, identify errors and points where players drop out, compile statistics on active users and returning users, and check payment and advertising operations. The Captain name is used to identify users in the player list and to identify the recipients of mail or letters, such as announcements and reward mail.

Who can view them — These records can be viewed only by the developer, through an admin tool that can be accessed only with the developer's account. The developer uses them to check statistics, respond to user inquiries, send mail, change inappropriate Captain names, and delete usage records.

Retention and deletion — These records are kept for as long as the service is operated and are destroyed without delay when the service ends. Statistics that have been aggregated by date so that individuals cannot be identified may be kept separately. To have them deleted, tell us the "My ID" shown in the game's settings through [Contact] at the bottom of the settings screen, and we will delete your usage records (including the Captain name).

6) App Update and Time Check

When launched, the app checks whether a new update to the game content (code and images) is available and, if so, downloads and applies it. This feature uses the update servers of Expo (650 Industries, Inc.), and the following information is sent in the process:

• IP address
• Platform (Android/iOS), app version, and the identifier of the currently applied update

This information is used only to deliver the appropriate update, and the developer does not use it to identify users.

• Expo Privacy Policy

Checking for new store versions — To check whether a new version is available in the store (Google Play or the Apple App Store), the app may query that store, and in the process the app version, package name / bundle ID, and IP address may be sent to that store. On iPhone, the app checks for the latest version by sending the app bundle ID and the country code of the device's region to Apple's public lookup address (itunes.apple.com); this lookup is made once a day or when you tap [Check for updates] in the settings window.

Server time check — For features based on server time, such as energy, the daily challenge count, and weekly rewards, the app sends a request to Google's server (www.google.com) and receives only the time information. Your IP address is sent with this request, and the developer does not store this information or use it to identify users.

7) How Information Is Collected

Personal and usage information may be collected and processed in the following ways:

• When you launch and play the game
• When Ranked, Endless, and Battle records are sent and rankings are retrieved (including automatic creation of an anonymous account)
• When game usage records are sent
• When you make an in-app purchase through Google Play or the Apple App Store, and when the purchase is verified
• When Google AdMob ads are requested, displayed, clicked, or viewed
• Through the iOS tracking request and the ad consent process for users in the EEA, the UK, and Switzerland
• When the app checks for updates, checks for new store versions, and checks the server time at launch
• Through automatic communication between the app and Google and Apple services
• When you contact us with inquiries, error reports, or refund requests

Contact Us — When you tap [Contact] at the bottom of Settings, your email app opens with your game ID, app version, and device information pre-filled in the body. It is sent to the developer only if you send the email yourself, and you can delete or edit the content before sending.

02How We Use Information

The developer and the third-party services used in the app process the collected information for the following purposes:

• Saving and using game progress data
• Compiling and displaying Ranked, Endless, and Battle rankings, matching battle opponents, and granting weekly rewards
• Preventing record manipulation and identifying abnormal use
• Analyzing usage statistics and balancing the game
• Serving rewarded ads
• Providing personalized or non-personalized ads
• Measuring ad performance and limiting ad frequency
• Preventing ad fraud and abnormal use
• Verifying in-app purchases, delivering items, and restoring purchases
• Preventing duplicate or fraudulent payments and handling refunds
• Checking for and applying app updates, checking for new store versions, and checking the server time (for the accurate operation of features based on server time)
• Identifying game errors, ensuring service stability, and improving the user experience
• Responding to user inquiries and resolving disputes
• Complying with legal obligations

The developer does not use the collected information for purposes unrelated to those listed above. If the purposes change, we will obtain separate consent or provide notice as required by applicable law.

03Retention, Third-Party Sharing, and Processing

1) Retention Period

The developer deletes personal information without delay once the purpose of processing has been achieved or the information is no longer needed. However, where applicable law requires information to be kept for a certain period, it may be retained separately for that period.

2) Third-Party Sharing and Processing

The app uses the following external services to provide its features. Each service provider may process personal information while performing its function, and some information may be processed independently by each provider under its own Privacy Policy and Terms of Service.

The developer does not receive your card numbers, bank account numbers, or payment passwords from Google or Apple.

Information collected and processed directly by each provider is subject to the following policies:

• Google Privacy Policy
• Google Terms of Service
• Apple Privacy Policy
• Expo Privacy Policy

3) International Processing and Transfer

Google AdMob, Google Play Billing, Google Firebase (leaderboard and battle server), Google server time check, the Apple App Store, and Expo's update servers may be provided through servers located outside the Republic of Korea. As a result, personal information may be processed and stored outside Korea. The server functions operated by the developer (leaderboard and battle, purchase verification) are located in the Seoul region of the Republic of Korea, but because of the nature of Google's infrastructure, some information may be processed outside Korea.

For more details on international processing of personal information, please see each provider's Privacy Policy.

If you refuse the transfer of information needed for the app's basic operation or for purchases you choose to make, such as ads, in-app payments, the leaderboard and battle features, or app updates, your use of those features may be limited.

4) Your Rights and How to Exercise Them

You may exercise the following rights regarding your personal information:

• Request access to your personal information
• Request correction of your personal information
• Request deletion of your personal information
• Request suspension of processing
• Request access to, correction of, or deletion of the captain name and records stored on the leaderboard and battle server (please tell us your captain name or game ID, and we will process the request after verification)
• Request deletion of your game usage records (tell us the "My ID" shown in the game's settings through [Contact] at the bottom of the settings screen, and we will delete your usage records)
• Opt out of ads personalization
• Reset or delete your advertising ID
• Withdraw iOS tracking permission (iPhone Settings → Privacy & Security → Tracking)
• For users in the EEA, the UK, and Switzerland, change or withdraw ad consent (app Settings → Ad Privacy Settings)
• View your in-app purchase history and restore purchases
• Request refunds in accordance with applicable law and Google Play or Apple policies

Requests regarding information held by the developer can be sent to modoolabs1730@gmail.com.

Account, advertising, and payment information managed directly by Google or Apple can be viewed, modified, or deleted in your Google Account, Google Play, Android device settings, Apple Account, or iPhone settings.

Upon receiving a request, the developer will verify your identity and process the request within the period required by applicable law. A request may be limited where the law requires the information to be retained or where it may infringe the rights or safety of others; in such cases, we will explain the reason.

5) Destruction of Personal Information

The developer destroys personal information without delay once the retention period expires or the purpose of processing has been achieved.

Electronic files are deleted in a way that cannot be recovered or reproduced. Information that must be retained under applicable law is stored separately from other information and is not used for any purpose other than the legally required retention.

You can delete game progress data stored on your device yourself by deleting the app or clearing its app data.

04Children's Privacy

Under Hatch has no account registration and does not ask for information that directly identifies users, such as name, contact details, or date of birth. We do not knowingly collect personal information from children under the age of 14. The app does not have a separate age verification process.

For all users, ad content is limited to a maximum rating of PG (parental guidance) so that mature or suggestive ads are not shown. The only ads in the app are rewarded ads, which play only when the user taps a button.

Parents and guardians can turn off personalized ads on a child's device through the device's ad settings (deleting the Android Advertising ID, or turning off tracking permission on iPhone).

If we learn that personal information of a child under 14 has been processed without the consent of a legal guardian, we will take necessary measures, such as deleting that information without delay.

A child's legal guardian may request access, correction, deletion, or suspension of processing of the child's personal information by contacting modoolabs1730@gmail.com.

05Changes to This Policy

This Privacy Policy may be updated in response to changes in applicable law, Google policies, app features, or the third-party services we use.

If this policy changes, the updated version will be posted on this page. If a change significantly affects your rights, we will notify you in advance through an in-app notice or other appropriate means.

If advertising networks, in-app payments, analytics tools, cloud storage, updates, or account features are added or changed, we will update this policy to reflect the information actually processed and the purposes of processing.

06Contact Us

For questions about the processing of personal information, data deletion requests, inquiries about children's privacy, or to exercise your rights, please contact us at:

Users in the Republic of Korea who need counseling or wish to report a privacy violation may also contact the following organizations:

• Personal Information Infringement Report Center (KISA): 118
• Personal Information Dispute Mediation Committee: 1833-6972
• Korean National Police Agency Cyber Crime Reporting System: 182

AppendixNotice for International Users

Under Hatch is offered in multiple countries and regions through Google Play and the Apple App Store.

Users in the European Economic Area (EEA), the United Kingdom, or Switzerland are asked for consent to personalized ads through Google's User Messaging Platform (UMP) the first time they launch the app, and can change or withdraw that consent at any time in the app's Settings → Ad Privacy Settings. These users may also request access, correction, deletion, restriction of processing, and portability of their personal information. The legal basis for ad-related processing is your consent, and the legal basis for purchase verification is the performance of a contract (your purchase).

Under the privacy laws of certain U.S. states, users may request access to, deletion or correction of their personal information, or opt out of processing related to personalized advertising.

You can exercise these rights by contacting modoolabs1730@gmail.com. Rights regarding personal information managed directly by Google can be exercised through Google's Privacy Policy and your Google Account settings.

This Privacy Policy is provided in Korean, English, and Traditional Chinese. If there is any inconsistency between the versions, the Korean version shall prevail.

Last updated: 2026-10-27