Privacy Policy

Last updated 2026-09-29

CHWH Development Team (hereinafter the “Operator”) handles with care the personal information of those who use Cool Head Warm Heart (chwh.app, hereinafter the “Service”) and complies with the Personal Information Protection Act of Korea and other relevant laws and regulations. This Policy explains what information the Service processes and how.

1. Information We Process and How We Process It

• Sign-in is available only with a Google account. When you sign in, after verifying the sign-in credential sent by Google, the server stores as account information your Google account's unique identifier, a random account number generated by the server, and the time the account was created. The name, email address and profile picture URL that may be included in the sign-in credential are not stored.
• You can use the Service as a guest without signing in. A guest's game progress is stored only in your browser's storage (IndexedDB) and is not sent to the operator's server. Therefore, if you clear the browser's site data or close a private (incognito) window, your progress may be lost, and you cannot continue if you change devices or browsers. However, if you sign in with a Google account that has no progress after playing as a guest, that guest progress is moved to the account once and saved on the server.
• Game progress data (such as your character's birthday (month and day), favorite items, money, inventory, location, contracts and story progress) is first stored in your browser's storage (IndexedDB) each time you take an action. When you sign in with Google, separate storage for each account is used within this browser, and the same progress is also sent to the operator's server and kept for the account. The server stores, together with your account number, the progress body and its hash, the time it was saved, a save sequence number, the story stage, and a progress summary (money held in each currency, total inventory quantity, total authority experience and your character's random identifier), and when you open the game while signed in, the progress saved on the server is loaded first. Plaza progress (bonds, keepsakes and requests) and game lesson records are not sent to the server.
• Progress for a signed-in account is sent to the server at intervals of about 3 minutes when there are changes. When you press “Save”, hide or close the tab, or sign out, it is sent without waiting for the interval, but the server accepts the next save only after about 3 minutes have passed since the previous one. Progress in which the story has moved on to the next stage is saved right away, regardless of the interval. Progress that has not been uploaded to the server stays in this browser: if the game remains open, it is sent once the interval has passed, and if you closed the game or signed out, it is sent when you open the game again with the same account in this browser (if progress was saved on another device in the meantime, the server's progress is followed).
• The server and the game check whether the progress being uploaded follows the game's rules. If progress that does not follow the rules is found, or if the server's progress is found to be behind the progress in this browser, the server records, together with your account number, the reason and time and values such as the name of the item concerned and the save sequence number, in order to identify errors and misuse (save check records). The progress body is not included in these records, and the same reason for the same account is recorded no more than once a day.
• Settings and records such as language, whether you have checked notices, voice captions, your choice to download art and sound in advance, the number of times travel animations have been shown, game lesson records and whether you have seen the sign-in notice, as well as the account number you last signed in with, are kept in the browser's localStorage. The account number is used to continue with this browser's account progress when the server cannot be reached, and it is erased when you sign out. Whether the game was launched as an app, and notices to be shown after taking over a tab, signing out or deleting an account, are kept in sessionStorage.
• We use only cookies that are strictly necessary for sign-in and for preventing request forgery: a sign-in session cookie (14 days), an anti-forgery cookie (14 days), and verification cookies used in the Google sign-in process. The server stores only the hash of the session value, not the session value itself. We do not use advertising or analytics cookies.
• To display the Google sign-in button on the title screen, we load Google's sign-in script. At this point, Google may process access information even before you press the sign-in button, and Google's Privacy Policy applies to that processing.
• Cloudflare, which hosts the Service, processes access records such as the IP address used for access, browser and device information, and the requested address and time, in order to provide the Service and maintain security. Even if you do not sign in, the title screen sends a request to check your sign-in status, and records of the processing of this request and of sign-in requests are kept in Cloudflare's logs for a certain period (3 days under the current plan).
• If you contact us by email, we receive the email address you sent it from and the content of your inquiry. Inquiry emails are delivered to the operator's mailbox via Cloudflare's email forwarding service.
• The Service does not currently display advertisements. Before we begin displaying advertisements, we will revise this Policy and notify you.

2. Purposes of Use

• Providing the Service, checking for errors, and maintaining security
• Verifying sign-in accounts and keeping you signed in
• Keeping game progress for signed-in accounts and letting you continue on other devices
• Checking saved game progress for errors and misuse
• Reviewing and responding to inquiries

3. Retention Period and Destruction

• Account information (Google account unique identifier, account number and account creation time) and game progress saved on the server are retained until the user deletes the account or requests its deletion.
• Save check records are retained for 90 days from when they are recorded. Records older than 90 days are deleted afterward when the server processes a sign-in or a new record, and when an account is deleted, that account's records are also deleted immediately.
• When you sign out, the sign-in session record for that browser is deleted immediately. Sessions you do not sign out of expire after 14 days and can no longer be used, and they are deleted afterward when the server processes a sign-in request.
• Access records (Cloudflare logs) are retained for 3 days under the current plan and are then deleted.
• Deleted information may remain in backups used for server recovery for up to 7 days (under the current plan). In addition, to prepare for server failures, the Operator downloads the server database and keeps it on an encrypted storage device; only the 4 most recent copies are kept, and copies older than 28 days are destroyed. Deleted information may therefore remain in these copies for up to 28 days, and these copies are used only for data recovery.
• Information stored in the browser remains on your device. When a guest deletes a character, that character's progress and its backup in this browser are erased. When a character is deleted on a signed-in account, the progress is replaced with a new game, which is also saved to the server, but separately kept copies of earlier progress in this browser may remain. Plaza progress and some display settings also remain, so to erase everything, please delete the browser's site data. Account progress stored in this browser remains even after you sign out, so please clear the site data on devices shared by several people.
• Inquiry emails are retained for 1 year after they have been handled and are then destroyed. Where retention is required by law, they are retained for the period so required.

4. Provision to Third Parties, Entrustment of Processing, and Overseas Transfer

The Operator does not provide personal information to third parties except as provided by law.

Cloudflare, Inc. (United States) is responsible for hosting the Service, storing account and sign-in session information as well as the game progress and save check records saved on the server, processing access records, and forwarding inquiry emails. Information is transmitted to Cloudflare's global network when users access the Service, and account information, game progress and save check records saved on the server are stored in a database in the Asia-Pacific region. The retention periods are the same as described in “3. Retention Period and Destruction”.

Google LLC (United States) is responsible for sign-in authentication and displaying the sign-in button, and Google's Privacy Policy applies to this process.

5. Cookies and Browser Storage

You can refuse the storage of cookies in your browser settings. However, if you block all cookies and site data for this site, you will not be able to sign in, and because browser storage will also be blocked, you will not be able to start the game or save your progress.

Information in browser storage (IndexedDB, localStorage and sessionStorage) remains on your device, and you can erase it by deleting site data in your browser settings.

If we begin displaying advertisements, we will add information to this section about advertising providers' use of cookies and how to refuse them, and notify you.

6. Rights of Users

• You can request access to or deletion of the account information and game progress stored on the server via the email address below. If you include in your email the account number shown on the title screen or in the game menu while you are signed in, we will locate that account and process your request.
• You can also delete your account yourself in the game. While signed in, press “Delete account” under the account number in the game menu and type “delete” in the confirmation box to delete it. If more than 10 minutes have passed since you signed in, for security you can delete it after signing in again. Deleting removes, all at once, the account information, game progress and save check records on the server and the sign-in sessions on all devices, and also erases that account's progress, plaza progress and game lesson records stored in this browser. Copies of that account's progress remaining on other devices or browsers are not erased remotely, so please delete the site data on those devices. Your Google account is not deleted, and if you sign in again with the same Google account, you start with a new account.
• You can check the game progress and settings stored in this browser on the game screens, and you can erase all of them by deleting the browser's site data.
• When you sign out, the sign-in session on the server for that browser is deleted.
• You can also request access to, correction of, or deletion of the information you sent in the course of an inquiry via the email address below.

7. Children Under the Age of 15

The Service is intended for persons aged 15 or older. An age verification procedure is being prepared, and if we learn that an account belongs to a user under the age of 15, we will delete that account and the related information.

8. Chief Privacy Officer

• Operator: CHWH Development Team
• Email: contact@chwh.app

9. Changes to This Policy

This Policy applies from 2026-09-29. If its contents change, we will notify you on this page and in our notices.

This Policy was written in Korean, and versions in other languages are translations provided to aid understanding. If the Korean version and a translated version differ in content, the Korean version prevails; however, where the translated version is more favorable to users, the translated version applies.