Privacy Policy - Infinite Loot Loop and Mossy Tale

Last updated: 1 November 2026

This Privacy Policy explains how the mobile game Infinite Loot Loop ("the Game", "we", "us") handles information when you play. The Game is operated by Tony Works (tonyzorz@naver.com).

This policy also applies to our mobile game Mossy Tale (모시 테일 / モッシーテイル).

Mossy Tale was called Infinite Growth RPG during development and testing.

Sections 1-10 describe Infinite Loot Loop. Mossy Tale works differently in several ways, so its complete description is in section 11, with notices for players in Korea and Japan in section 12 and section 13.

1. Offline-first gameplay

The Game is designed to work offline. You can play normal gameplay, earn items, and save progress locally on your device without an internet connection. Some optional features require internet access, including cloud save sync, advertisements, crash reporting, and purchase verification or restore.

2. Information we collect

We do not ask you to create a separate game account and we do not collect your name, postal address, or precise location. The Game and the third-party services it uses may process:

• Device and diagnostic data: device model, operating system version, app version, language, logs, and crash reports through Firebase Crashlytics/Analytics. This is used to find bugs and improve stability.
• Website analytics data: when you visit tonyworks.co.kr, Google Analytics may process information such as pages viewed, approximate location, device and browser type, referral source, and interaction events. We use this information to understand site usage and improve the companion wiki.
• Advertising data: the Game shows advertisements from Google AdMob, with Unity Ads used when AdMob has no ad available. Depending on your consent choices, device settings, applicable law, and network availability, these services may process IP address; approximate location derived from IP; device, app, browser, and network information; advertising or vendor identifiers when available; consent and privacy signals; ad requests, impressions, clicks, and reward completion; and fraud or security signals. Third-party measurement partners may also process limited data to measure ad delivery. The Game does not request Apple's App Tracking Transparency permission on iOS, so it does not intentionally obtain IDFA for cross-app tracking.
• Purchase data: in-app purchases are processed by the Apple App Store or Google Play. We receive purchase receipts or transaction information so purchases can be verified, restored, and protected from duplicate grants. We do not receive or store payment card details.
• Cloud save data: if cloud save is used, gameplay progress is stored on Amazon Web Services and associated with an anonymous player identifier or Apple Game Center ID. Cloud save contains gameplay data such as level, items, achievements, map state, and progression.
• Paid entitlement data: purchased diamonds, Remove Ads, purchased characters, and processed purchase transaction IDs are stored separately from cloud save so paid items can be restored safely.
• Support correspondence: if you contact support, we receive the email address, message content, and device/app details you choose to send.

3. How we use and share information

• Run the Game and save your progress locally or through optional cloud save.
• Verify, grant, and restore in-app purchases.
• Prevent duplicate purchase grants or purchase abuse.
• Request, select, display, cap, and measure advertisements and rewarded-ad completion.
• Share the advertising data and privacy signals described above with Google AdMob, Unity Ads, and their measurement and fraud-prevention partners so they can deliver, measure, secure, and improve advertising services.
• Diagnose crashes, fix bugs, and improve performance.
• Measure companion-wiki usage and improve website navigation and content.
• Respond to support requests.

4. Third-party services

The Game uses the following services, each governed by its own privacy policy:

• Google AdMob, Google User Messaging Platform, Firebase Analytics, and Firebase Crashlytics: policies.google.com/privacy
• Unity Ads: unity.com/legal/privacy-policy
• Google Analytics for website usage measurement: policies.google.com/privacy
• Apple App Store and Game Center: apple.com/legal/privacy
• Google Play, if applicable: policies.google.com/privacy
• Amazon Web Services: aws.amazon.com/privacy

5. Your choices

• Offline play: you may play without using cloud save. Local saves remain on your device unless you delete the app data.
• Cloud save: cloud save is used only when online sync is available. You may erase cloud gameplay data in the Game or request deletion by contacting support.
• Advertising consent: where required, Google User Messaging Platform presents privacy choices before any advertisement is requested. You can also reset or limit your advertising identifier in iOS or Android device settings. The Game does not request Apple's App Tracking Transparency permission.
• Provider privacy requests: Google and Unity provide their own privacy controls and request methods in the policies linked above. Those controls apply to data held independently by those providers.
• Remove Ads: the Game offers a one-time Remove Ads purchase.
• Data deletion: to request deletion of cloud save or entitlement data, contact tonyzorz@naver.com.

6. Data deletion

You can delete your data at any time:

• In the Game: open Settings → Data → Erase Data to permanently delete your local gameplay save and your cloud gameplay save. If the device is offline, cloud deletion is queued and completes on the next online app launch. Store purchase and entitlement records are retained so eligible purchases can be restored.
• Local only: deleting or uninstalling the app removes all local save data from your device.
• By request: email tonyzorz@naver.com with the player ID shown in Settings → Data, and we will delete your cloud save and entitlement records, typically within 30 days.

Step-by-step instructions are also on our Data Deletion Request page. A request to Tony Works deletes data controlled by Tony Works; it does not automatically delete information independently controlled by Google, Unity, Apple, or an app store. Use the privacy controls offered by those providers and your device for that information.

7. Children's privacy

The Game is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate action.

8. Data retention

Local save data remains on your device until you delete it. Cloud save and entitlement records are kept while needed to provide save sync, purchase restore, support, and fraud prevention, and may be deleted on request where legally permitted. Diagnostic, analytics, and advertising data are retained according to the applicable third-party providers' own retention policies.

9. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with a new "Last updated" date.

10. Contact

Questions about this policy or your data: tonyzorz@naver.com

11. Mossy Tale

This section describes Mossy Tale (formerly Infinite Growth RPG). Where it differs from sections 1-10, this section applies to Mossy Tale.

11.1 Your game account

• Local save: your progress is saved on your device. Journeys, towns and hunting grounds also work without a connection.
• Server account: on first launch the Game creates an account on our server with a random account ID. A random device key is kept in your device's keychain to prove that requests come from your device. We do not ask for your real name, email address, phone number or postal address.
• Display names and looks: you choose a display name, a gender and a look for each character. Names are checked against a filter of offensive words in many languages and must be unique, so names are stored on our server.
• Cloud backup: when your device is online, your game progress is backed up to our server after each journey and when the Game goes to the background, so it can be restored on a new device.
• Server-side records: your lutti balance and history, purchases, subscriptions, refunds, owned looks, paid changes (such as name changes), daily check-in and claimed mail are kept on our server, not only on your device.
• Technical logs: our server keeps logs needed to run and secure the service (such as request times, error codes and, where recorded, the IP address of a request) for up to 30 days.

11.2 Sign in with Apple and Game Center

• Sign in with Apple (optional): you can link your account to your Apple Account to recover your progress on another device. Apple sends us a signed token. We check it and store only a one-way hash of Apple's user identifier for this app. We do not store your name or email address, even if Apple shares them.
• Game Center: accounts that were linked to Game Center in test versions can still be recovered with it. For those, we store only a one-way hash of the Game Center player identifier.
• Deleting your account in the Game also removes the Sign in with Apple link and asks Apple to revoke the Game's Sign in with Apple access (see 11.8).

11.3 Leaderboards and public profiles

• When you open a leaderboard, your best results for that board are sent to our server.
• Other players can see, on the leaderboards and on your profile card (which can also be found by name search): your display name, character class, equipped appearance (look, gear looks, spirits and similar cosmetics), platform (iOS or Android), best stages, clear times, run counts, account power and main stats.

11.4 Mail and notices

• Mail carries only gifts and messages from Tony Works. When you open the mailbox the Game reads your mail list, and when you claim a gift we record the claim so each gift is given once.
• Notices are public news from us and are the same for every player.
• There is no chat or messaging between players.

11.5 Purchases, subscriptions and refunds

• Purchases are made through the Apple App Store. Our server checks Apple's signed transaction for each purchase before granting it. We receive the product, the transaction identifiers, the dates and the storefront country. We never receive your card or payment details.
• Our server also receives Apple's App Store Server Notifications about renewals, expirations, refunds and revoked purchases, and can look up a transaction's status with Apple.
• The Game offers monthly passes, which are auto-renewable subscriptions. We keep their status and expiry dates so the bonus starts and stops on time. You cancel them in your Apple Account settings.
• If Apple refunds a purchase, our server removes what that purchase gave. If refunded lutti were already spent, only the items and benefits bought with those lutti are removed; your balance never goes below zero.
• Permanent purchases can be restored on another game account that uses the same Apple Account.

11.6 Advertising and tracking

• The Game shows only optional rewarded ads from Google AdMob (for example to revive once in a journey, reroll reward cards or get energy), never banner or interstitial ads. The "Ad Skip Forever" purchase replaces these ads.
• Where the law requires consent (for example in the EEA, the UK and Switzerland), Google's User Messaging Platform asks for your choices before any ad is requested. You can change them later in the Game's Settings under Privacy choices when that entry is shown.
• On iOS, the Game asks once, on first launch, for permission to track you across apps and websites owned by other companies (App Tracking Transparency). Only if you allow it can Google AdMob use your device's advertising identifier (IDFA) to show personalised ads.
• If you do not allow tracking, the Game asks for non-personalised ads only. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
• To deliver, measure and protect ads, Google may process your IP address, device and app information, coarse location derived from the IP address, ad interactions and reward completion, under Google's privacy policy.

11.7 Analytics

• The Game uses Firebase Analytics (Google) to understand how the game is played: for example journeys started and finished, menus used and purchases verified, together with the app version, device model, operating system, language and an app-instance identifier. We do not send your display name or account ID to Firebase.
• In the EEA, the UK and Switzerland, analytics run only if you agree in the consent form. Everywhere, you can turn analytics off in the Game under Settings → Data → Gameplay analytics.
• The Game does not use Firebase Crashlytics or any other crash-reporting service.

11.8 Deleting your account

• In the Game: open Settings → Data → Delete account and confirm. You need an internet connection. Deletion is permanent and cannot be undone. It removes, from our servers and from your device:
  • your characters, progress and cloud save;
  • your player names, which become free for other players;
  • your leaderboard entries and public profile, including party quest and jump quest records;
  • the links to your devices, Game Center and Sign in with Apple. We also ask Apple to revoke the Game's Sign in with Apple access.
• Your lutti and anything bought on the account are lost, and lutti is not refunded. App Store purchases that were not used up, such as permanent items, can be restored on a new account with Restore purchases, as Apple allows.
• What we keep, and why: the law requires us to keep records of payments (in Korea, 5 years under the Act on the Consumer Protection in Electronic Commerce), and we need them to handle refunds that Apple reports after you delete your account. So we keep the store transaction records (store transaction ID, product, date) and the lutti ledger (amounts and items bought). Your name is removed from these records; they are linked only to a random account number, which no longer connects to your name, device, Game Center or Apple ID.
• We also keep security records about banned accounts, stored only as one-way hashes, to stop ban evasion. Short-lived technical records, such as link codes and request nonces, expire on their own within minutes.
• By email: if you cannot use the Game, email tonyzorz@naver.com with your display name and we will delete the account in the same way, typically within 30 days.
• Data held by Apple or Google is managed through their own privacy tools.

11.9 Where data is stored and how long

• Our server runs on Amazon Web Services in the Seoul region (Republic of Korea).
• Account, cloud backup and leaderboard data are kept until you delete them or ask us to.
• Purchase and payment records are kept for 5 years, as Korean e-commerce law requires.
• Records of refunds and moderation (for example a rejected name or a suspended account) are kept as long as needed to prevent abuse.
• Advertising and analytics data are kept by Google under its own retention policies.

11.10 Services used by Mossy Tale

• Amazon Web Services (server and storage, Seoul region): aws.amazon.com/privacy
• Apple (App Store purchases, Sign in with Apple, Game Center, App Tracking Transparency): apple.com/legal/privacy
• Google (AdMob, User Messaging Platform, Firebase Analytics): policies.google.com/privacy

Mossy Tale does not use Unity Ads, Firebase Crashlytics or Google Analytics.

11.11 Children

• Mossy Tale is not directed to children under 13 (under 14 in the Republic of Korea), and we do not knowingly collect their personal information without a parent's or guardian's consent.
• In the Republic of Korea, the Personal Information Protection Act requires the consent of a legal guardian before the personal information of a child under 14 is processed. If you are under 14, ask your parent or guardian to agree before you use the Game's online features (cloud backup, leaderboards, purchases and Sign in with Apple).
• A parent or guardian can ask us to show, correct or delete a child's data, or to stop processing it, by emailing tonyzorz@naver.com with the child's display name. If we learn that we hold the data of a child under 14 without a guardian's consent, we delete it without delay.
• Purchases by minors need a parent's or guardian's permission (see the Terms).

12. Notice for players in the Republic of Korea

For Mossy Tale, Tony Works handles personal information under the Personal Information Protection Act as follows.

• Items collected: account ID, device key, display names, character looks, game progress, purchase and refund records, the Sign in with Apple or Game Center link (one-way hash), consent choices, technical logs, and the advertising and analytics data described in 11.6 and 11.7.
• Purposes: providing the game and cloud backup, verifying and restoring purchases, handling refunds, leaderboards, preventing abuse, optional ads and improving the service.
• Retention: until you delete your data or your account; purchase records for 5 years under the Act on the Consumer Protection in Electronic Commerce.
• Entrusted processing and overseas transfer: Amazon Web Services (server, Seoul region); Google LLC (USA: ads, consent and analytics, sent over the network while you play); Apple Inc. (USA: purchases and Sign in with Apple). You can refuse ad tracking and analytics as described above and still play the Game.
• Your rights: you may ask us to show, correct, delete or stop processing your personal information by email. We answer without delay.
• Destruction: data whose retention period has ended is deleted from our servers so that it cannot be restored.
• Privacy officer: Taewon Yoon (윤태원), Tony Works, tonyzorz@naver.com
• Children under 14: a legal guardian's consent is required before a child under 14 uses the Game's online features; see 11.11.

13. Notice for players in Japan

• Tony Works handles personal information under the Act on the Protection of Personal Information (APPI).
• Personal information is stored on Amazon Web Services in the Republic of Korea and is also processed by Google LLC (USA) and Apple Inc. (USA) as described above. These countries have their own data protection laws, and these companies protect data under their published privacy policies.
• For requests to disclose, correct, delete or stop using your personal information, contact tonyzorz@naver.com.
• Business information (特定商取引法に基づく表記) is on our Terms page and in the Game under Settings → Legal.

See also: About Tony Works · Terms of Service · Data Deletion Request · TikTok · Instagram · YouTube