Privacy Policy

playbuns is a web game platform you use without installing anything and without creating an account. We do not collect personal information that directly identifies you through member records. We do use the third-party services listed below for visitor analytics and advertising.

Language: this is an English translation provided for convenience. The Korean version is the authoritative text; if the two differ, the Korean version governs.

Scope

This policy applies to playbuns.com and every *.playbuns.com subdomain — boss2048, breathsnake, draftoku, ecoflip, fandomdex, kneepotato, market2048, moonlight and murdergrid. The third-party services in use are Google Analytics 4 (visitor analytics), Google AdSense (advertising), Google Fonts (web font delivery) and Cloudflare (hosting and CDN). We operate no sign-up, no payment and no first-party contact form.

1. Information stored in your browser

Values needed for play — language preference, whether a game is in progress, seeds, concept collections, achievement records — may be stored in your browser's localStorage. These values are not linked to any account and are never transmitted to a playbuns server. You can erase them at any time using your browser's «clear site data» function.

2. Visitor analytics (Google Analytics 4)

To understand which games are used and how much, we use Google Analytics 4, operated by Google LLC. Non-identifying usage statistics — pages visited, approximate region, device and browser type, referral source, time on page — are collected via cookies and similar technologies and transmitted to Google for processing. We do not pass identifying information such as names or email addresses.

If you prefer not to be measured, you can block cookies in your browser or install Google's Google Analytics Opt-out Browser Add-on.

3. Advertising and cookies (Google AdSense)

We show Google AdSense advertising to cover the cost of running the site. In doing so:

• Third-party advertising vendors, including Google, may use cookies and advertising identifiers to serve ads based on your visits to this and other sites.
• Google's advertising cookies (such as the DoubleClick cookie) are used to deliver ads based on your interests.
• You can turn off personalised advertising in Google Ad Settings, and opt out of third-party vendors collectively at aboutads.info or Your Online Choices.
• Google's own data handling follows the Google partner sites policy.

For users in the EEA, the UK and Switzerland we apply Google Consent Mode v2, which starts with advertising and analytics storage in the denied state. Personalised advertising identifiers and analytics cookies are not used before you give explicit consent through a consent management tool. Policy pages — this one, the terms of service and the contact page — carry no advertising tags at all.

4. Technical information during hosting

The site is served through Cloudflare. For security, incident response and content delivery, standard access information such as IP address, request time and browser or device details may be processed by Cloudflare. That processing follows the hosting provider's own policy and retention settings.

5. Web fonts (Google Fonts)

Some pages load typefaces from Google Fonts, provided by Google LLC. Doing so transmits your IP address and browser information to Google servers in the United States. It is not used for any purpose beyond delivering the font.

6. External sites

Game cards and contact links may take you to external sites. Data handling on those sites follows their own operators' policies.

7. Children and age

playbuns is designed for general users aged 14 and over. We do not offer member or enquiry features that would intentionally collect personal information from users under 14. Where age-restricted advertising handling is required, protection of children and adolescents takes priority.

8. Cross-border transfer of personal information

This service transfers personal information abroad as follows.

You may refuse cross-border transfer by blocking cookies in your browser or by discontinuing use of the service. Note that processing of access information during hosting is essential to providing the service at all, so refusing it means the service cannot be used.

9. Retention and destruction

This service does not store personal information that directly identifies you on its own servers. Play records and settings live only in your browser's localStorage and can be deleted immediately at any time using your browser's clear-site-data function. Retention of information collected by third-party services follows each provider's own policy.

10. Your rights and how to exercise them

You may request access to, correction of, deletion of, or suspension of processing of your personal information. Requests are received by email through the contact page, and we will notify you of the outcome within 10 days of receipt. Opting out of personalised advertising can be done directly through the links in section 3 above (Google Ad Settings · aboutads.info · Your Online Choices).

11. Security measures

HTTPS encryption is applied across the whole service, and the system is designed so that information directly identifying a user is never stored on a server — applying the principle of minimising personal data processing.

12. Personal information protection officer

The officer responsible for personal information processing is:

• Name: Heesoo Jin
• Contact: jiniancompany@gmail.com

13. Remedies for infringement of rights

If you need consultation or dispute resolution regarding a personal information breach, you may contact the following bodies in the Republic of Korea:

• Personal Information Dispute Mediation Committee — 1833-6972 / www.kopico.go.kr
• Personal Information Infringement Report Center — 118 / privacy.kisa.or.kr
• Supreme Prosecutors' Office Cyber Investigation Division — 1301 · National Police Agency Cyber Bureau — 182

14. Changes to this policy

This policy takes effect on 2026-08-22. If content is added, removed or amended, we will post the change and its effective date on this page at least 7 days beforehand.

Revision history — 2026-08-13 first effective · 2026-08-22 scope extended to all nine subdomains, Google Fonts disclosure added, sections added for cross-border transfer, retention and destruction, data subject rights, security measures, protection officer and remedies; EEA consent description corrected to match the actual implementation (Consent Mode v2 default denied).

This document is an operational draft describing the current implementation of the service. It does not substitute for legal advice on your particular situation.