Privacy Policy
What information the mobile games published by Pong Studio receive, what it is used for, and when it is deleted. This policy covers all four games.
Last updated: 2026-09-12
1. What this covers
This policy applies to the following mobile games published by Pong Studio. It does not apply to our websites (pongvn.com and its web products), which have a separate privacy policy.
Shooo Yokai: Roguelike Defense · Pocha Moonlight · Decor Sprout · Sprout Balloon Journey
The games differ slightly in what they collect. Those differences are set out per game in the tables in sections 3 and 5.
2. What we receive
None of the four games ask for your name, email address, phone number or postal address. There is no sign-up: an account is created automatically when you install the app.
That means what links you to your account is a device identifier, plus a linked-account identifier if you connect an account. Both are deleted with your account.
- Device identifier — used to create your account and to let you continue on the same device.
- Linked-account identifier — created only if you connect a Google or Apple account. We receive the identifier that service issues for our app, and use it solely to recognise the same account on another device. We do not receive your name, email address or phone number; if that ever needs to change we will update this policy and give notice first (section 13).
- Game progress — nickname, level and progress, balances and items, friends, ranking entries.
- Purchase records — created only if you make a purchase. We store the receipt number issued by the store, along with the product, amount and time. Payment details such as card numbers are handled by the store and never reach us.
- Usage records — sign-in times, app version, error reports, and aggregate records of key in-game actions.
- Advertising identifier — used only in games where ads are actually served. This is the identifier provided by your device, and you can reset or disable it in your device settings.
3. What differs between games
This table lists the features each game offers. Where a feature is not yet live in a given game, we collect nothing related to it until it ships. Before adding such a feature we update this table and section 5 and give notice, and any processor involved in that feature is added to section 5 at the same time.
| Game | Ads | In-app purchases | Account linking | Usage analytics |
|---|---|---|---|---|
| Shooo Yokai: Roguelike Defense | Yes | Yes | Yes | Yes |
| Pocha Moonlight | Yes | Yes | Yes | Yes |
| Decor Sprout | Yes | Yes | Yes | Yes |
| Sprout Balloon Journey | Yes | Yes | Yes | Yes |
4. Why we use it
- To create and maintain your account, and to carry your progress across a reinstall or a new device
- To run the game and features such as friends and rankings
- To verify purchases, deliver what you bought, and handle refunds and disputes
- To find and fix errors, and to see in aggregate where players get stuck so we can improve the game
- To prevent abuse and fraudulent payments
- To show ads and to grant rewards for rewarded ads, in games that have them
5. Processing we entrust to others
Running the games requires the external services below. We do not sell your information, and we do not share it for purposes beyond those described here. Usage analytics are not sent anywhere — in-game activity records are stored only on our own servers and are not shared with the processors below.
| Processor | What they receive | Which games |
|---|---|---|
| Unity Technologies (Unity LevelPlay · Unity Ads · Unity IAP) | Ad delivery and advertising identifier, purchase receipt validation | Shooo Yokai: Roguelike Defense · Pocha Moonlight · Sprout Balloon Journey (Decor Sprout will be added when its ads and purchases ship) |
| ironSource (ad networks reached through Unity LevelPlay mediation) | Ad delivery and advertising identifier | Shooo Yokai: Roguelike Defense · Sprout Balloon Journey (Decor Sprout will be added here when its ads ship) |
| Google (Google Mobile Ads · Google Play billing · Google sign-in) | Ad delivery and advertising identifier, purchase receipt validation, linked-account identifier | Pocha Moonlight |
| Apple (App Store billing · Apple sign-in) | Purchase receipt validation, linked-account identifier | Games with in-app purchases |
We are a company incorporated in Vietnam. Most of these providers operate servers in other countries, including the United States, so information is transferred to Vietnam and onward to those countries. What is transferred is listed in the "What they receive" column, the purposes are those in section 4, and each provider retains it under its own policy. If you do not wish your data to be transferred, you can stop using the games that include those features, or disable the advertising identifier in your device settings.
6. How long we keep it
We keep it while your account exists. When you delete your account we irreversibly erase everything that can identify you. What remains after that is described in section 7.
Where the law requires records to be kept for a set period, we keep them for that period. Under Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce (Republic of Korea), records of payments and of the supply of goods are kept for 5 years and records of consumer complaints and dispute resolution for 3 years.
7. What remains after account deletion
After an account deletion request has been completed, we retain the following records in a form that cannot identify you:
- Purchase receipts
- The grant and spend ledger for paid currency (in games that have one)
- Game records — progress and in-game balances, kept as statistics
We retain them to (1) handle refunds and payment disputes, (2) prevent fraudulent re-grants from re-submitted receipts, (3) meet tax and accounting record-keeping obligations, and (4) analyse statistics for tuning game difficulty and in-game economy.
The only user-related value remaining in these records is a single internal ID number; because account deletion irreversibly removes everything linking that number to a device or a person, the records are retained in a form that cannot identify an individual — and that link cannot be restored by us either. We do not use these records to restore an account or to re-grant items.
Purchase and supply-of-goods records are kept for 5 years, and records of consumer complaints or dispute resolution for 3 years, as required by Article 6 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce (Republic of Korea). Game records, which by then cannot identify anyone, may be kept as statistics without a time limit.
8. Your rights
You may ask to access, correct, delete, or stop the processing of your information. Contact us at the address below and we will act on it.
- Deleting your account — you can do this inside the game, and if you have already uninstalled the app you can request it at the contact address below. Per-game pages: Shooo Yokai: Roguelike Defense · Pocha Moonlight · Decor Sprout · Sprout Balloon Journey.
- Grace period — we do not delete immediately. Deletion happens after a waiting period, and you can reverse it by opening the app before then (7 or 15 days depending on the game).
- Verifying it is you — because there is no sign-up, we cannot identify you by username and password. A web deletion request must include the UID (or friend code) shown in the game, or a purchase order number. Requests that only include a nickname are not processed.
9. Erasure
Once deletion is final, we irreversibly erase the identifier linking your device to the account, your nickname and other information that could identify you, together with your friend relationships, ranking entries and sessions. This cannot be undone — not even by us — and starting again always creates a new account. Any game records that remain are kept only in the non-identifying form described in section 7.
Progress stored on your device is reset when you uninstall the app or start over.
10. How we protect it
- Traffic between the app and our servers is encrypted.
- We do not store payment details such as card numbers. Payments are handled by the stores.
- Only the minimum number of people needed to operate the service can access the data, and that access is logged.
11. Children
None of the four games are directed at children. We do not knowingly collect information from children under 14 (or under 13 or 16, depending on the country).
If we learn that a child's information has been collected without a guardian's consent, we delete it without delay. If you believe this has happened, please tell us at the contact address below.
12. Contact
Please send privacy questions, complaints and requests to the address above. We reply within 3 business days.
Users in the Republic of Korea may also contact the Korea Internet & Security Agency Privacy Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office Cybercrime Division (spo.go.kr, 1301), or the National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).
| Company | PONG STUDIO COMPANY LIMITED (CÔNG TY TNHH PONG STUDIO) |
|---|---|
| Address | Unit 9.13, Floor 9, Lot G, The Manor 2, 89 Nguyễn Hữu Cảnh, Thạnh Mỹ Tây Ward, Ho Chi Minh City, Vietnam |
| Contact | info@pongvn.com |
13. Changes to this policy
We will post any change on this page at least 7 days before it takes effect, and at least 30 days before if the change is to your disadvantage.
If what a game collects or who we entrust it to changes, we update this policy and give notice before the change takes effect.
Game legal · Privacy Policy · Terms of Service · info@pongvn.com