You can play without registering your real name, postal address, email address or phone number. Your account uses an automatically generated User ID, not an Apple Account or Google Play login. Store purchases are separate.
SHINICHI FUJIMOTO, trading as R&SGames in Japan, operates Rum's Spring & Dungeon (the “Game”). This Policy covers the Game, its overseas website and support.
1. Information we use and why
Game accounts and purchases. A User ID is generated automatically on first launch and retained on your device. We use your User ID, account creation date, purchase records, currency balances and transfer-save data to provide the Game and purchased content. Most ordinary saves and account credentials are stored on your device.
Account identification. Our ordinary game records are managed by User ID, not by a register of players’ real-world identities. We do not hold a name or contact directory that identifies a player from those records. If you voluntarily provide identifying information in a support request, we handle the information linked through that request as described below.
Gameplay and diagnostics. We use gameplay and purchase events, progress, app/device identifiers, device/software details, language, approximate location such as country, region or city, and crash or error logs to improve the Game, investigate problems and support users. Logs can be linked to your User ID. We do not receive or store raw IP addresses as analytics or diagnostic data from Google Analytics or Firebase Crashlytics. Google Analytics processes IP addresses to estimate approximate location and protect its service, including spam detection; raw IP addresses are discarded after processing rather than stored in Analytics reports or linked to user identifiers. We use the resulting approximate location, not the raw IP address. The Crashlytics diagnostic data we use does not include IP addresses or location information. Separately, Google may process technical information, including IP addresses, as Firebase Service Data to operate and protect its services. Google Ads measurement is subject to its own processing arrangements and applicable permissions, as described below.
Support. Forms opened from the Game may prefill your User ID, device, app version and purchase information. A reply email address is optional and is provided by you when you want a response. We use the information you submit, relevant logs and any contact details you provide to investigate, answer and manage your request. This also applies when you email us directly. Where your correspondence links an email address to a User ID, related records may be linked for handling your request. Support email addresses and correspondence are not used for advertising or unrelated marketing.
Advertising measurement. We use Google Firebase analytics services linked to Google Ads to measure and improve ads for the Game. Acquisition and purchase events and available app, device or advertising identifiers may be used for campaign measurement, reporting and attribution, subject to applicable laws and permissions. In the app version released on 28 October 2026 and later versions, advertising personalisation based on the Game’s Analytics data is kept disabled. The Game does not provide a setting to enable it. Gameplay analytics, diagnostics and advertising measurement continue; disabling personalisation does not turn off those functions. The Game has no in-app ads.
2. Services we use and information sharing
We use third-party infrastructure for game-server functions; Google Firebase services for analytics and diagnostics; cloud services for data storage and analysis; Google Ads for campaign measurement and advertising; and third-party services for support. These services process information for the functions described above. See Google’s Privacy Policy and Firebase privacy information.
We require third parties receiving personal data from us, including service providers, to protect it at least as well as described in this Policy and required by applicable platform rules.
Apple and Google process store purchases under their own terms. We receive purchase information needed to provide content and measure purchases. We may also disclose information where required or permitted by law; this does not authorise unrelated marketing use of support correspondence.
3. Where information is processed
We operate in Japan. Our main game-server infrastructure and analytics data stores are configured in Tokyo. Google services may also process information in the United States and other locations under their service arrangements. We use the safeguards required for applicable international transfers and take reasonable steps to protect information and limit access.
4. Your choices and requests
Advertising personalisation. In the app version released on 28 October 2026 and later versions, advertising personalisation based on the Game’s Analytics data remains disabled and there is no in-Game on/off control. You do not need to change a setting or agree to personalised advertising to play. Analytics and diagnostic information continue to be used for the purposes described in Section 1; there is no in-Game control that turns off all such collection.
The always-off advertising personalisation and absence of an in-Game switch described above apply to the app version dated 28 October 2026 and later versions. This Policy’s effective date does not mean that this configuration has already been applied to every user or to earlier app versions.
On iOS, tracking that requires your permission follows your device setting. Refusing tracking does not prevent play. Keeping advertising personalisation disabled does not override your iOS tracking choice.
Contact us for access, correction, deletion, consent withdrawal or privacy concerns. We explain the consequences and stop affected consent-based processing as required by law. We may request information needed to locate the records and verify your authority. A User ID helps locate game records, but is not required to locate correspondence that we can find using your email address. If we cannot identify the relevant records or verify the request, we explain why and what further information, if any, is needed. Do not send passwords. We investigate and explain the outcome and any lawful limits.
5. Storage and deletion
We retain information while reasonably needed for the purposes above, considering account and purchase entitlements, support, gameplay analysis and legal obligations. When information is no longer needed, we delete it or remove the means of identifying an individual. Provider-held records can have separate retention schedules.
You can delete your account using Delete Data on the title screen. This removes your server-side game account, local login credentials and save data, and starts deletion of associated analytics, diagnostic and cloud-stored data under our control. The app displays the result of account deletion.
Legally required retention takes precedence over immediate erasure. For Taiwan, the account and necessary associated electronic records are retained for 30 days after termination, as explained in the Taiwan Game Service Supplement; statutory continuation rights remain available. Taiwan Game Service Supplement (Traditional Chinese)
Some provider-held records and backup copies may take additional time to be erased. We keep only records that we are legally required to retain, restricted to that purpose; statistics that can no longer be linked to you may remain.
You can also request deletion through our support form. Uninstalling alone does not request server-data deletion. Apple and Google store accounts and records held independently by them are unaffected.
Support correspondence. You may ask us to delete an email address and the related correspondence we hold. Contacting us from the address used for the original request helps us locate and verify the records; you do not need a User ID merely to request deletion of that correspondence. Deleting correspondence is separate from deleting a game account. We explain any records that must be retained for a lawful reason and restrict their use accordingly.
6. Children and policy updates
The Game is not available to children under 13. Higher age restrictions may apply. Contact us if you believe we hold data from a child under 13 so we can investigate and take appropriate action.
We announce material changes to this Policy on the official website, update its effective date, and provide any further notice or consent process required by law.
7. Contact
SHINICHI FUJIMOTO is our privacy contact.
Support and privacy request form · Email: rums.spring.and.dungeon.staff@gmail.com
Business contact address: Suite 609, Miyamasuzaka Building, 2-19-15 Shibuya, Shibuya-ku, Tokyo, Japan.
Regional supplements
The Taiwan and Mexico supplements apply to the respective regional service from the start of service provision in that region, within the scope stated in each supplement. This does not limit any rights or protections already applicable under mandatory law.
These supplements apply where the relevant law applies; a language setting alone does not determine that. They supplement the common Policy without removing mandatory rights elsewhere.
Singapore. Our designated Data Protection Officer is SHINICHI FUJIMOTO, who can be reached using the contact details in Section 7. Under the PDPA and its exceptions, you may seek access, correction, information on use or disclosure in the preceding year, or consent withdrawal. Overseas transfers must meet PDPA safeguards. You may raise unresolved concerns with the Personal Data Protection Commission.
Australia. Where the Privacy Act 1988 applies, your rights under that Act and the Australian Privacy Principles are preserved. You may contact the Office of the Australian Information Commissioner where it has jurisdiction.
Canada. Where applicable Canadian privacy laws apply, you may request access to the personal information we hold about you and request correction of inaccurate or incomplete information. You may also withdraw consent where permitted by applicable law, subject to legal or contractual restrictions and reasonable notice. Personal information may be processed in Japan or other countries and may therefore be subject to the laws of those jurisdictions. We remain responsible for personal information entrusted to our service providers to the extent required by applicable law.
Québec. SHINICHI FUJIMOTO is the person responsible for the protection of personal information and can be contacted using the details provided in Section 7. Where required by applicable law, you may also request that computerized personal information collected from you be provided to you, or to another authorized person or organization, in a structured and commonly used technological format.
Taiwan. You have applicable rights to inspect, obtain copies of, supplement, correct, stop processing or request deletion of personal data. Accounts and necessary attached electronic records are retained for 30 days after termination; personal game-history records are kept for at least 30 days. Taiwan game-history requests are supplied within seven days under the Taiwan Game Service Supplement. Other statutory requests follow their own legal deadlines. See the Taiwan supplement (Traditional Chinese).
Mexico — privacy notice and ARCO requests
This supplement applies to personal data subject to Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). SHINICHI FUJIMOTO, trading as R&SGames, is the controller and privacy contact; the postal address and contact details appear in Section 7. This supplement and the common Policy form our privacy notice for Mexico.
MX-1. Information and purposes
We do not require a real name, postal address, phone number or email address to play. Ordinary game records are managed by User ID as explained in Section 1. Where you voluntarily provide a reply email address, or send us an email, we process that address, the contents of the request and relevant linked records to answer, investigate and manage it. We do not request sensitive personal data for ordinary play or support; please do not include such data unnecessarily. Support contact information is not used for advertising or other unrelated purposes.
MX-2. Scope of requests
ARCO rights concern personal data relating to an identified or identifiable person. Where the information we hold does not enable us to identify a person, we do not create a new identity register merely to associate ordinary game logs with that person. If your request links contact information to a User ID, we consider the personal data that can be linked through it. An email-related request does not require a User ID if we can find the relevant correspondence using the email address. If records cannot be located, we explain the reason and request any information needed to continue, rather than treating the absence of a User ID alone as grounds to reject every request.
MX-3. How to request access, rectification, cancellation or opposition
Use our existing support form or email rums.spring.and.dungeon.staff@gmail.com. Spanish-language requests are accepted. Suggested subject: Solicitud ARCO — México. A formal ARCO request should include your name, an email address or other notification channel, the right or action requested, and information that helps locate the records. Describe the relevant data as precisely as possible, except where your request is to find out what data we hold. For rectification, specify the correction and provide supporting information. We may request the identity or representative-authority evidence required by law, using proportionate electronic verification where appropriate; we do not routinely require a government-ID copy. Do not send passwords or unnecessary identity documents. Access is provided after the required verification, normally electronically through the verified contact channel.
MX-4. Time limits and cost
We communicate our decision within 20 Mexican business days from receipt of the request, calculated under the applicable rules. When the request is granted, we implement it within 15 business days after notifying you. Where the circumstances justify it, each period may be extended once by an equal period; we notify you of the reason within the applicable period. ARCO requests are free of charge, apart from costs expressly allowed by law. If a request cannot be granted in whole or in part, we explain the grounds and any available next steps.
MX-5. Cancellation and retention
Where cancellation is granted, we notify you and apply any legally required blocking period before final erasure. During blocking, data are restricted to the liabilities or obligations that justify retention. We communicate rectification or cancellation to relevant recipients where legally required and instruct service providers as needed. Any purchase, legal-compliance or other records retained must have a valid legal basis and an appropriate retention period; this is not permission for indefinite retention. Deleting an email address or support correspondence does not by itself delete the game account; account deletion is available as described in Section 5.
MX-6. Consent, limitations and service providers
You may use the same contact channel to withdraw consent or request limits on use or disclosure, where the law allows. We explain any lawful restriction or effect on the requested support. If a new use requires consent, we obtain it before that use; we do not use support emails for optional marketing. In the app version dated 28 October 2026 and later versions, advertising personalisation remains disabled as described in Sections 1 and 4. For the purposes in this notice, the providers identified in Sections 2 and 3 may process information in Japan or other countries. Processing on our behalf and transfers to independent recipients are handled according to their actual roles. We seek any consent required for a transfer and apply the relevant legal exceptions and safeguards; merely using the Game is not blanket consent to unrelated transfers.
MX-7. Changes and unresolved concerns
Changes are published on this Policy page with an updated effective date, together with any additional notice or consent required by law. You may raise unresolved concerns with the competent Mexican data-protection authority, including the Secretaría Anticorrupción y Buen Gobierno where it has jurisdiction. This notice does not remove mandatory rights or remedies.