PRIVACY / 2026-09-30-v8
Pre-registration privacy notice
Privacy contact: Namhae Kim (Development Team) · cs@rabbitholecompany.com Registration closing date: 2027-01-31
Operator and registration status
Rabbithole Company processes this information. This notice describes pre-registration data processing. Check the form for current availability.
Collection, use, and consent
Rabbithole Company collects your email address, application language and time, consent version, choices and time, and confirmation that you are at least 16 to receive pre-registration applications, check duplicates, count milestone registrations, and handle your requests. Data is kept for up to one year (365 days) from collection and then deleted, ending earlier without undue delay when the purpose is fulfilled, you request deletion, or the announced closing date arrives. You may decline consent, but cannot pre-register by email without it. Game information and news (including advertising) are emailed only with separate email consent.
Retention and deletion
Kept for up to one year (365 days) from collection, then deleted. Data is deleted without undue delay if the purpose is fulfilled, you request deletion, or the closing date (2027-01-31) arrives earlier. Abuse-prevention hashes and duplicate-request records are kept for 24 hours. Raw IP addresses are not stored with registrations. Data past its retention period is deleted by a scheduled job.
Processors and international transfers
This notice covers the services used to run pre-registration and to deliver and secure the website. Some services may process personal data outside Korea.
Access logs and inquiry emails are kept under each provider’s retention policy. We will update this notice if a provider or processing country changes.
If you do not want the international transfers needed for email pre-registration, you can choose not to apply or ask the privacy contact to delete your registration. In that case, you cannot pre-register by email.
| Provider (contact) | Processing country | Purpose | Data and processing time |
|---|---|---|---|
| Cloudflare, Inc. (privacyquestions@cloudflare.com) | United States (Cloudflare, Inc.); processed in data centers worldwide close to the visitor | Website delivery and access security, and prevention of automated applications (Turnstile). | IP addresses, browser and request information are processed when you access the site. Security check (Turnstile) information is also processed when you apply. |
| Amazon Web Services, Inc. (aws-korea-privacy@amazon.com) | Japan (AWS Tokyo Region) | Running the pre-registration API, storing and processing registration data, and sending email (Amazon SES). | When you apply, it processes your email address (encrypted when stored), application language and time, consent and age confirmation records, request processing and security information, and hashes for duplicate detection and abuse prevention. When we send email, it processes the recipient address and message content. |
| Google LLC (googlekrsupport@google.com) | United States | Managing the registrant list in Google Sheets. Receiving and handling emails with inquiries or requests for access, correction or deletion. | Email addresses, application languages and application times are processed when the list is added to or updated. Sender addresses, message bodies and attachments are processed when an email is sent. |
| Item | Transfer details |
|---|---|
| Recipient and contact | Amazon Web Services, Inc. (aws-korea-privacy@amazon.com) |
| Legal basis | Article 28-8(1)(3)(a) of the Korean Personal Information Protection Act: disclosing the required information in the privacy policy for overseas processing or storage necessary to perform a contract. |
| Purpose | Running the pre-registration API on AWS Cloud servers, storing and processing registration data, and sending email (Amazon SES) |
| Data transferred | Email addresses (encrypted when stored), application language and time, consent version, choices and time, age-16 confirmation records, hashes for duplicate detection and abuse prevention, and the recipient and content of emails we send |
| Country, time and method | Japan (AWS Tokyo Region). Transmitted over the network when data is stored or updated during pre-registration and service use. |
| Retention and use | Up to one year (365 days) from collection, ending earlier on fulfillment of the purpose, a deletion request, the closing date (2027-01-31), or termination of the processing contract. Abuse-prevention hashes are retained for 24 hours. |
| Refusing transfers and consequences | You may choose not to apply or ask the privacy contact to cancel and delete your registration. Email pre-registration is unavailable if you refuse transfers necessary for storage and processing. |
Your rights
Contact cs@rabbitholecompany.com to request access, correction, deletion, restriction of processing, or withdrawal of consent. We will verify your identity before handling the request.
Security and backups
Email addresses in the registration database are encrypted; keyed hashes detect duplicates. Connections use TLS and operator access is kept to the minimum. Secret keys are never written to public pages or analytics. Registration database backups are deleted according to the retention period.
Advertising, age, and cookies
You are not automatically subscribed to newsletters or advertising emails. Registration is intended for people aged 16 or over, matching the game’s 16+ rating; dates of birth are not collected. Advertising and analytics cookies are not used. Security processing when you access the site and during registration is covered by the processor disclosure.
Registration and game rewards
Registration is complete when you submit your email address. Counts exclude deleted registrations. In-game rewards for each milestone are shown on the pre-registration screen. Milestone rewards are delivered to the in-game gift box after the official launch; eligibility and the claim period will be announced before launch. Registration does not create a game account. Pre-registration and milestone rewards apply in Korea and Japan.
For residents of Japan (disclosures under the Act on the Protection of Personal Information)
Operator, address and representative: Rabbithole Company, Room 310, Jilli-gwan, 193 Munji-ro, Yuseong-gu, Daejeon, Republic of Korea; representative Park Jaemin. We are located in the Republic of Korea and apply security measures with an understanding of its personal information protection system. Pre-registration data is stored on servers in Japan (AWS Tokyo Region). The personal data transferred to providers in the United States (see Processors and international transfers) is the email address on the registrant list, together with the application language and time; access traffic is also processed to deliver and protect the website. These providers are bound by contract to a system that meets the standards of the Act, and on request we will tell you the destination country, its personal information protection system and the measures the provider takes. Information on other countries’ systems is also available in the Personal Information Protection Commission survey of foreign systems. Purposes of use, how to request access, correction or suspension of use, and where to send complaints are described in this notice; requests are free of charge (0 yen). Advertising emails show the sender’s name and address, how to unsubscribe, and a contact point.
Consent to advertising emails
| Item | Details |
|---|---|
| Purpose of collection and use | Emailing game information and news, pre-download and launch notifications, and launch-related updates and changes. These emails include advertising information. |
| Personal data collected | Email address, email consent choice and time, and document version. Delivery channel: email. |
| Retention and use period | Up to one year (365 days) from consent, ending earlier if you withdraw email consent, cancel registration, the purpose is fulfilled or operations end. |
| Right to decline | You may decline consent to advertising emails. If you decline, you cannot pre-register by email. |
You can withdraw email consent at any time by contacting cs@rabbitholecompany.com. Withdrawing only advertising consent preserves your registration and reward eligibility. Canceling registration itself ends reward eligibility.
Privacy officer and department handling access and other requests
The following contact handles privacy inquiries and complaints, requests for access, correction, deletion or restriction of processing, and withdrawal of consent. We will make every effort to respond promptly and fully to privacy inquiries.
| Role | Name / department | |
|---|---|---|
| Privacy officer | Namhae Kim (Development Team) | cs@rabbitholecompany.com |
| Department handling access and other requests | Development Team | cs@rabbitholecompany.com |
For privacy dispute resolution or advice, you may also contact the following agencies in Korea.