Fastgame AI Privacy Policy

1.1 Purpose of this policy

LIVEMATCH CO LTD (the "Company") operates Fastgame AI (fastgame.ai, the "Service"), a platform for creating and playing games with AI. This policy explains what personal information we process and why, how long we keep it, and the rights you have.

1.2 Applicable laws

We comply with the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection of the Republic of Korea and, for users in those regions, with applicable laws such as the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2.1 When you sign up

Sign-up and sign-in use Google sign-in (OAuth) only, and we receive the minimum needed to authenticate you.

• Required: email address, name, Google profile image, unique Google account identifier
• Generated: account creation time and a record confirming you meet the minimum age (14+)

2.2 While you use the Service

• Game-making inputs: genre, platform, style and music choices, your planning chat, change requests, and the game sheet the AI writes
• Game outputs: generated game files and version history, images and thumbnails generated for your games, and whether each game is published
• Coins: coin balance (free and purchased shares), free coin claims, coin pack orders, and coins spent on building or changing games
• Community activity: likes, favorites, plays, comments and reports
• Notifications and messages: service notifications and coin-gift messages you receive or claim
• Settings: your language preference

2.3 Optional information

Information you choose to add to your studio (channel). You can use the Service without it and edit or remove it at any time.

• Display name, bio, profile image and cover image (including images you upload)

2.4 Collected automatically

• IP address, browser and operating system, device identifiers, access times
• Cookies and local storage (see section 8)
• Access and error logs, including error reports from games while they run (used by the automatic fix feature)

2.5 Payment information

Coin packs are sold through FastSpring, our online reseller and Merchant of Record. When you buy a pack, you enter your name, email address, billing country and payment details directly into FastSpring's checkout; the Company does not receive or store card numbers or other payment credentials.

We pass FastSpring our order ID, your account identifier and the selected pack so the payment can be matched to your account. From FastSpring we receive the FastSpring order ID, pack, quantity, amount, currency, and payment and refund status. We keep coin pack order records (pack, coins granted, price, order time and status).

Coin packs granted as a free trial during the beta involve no payment and are recorded the same way.

3.1 Purposes

• Accounts: identifying you, signing you in, confirming the age requirement, managing your account
• Providing the Service: planning, building and changing games, playing and sharing them, and studio and community features
• Coins and rewards: granting free coins, granting coin packs, tracking balance and spending, returning coins when a build fails
• Keeping the Service safe: detecting and preventing abuse (such as multiple accounts or automated misuse), handling reports, maintaining security
• Improving the Service: statistics, bug fixes and feature work, using aggregated or pseudonymized data where possible
• Support: answering your questions and requests
• Legal compliance: record-keeping and reporting duties, handling disputes

3.2 Marketing emails

We send emails about events, new features and recommendations with your consent where the law requires it. You can unsubscribe at any time through the link in every marketing email or in your account settings. Unsubscribing does not affect the lawfulness of emails sent before.

4.1 Principle

We delete personal information without undue delay once its purpose is fulfilled. Where we must keep it longer, we keep only what is needed for the periods below.

4.2 Retention periods

• Account information: until you delete your account (kept for a short grace period afterwards to prevent abuse, then deleted)
• Games and version history: until you delete them or your account (published games are taken down when your account is deleted)
• Access logs: 3 months (Korean Protection of Communications Secrets Act)
• Records of contracts, order cancellations, payments and supply of goods: 5 years (Korean Act on Consumer Protection in Electronic Commerce)
• Consumer complaint or dispute records: 3 years (Korean Act on Consumer Protection in Electronic Commerce, where applicable)

5.1 Procedure

Personal information is deleted without delay once its retention period ends or its purpose is fulfilled. Information the law requires us to keep is stored separately and deleted when that period ends.

5.2 Methods

• Electronic files: deleted using methods that prevent recovery
• Paper records: shredded or incinerated

6.1 Principle

We do not sell personal information and, as a rule, do not provide it to third parties.

6.2 Exceptions

We share the minimum necessary when you have consented in advance, or where the law specifically requires it or an authority makes a request following legal procedures. Games you publish and your studio information, such as your display name and profile, are visible to other users because you choose to make them public.

6.3 Payments (FastSpring)

When you buy a coin pack, the following is provided to FastSpring, which processes the payment as Merchant of Record and handles payment-related customer service and refunds. FastSpring processes the information you enter at checkout under its own privacy policy.

7.1 AI processing

What you enter to make or change a game (genre and style choices, planning chat, change requests and the game sheet) is sent to AI model providers to plan the game and generate its code and images. Each provider processes this under contract with the Company solely to provide the Service, and under their API terms, inputs sent through their APIs are not used to train their models by default. We recommend not entering other people's personal information or sensitive information into game-making inputs.

7.2 Processors and transfers

We entrust the following providers with processing to run the Service, and personal information is transferred outside Korea in the process.

7.3 Refusing transfers

You can ask us not to transfer your information abroad by emailing support@livematchgames.com. Because game creation and sign-in are provided through these providers, refusing means those core features cannot be provided.

7.4 Managing providers

Our contracts prohibit processing beyond the entrusted task and set out technical and organizational safeguards, limits on sub-processing and liability, and we supervise how providers handle personal information. We will update this policy if providers or tasks change.

8.1 What we use

• Essential: authentication cookies that keep you signed in (session and auth token). Features that require sign-in don't work without them.
• Preferences: a language cookie (ui-lang) and browser local storage (display settings, temporary work data)
• Analytics: Google Analytics via Google Tag Manager (pages visited, time spent, browser information, etc.)
• Advertising: Google AdSense may use cookies to serve and measure ads.

8.2 How to refuse

You can block or delete cookies in your browser settings, although refusing essential cookies may stop features such as sign-in from working. You can turn off personalized ads in Google's ad settings (adssettings.google.com) and opt out of Google Analytics with the opt-out tools Google provides.

9.1 Age requirements

The Service is for people aged 14 or older, and we confirm the age requirement at sign-up. Where the law requires, we apply a minimum age of 16 in the EEA and UK, and in the United States we do not knowingly collect personal information from children under 13 (COPPA).

9.2 Children under 14

We do not knowingly collect personal information from children under 14. If we learn it was collected by mistake, we delete it without delay. Parents or legal guardians can request deletion at support@livematchgames.com.

10.1 Rights

You can ask at any time to access, correct or delete your personal information or to suspend its processing, and you can withdraw consent. Where the GDPR applies, you also have the right to data portability and to object to processing.

10.2 How to exercise them

• In the Service: edit your display name, bio and images in your studio's channel settings, and delete games or make them private in your studio
• By email: send access, correction, deletion, suspension or account deletion requests to support@livematchgames.com
• A legal representative or authorized agent can also act for you; we may ask for documents confirming the authorization.

10.3 How we handle requests

After verifying your identity, we handle requests within 10 days or the period set by applicable law and tell you the outcome. Information the law requires us to keep may be retained for that period even if you ask us to delete it.

11.1 Safeguards

• Technical: encryption in transit (TLS), encryption at rest where appropriate, firewalls and intrusion detection, running user-made games in an isolated sandbox separate from the Service, regular security reviews
• Administrative: access limited to staff who need it, access log retention and review, internal protection plans, staff training
• Physical: facility access controls, secure storage of documents and media

12.1 EEA and UK users

We rely on contract performance for processing needed to provide the Service, consent for optional processing such as marketing, and legitimate interests for improvement and security. You can exercise your rights under the GDPR and, if a concern remains unresolved, lodge a complaint with the supervisory authority in your country. Transfers outside the EEA and UK use appropriate safeguards such as Standard Contractual Clauses (SCCs).

12.2 California residents

California residents have the right to know the categories, sources and purposes of personal information collected, to request deletion and correction, and to opt out of sale or sharing, and will not be discriminated against for exercising these rights. We do not sell personal information. You can make up to two requests per year free of charge at support@livematchgames.com; we will verify your identity and respond within the period the law requires.

13.1 Breach response

If a personal information breach is suspected or confirmed, we investigate immediately and act to contain it. Where the law requires, we notify you and the relevant authorities within the required time and put measures in place to prevent it from happening again. If you suspect a breach, tell us at support@livematchgames.com.

13.2 Where to get help (Korea)

For reports or advice about privacy violations, you can contact the following Korean agencies.

• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)
• Korean National Police Agency Cyber Investigation Bureau: 182 (ecrm.police.go.kr)

14.1 How we notify you

We announce changes in the Service at least 7 days before they take effect, and at least 30 days before for changes that materially affect your rights, also by email where appropriate. For other matters about using the Service, see the Terms of Service.