Privacy Policy for Dragonlock: Mortal Dao (鎖龍劫－凡人問道)

Effective and last updated: July 19, 2026

This Privacy Policy explains how Corntree Games ("we," "us," or "our") collects, uses, stores, shares, and protects personal data when you download, install, access, or use Dragonlock: Mortal Dao, officially titled 鎖龍劫－凡人問道 (the "Game"), and its related support services. It also explains the choices and rights available to you.

Please read this Policy before using the Game. If you do not agree with it, do not use the Game. Where a feature requires separate consent, we will provide additional information and choices at the appropriate time.

1. Scope and Data Controller

This Policy applies to the Game, official support pages directly related to the Game, and the support channels we provide. Third-party platforms and services, such as Google Play, Google, and Firebase, process data under their own policies. This Policy does not replace those third-party policies.

The data controller or data user responsible for the personal data covered by this Policy is Corntree Games. The official name of the Game is 鎖龍劫－凡人問道, and its English app label is Dragonlock: Mortal Dao. Our privacy contact details are in Section 16.

2. Data We May Collect

The data actually collected depends on the features you use, the Game version, your device settings, and your sign-in method.

2.1 Account, Character, and Profile Data

• Game account or character identifiers, server or region, nickname, avatar, and login records.
• If the Game offers social, guild, chat, or profile features, the content you choose to submit and the interaction records needed to provide those features.

2.2 Gameplay and Usage Data

• Game progress, character and asset status, level or battle records, achievements, settings, login times, sessions, and feature usage.
• Events generated when you interact with the Game, such as launch, login, tutorial, level, error, or feature interaction events.

2.3 Device, Network, and Identifier Data

• Device model, operating system and version, app version, language, time zone, basic screen or hardware information, network type, and IP address.
• Game installation identifiers, Firebase installation IDs, app instance identifiers, and other device or service identifiers needed to operate the Game.
• We or our service providers may infer a general country or region from an IP address. Unless separately disclosed and permitted, the Game does not require precise GPS location for the ordinary functions described in this Policy.

2.4 Diagnostic and Security Data

• Error events, relevant app state, network response data, and related device metadata.
• Login and security logs, device or app integrity signals, suspicious activity, refund abuse, plug-in, or cheating risk signals.

2.5 In-App Purchase and Transaction Data

• Product identifiers, order or transaction identifiers, price and currency, purchase time, payment status, entitlements, refunds, and transaction verification results.
• Google Play or another applicable app store processes your payment. We do not directly receive your full payment card number, expiration date, or card security code (CVV).

2.6 Support and Data You Choose to Provide

• Your email address, message content, attachments, account or character details, and troubleshooting information when you contact support or submit a privacy request.
• Where needed to verify an account or transaction, we may request limited order evidence or other verification information. Do not send us your password or full payment card details.

3. Sources of Data

We may obtain data:

• Directly from you, such as when you create or link an account, contact support, participate in an event, or submit content.
• Automatically from the Game, our servers, or integrated SDKs when you use the Game.
• From platforms and partners, such as Google Play purchase verification results and install-referrer information, and Firebase analytics and installation-identifier data.

4. How We Use Data

• Provide, maintain, and improve the Game; create or manage accounts; and save progress and settings.
• Verify, deliver, and restore in-app products or entitlements and handle refunds, disputes, and transaction support.
• Analyze Game usage, balance, and feature performance, fix errors, and improve stability.
• Provide account, social, guild, or other Game features you use.
• Maintain fair play and service security and prevent fraud, cheating, abuse, unauthorized access, or other violations.
• Respond to support, privacy, and deletion requests and verify the requester.
• Measure install sources or campaign performance. The Game does not display third-party in-game ads for this purpose.
• Meet legal, accounting, tax, platform policy, and lawful government or judicial requirements.

5. Legal Bases for Processing

Where applicable law requires us to identify a legal basis, we rely as appropriate on:

• Performance of a service or contract: to provide the Game, accounts, purchases, support, and features you request.
• Legitimate interests: service security, fraud prevention, analytics, diagnostics, maintenance, and improvement, where those interests are not overridden by your rights.
• Your consent: for analytics or other processing where applicable law requires consent.
• Legal obligations: including accounting, tax, consumer protection, dispute handling, and lawful regulatory requests.

You may withdraw consent-based processing. Withdrawal does not affect the lawfulness of processing completed before withdrawal.

6. Third-Party Services and Data Sharing

We disclose only the data needed to operate the Game, provide features you request, protect the service, or comply with law. The data actually processed depends on the SDKs and configurations enabled in the released version and on your choices.

Relevant third-party policies include:

• Google Privacy Policy
• Privacy and Security in Firebase

We may also disclose necessary data:

• To vendors that provide hosting, cloud, support, security, anti-cheat, or other technical services.
• To comply with law, court orders, or regulatory requests, or to protect the rights, safety, or property of users, us, or others.
• In connection with a merger, acquisition, reorganization, or asset transfer, subject to appropriate confidentiality and data protection measures.

We do not sell personal data for money. Some transfers to analytics or install-measurement services may be called "sharing" under certain regional laws. You may submit any applicable rights request as described in Section 12.

7. In-Game Ads and Install-Source Measurement

The Game does not display third-party in-game advertisements. Google Analytics for Firebase, Firebase Installations, and Google Play Install Referrer may process app events, installation identifiers, and install-referrer information to understand install sources, analyze usage, and measure feature performance. The current Android version does not obtain a usable Android Advertising ID. Where applicable law requires a choice or consent, we will provide the relevant mechanism before processing.

8. Data Retention

We retain data only for as long as needed for the purposes described in this Policy or as required for law, accounting, tax, security, fraud prevention, refunds, dispute handling, and platform compliance. We consider the data type, sensitivity, purpose, and legal requirements when setting retention periods.

• Account and gameplay data is generally retained while the account remains active and as needed to provide the service.
• Purchase and transaction records may be retained longer for entitlement verification, refunds, fraud prevention, accounting, tax, or disputes.
• Support data is retained until the issue and a reasonable follow-up period have ended.
• Analytics and diagnostic data is retained according to our settings, provider rules, and business needs, then deleted, de-identified, or aggregated.

9. Account and Personal Data Deletion

1. Provide the character or user ID, server, sign-in method, and a contact email needed to locate your account. Do not provide a password or full payment card details.
2. To prevent malicious deletion by another person, we may reasonably verify your identity or account ownership.
3. After verification, we will process the request within a reasonable period and any deadline required by applicable law. Where feasible, we will also instruct relevant service providers to delete data linked to the account.
4. Deletion may be irreversible and may remove Game progress, virtual items, or other entitlements. We will explain material consequences before completing deletion.
5. We may retain limited records where necessary for law, accounting, tax, security, fraud prevention, refunds, or dispute handling, and delete or de-identify them when that purpose ends.

If the Game allows in-app account creation, you may also use the account deletion path made available in the Game's Settings, Account, or similar screen, if offered. Deleting a Game account does not delete your Google Account. If the Game offers an auto-renewing subscription in the future, account deletion will not automatically cancel the Google Play subscription; you must manage it separately in Google Play.

10. International Data Transfers

We and service providers such as Google and Firebase may process data outside your country or region. Where required, we use reasonable contractual, technical, or organizational safeguards for cross-border processing. Third-party processing locations and mechanisms are also governed by their own policies and terms.

11. Data Security

We use reasonable administrative, technical, and organizational measures proportionate to the nature and risk of the data. These may include data minimization, access controls, transmission protection, access logging, and vendor management to help prevent unauthorized access, use, alteration, loss, or disclosure. No Internet transmission or storage method can be guaranteed to be completely secure.

12. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Ask whether we hold your personal data and request access to or a copy of it.
• Request that inaccurate or incomplete data be supplemented, corrected, or updated.
• Request that collection, processing, or use stop, or request deletion.
• Object to or restrict certain processing, or withdraw consent-based processing.
• Complain to the data protection or privacy authority where you live.

Users in Taiwan may exercise the rights provided by Taiwan's Personal Data Protection Act, including inquiry, access, copies, supplementation, correction, cessation of collection, processing or use, and erasure. Users in Hong Kong may request access and correction under the Personal Data (Privacy) Ordinance. Users in Macao may exercise applicable rights under Law No. 8/2005, the Personal Data Protection Act. These rights may be subject to lawful exceptions.

Submit a request using the email address in Section 16. We may require reasonable verification and will respond within the period required by applicable law. We will not unfairly discriminate against you for exercising a privacy right.

13. Children and Minors

We take the privacy of children and minors seriously. We do not knowingly collect a child's personal data without the parental or legal guardian authorization required by applicable law. If you are below the age at which you may independently consent to data processing or enter the relevant service agreement where you live, a parent or legal guardian must review this Policy and provide any necessary authorization.

If a parent or legal guardian believes that a child gave us data without appropriate authorization, please contact us as described in Section 16. We will investigate and take deletion or other appropriate action as required by law.

14. Third-Party Links and Features

The Game may link to an app store, social platform, support channel, or another third-party service. After you leave the Game, that third party processes data under its own policy. We recommend reviewing the relevant privacy policy and settings before using the service.

15. Updates and Language

We may update this Policy when features, SDKs, laws, or our operations change. We will update the date on this page. For a material change, we will provide an in-game notice or another appropriate notice where required and obtain renewed consent where necessary.

This Policy is available in Traditional Chinese and English, and both versions are intended to convey the same meaning. For users in Taiwan, Hong Kong, and Macao, the Traditional Chinese version prevails if the versions conflict, except where mandatory applicable law requires otherwise.

16. Contact Us

Data controller / Operator: Corntree Games
Game: Dragonlock: Mortal Dao (鎖龍劫－凡人問道)
Privacy and data deletion email: xiaoaojianghu001007@gmail.com

Please identify the Game and the type of request in your message. Do not include a password, full payment card details, or other unnecessary sensitive information in your first email.