Corsair King Privacy Policy
Operator and scope
imtak operates Corsair King. This policy also covers the same service under its earlier preview name, Skull King. Privacy contact: gue707@naver.com. Effective date: October 28, 2026. The current game is a test service running on an operator-managed desktop. Migration to Oracle Cloud is planned and has not been completed; hosting and provider information will be updated when that actually changes.
Information and purposes
A guest account stores a nickname, randomly generated account ID and creation time. Session identifiers, token hashes/expiry and retry-deduplication records support authentication and reconnection. Room and invite-code data, seat membership, readiness/presence, hands, Bidding, card plays, scores and saved game state run the multiplayer game. A real name, email address or phone number is not required to create a guest. If you send support email, we use its sender address and the content you choose to provide to handle that request.
Optional invite camera
Opening the camera in Join Room decodes an invite barcode on your device. The app does not take or save photos/videos or upload camera frames to the game server. Only the decoded invite code is used with your existing authentication to request admission. Manual entry remains available when camera access is denied. The scanner does not require microphone recording.
Information shown to players
Members of your room see nicknames, readiness/presence, played cards, revealed bids and scores. Other hands and unrevealed bid choices are not sent to them. Lobby shot/heal actions, target player IDs and mark positions are processed in server memory and displayed in the room, not written to the game database. These effects clear when play starts, the lobby is removed or the server restarts.
Storage and service providers
The operator stores account and game data on an operator-managed desktop. The current public game connection uses Tailscale Funnel. Cloudflare Pages serves these privacy/support/deletion pages and may process visitors’ IP addresses, browser and request information for delivery and security. Support email is delivered through Naver Mail. Tailscale and Cloudflare operate networks that may process information in multiple countries; their privacy policies are linked on these pages. The game database is not uploaded to this static documentation site, and we do not add analytics or advertising scripts.
Retention
Guest accounts have no automatic inactivity deletion and remain until account deletion. A room is removed when it has no remaining human-owned seat, including after an explicit departure or the final human’s 180-second disconnection expiry. Shared game state can remain while other players remain. Access credentials are valid for 15 minutes and refresh credentials for up to 30 days; expiry does not itself delete the account database record. Retry records have validity periods of 15 minutes, 24 hours or the original refresh window depending on the operation; expired retry records are cleared at startup and hourly. Error logs rotate by size rather than a fixed number of days.
Account deletion and backups
Use Menu → Account & Privacy → Delete account → Delete account to delete the signed-in guest. A successful completion response confirms removal of the account, sessions and linked authentication/request/ownership records from the operational database and departure from the current game. Shared state needed by remaining players replaces that player’s nickname with Deleted player. Manual recovery backups are kept separately and currently have no configured automatic expiry, so they may still contain earlier data. Automatic reconciliation of deleted accounts after backup restoration is not yet complete. Ask the privacy contact about backup deletion and any remaining scope. Recovery copies are not used by the ordinary game service. Uninstalling or logging out alone does not delete server accounts.
Requests from outside the app
You can request account deletion through the email action on this site’s Delete account page even if the app is unavailable or uninstalled. Reinstallation is not required to submit a request. Guests have no linked recovery email/password, so a nickname alone cannot prove ownership. We safely verify the requested account before acting, explain any minimum additional information needed, and report available scope and completion status. Do not email tokens, passwords, private keys or identity documents. Send access, correction, deletion and other privacy requests to gue707@naver.com.
Security and changes
The default public game connection uses HTTPS/WSS. Native credentials use iOS Keychain or Android secure storage; web tests use browser local storage. If a preview version lets you choose a separate server, review that operator’s policy and transport. No advertising/sale/tracking SDK, payment, free-form chat or photo-upload feature is present in the current app. This page’s change details and effective date will be updated when the policy or actual processing changes.