Effective October 29, 2026
ANYONE COMPANY CO., LTD. ("we," "us") runs BLUECHIP STAR, a baseball career game for iOS and Android (the "app"), and the website www.bluechipstar.xyz (the "website"). This policy explains what personal information we collect, why we use it, who receives it, how long we keep it, and the choices you have.
This English policy is written for users in the United States. Section 11 adds information for users in the European Economic Area (EEA) and the United Kingdom. The app's screens are currently in Korean only, so Korean menu names are shown in parentheses. A Korean policy written under Korean law is available at 개인정보처리방침.
This applies to guests too. When you start as a guest, the app creates an anonymous account on our server, and the information below is stored with that account in the same way.
| Category | What it includes | When |
|---|---|---|
| Account | Account ID and whether it is a guest account. If you sign in with Apple or Google: the account identifier from Apple or Google, your email address (Apple gives a relay address if you choose Hide My Email), and the name Apple or Google provides. Last sign-in time. | When you start as a guest or sign in |
| Sign-in sessions | IP address and device or browser information (user agent) for each session. Security logs of our sign-in service, which include IP addresses. | When you sign in and use the app |
| Profile and rankings | The random ID the app created on your device (also used for analytics, see 1.2). Ranking nickname, title and frame choices, display settings, and creation and last-seen times. Challenge attempts and clears (game seed, the choices you made, clear time, number of Luck Boosts used), total clears, best level, and weekly results. | When you use the app, rankings, and Challenge mode |
| Career mode | Player names and career nicknames you type in, and all career progress, such as position, identity, training, matches, in-game messages, articles, awards, in-game gold and items, and interview answers (chosen from fixed options). A device ID used to lock a career to one device. Records of game actions, including the app version, build, and platform. | When you play Career mode |
| Purchases and Bluechips | Store transaction ID (Apple transaction ID or Google purchase token), store, product, list price in Korean won, and purchase status. Bluechip balance and history. Monthly purchase total and any monthly spending limit you set. Daily Pack and Pass records, free reward records, and daily rewarded ad counts. | When you buy or earn Bluechips |
| Reports | Your account ID, the nickname or gallery card you report, the reason, any details you write (up to 200 characters), the time, and the handling status. | When you report someone |
| Public gallery | For each retired career: career nickname, player name, and a career summary. | Created as private when a career retires. Shown to other players only after you make it public |
| Notifications | Firebase Cloud Messaging token, platform, whether notifications are on in the app, and times. | When the app has notification permission on your device |
| Rewarded ad checks | Ad transaction ID, your account ID, reward type and amount, and time. | After you watch a rewarded ad in Career mode |
| Tool | What it collects |
|---|---|
| Firebase Analytics (Google) | In-app events such as screens viewed, features used, and progress. A random ID created on your device. We also store this ID with your account, so analytics data can be linked to your account. It is pseudonymous, not anonymous. Whether you use a signed-in or guest account, the career number on your device, purchase events (product, price in won, result), and your Bluechip balance when you do not have enough. Your device's advertising ID where available. |
| Firebase Crashlytics (Google) | Crash reports and error messages, stack traces, the game state at the time (screen, mode, level, attempt, step, last choice, Luck Boosts used), recently visited screens, and an installation ID. |
| AdMob (Google) | Advertising ID (Android advertising ID; on iOS, the IDFA only if you allow tracking), device information, and IP address. A random operation ID that lets our server confirm an ad reward. |
| Singular | Advertising ID, iOS vendor ID (IDFV), IP address, device information, and install information. |
| Apple and Google sign-in and payments | When you sign in, a sign-in token from Apple or Google. When you buy something, the app sends your account ID to Apple or Google with the purchase, and our server checks the purchase with Apple or Google. |
AdMob and Singular start when the app starts after sign-in, including guest sign-in. They do not wait until you watch an ad.
Classic mode saves and backups, Challenge runs in progress, classic quests, the hall of fame, badges, app settings, and your block list are stored on your device and are not sent to our server.
The website does not show a cookie consent banner. You can block or delete cookies in your browser settings, and the website still works.
We share information with the companies below so they can provide services for us or for you. Each company's own privacy policy also applies.
| Recipient | Location | Information | Purpose |
|---|---|---|---|
| Supabase, Inc. | US company. Our data is stored in its Seoul, South Korea region on Amazon Web Services. | All server data in 1.1 | Database, sign-in, server functions |
| Google LLC, Firebase Analytics | US | Analytics data in 1.2 | Usage analytics |
| Google LLC, Firebase Crashlytics | US | Crash data in 1.2 | App stability |
| Google LLC, Firebase Cloud Messaging | US | Notification token, notification title and text | Remote notifications |
| Google LLC, AdMob | US | Advertising ID, device information, IP address, reward operation ID | Rewarded ads, reward checks, ads that may be personalized |
| Google LLC, Google Sign-In, Google Play billing, Google Play Developer API | US | Sign-in token, purchase information, your account ID | Sign-in, payment, purchase checks |
| Google LLC, Google Analytics and AdSense (website) | US | Visit information, cookies | Website analytics, website ads |
| Apple Inc. | US | Sign in with Apple, App Store purchase information with your account ID, purchase checks with Apple | Sign-in, payment, purchase checks |
| Singular Labs, Inc. | US | Information in 1.2 | Install attribution |
| X Corp. | US | Website visit information | Measuring X ads |
| Vercel Inc. | US | Website requests including IP address, feedback messages passing through | Website hosting, sending feedback |
| FormSubmit (formsubmit.co) | Outside Korea | Feedback type, message, reply email, browser information | Forwarding feedback to our email |
Other users can see the public information described in Section 5. We may also disclose information when the law requires it.
Privacy policies: Supabase, Google, Apple, Singular, X, Vercel, FormSubmit.
| Information | How long |
|---|---|
| Account, profile, rankings, career records, purchase records, Bluechip balance, notification token, reports you sent, public gallery cards | Until you delete your account (guests: Delete device data). Then they are deleted immediately. Any remaining Bluechips, including purchased ones, are lost. |
| Career slots you delete in the app | The slot is marked as deleted and hidden, but its records stay on our server until you delete your account. |
| Notification token | Deleted when you sign out or delete your account. If you only remove the app, the token stays on our server until you delete your account. |
| Payment history | Our purchase records are deleted with your account. Apple and Google keep their own payment records under their policies. |
| Rewarded ad check records | Kept after account deletion to prevent reward fraud. We delete them if you ask us. |
| Sign-in security logs and server logs | Kept under Supabase's retention policy. The log of an account deletion includes part of the account ID. |
| Analytics and crash data, data held by AdMob, Singular, Apple, Google, and X | Deleted under each company's retention policy and settings. |
| Feedback messages | Deleted within one year after we finish responding and acting on them. |
| Information kept only on your device | Removed when you delete your account or device data, or remove the app. |
We do not sell your personal information for money. However, letting AdMob, Singular, and X collect identifiers for personalized ads and ad measurement may count as "selling" or "sharing" personal information for targeted or cross-context behavioral advertising under some US state laws. You can turn this off:
Do Not Track and Global Privacy Control. Our website does not currently respond to Do Not Track signals or Global Privacy Control signals. When you use our app or website, Google, Singular, and X may collect information about your online activities over time and across different websites and apps.
Anyone can ask us to:
To make a request, email contact@anyonecompany.kr or use Send Feedback with a reply email. We may ask for information to confirm the account is yours, such as sending the request from the email you use to sign in. An authorized agent can make a request for you if they show us your written permission. We aim to respond within 30 days, and always within the time the law that applies to you requires. If we decline a request, we will explain why, and you can reply to ask us to reconsider. We will not treat you differently for using these rights.
US state privacy laws, such as those in California, Virginia, Colorado, Connecticut, and Texas, give residents rights to know, access, correct, delete, and get a copy of their personal information, and to opt out of the sale or sharing of personal information and targeted advertising. These laws apply only to businesses that meet certain conditions. You can send us the requests above whether or not a particular law applies.
BLUECHIP STAR is a general-audience game open to all ages. The app does not ask for your age, and it is not designed specifically for children under 13. If you are under 13, or under the age of digital consent where you live, use the app only with your parent's or guardian's permission.
If you are a parent or guardian and believe your child under 13 has used the app or given us personal information, contact us at contact@anyonecompany.kr. We will delete the child's account and the information stored with it. You can also delete it in the app with Delete account (계정 삭제) or Delete device data (기기 데이터 삭제). If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it.
We use encrypted connections and limit access to personal information, so that other users can see only the public information in Section 5. No system is completely secure, and we cannot guarantee that information will never be accessed without permission.
This section applies if you are in the European Economic Area or the United Kingdom, under the EU General Data Protection Regulation (GDPR) and the UK GDPR.
ANYONE COMPANY CO., LTD., 4F 401-835, World Plaza, 27 Jungbo-ro, Sangnok-gu, Ansan-si, Gyeonggi-do, Republic of Korea. Email contact@anyonecompany.kr. Person responsible for privacy: Geonyong Lee, Co-CEO.
| Purpose | Legal basis |
|---|---|
| Creating your account, saving your progress, sign-in, rankings and the public gallery you choose to use, notifications you allow | Performance of our contract with you (GDPR Art. 6(1)(b)) |
| Processing and verifying purchases and delivering Bluechips and items | Performance of our contract with you (Art. 6(1)(b)) |
| Preventing cheating and reward fraud, handling reports, keeping rewarded ad check records after deletion | Legitimate interests (Art. 6(1)(f)) in keeping the game fair and secure |
| Analytics and crash reports in the app and analytics on the website | Legitimate interests in understanding use, fixing problems, and improving the game |
| Ads, install measurement, and website ad measurement | Legitimate interests in funding a free game through ads and measuring our marketing. We do not currently use a consent tool in the EEA or the UK and do not ask you to consent to personalized ads, so we do not rely on consent for ads. Google decides how ads are served to users from these regions when no consent signal is present. You can reset or delete your advertising ID and opt out of personalized ads in your device settings at any time. |
| Answering feedback and requests | Legitimate interests in responding to you, or performance of our contract with you |
You can object to processing based on legitimate interests at any time. For personalized ads and install measurement, the quickest way is to use the device settings in Section 6.
The recipients are listed in Section 3.
We are based in the Republic of Korea, and our server data is stored in Korea. The European Commission and the UK have recognized Korea as providing an adequate level of data protection. Information also goes to the US companies in Section 3. For those transfers, the GDPR allows safeguards such as the EU-US Data Privacy Framework (and its UK Extension) for certified companies, or standard contractual clauses included in a provider's data processing terms. Contact us if you want more information about these safeguards or a copy of them.
See Section 4.
You have the right to access, correct, and delete your personal information, to restrict or object to its processing, and to data portability. To use these rights, follow Section 8. You also have the right to complain to a data protection authority. In the EEA, contact the authority in your country (list of EEA authorities). In the UK, contact the Information Commissioner's Office.
We post changes on this page and update the effective date at the top. When a change affects what we collect or who receives it, we update this policy before the change takes effect, and we may also announce it in the app or on our News page.