Privacy Policy

Effective: October 25, 2026

Upcoming change: From November 12, 2026, we will use Google Analytics (Google LLC, USA) for visit statistics. What it collects, how long it is kept and how to opt out will be set out in section 2 (e) of the revised policy that takes effect that day.

This policy explains what the developer of Critical Point (“we”) processes when you play the game, why, and for how long.

1. In short

• There is no sign-up or login. We do not collect your name, email address, phone number or postal address.
• The analyst name you choose stays on your device and is never sent to our servers.
• Your progress is saved on your device (browser storage) by default. Only the four kinds of data in section 2 ever reach a server.
• The game currently shows no ads and uses no advertising or analytics cookies or third-party trackers.

2. What we process, why, and for how long

(a) Playtest data — “Playtest data sharing” (플레이테스트 데이터 제공 동의) in “Data storage” (데이터 저장 안내) on the start screen

• How consent works: the box is ticked by default on first launch. The start screen says so and where to turn it off; untick it and nothing more is sent. A device that turned it off stays off; resetting the game turns it back on.
• What we collect:
  • a random ID created on this device (session ID) and its last 8 characters, the session code
  • a random run ID made for each playthrough
  • a random delivery ID that keeps a record from being stored twice
  • the leaderboard name, always "Anonymous analyst"
  • case results (the case, its summary and score, in-game resources and tendencies, completion time)
  • the screen language (Korean, English or Japanese, as chosen on this device, sent with each case result)
  • choices and response times (the cards played, the time each decision took, how the table went)
  • feedback you send (clarity and difficulty ratings and your comment)
  • error reports (the error's name, message and code location, the screen's structure as element names without any text, screen size, the case and scene, the time)
• Why: research to improve the game's difficulty and story, the public leaderboard, aggregate statistics shown to other players (such as how often a scene's choices are picked or fail, which identify no one), and fixing bugs.
• How long: deleted automatically 180 days after it is stored.
• Turning consent off also clears any records still waiting to be sent from your device. To delete records already sent, see section 7.
• The leaderboard shows no names, only “Anonymous analyst” and the last 8 characters of a run ID.

(b) Continue on another device — only if you turn on “Use online save” (온라인 저장 사용; off by default)

• What we collect:
  • your save (without your analyst name, feedback comments or unsent records) and when it was saved
  • your continue code (stored as a SHA-256 hash, never as the code itself)
• Why: to continue the same progress on another device.
• How long: deleted automatically 180 days after the last upload, or immediately from the “Continue on another device” (다른 기기에서 이어하기) panel.

(c) Player board — only if you post or report a post

• What we collect:
  • your nickname, your post (up to 300 characters) and when it was posted
  • a random writer ID used only by the board (not the playtest session ID)
  • the number of the post you report and the reason you pick (there is no free text)
• Why: to show your post to other players (nickname, post and time are public), to stop spam, and to review reported posts (reports are not public).
• How long: deleted automatically 180 days after posting; a report is deleted with its post. Posts that break the board's rules may be hidden.
• Do not write real names, contact details or company names. Posts with links, phone numbers or email addresses are rejected.

(d) Connection data — created when one of the features above contacts the server

• What we collect:
  • your IP address
• Why: to rate-limit requests and stop automated posting.
• How: the address itself is never stored, only a one-way hash mixed with a value only the server knows. Request counters are cleared within a day; the hash attached to a board post is deleted with the post after 180 days.

3. What is stored on your device

The game uses no cookies. Progress, settings, local rankings, recovery points and the random ID are kept in browser storage (localStorage), and the game's files in a cache for offline play. None of it leaves your device except through the features in section 2, and “Reset” (초기화) in the game or clearing the site's data in your browser removes it.

4. Deletion

Data past its retention period is deleted by an automatic daily job, in a way that cannot be recovered.

5. Sharing

We do not sell your data or share it with third parties, except where required by law.

6. Service provider and international transfer

Supabase Inc. (USA) runs the database that stores the data in section 2 (a)–(d); it is sent over the network when you use those features and kept on that company's servers for the periods in section 2.

To avoid the transfer, turn playtest data sharing off and do not use online save or the board. The whole story and every table remain playable without them.

7. Your rights

• You can ask to access, correct or delete your data, or to stop its processing, and withdraw consent at any time, yourself or through a legal representative.
• To withdraw consent: untick the box in “Data storage”. Online save can be turned off and its server copy deleted from its panel.
• To access or delete records: because we do not know your name, send the 8-character session code shown in “Data storage” and on the result screen to from.logic.to.magic@gmail.com (for online save, your continue code; for a board post, its nickname and time). We will find the records and reply within 10 days.
• If you are in the EEA or the UK, you may also complain to your local data protection authority.

8. Children

The game is not directed to children under 14. If you are under 14, turn playtest data sharing off and do not use online save or the board. If we learn that a child's data has been stored, we delete it without delay.

9. Security

HTTPS in transit, least-privilege database access (anonymous users reach only the game's own functions and cannot read anyone else's records), rate limiting, and hashed continue codes and addresses.

10. Ads

The game currently shows no ads. If ads are added later, this policy will describe them (the ad provider, cookies and how to opt out) before they appear.

11. Contact

• The Critical Point developer
• Email: from.logic.to.magic@gmail.com

12. Changes

We will post changes on this page 7 days before they take effect, or 30 days before for changes that matter to your rights.