Games / Privacy

Game Privacy Policy

Effective and last updated: 3 September 2026

This notice explains how Node Brothers handles personal data in its games, including advertising, game saves, optional account connections and purchases. It also explains the choices and rights available to players in the European Economic Area (EEA), the United Kingdom and Switzerland.

1. Games covered by this notice

This notice applies to Node Brothers games that link to this page, including Parking Match Puzzle for Android (package name: com.nodebrothers.zeropark). Features and available platforms vary by game and version. Information about advertising, purchases or account connections applies only when you use a game that provides that feature.

If a game has a separate privacy notice, that notice identifies its specific data practices. This notice does not cover Ploty or unrelated Node Brothers services.

2. Who is responsible for your data

The data controller is Node Brothers, a business operated by Dong-seok Jeong in the Republic of Korea. You can use the following contact details for privacy questions and requests.

Privacy contact: admin@nodebrothers.com
Telephone: +82 70 8048 5835
Business registration number: 623-20-02100
Registered address: Room 302-S287, 7, Heungguk-daero 2790beon-gil, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea.

3. Information we process and where it comes from

Game profiles and saves: a randomly generated guest identifier or a platform-provided player identifier, game progress, items, virtual currency, settings and save or synchronisation records. These are supplied by the game, your device or the platform hosting the game.
Optional account connection and recovery: account or player identifiers and authentication proofs supplied by Google Play Games, Apple or another supported platform when you use account recovery. We use them to verify that a game profile belongs to you. We do not receive your account password.
Purchases, where offered: product identifiers, order or transaction identifiers, purchase tokens or receipts, purchase status and relevant transaction timestamps. Depending on the store response, records may also include price and currency. Payment card and bank account details are handled by the payment platform rather than entered into our game servers.
App and service operation: platform, app version, network requests, IP address, connection times and error or security records needed to deliver the service, troubleshoot problems and prevent misuse. Hosting providers receive network information when they serve requests.
Advertising, where enabled: Google Mobile Ads may process IP address and approximate location inferred from it, advertising or app identifiers, app and ad interactions, and diagnostic information. The information used depends on the ad format, consent choices, device settings and SDK configuration. Google receives this information directly from the app.
Consent preferences: the choices, purposes, vendor permissions and related consent signals recorded by the consent management platform, where used, so that those choices can be applied to advertising.
Support and privacy requests: your email address, the game name, player identifier if available, the information you choose to include and the correspondence needed to answer your request. Please do not send passwords or full payment details.

4. Why we process information

Where the GDPR or UK GDPR applies, we rely on the following legal bases. A legal basis for processing personal data does not remove a separate requirement to obtain permission for storing or accessing information on your device.

Providing the game, saving progress, restoring a profile and delivering purchased items: performance of our contract with you, to the extent the information is necessary for the feature you request (Article 6(1)(b)).
Answering service requests: performance of our contract when the request concerns your use of the game; otherwise our legitimate interest in responding to enquiries and resolving problems (Article 6(1)(f)).
Security, fraud prevention, preventing duplicate rewards or purchases, and diagnosing service faults: our legitimate interests in maintaining a reliable service and protecting players, balanced against your rights (Article 6(1)(f)).
Personalising advertisements and optional advertising storage or access: your consent when required (Article 6(1)(a)). Refusing consent is not treated as consent to another advertising purpose.
Handling statutory privacy requests and retaining records required by law: compliance with legal obligations (Article 6(1)(c)). Records needed to establish, exercise or defend legal claims may be retained for that legitimate interest (Article 6(1)(f)).

Providing information for an optional feature is your choice. Without a player identifier and the data necessary for online saves or recovery, we may be unable to provide that feature. Without transaction evidence, we may be unable to verify or restore a purchase. Advertising consent is separate from these requirements.

5. Google AdMob and your advertising choices

Games that display Google AdMob ads share the advertising information described above with Google. It can be used to deliver ads, measure ad interactions, diagnose problems and protect against invalid traffic. Personalised advertising may use information about your activity to select ads that are more relevant to you.

For players in the EEA, the UK and Switzerland, legally required consent must be obtained before advertising-related storage or access and before collecting, sharing or using personal data to personalise ads. The consent message identifies the purposes and advertising partners that apply to the particular game. Choosing not to consent does not authorise personalised advertising.

Depending on your choices and the configuration supported by the advertising service, a game may display non-personalised or limited ads, or may be unable to display an ad. Non-personalised ads can still involve processing and device storage; they are not a way to bypass a consent requirement.

Where a game presents advertising privacy options, you can reopen that control to change or withdraw your choices. You can also contact our privacy address for help or to withdraw consent for processing under our control. Withdrawal does not affect the lawfulness of processing that took place before it.

Android advertising ID controls and Google My Ad Center provide additional controls. They do not replace the consent choices in a particular game. We do not use your decision to read this notice or contact support as advertising consent.

6. Service providers and other recipients

A game using additional advertising partners must identify those partners in its consent information and applicable privacy disclosures. This notice does not grant unlisted advertising companies permission to use your data.

Google: advertising and consent management where enabled, and Google Play purchases or Google Play Games account verification where offered. Google may act as a separate controller for processing described in its own privacy information.
Supabase: hosting the database and related authentication or storage services used to operate game profiles and saves.
Vercel: hosting our website and game API services, including request delivery, operational logging and security.
Apple, ONE store or Toss: platform identity, recovery, purchases or advertising only for a version of a game distributed through or using that platform. The platform also provides its own privacy information.
Professional advisers, competent authorities or another recipient when disclosure is necessary to comply with law, resolve a dispute or protect legal rights. We limit the information disclosed to what is relevant.

7. International data transfers

Node Brothers operates in the Republic of Korea. Information may also be processed in the United States and other countries where the providers identified above maintain infrastructure or support operations. Those countries may have different data protection laws.

Where a transfer is covered by an applicable adequacy decision, that decision can provide the transfer basis. For other restricted transfers, the applicable provider arrangements must include a valid safeguard, such as the European Commission's Standard Contractual Clauses and, where required, UK or Swiss adaptations and supplementary measures. You can ask our privacy contact for information about the destination and safeguard relevant to your data and for a copy of applicable safeguards, with confidential information removed where necessary.

8. How long information is kept

Game profiles and saves are kept to maintain your progress and enable recovery while the profile remains in use. You can request deletion through our privacy contact. Removing the app or clearing device storage does not by itself delete server-side game data.
Transaction records are retained for the period required by applicable accounting and consumer-protection rules. Where the relevant Korean retention rules apply, payment and contract records may need to be retained for up to five years, and consumer complaint or dispute records for up to three years.
Support, diagnostic and security records are retained only for as long as needed to resolve the enquiry or incident, investigate misuse and meet an applicable legal requirement. The nature of the issue, the last related activity and any unresolved claim determine the period.
Consent records are retained as needed to honour and demonstrate your choices. Information independently held by advertising or platform providers is subject to their own retention policies and the rights you can exercise with them.
When information is no longer needed, it is deleted or anonymised. Information subject to a mandatory retention requirement or an unresolved legal claim is restricted to that purpose rather than used for advertising.

9. Your privacy rights and deletion requests

Depending on the applicable law and the legal basis for processing, you can ask to access your personal data and receive a copy, correct inaccurate information, erase information, restrict processing, or receive qualifying information in a portable format. You may object to processing based on legitimate interests. You can object to direct marketing at any time, including related profiling, and withdraw consent at any time.

To make a request, email admin@nodebrothers.com with the name of the game and your request. Include your player identifier if it is available, but do not send a password, full card number or identity document unless we explain why specific verification is necessary. For guest profiles, enough information to locate and verify the profile may be necessary before we can act.

Where the GDPR or UK GDPR applies, we respond without undue delay and normally within one month. If an extension is permitted because a request is complex or numerous, we explain the reason and extended period within the initial month. Requests are normally free; legally permitted exceptions will be explained.

You may complain to the data protection authority in your place of habitual residence or work, or where you believe an infringement occurred. You do not have to contact us first. UK residents can contact the Information Commissioner's Office, and Swiss residents can contact the Federal Data Protection and Information Commissioner.

10. Automated processing

Game logic automatically manages progress, rewards and purchase validation. Advertising providers may use automated processing to select or measure ads, including interest-based selection when you consent. We do not use this advertising selection to make decisions about you that produce legal or similarly significant effects. If an automated security or purchase check affects your use of a game, contact support to request a review.

11. Children and consent

A game's store listing describes its intended audience and age rating. A store age rating does not determine whether a child can legally consent to data processing. Where parental authorisation is required, optional processing based on a child's consent must not take place without that authorisation. Personalised advertising must not be served to users identified as children or below the applicable age of consent.

If you believe a child has provided personal data without required authorisation, contact admin@nodebrothers.com so we can investigate and take appropriate action.

12. Protecting information

We use encrypted network connections and access controls to protect information in transit and restrict administrative access. Purchase verification and account-recovery checks help prevent unauthorised access or duplicate grants. No method of storage or transmission is completely secure; if a breach occurs, applicable notification and response duties apply.

13. Reading this page

This page is publicly accessible without signing in or giving advertising consent. It does not display ads, run a consent popup or use analytics tags. Our hosting and static-asset providers receive the network information necessary to deliver the page and its fonts. Following an external link takes you to that provider's website and privacy practices.

14. Changes to this notice

We update this notice when our games or data practices change. The date at the top identifies the current version. Material changes will be explained through this page or the affected game. If a new purpose requires consent, publishing an updated notice does not replace obtaining that consent.