Privacy Policy
This policy explains what ujem collects, why, how long we keep it, who else receives it and what choices you have. There are no accounts, and you can play without giving us your name or email.
Who is responsible
ujem (ujem.games) is run by one independent developer, who is responsible for the processing described in this policy (the “data controller” under the GDPR, and the privacy officer under Korea's Personal Information Protection Act). Contact: ujem.service@gmail.com.
What we collect
We do not ask for your name, email address or phone number, and there is no sign-up. The only data we collect ourselves is a salted hash of your IP address (stored with the games you liked or played), the Hall of Fame entries you choose to save, and — if you write to us — your email address and message. Data stored on your device, and data collected by Cloudflare and Google, are described below.
IP address (stored only as a hash)
When your browser talks to our game server — for example to count a play, record a like or save a score — the server turns your IP address into a one-way hash (SHA-256 combined with a secret salt). Your plain IP address is never written to our database. We use the hash only to:
- count each like only once per visitor and show which games you have liked;
- count how many different people have played each game (unique plays);
- limit how many requests one connection can send to our server per minute, to prevent abuse;
- tie each Hall of Fame save token to the connection that requested it, which makes forged score submissions harder.
A salted hash is pseudonymised data, not anonymous data: whoever holds the secret salt could, in principle, link it back to an IP address. We therefore treat it as personal data, keep the salt secret, and never use the hash to identify you or to build a profile.
Our server also reads the two-letter country code that Cloudflare derives from your IP address, to suggest a language and to add a flag to Hall of Fame entries. The country code is stored only if you save a score.
Hall of Fame (public)
Saving a score to a Hall of Fame is optional. If you do, we store the nickname you enter (or “Anonymous” if you leave it blank), your country code, the score and the time it was saved. These entries are not linked to your IP address or its hash.
Hall of Fame entries are public: anyone can see the nickname, country flag and score on the game's page. Please do not use your real name or other personal details as a nickname.
When you email us
If you write to us, we receive your email address, your message and any attachments, and use them only to reply and to handle your request. Our email is handled by Google's Gmail service.
Cookies and storage on your device
ujem sets one cookie of its own, named “locale”. It stores only your language choice, for up to one year, so that the home page can open in your language. It is not used for tracking or advertising.
We also use your browser's local storage (localStorage) to remember your language, the nickname and country code you last used for the Hall of Fame, which games you liked, best scores, and game progress and settings, and the browser cache to keep games playable offline. This data stays on your device and is sent to us only when you act — for example when you save a score. You can delete it at any time by clearing this site's data in your browser.
Google Analytics sets its own first-party cookies (_ga and _ga_ followed by an ID, which last up to two years), and Google's advertising services may set cookies such as __gads and __gpi on this site as well as cookies on Google domains (for example doubleclick.net). The sections below explain what they do and how to refuse them. You can also block or delete cookies in your browser settings; the games still work, but your language choice may not be remembered.
Hosting and security (Cloudflare)
The site, its game server and its database are hosted by Cloudflare, Inc. Every request passes through Cloudflare's network, which processes your IP address, browser details and the address of the page you request in order to deliver the site, protect it from attacks and keep access logs. Cloudflare handles this data under its privacy policy.
Analytics (Google Analytics 4)
We use Google Analytics 4, provided by Google, to understand how the site is used as a whole — for example which games are popular and which countries and types of device visitors come from. Google Analytics uses cookies and receives your IP address to estimate your approximate location; according to Google, GA4 does not log or store IP addresses. We do not send Google your nickname or any other information that identifies you. In the European Economic Area (EEA), the UK and Switzerland, Google Analytics does not use cookies unless you consent; Google may still receive limited, cookieless measurements.
You can block Google Analytics with the Google Analytics opt-out browser add-on. Learn more in How Google uses information from sites or apps that use its services.
Advertising (Google AdSense)
Some pages show ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
As a result of ad serving, Google and other third parties may place and read cookies on your browser, or use web beacons and IP addresses to collect information — for example to measure ads, limit how often you see the same ad and prevent fraud.
Other ad technology providers and ad networks may also serve ads or use cookies through Google. Where a consent message is shown, it lists them under “Manage options”, and Google publishes a list of commonly used ad technology providers.
You can opt out of personalised advertising in Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info or, in Europe, at www.youronlinechoices.eu. You will still see ads after opting out, but they will be less personalised. To learn how Google uses data, see How Google uses information from sites or apps that use its services.
Consent in the EEA, the UK and Switzerland
If you visit from the European Economic Area, the United Kingdom or Switzerland, you are shown a consent message provided through a Google-certified consent management platform that uses the IAB Transparency and Consent Framework (TCF). Whether advertising and analytics cookies are used, and whether your personal data is used for personalised ads, depends on the choices you make there. If you do not consent, you may still see ads, but they will not be personalised.
You can change or withdraw your choices at any time with the “Privacy and cookie settings” link where it is shown on our pages. If you delete this site's cookies, the message will appear again.
US state privacy rights
We do not sell personal information for money. However, some US state laws treat sharing data with advertising partners for personalised ads as a “sale” or “sharing” of personal information. You can opt out of this at any time: turn off personalised ads in Google Ads Settings or, where Google shows a US state privacy message on our pages, use its “Do Not Sell or Share My Personal Information” link. For your rights to access, correct and delete data, see “Your rights” below.
Do Not Track and Global Privacy Control
There is no common standard for Do Not Track (DNT) signals, so this site does not respond to them. Where a US state law requires it, Google's advertising services treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of personalised advertising. Third parties such as Google may collect information about your activity across different websites over time when you use ujem, as described above.
Legal bases (EEA and UK)
Where the GDPR or UK GDPR applies, we rely on your consent for advertising and analytics cookies and for personalised ads where consent is required; you can withdraw it at any time without affecting earlier processing. We rely on our legitimate interests for the IP hash (keeping the service secure and fair, counting likes and unique plays), for the Hall of Fame entries you choose to save, for the language cookie and for answering your emails. You can object to processing based on legitimate interests by emailing us.
How long we keep data
We keep data only as long as we need it:
- Like and play records (game + IP hash): kept while the game they belong to is on the site. Removing your like deletes its record immediately.
- Rate-limit counters last about one minute. Save tokens are not stored and expire after 12 hours.
- Hall of Fame entries: kept while they are in that game's top 10, and deleted automatically when better scores push them out. You can ask us to delete an entry at any time.
- Emails: kept only as long as needed to deal with your message and any follow-up.
- Google and Cloudflare keep the data they receive under their own retention settings and policies.
- Deleted records may remain for up to 30 days in our database provider's automatic backups.
International transfers
Cloudflare and Google, the providers we use, are based in the United States and process data on servers in many countries. Your data may therefore be processed outside your own country, including outside the EEA, the UK or Korea. These providers protect such transfers with safeguards such as the EU–US Data Privacy Framework and the European Commission's standard contractual clauses, as described in their own policies.
Your rights
Depending on where you live, you may have the right to know what personal data we hold about you, to get a copy, to have it corrected or deleted, to restrict or object to its processing, and to withdraw consent. To use these rights, email ujem.service@gmail.com. We will reply within the time required by applicable law.
Because there are no accounts, we may need your help to find your data: for a Hall of Fame entry, tell us the game, nickname, score and roughly when you saved it. Without your IP address, an IP hash cannot be linked to you, so we may not be able to find records tied to one. You can remove your own like at any time by tapping the like button again.
You also have the right to complain to a data protection supervisory authority — for example the authority in the EU or UK country where you live, or Korea's Personal Information Protection Commission.
Children
ujem is a general-audience site. It is not directed to children under 13, or under the minimum age set by local law (for example 14 in Korea and up to 16 in some EU countries), and we do not knowingly collect personal information from children below that age. Younger children should use the site together with a parent or guardian.
Please do not use real names or other personal details as Hall of Fame nicknames. If you are a parent or guardian and believe your child has given us personal information, email ujem.service@gmail.com and we will delete it.
Users in Korea (Personal Information Protection Act)
Under Korea's Personal Information Protection Act, we also provide the following information.
- Purposes and items: the IP hash (preventing abuse, counting likes and unique plays, rate limiting, save tokens), Hall of Fame entries (nickname, country, score) and emails you send us (email address and message), as described above. We do not process sensitive information or unique identification numbers.
- Retention and destruction: data is kept for the periods listed under “How long we keep data” and, once its purpose is fulfilled, permanently deleted from the database (automatic backups expire within 30 days). We keep no paper records.
- Outsourcing and overseas transfer: hosting, security and database storage are entrusted to Cloudflare, Inc. (USA), and analytics and advertising are provided by Google LLC (USA). Each time you use the site, your IP address, browser information, cookie identifiers and the pages you visit are sent to these companies over the network for the purposes described above, and kept under their own policies. You can contact Cloudflare's Data Protection Officer at dpo@cloudflare.com, and Google through its Privacy Help Center. If you do not want this transfer, you can stop using the site; advertising and analytics cookies can be refused as explained below.
- Provision to third parties: we do not provide or sell personal information to third parties except as described in this policy or where required by law.
- Cookies and how to refuse them: you can block or delete cookies in your browser's privacy or cookie settings. Behavioural information for personalised ads is collected by Google, and you can refuse it in Google Ads Settings. The games work even if you refuse cookies.
- Privacy officer: the site operator (the developer), ujem.service@gmail.com.
- For advice on or to report a privacy infringement, you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).
Security
The site is served only over encrypted HTTPS connections. Plain IP addresses are never written to our database, the salt used for hashing is kept as an encrypted secret, only the site's own server code and the operator can access the database, and requests to our server are rate-limited. No system is perfectly secure, but we keep the data we hold to a minimum.
Contact
For any question or request about this policy or your data, email ujem.service@gmail.com or see the Contact page.
Changes to this policy
If our practices change, we will update this policy and the date at the top. Significant changes will also be noted on the Updates page.