Terms of Use and Privacy Notice

Who runs this service
K-Pop Gacha is owned and operated by Material-Eyezed LLC. For privacy, account, or support requests, contact contact@materialeyezed.xyz.

What we collect

• Account data you provide: a username and either an email with a password stored as a bcrypt hash, a verified Google or Apple email and provider account ID, or a wallet address used for signature-based sign-in with an optional backup email.
• Your IP address at registration and privacy-protected network and browser-device signals during account access, used to review possible abuse or multi-accounting. Security observations are stored as one-way keyed hashes for up to 90 days.
• Game data created by play, including cards, gems, achievements, trades, friends, shop state, settings, support perks, and activity needed to run the game.
• The date your account was created and the date/version of the terms you accepted.

Why we use it
We use account and game data to provide the game, save progress, keep accounts secure, prevent abuse, investigate cheating or multi-accounting, and manage optional supporter features.

Browser storage
We store a login token, a random browser-device identifier, and local preferences so the app works, keeps you signed in, and supports account-security review. The identifier does not read hardware details or create a browser fingerprint. Clearing browser storage removes it; logging out removes the login token.

Payments and sharing
We do not sell your data. Optional payments or supporter subscriptions may be processed by payment providers such as Square or Stripe, which handle payment details under their own policies. We use payment status only to grant supporter perks.

Retention and deletion
We keep your account and game data while your account exists. Hashed account-security observations are automatically removed after 90 days. You can delete your account from Profile, which removes account data tied to you from the game database, except records that must be kept for security, abuse prevention, payment records, or legal reasons.

Rules and safety
You agree not to abuse the service, exploit bugs, harass other players, evade restrictions, or create accounts to gain unfair advantages. Accounts may be limited, reset, or removed when needed to protect the game.

Security
Passwords are hashed with bcrypt and sessions use signed tokens. No online service can guarantee perfect security.

AI Use

AI Transparency

K-Pop Gacha was built with AI-assisted coding support. Early development used Claude Code, and later development has used Codex, mainly as coding assistants for implementation, debugging, refactoring, and maintenance.

All major decisions about the game are human-directed: the concept, gameplay ideas, card choices, balance, visual direction, feature priorities, testing, and what actually ships.

No AI-generated artwork is used for the cards, pixel art, visual assets, or game ideas. The card assets, pixel art, UI direction, and creative choices are human-made.

AI tools have been used to help with:

• Writing and refactoring code
• Debugging issues
• Working through frontend and backend implementation details
• Database/query fixes
• Drafting or organizing technical notes
• Pressure-testing feature behavior

K-Pop Gacha is a human-made fan project with AI used as a development assistant. The final decisions, responsibility, and care behind the game are mine.

Who runs this service
K-Pop Gacha is owned and operated by Material-Eyezed LLC. For privacy, account, or support requests, contact contact@materialeyezed.xyz.

What we collect

• Account data you provide: a username and either an email with a password stored as a bcrypt hash, a verified Google or Apple email and provider account ID, or a wallet address used for signature-based sign-in.
• Your IP address at registration and privacy-protected network and browser-device signals during account access, used to review possible abuse or multi-accounting. Security observations are stored as one-way keyed hashes for up to 90 days.
• Game data created by play, including cards, gems, achievements, trades, friends, shop state, settings, support perks, and activity needed to run the game.
• The date your account was created and the date/version of the terms you accepted.

Why we use it
We use account and game data to provide the game, save progress, keep accounts secure, prevent abuse, investigate cheating or multi-accounting, and manage optional supporter features.

Browser storage
We store a login token, a random browser-device identifier, and local preferences so the app works, keeps you signed in, and supports account-security review. The identifier does not read hardware details or create a browser fingerprint. Clearing browser storage removes it; logging out removes the login token.

Payments and sharing
We do not sell your data. Optional payments or supporter subscriptions may be processed by payment providers such as Square or Stripe, which handle payment details under their own policies. We use payment status only to grant supporter perks.

Retention and deletion
We keep your account and game data while your account exists. Hashed account-security observations are automatically removed after 90 days. You can delete your account from Profile, which removes account data tied to you from the game database, except records that must be kept for security, abuse prevention, payment records, or legal reasons.

Rules and safety
You agree not to abuse the service, exploit bugs, harass other players, evade restrictions, or create accounts to gain unfair advantages. Accounts may be limited, reset, or removed when needed to protect the game.

Security
Passwords are hashed with bcrypt and sessions use signed tokens. No online service can guarantee perfect security.