ExcelEscape (엑셀방탈출) is a paid spreadsheet puzzle service operated in the Republic of Korea by Lee JungAe, a sole proprietor registered under the trade name 덕구스튜디오 (English display name: Duckgu Studio).
Information and purposes
We process information needed for account authentication, game saves, payment and access verification, and support for a paid game service. Optional profile storage, recommendations, and usage statistics follow their separate consent controls. Required account and transaction data are distinguished from optional information.
| Area | Main information | Purpose |
|---|---|---|
| Account and sign-in | Firebase UID, provider and identifier, email, name/photo if provided, account/login times, agreed document versions | Authentication, account management, and abuse prevention |
| Email sign-in | Email and password authentication information managed by Firebase Authentication | Authenticate an email account. Passwords are not published or requested by support |
| Game progress | Game ID, answers/completed steps, hints, save/completion times | Save and resume in the current browser; no automatic cross-device synchronization |
| Payments and access | Order/customer/payment identifiers, product/amount/status, consent version/time, access issuance/use/revocation, subscription periods/renewal status | Verify approval, provide paid content, renew, cancel/refund, and check transactions |
| Recurring payment | Encrypted billing key | Charge the subscription you consented to. ExcelEscape does not store card numbers or CVC |
| Optional profile and recommendations | Consented or manually entered profile fields, topics/difficulty preferences, consent/withdrawal state | Display a private profile and provide selected recommendations |
| Support and game feedback | Sender details, support messages/status/times, or separately consented ratings and optional comments | Respond to inquiries and improve games |
| Optional usage statistics | Hashed random browser/session identifiers, visit/action times, game ID/referral category | Aggregate usage for consenting browsers; no answers, inquiry text, or original account UID in these statistics |
Service providers and international processing
Google Firebase provides authentication, account management, server services, and data hosting. Authentication information is processed in the United States; the primary Cloud Firestore storage location is Seoul, Republic of Korea (asia-northeast3). The full service policy identifies the authentication data transmitted over HTTPS at sign-up/sign-in, receiving entities, retention, and other transfer details.
Google, Kakao, and Naver sign-in process only information you authorize and the provider actually supplies. Email sign-in also uses Firebase Authentication. If you do not want the international authentication processing, account-based purchases and play are unavailable; product descriptions and policies can be viewed without sign-in.
TossPayments Co., Ltd. handles payment approval/cancellation and recurring-payment authentication/processing. Order numbers, product names, amounts, and customer identifiers are transmitted, and the payment window’s privacy notices also apply. Support email uses Google Workspace. The service does not currently display ads.
Retention and deletion
Information is deleted after its purpose or retention period ends. Minimum transaction and dispute evidence required by law is separated from service data after account deletion and retained only for that legal purpose, then destroyed. Account deletion does not replace statutory transaction retention or stopping subscription renewal.
| Information | Retention |
|---|---|
| Account, optional profile, and recommendations | Until account deletion or withdrawal/deletion of the corresponding optional data; minimum consent/withdrawal state to prevent recollection remains while the account exists |
| Browser game progress | Until restarting the game or deleting browser site data |
| Contracts/withdrawals and payment/content-supply records | 5 years |
| Consumer complaints, disputes, and inquiry records | 3 years after handling is completed |
| Display/advertising records, where applicable | 6 months |
| Recurring-payment authentication key | For the period needed for renewal and unresolved payment processing; subject to disposal after termination |
| Game completion feedback, optional usage statistics, routine operational logs | 90 days from the respective collection or creation; exact start points and withdrawal handling are in the service policy |
| Security-incident and audit records | 3 years from creation, or the period justified by law or an active incident |
Choices, safeguards, and contact
Use browser site-data controls to delete local game records. Manage optional information and recommendation consent in the service profile; the service Privacy Policy has usage-statistics controls for stopping collection and requesting deletion. Declining optional consent does not disadvantage sign-in or game features that can be provided using required data.
Request access, correction, deletion, restriction, consent withdrawal, or account deletion through service support, support@duckgustudio.com, or privacy@duckgustudio.com. We verify identity and explain any limitation, such as mandatory retention. HTTPS, encryption at rest, account-level access rules, and administrator authorization help protect information.
Personal-data features are intended for people aged 14 or older. If we learn that a child’s information was processed without legally required guardian consent, we investigate and take necessary action, including deletion. Changes are announced in advance with their reason and effective date, and required consent is obtained.
Operator: Lee JungAe / 덕구스튜디오. Business Registration No. 756-51-01119. Mail-order Sales Registration: 2026-부산남구-0569. Address: Apt. 1502, Building 104, Gyeongdong Apartments, 202 Dongmyeong-ro, Nam-gu, Busan, Republic of Korea. Telephone: +82-10-3875-7339. Support: support@duckgustudio.com. Privacy: privacy@duckgustudio.com.