개인정보 처리방침

Controller. The personal data controller for MZI APP is Hevman Core, operating the service from Poland. Contact: [email protected].
Data we process. We may process account data, login/session data, nickname and profile data, game and app activity, Cloud Save documents, library and purchase-like records, friend and game-invite data, notifications, cookie choices, and technical logs.
Developer products and user-generated content. Products submitted by developers and content posted in community areas may be reviewed for security, policy, legal, and quality reasons. We may process related metadata, reports, moderation notes, and technical logs to protect the service and comply with legal duties.
Why we process data. We process data to provide accounts, launch products, remember progress where supported, secure the service, prevent abuse, maintain community features, handle user requests, and improve the platform.
Legal bases. Depending on the context, processing is based on contract performance, legal obligations, legitimate interest such as security and reliability, or consent for optional analytics and marketing technologies.
Cloud Save data. Cloud Save stores data for supported products after login. The stored data is tied to your account and product identifier. It should not contain sensitive, unlawful, or unnecessary personal data.
Cookies and consent. Necessary cookies support login, CSRF protection, sessions, language, and security. Analytics or marketing tools are loaded according to your consent choices and can be managed from the cookie settings.
Security tools. We may use anti-abuse and bot-detection tools such as Google reCAPTCHA on sensitive forms, plus logs and rate limits to protect users and infrastructure.
Data sharing. We may use service providers for hosting, security, analytics, email, payments or infrastructure. They process data only as needed to provide their services and according to applicable safeguards.
Retention. Data is kept while your account is active and later only as long as needed for security, backups, accounting, legal obligations, dispute handling, or legitimate operational needs.
Your rights. Under RODO/GDPR you may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent where applicable. Contact [email protected].
Account deletion. You can request or use account deletion where available. Some data may remain temporarily in backups or where legal retention is required.
Complaints. If you are in Poland, you may contact the President of the Personal Data Protection Office (UODO). You may also contact another competent supervisory authority in the EU.