1. Data minimization
We aim to process only information reasonably necessary to provide and protect our services. Information is deleted when its purpose has been fulfilled unless retention is required by applicable law.
Please do not send passwords, payment-card details, government identification documents, or other unnecessary sensitive information by email.
2. Information we may process and why
2.1 Website
The XENAKE website currently does not provide account registration or a web contact form.
Our hosting/CDN infrastructure may temporarily process technical request information such as:
- IP address
- access time
- browser and User-Agent information
- requested URL
- security or error events
Purposes include website delivery, security, abuse prevention, troubleshooting, and service reliability.
2.2 Email and support
If you contact contact@xenake.com, support@xenake.com, or privacy@xenake.com, we may process:
- your email address
- name or contact information you choose to provide
- the content and attachments of your inquiry
- device model, OS version, app version, and issue details you provide for support
We use this information to respond to business, support, privacy, dispute, and service-related requests.
2.3 SILENT TRACE gameplay
SILENT TRACE is designed so that the initial free experience does not require login. Depending on the released implementation, we may process:
- temporary player or installation identifiers
- platform, OS version, and app version
- save/progress state
- case, run, and scene identifiers
- clue, result, badge, post-clear investigation, and replay state
- service request/response status and operational logs
We use this information to provide game progress and restore functionality, validate service state and access, prevent duplicate or abusive requests, and maintain service reliability.
We do not design the service around invasive device fingerprinting for advertising purposes.
2.4 Account linking
When account linking is needed for paid purchases, purchase restoration, or device changes, we may process:
- identifiers issued by Google, Apple, or another supported account provider
- account-link status
- an email address where directly provided or required
- email and verification status if an email OTP fallback is actually introduced
2.5 Purchases and entitlements
Payments for paid cases or other digital content are processed through the applicable platform, such as Google Play or the Apple App Store.
XENAKE generally does not directly collect or store your payment-card number.
We may process:
- store transaction/order identifiers
- product identifiers
- purchase, restore, cancellation, refund, or revocation status
- platform
- content entitlement status
We use this information for purchase verification, restoration, access control, refunds/disputes, and fraud prevention.
2.6 Minimal operational and cost telemetry
To operate the service safely and control service costs, we may process minimal telemetry such as:
- case/run/scene identifiers
- request success/failure
- request counts and limit results
- latency
- where an AI feature is actually enabled, provider/model category, input/output usage, estimated cost, and fallback status
We do not intend to retain full raw dialogue content merely for cost measurement when it is not needed.
3. Generative AI features
The use of generative AI in SILENT TRACE and the external AI provider(s) have not been finalized.
Generative AI may be used only if it is shown to add meaningful player value. XENAKE may choose not to provide such functionality or may replace it with structured or pre-authored interactions.
Before activating a feature that sends personal information or user input to an external AI provider, we will update this Policy as necessary to describe the actual provider, destination country where applicable, transferred data, purpose, timing/method, retention, and any consent or choice required by law.
4. Analytics and crash reporting
No third-party production Analytics SDK or Crash Reporting SDK has been finalized as of the effective date of this Policy.
If we later introduce Firebase, Sentry, or another external analytics/crash provider, we will review the actual data flow and update this Policy and applicable app-store privacy disclosures before operation.
We may still process limited first-party operational events and error information necessary to run and protect the service.
5. Retention
We delete personal information when its processing purpose has been fulfilled unless applicable law requires retention.
Where Korean e-commerce law applies, relevant records may be retained for the legally required periods, including:
- advertising/display records: 6 months
- contract or withdrawal records: 5 years
- payment and supply records: 5 years
- consumer complaint/dispute records: 3 years
Other information is retained only as long as reasonably necessary for service delivery, account/entitlement administration, security, troubleshooting, and applicable legal obligations.
6. Sharing and service providers
We do not provide personal information to third parties for unrelated purposes except with consent or as otherwise permitted by law.
We may use cloud hosting, app stores, email, authentication, AI, analytics, or crash-reporting providers to operate the service. Where processing, outsourcing, or cross-border transfer requirements apply, we will provide the disclosures required by applicable law.
Payments through Google Play and the Apple App Store may also be subject to those platforms’ own privacy policies.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, suspension of processing, withdrawal of consent where applicable, and other available privacy rights.
Privacy requests may be submitted to:
We may request reasonable verification to protect the privacy and security of the requester.
8. Deletion
When information is no longer required and no legal retention obligation applies, we delete it using reasonable methods designed to prevent practical recovery.
9. Security
We apply reasonable safeguards appropriate to the nature and scale of the data we process, including access controls, secure handling of credentials, encrypted transport where appropriate, logging/access management, incident response, avoiding direct storage of payment-card information, and keeping external API keys out of the game client.
10. Children
SILENT TRACE is not primarily directed to children under 14.
If a future feature requires processing personal information of a child in a manner that requires parental or guardian consent under applicable law, we will implement the required process before offering that feature.
11. Contact
- Business name: XENAKE / 제네이크
- Representative: LEE NAESUNG / 이래성
- Privacy: privacy@xenake.com
- General: contact@xenake.com
- Address: 408, 127 Gaebong-ro, Guro-gu, Seoul, 08274, Republic of Korea
- Phone: +82 10-2652-4538
12. Changes to this Policy
We may update this Policy when our services, service providers, or applicable legal requirements change. Material changes will be notified through the website or service as required by applicable law.
