Privacy Policy

The Company complies with the Personal Information Protection Act as well as any other laws, regulations, and rules applicable to personal information handled by the Company.

The Company obtains personal information properly without using deception or other wrongful means.

The Company will use personal information it has acquired for the following purposes only, and will not use it for any other purposes unless specified to do so by laws or ordinances:

The Company takes appropriate safety measures to prevent leakage of, loss of, or damage to, the personal data it handles and properly manages personal information.

The Company appropriately supervises its employees with respect to their handling of personal information.

Also, in cases where the Company entrusts the handling of personal data to third parties, it appropriately supervises such third parties to ensure proper safety management of the applicable personal data.

The Company does not provide personal data to any third party without the consent of the person in question unless specified to do so by laws or ordinances (including the following cases):

・if pursuant to a law or regulation;

・if it is necessary to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the person in question;

・if there is a special need to improve public health or promote healthy child development, and it is difficult to obtain the consent of the person in question;

・if it is necessary to cooperate with a national government organ, local government, or a party entrusted thereby with performing the functions prescribed by laws and regulations, and obtaining the consent of the person in question is likely to interfere with the performance of those functions; or

・if the third party is an academic institution, etc. and needs to handle personal data for the purpose of study and research (including the case where a part of the purpose of handling the personal data is for study and research, and excluding the case where the handling is likely to unjustly infringe personal rights and interests).

In cases where it is separately set out in the services of this Company to provide personal data to third parties (including, but not limited to, the case where the Company set out in the Separate Policy), this will be performed in a lawful manner in accordance with laws and regulations.

The Company might display links to external sites in connection with the Company’s services, but the Company is not liable for personal information registered or collected at those external sites.

If the Company is requested by a person to indicate the purposes of use of the person's retained personal data, or if it is requested to disclose the retained personal data, etc. (including disclosure of records of provision to third parties); to correct, add content to, or delete content from it (“correction, etc.”); to discontinue its use or to erase it (“discontinuation of use, etc.”); or to discontinue its provision to a third party (disclosure; correction, etc.; discontinuation of use, etc.; and discontinuation of provision to a third party are collectively referred to as “disclosure, etc.”), the Company will respond without delay in accordance with laws and regulations, in a reasonable period of time and within an appropriate scope. However, the Company will not respond to a request for disclosure, etc. if it is unable to confirm that the request is from the person in question.

To request disclosure, etc. of personal information retained by the Company, please contact the Company via email at the following address.

WonderPlanet Inc.

(info@wonderpla.net)

For the Company’s address and representatives’ names, please refer to this page (link: Company Info; WonderPlanet, Inc. (wonderpla.net)).

If a minor uses a service provided by the Company and submits his or her personal information, the minor must obtain consent from the person who has parental authority over the minor or any other statutory agent of the minor, and if a request is made to the Company by the person with parental authority or any other statutory agent for disclosure, etc. of the retained personal data of the minor, the Company will comply with the request.

If a user deletes the user's account for a service provided by the Company, the Company will properly process the user information in accordance with the applicable laws and regulations and the rules separately established by the Company.

The Company might use information collection modules selected by the Company and listed in (1) below to improve services provided by the Company or to develop new services, and might accordingly submit customer information to the providers of such information collection modules. These information collection modules will collect customer information listed in (2) below without including any information which could be used for personal identification, and the collected information will be managed according to the privacy policies prescribed by the providers of each information collection module as well as other related regulations. “Information collection module” as used here refers to a program created by a third party which is independent from the functions of an application itself and performs operations such as displaying advertisements and analyzing the frequency of the application’s use. For details on the items of information acquired, their purposes of use, and their submission to third parties, please refer to the Terms of Use and privacy policies of each respective service.

(1) Information collection modules used by the Company

(i) Programs provided by advertising SDK provider companies
Acquisition method: Acquisition after the user’s approval
Purpose of use: Measurement of advertising effectiveness; ad placements
Information to be acquired: Device model name; OS version; IP address; play status

(ii) Programs provided by data analyzing companies
Acquisition method: Acquisition after the user’s approval
Purpose of use: Ascertainment of user behavior
Information to be acquired: Device model name; OS version; IP address; play status

(iii) Programs provided by middleware development companies
Acquisition method: Automatic acquisition
Purpose of use: Ascertainment of user behavior
Information to be acquired: Device model name; OS version; app version

(2) Customer information to be collected

(i) Device model name
Acquisition method: Automatic acquisition
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(ii) OS version
Acquisition method: Automatic acquisition
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(iii) IP address (acquired as an access log and not saved in a database)
Acquisition method: Acquisition after the user’s approval
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(iv) Location setting
Acquisition method: Acquisition after the user’s approval
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(v) Language setting (saved in the app and not saved in a database)
Acquisition method: Acquisition after the user’s approval
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(vi) Time setting on device
Acquisition method: Acquisition after the user’s approval
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(vii) Android advertising ID (if Android is used)
Acquisition method: Acquisition after the user’s approval
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(viii) IDFA (if iOS is used)
Acquisition method: Acquisition after the user’s approval
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: Transmitted to data analyzing companies, middleware development companies, and advertising SDK provider companies

(ix) Apple ID information (if iOS is used)
Acquisition method: Acquisition at users’ discretion
Purpose of use: Used for data migration
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: None

(x) Google Account information (if Android is used)
Acquisition method: Acquisition at users’ discretion (information is saved after encryption)
Purpose of use: Used for data migration
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: None

(xi) Facebook account information
Acquisition method: Inputted by users at their discretion
Purpose of use: Used for data migration
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: None

(xii) LINE account information
Acquisition method: Inputted by users at their discretion
Purpose of use: Used for data migration
Whether information is transmitted outside the Company or submitted to third parties, and whether information collection modules are used: None

Cookies are used for the purpose of enhancement of convenience for users by saving user settings, for the purpose of security by maintaining and protecting sessions, and for the purpose of provision of better services by ascertaining users' frequency of access to, users' manner of use of, and number of users of, service of the Company.

Each user can allow or refuse the use of cookies, but if the user refuses to save cookies, the user might not be able to use all or a part of services of the Company, such as services that need a login.

This privacy policy might be revised. In that case, notification will be made of the revised content by making the revised privacy policy available for viewing in the website of the Company.

Please stay apprised of the latest privacy policy by checking the Company’s website from time to time.

If there is any unclear point with respect to this privacy policy, or if there is a question, complaint, or matter for consultation with respect to the handling of personal information in any of the services provided by the Company, please contact the Company via email at the following address.

WonderPlanet Inc.

(info@wonderpla.net)

The Company collected the following categories of California Personal Information in the preceding 12 months:

(i) The users’ status in the game that they are playing, such as history of purchase, completing quest, and login.

(ii) App version

(iii) Apple ID information (if iOS is used)

(iv) Google Account information (if Android is used)

(v) Facebook account information

(vi) LINE account information (if LINE application is used)

(vii) Receipt ID (i.e. ID numbers provided by Apple and Google)

(viii) Email address

(ix) Order information (including order ID)

(x) Cookies for analytics purposes

The Company collects California Personal Information from a variety of sources. The Company collects California Personal Information from the following categories of sources:

(i) Consumers;

(ii) Information Collection Modules: Programs provided by data analytics providers, and middleware development companies; and

(iii) Service providers; operating systems and platforms.

The Company uses and discloses the California Personal Information listed above for the purposes prescribed in “3. Purposes of use of personal information” and “6. Provision of personal data to third parties” in the Privacy Policy. The commercial and business purposes include, without limitation:

(1) Our commercial purposes, including marketing, advertising, and enabling commercial transactions.

(2) Our business purposes as identified in the CCPA, which include:

(i) Auditing related to our interactions with users;

(ii) Legal compliance;

(iii) Detecting and protecting against security incidents, fraud, and illegal activity;

(iv) Debugging;

(v) Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics;

(vi) Internal research for technological improvement;

(vii) Internal operations;

(viii) Activities to maintain and improve our services; and

(ix) Other one-time uses.

(3) Analytics
The Company uses Google Analytics to improve the performance of the Site and for analytics and marketing purposes, including measurement of advertising effectiveness. For more information about how Google Analytics collects and uses data when a user uses our Site, visit https://www.google.com/policies/privacy/partners/, and to opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout/.

(4) Third Party Advertisers
Certain Products are currently supported by third party advertising partners that serve advertisements (“Third Party Advertisers”), including behavioral, location or interest based advertising (“Interest Based Advertising”). These Third Party Advertisers use technology to serve the advertisements and link to them directly into our Products. They may automatically receive users’ device model name, OS version, IP address (acquired as an access log and not saved in a database), the users’ status in the game that they are playing (such as history of purchase, completing quest, and login), location setting, language setting, time setting on device, Android advertising ID (if Android is used), and IDFA (if iOS is used) when this happens.

Users’ mobile device may provide a user with the ability to disable the functions pursuant to the below instruction.

iOS (versions 10-13) – On users’ iOS device (iPhone or iPad), open “Settings > Privacy > Advertising” and turn on “Limit Ad Tracking” to opt-out of interest based ads.
Please see additional information from Apple here: https://support.apple.com/en-us/HT202074

iOS (version 14.5+) – On users’ iOS device (iPhone or iPad) open “Settings > Privacy > Tracking” and turn off “Allow Apps to Request to Track”

Android – Open the Settings app on users’ Android phone, tap Ads and enable “Opt out of interest based ads”.

Please note that if a user opts out of certain Interest Based Advertising, a user may continue to receive contextual ads based on other non-personal information, such as ads related to the content of the Product the user is using.

If a user has questions about disabling the functions, please contact the Company by using the information below.

Via email to info@wonderpla.net

Within the preceding 12 months, the Company has disclosed or sold for business purposes the following California Personal Information to the categories of third parties below:

(i) Data analyzing companies, middleware development companies

• Device model name

• OS version

• IP address (acquired as an access log and not saved in a database)

• Location setting

• Language setting (saved in the app and not saved in a database)

• Time setting on device

• Android advertising ID (if Android is used)

• IDFA (if iOS is used)

• App version

• The users’ status in the game that they are playing, such as history of purchase, completing quest, and login.

(ii) Data analytics provider – Google Analytics

• Cookie

California residents have certain rights with respect to California Personal Information collected by businesses. If a user is a California resident, they may exercise the following rights regarding California Personal Information, subject to certain exceptions and limitations:

(i) The right to know the categories and specific pieces of personal information the Company collects, uses, discloses, and sells about a user; the categories of sources from which the Company collected users’ personal information; the Company’s purposes for collecting or selling users’ personal information; the categories of users’ personal information that the Company has either sold or disclosed for a business purpose; and the categories of third parties with which the Company has shared personal information.

(ii) The right to request that the Company deletes the personal information the Company has collected from a user or maintain about a user

(iii) The right to opt out of the Company’s sale(s) of users’ personal information

(iv) The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA

(v) Other California Privacy Rights. Under California’s “Shine the Light” law (Civil Code Section § 1798.83), a user, as a California resident, may ask the Company to request a list of the categories of personal information (if any) the Company disclosed to third parties for their own direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. A user may also ask the Company to refrain from sharing users’ personal information with third parties for their marketing purposes.

To exercise any of the above rights, please contact the Company using the following information and submit the required verification information, as further described below:

a) Via email to info@wonderpla.net

b) Online at Contact us.

If a user has questions about these rights, please contact the Company by using the information below.

Via email to info@wonderpla.net

Verification Process and Required Information. Note that the Company may need to request additional information from a user to verify their identity or understand the scope of their request, although they will not be required to create an account with the Company to submit a request or have it fulfilled. The Company will require them to provide certain personal information to countercheck with the Company’s records.

Authorized Agent. A user may designate an authorized agent to make a CCPA request on a user’s behalf by submitting an agency certificate via one of the submission methods above.

The Company does not have actual knowledge that it has collected personal information of children under 16 years of age. If the Company learns that it has acquired information of anyone under the age of 16, the Company will delete it immediately.

Some browsers have a “do not track” feature that lets a user tell websites that a user does not want to have their online activities tracked. At this time, we do not respond to browser “do not track” signals.

If we make changes to this Privacy Policy for Customers – California Annex, we will post the revised Statement on the Site and games governed by our Privacy Policy and identify the effective date of the update. User’s continued use of our Site and games, following the effective date of the update, constitutes user’s acceptance of and agreement to such updates. We encourage a user to check the Site and Games periodically for updates.

For questions or concerns about the Company’s group’s privacy policy or practices, please contact the Company by using the information below.

Via email to info@wonderpla.net

We will only process your personal data:

(a) where you have given your consent (you may withdraw your consent at any time, by making a request using the contact details set out below);

(b) where the processing is necessary to provide our products or services to you and maintain your account with us;

(c) where the processing is necessary to respond to a request from you; and

(d) where the processing is necessary for compliance with our legal and regulatory obligations

2.1. We process the following types of personal data about you:

(a) Your name, age, gender, job, language, place of residence, email address, and other contact details;

(b) Details of your preferences for services, marketing events or materials;

(c) Your messages, feedback or contributions to customer surveys and questionnaires;

(d) Details of your account details and your access to our systems, websites and applications (including device information and IP address).

2.2. It may be mandatory for you to provide us with your personal data, to enable us to manage our business and operations, to maintain your account with us, to provide our products or services to you or to comply with our legal and regulatory obligations. If you fail to provide your personal data when requested, we may not be able to maintain your account with us or to provide our products or services to you.

2.3. We make every effort to maintain the accuracy and completeness of your personal data which we store and to ensure all of your personal data is up to date. However, you can assist us with this considerably by promptly contacting us if there are any changes to your personal data or if you become aware that we have inaccurate personal data relating to you. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.

We usually collect your personal data from the information you submit. This will typically be done when you create your account with us, you sign up to our news list and you contact our customer service desk.
We may also collect your personal data from other sources such as our dealers or retail partners, social media service providers (such as Google and Facebook), magazine publishers and PR firms.

We process your personal data for the following purposes:

(a) to provide you with requested products or services and maintain your account with us;

(b) to respond to your mesages or posts to us;

(c) to provide you with promotional and marketing materials about our products and services that we think you may be interested in;

(d) to manage, develop and improve our products, services, information technology systems, websites and applications;

(e) for monitoring and assessing compliance with law and our policies and standards;

(f) to comply with our legal and regulatory obligations and requests anywhere in the world, including reporting to and/or being audited by national and international regulatory bodies;

(g) for administrative purposes in relation to the security of and access to our systems, websites and applications; and

(h) to comply with court orders and exercise and/or defend our legal rights.

This website and our applications are controlled and operated from Japan and the files containing your personal data will be maintained on our servers or those of our IT service providers located in Japan or the United States. Nevertheless, we will process your personal data with the same level of protection as in the EEA and the UK and recognise your rights on your personal data you would hold under the GDPR or the UK GDPR.
Where we (or our IT service providers maintaining the servers containing your personal data) transfer your personal data to countries or territories outside the EEA and the UK, the laws of such countries or territories may not offer the same level of protection of personal data as are enjoyed within the EEA and the UK. We will ensure that any such international transfers are made in compliance with the GDPR or the UK GDPR. For further information, please contact us as set out below.

We do not and will not sell, rent out or trade your personal data. We will only disclose your personal data to the following recipients:

(a) to companies approved or designated by you;

(b) to third parties who process your personal data on our behalf (such as our systems providers including cloud providers);

(c) to third parties who process your personal data on their own behalf but through providing you with a service on our behalf (such as our suppliers);

(d) to any third party to whom we assign or novate any of our rights or obligations;

(e) to any prospective buyer in the event we sell any part of our business or assets; and

(f) to any government, regulatory agency, enforcement or exchange body or court where we are required to do so by applicable law or regulation or at their request.

We use services provided by Facebook, Google and AppsFlyer for analytics, advertising and account management. They may collect various personal data when you are using our services. Please refer to their privacy policies for further information.

We are committed to safeguarding and protecting your personal data and will implement and maintain appropriate technical and organisational measures to ensure a level of security appropriate to protect your personal data from accidental or unauthorised destruction, loss, alteration, disclosure or access.

9.1. Under certain circumstances, you have the following rights in relation to our processing of your personal data:

(a) The right of access

(b) The right to rectification

(c) The right to erasure

(d) The right to restriction of processing

(e) The right to object to processing

(f) The right to data portability

9.2. If you wish to exercise any of your rights, please contact us using the contact details provided below. We may request that you prove your identity in order for us to comply with our security obligations and to prevent unauthorised disclosure of data.

We will only retain your personal data as long as necessary to fulfill the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements.

If you tell us that you do not wish us to provide you with information about our products or services and other marketing materials, we will not contact you further for the purpose of direct marketing. You can contact us using the contact details set out below.

A "cookie" is a small text file that is stored on a user's hard drive or mobile device. Cookies are generated by web servers when the user enters an internet page, and are passed to the user's computer or mobile device and stored for subsequent future access. They perform a number of functions associated with browsing websites and are used for a variety of different purposes, such as tracing users from page to page on an internet site. This can enhance a user's experience on a website, enabling the site to be personalised according to e.g. a user's preferences and browsing activities.
For more information about how we use cookies, please read our cookie policy.

We may change or update parts of this Notice in order to maintain our compliance with applicable law and regulation or following an update to our internal practices. You will not necessarily be directly notified of such a change. Therefore, please ensure that you regularly check this Notice so you are fully aware of any changes or updates.

If you have any queries about the contents of this Notice or your personal data, or wish to make a request in relation to your personal data, please contact us using the details set out below:

Wonderplanet Inc.

3-23-18, Nishiki, Naka-ku, Nagoya, Aichi,Japan

Email: info@wonderpla.net

We have appointed Ashurst LLP (UK company number OC330252)as our representative in EU and the UK for data protection matters.You can contact them using the following email address. Your message will be forwarded to appropriate members of their data privacy team.

Email: WonderPlanet.EURepresentative@ashurst.com

We commit to resolve complaints about our use of your personal data. If you consider that we have breached your data protection rights, please contact us using the details set out above. If you are not satisfied with the response, you are entitled to lodge a complaint with a competent data protection authority of each EEA member state or the UK.