소싸움(Bull Push) 개인정보처리방침

Bull Push is a 90-second game in which you steer a cartoon bull with a joystick and push other bulls out of the ring. There are no accounts and no login. On your device, the app stores only a random ID, your coat color and the nickname you choose. In the live arena, only your nickname (or color name), color, score and game control signals pass through our server to players in the same room and to the ranking. Bull Push does not handle names, contact details, real location, photos or the microphone. One Google AdMob banner appears at the bottom of the home screen (section 5), and the app includes no analytics tools.

From version 1.1.0, the app is available in English and Korean and follows your device's language settings. On Korean devices it is called 소싸움. The information it handles is the same in both languages. The Korean policy above and this English policy describe the same practices.

1. Information we process and why

Bull Push does not ask for information that directly identifies you, such as your name, email address or phone number. The information it handles is listed below. Under “Stored in”, device means your phone, and server means the realtime relay (Supabase Realtime) or the round results store on slox.co.kr.

• Random ID (device storage key sossaum-id)

  What

  “ox-” followed by 16 random characters and the time it was created. It is made on first launch and is not an account. It is not the operating system advertising ID or a hardware identifier.

  Purpose

  Tells your bull apart from the others in the same room, and decides which device hosts the round in the live arena.

  Stored in

  Device. While you are in the live arena, it is included in the player list and control signals sent to players in the same room. It is never added to the round results store.

  Kept for

  Until you delete the app. Reinstalling creates a new one. It drops off the server's player list when you leave the room.

• Coat color (device storage key sossaum-color)

  What

  A number (0 to 11) for one of 12 colors. You can change it on the home screen.

  Purpose

  Draws your bull, and gives it a color name such as Butter Bull when you have no nickname.

  Stored in

  Device. In the live arena, it is included in the player list and saved with round results.

  Kept for

  On the device until you delete the app. Values saved in round results are kept as described in section 3.

• Nickname (optional, device storage key sossaum-nickname)

  What

  A name of 2 to 20 characters that you type on the home screen. Line breaks and control characters are not allowed, and nicknames containing common English or Korean swear words or slurs cannot be saved (a basic filter on your device). Without a nickname, you play under your color name.

  Purpose

  Your name tag for players in the same room, saving round results, and the daily and weekly rankings. Only bulls with a nickname are ranked.

  Stored in

  Device. When a round ends in the live arena, it is also saved in the round results store on slox.co.kr.

  Kept for

  On the device until you clear it or delete the app. Round results on the server are kept as described in section 3.

  Who sees it

  Players in the same room (including web players on slox.co.kr) see it on name tags, and anyone can see it on the public ranking in the app and on the web. Please do not use your real name or contact details as a nickname.

• Game controls and state (live arena only)

  What

  Movement and push input (ID, sequence number, direction, push, time), the room state produced by the hosting device (every bull's position, speed and score inside the ring), host handover signals, and round start and end signals. Positions here are places inside the game ring, not your device's real location.

  Purpose

  Keeps the match in sync with players in the same room in real time.

  Stored in

  Not stored. Relayed through Supabase Realtime to players in the same room and never saved in a database.

  Kept for

  Ends when you leave the room.

• Player list entry (live arena only)

  What

  Random ID, name (nickname or color name), color, join time, role (player or watcher), room number and an away flag. To count how many people are in the arena, the home screen also joins the lobby as a watcher with an empty name.

  Purpose

  Assigning rooms, showing player counts and choosing the host.

  Stored in

  Only in the Supabase Realtime player list, never in a database.

  Kept for

  Removed from the list when you leave the room or the home screen.

• Round results (live arena only)

  What

  Room name (room-N), round number, end time, transport type, number of players, and each player's name, color and score (push-outs). Practice arena rounds are never sent. Color names are sent in their original Korean form (for example, 버터색 황소) so the app and the web show the same bull, and the English app displays them in English, such as Butter Bull.

  Purpose

  Daily and weekly rankings, and keeping the same round from being reported twice.

  Stored in

  The round results store on slox.co.kr (a Supabase database).

  Kept for

  See section 3.

From version 1.1.0, the nickname filter runs entirely on your device using a basic word list. It sends nothing new to our server and does not change what the server stores. If a nickname you saved earlier is caught by the filter, the app stops using it and you play under your color name. If another player's name (for example, one set on the web) is caught, that bull is shown on your screen under its color name. It is a basic filter for common cases, so it will not catch everything.

2. Permissions

• The Android app declares the internet permission (INTERNET), and the Google ads SDK adds ACCESS_NETWORK_STATE and AD_ID at build time. The internet is used to join the live arena, report round results, load the ranking and show the home screen banner. These permissions are granted automatically at install, with no prompt. Without the internet, only the practice arena opens, and it runs entirely on the device.
• The iOS app asks you for no permissions.
• Neither platform asks for microphone, camera, location, contacts, photos, notifications or storage permissions. In this policy, “position” and “coordinates” mean places inside the game ring. The app never reads your device's real location (GPS).

3. What is sent to the server and how long it is kept

In the practice arena, the game information in section 1 never leaves your device (the ads SDK on the home screen is described in section 5). The live arena opens only in builds that include server settings, and then the communication below takes place. Nothing sent to the server includes your real name, contact details, real location or photos, unless you type them into your nickname yourself.

• Realtime relay (Supabase Realtime)

  The app posts its player list entry and exchanges control and state signals on the lobby channel (sossaum:lobby) and room channels (sossaum:room-N). Players on the same channel, including web players on slox.co.kr, receive this information. Bull Push does not store these signals in a database. When you leave the room, you drop off the player list and the channel is disconnected.

• Round result report (POST https://www.slox.co.kr/api/sossaum/round)

  Only the device that hosted the round in the live arena sends it, and only when at least one human player scored. Practice buddies (bots) are left out. The report contains the room name, round number, each player's name, color and score, the end time and the transport type. It does not include the random ID.

  Before saving, the server checks the body size (4 KB), the format and the limits (names up to 20 characters, at most 90 points per player, and an end time between 1 hour before and 10 minutes after the server's clock). If the same room, round number and end time are reported twice, only the first report is kept. Players with a color name are saved with a guest flag and left out of ranking totals.

  Saved fields: room name, round number, end time, transport type, number of players, number of nicknamed players, each player's name, color, score and guest flag, and the time saved.

  Retention: the round results table has no automatic deletion or cleanup schedule, so rows are kept until you ask us to delete them or the operator removes them. The ranking only totals today and this week (Korea time), but older rows remain in the table.

• Ranking lookup (GET https://www.slox.co.kr/api/sossaum/ranking)

  Sends only the period (today or this week) and no personal information. The response lists the top 20 nicknames with their totals, number of rounds, best scores and the time of their last round. Anyone can see the same ranking on slox.co.kr.

• IP address

  To limit how often results are reported, the slox.co.kr server briefly checks the requesting IP address in server memory. It does not store IP addresses in a database or link them to round results. If a check or a save fails, the server error log keeps only the error code and message.

4. Service providers, sharing and international transfers

The following companies process information so we can run the service. We do not share or sell personal information to anyone else.

• Supabase: relays the live arena's player list and control signals (Realtime) and stores the round results database. Supabase Privacy Policy
• Vercel: hosts the slox.co.kr website and API server. Round result reports and ranking lookups pass through this server. Vercel Privacy Policy
• Google AdMob: the banner on the home screen. The Google ads SDK collects the information described in section 5 (advertising ID, approximate location based on IP, ad views and clicks, diagnostics) and processes it on Google's servers. Nicknames, the random ID, match records and rankings are never passed to it. Google's advertising policy

International transfers: Supabase, Vercel and Google are headquartered outside Korea, and the servers that process data may be located in other countries, including outside your own. Supabase and Vercel process the information in sections 1 and 3 (random ID, nickname or color name, color, score, room name, times and game control signals), and Google processes the ad information in section 5. None of it includes names, contact details or real location.

We use no other third-party SDKs, such as speech recognition, social login or analytics. The nickname filter is a word list inside the app, not an outside service. We may disclose information only to the extent required by a court order or by law.

5. Ads

Bull Push shows one Google AdMob banner at the bottom of the home screen. The ring, the results and the ranking have no ads, there are no interstitial or rewarded ads, and no new banner is requested while you are in an arena. To serve and measure ads, the Google Mobile Ads SDK may collect your device's advertising ID, approximate location based on your IP address (country or region level), ad views and clicks, and app performance and crash diagnostics. Your nickname, coat color, random ID, match records and rankings are never passed to the ads SDK. Even if you only play in the practice arena, the home screen ad is shown whenever you are online.

• No tracking. On iOS, Bull Push does not ask for App Tracking Transparency (ATT) permission and does not use the advertising ID to track you across other companies' apps or websites.
• Ad content rating. Ads are requested with a maximum content rating of T (Teen).
• Consent and choices. Users in the European Economic Area (EEA) and the UK see a consent form before any ad is shown and can change their choice at any time with Ad privacy settings in the Ads section below How to play on the home screen (Bull Push has no settings screen). Elsewhere, no extra consent is needed, so the button is unavailable and shows “Not needed in your region.”
• Deletion and questions. Information collected by the ads SDK is processed by Google. SLOX does not receive it at the individual level, so it cannot be deleted from within the app. On Android, you can reset or delete your advertising ID under Ads in your device settings. For details on how Google processes this data, see Google's advertising policy.
• No analytics. Bull Push includes no usage analytics SDKs.

6. Children

Bull Push has no accounts and no age check. It is not directed at children under 13, and in the EEA and UK it is not directed at children under 16 where local law sets that age. We do not knowingly collect personal information from children. The only thing the app asks you to type is an optional nickname. If you learn that a child has entered personal information, such as a real name, as a nickname and it appears on the ranking, please email us. We will delete it after checking.

7. Your rights and how to delete your data

• On your device: clear the nickname box on the home screen and save to delete your nickname from the device and go back to your color name. You can change your coat color on the home screen. There is no separate button to delete the random ID and coat color; both are deleted when you delete the app.
• On the server: there is no way to delete round results from inside the app. To have the round results saved under your nickname deleted, email us the nickname and roughly when you played. After checking, the operator will delete those rows and reply to let you know. Rounds played under a color name (for example, Butter Bull) are hard to delete one by one, because many people share the same name and we cannot tell which rows are yours.
• We also accept requests to access or correct your data, or to stop processing it, at the same address. We handle them promptly, within 10 days of receiving them at the latest, and tell you the result.
• Users in the EEA and UK: we process the data above because it is needed to run the live arena and the rankings you choose to take part in. Personalized ads depend on the choice you make in Google's consent form. You may also object to or restrict processing, and you can complain to your local data protection authority.
• Contact: namurobori@gmail.com

8. Security

• Round result reports and ranking lookups sent to slox.co.kr are encrypted with HTTPS.
• Row level security (RLS) is enabled on the round results table, and only the server-only key (service_role) can read or write it. The public key in the app cannot access the table directly and is used only to join realtime channels.
• The server checks the body size, format and limits of each report, and limits how often requests can be made from one IP address. Rankings are totaled only by a server function, and the table is never exposed to the app directly.
• Server connection details (address and key) are supplied at build time and are not kept in the source repository.
• Nicknames and player names are checked for length (20 characters) and control characters in both the app and the server. The app also screens out common swear words and slurs with an on-device word list.
• The random device ID is never included in round results, and saved round results contain nothing that directly identifies a person.

9. Privacy officer and contact

• Service provider: SLOX (Bull Push)
• Privacy officer: Seokwon Yang (양석원)
• Contact: namurobori@gmail.com

Please send privacy questions, complaints and deletion requests to the email address above. Please do not send extra personal information, such as a photo of your ID. We do not accept it.

10. Changes to this policy

If this policy changes, we will post the revision date and what changed on this page. This policy has applied since September 23, 2026.

• v1.0 (September 23, 2026): First version.
• v1.1 (September 24, 2026): Added one Google AdMob banner at the bottom of the home screen. Section 5 became Ads, and the permissions, service provider and international transfer text was updated.
• v1.2 (October 7, 2026): Added the English app (English name Bull Push) and this full English policy. Sections 1, 4 and 8 now describe the on-device nickname filter, and section 5 notes that no banner is requested while you are in an arena. What is sent to and stored on the server is unchanged. Applies from app version 1.1.0.