이 서버 없이는 게임을 제공할 수 없으므로, 이전을 원하지 않으면 레버넌트를 삭제하고 이용을 중단할 수 있습니다.
5. 브라우저가 직접 연결하는 외부 서비스
게임 화면은 아래 서비스를 이용자의 브라우저에서 직접 불러옵니다. 이때 IP 주소 같은 접속 정보가 각 서비스에 전달되며, 각 서비스의 개인정보처리방침이 적용됩니다(Google 개인정보처리방침).
Google Fonts: 게임 글꼴
Google 로그인: Google 연동을 선택한 경우에만
YouTube: 유언 미리보기 이미지와 영상 재생(쿠키를 줄인 youtube-nocookie.com 사용)
6. 쿠키와 브라우저 저장소
로그인 유지 쿠키 하나(__Host-umb_s)만 씁니다. 무작위 값이며 서버에는 그 해시만 저장합니다. 이 사이트 주소에서 HTTPS로만 쓰이도록 묶여 있어 다른 사이트가 심거나 바꿀 수 없습니다. 2026년 10월 26일 전에 쓰던 이름(umb_s)은 다음 접속 때 자동으로 바뀝니다.
그래픽·음량·언어 설정, 마지막으로 입력한 유언 링크, 프롤로그를 봤는지 여부는 이용자 기기의 브라우저 저장소에만 남고 서버로 보내지 않습니다.
브라우저 설정에서 쿠키를 막을 수 있지만, 로그인 쿠키를 막으면 게임에 접속할 수 없습니다. 게스트 레버넌트는 이 쿠키로만 찾을 수 있으므로 쿠키를 지우면 되찾을 수 없습니다. Google에 연동한 레버넌트는 다시 로그인하면 됩니다.
7. 이용자의 권리와 행사 방법
이용자는 언제든지 자신의 개인정보를 열람·정정·삭제하거나 처리 정지를 요구할 수 있습니다.
열람·정정: 게임 안 프로필에서 이름과 연동 상태를 확인하고 이름을 바꿀 수 있습니다.
삭제: 게임 안 프로필 → 레버넌트 삭제에서 즉시 삭제됩니다.
그 밖의 요구: contact@nymphra.com으로 요청하면 지체 없이, 늦어도 10일 안에 처리합니다. 대리인을 통해서도 요구할 수 있습니다. 게스트 레버넌트는 본인을 확인할 다른 방법이 없으므로 게임 안에서 삭제해 주세요.
8. 만 14세 미만 아동
UMBRAKA는 만 14세 이상만 이용할 수 있으며, 만 14세 미만 아동의 개인정보를 알면서 수집하지 않습니다. 만 14세 미만 아동의 계정임을 알게 되면 지체 없이 삭제합니다. 보호자는 contact@nymphra.com으로 삭제를 요청할 수 있습니다.
이 방침이 바뀌면 시행 7일 전(이용자에게 불리하거나 중요한 변경은 30일 전)부터 게임 시작 화면과 이 페이지에서 알립니다. 중요한 변경은 게임을 시작할 때 다시 확인을 받습니다.
2026년 10월 26일 공고한 개정 사항(1항과 2항의 웹 서버 접속 기록, 9항의 접속 기록 보관)은 2026년 11월 25일부터 시행합니다. 수집 항목을 늘리는 중요한 변경이므로 30일 전에 알리고, 게임을 시작할 때 다시 확인을 받습니다. 6항의 쿠키 이름은 실제 이름에 맞게 고친 것으로, 처리하는 정보는 달라지지 않습니다.
최초 공고일 2026년 10월 16일 · 시행일 2026년 10월 16일 · 개정 공고일 2026년 10월 26일 · 개정 시행일 2026년 11월 25일
UMBRAKA
Privacy Policy
Effective 16 October 2026 · Revised, effective 25 November 2026 (announced 26 October 2026) · This is a translation. If it differs from the Korean version, the Korean version applies.
NYMPHRA (“we”) protects your personal information under Korea’s Personal Information Protection Act and handles related concerns promptly, as set out below.
1. What we process and why
When
What
Why
When you start (created automatically)
A random account ID, your Revenant’s name, public tag and colour, game records (Vessel, relics, materials, shards, experience, statistics, Edict progress), when the account was created and last used, and your acceptance of the Terms
To create and keep your account, run the game and give rewards
When you connect (collected automatically)
IP address (when the account is created and when last used), the sign-in cookie
To keep you signed in, stop bots, multi-account abuse and cheating, and fix outages
Each request to the game server (collected automatically, from 25 November 2026)
Web server access log: IP address, the address requested, the response and its size, browser details (User-Agent), time
To detect and respond to attacks, unauthorised collection or copying of the game, and abuse, and to fix outages
When you bind Google (optional)
Your Google account ID, the email address Google has verified, your Google profile name (used only to name a new Revenant)
To play the same Revenant on any device, and to give the binding gift only once
While you play
The YouTube link you offer as your Testament, chat messages
To play your Testament, and to let you talk with players on the same world
Chat messages are relayed live to players on the same world and are never stored. A Testament link is kept only if you become the Last Voice, in the Rite record (world, time, number of players).
We process this to perform our agreement with you to provide the game (Article 15(1)4 of the Act) and for our legitimate interest in protecting players from abuse (Article 15(1)6). Google binding happens only if you choose it.
2. How long we keep it
Information
Kept until
Account, game records, the account’s IP addresses, Google binding
You delete your Revenant. It is destroyed at once.
Guest accounts no one can reach any more (every sign-in session expired)
Destroyed automatically 30 days after their last use
Sign-in sessions
You sign out or delete your Revenant. An unused session expires at most 400 days after its last use.
Guest creation log (IP address and range, time)
7 days
Web server access log (from 25 November 2026)
90 days. If the log outgrows its fixed size (about 1 GB), the oldest entries may be deleted sooner.
Binding-gift record (Google account ID)
1 year after you delete your Revenant, so the gift is not paid twice
Last Voice records
When you delete your Revenant, the link to your account is removed. Only the world, time, number of players and Testament link remain.
Backups
The database is backed up daily. Copies on the server are deleted after 14 days, copies in off-server storage after 30 days. A deleted Revenant may remain in backups for that time and is used only to recover from failures.
Destroyed data is erased from the database so it cannot be recovered. We keep no paper records. There are no paid features, so no law requires us to keep anything longer.
3. Sharing with others
We do not give your personal information to third parties, except where a law specifically requires it or investigators request it through the procedure the law sets.
4. Processors and transfer abroad
The game servers and backups run on the cloud provider below, so your information is transferred to Japan. As processing and storage needed to perform our agreement with you, this transfer is disclosed here under Article 28-8(1)3 of the Act.
Whenever you use the game, over an encrypted network
Information
Everything listed in section 1
Purpose
Running the game servers and storing data and backups
Retention
As in section 2. Destroyed without delay when the service contract ends.
How to refuse
The game cannot run without these servers. If you do not want the transfer, delete your Revenant and stop playing.
5. Services your browser contacts directly
The game page loads the services below directly in your browser. They receive connection details such as your IP address, and their own privacy policies apply (Google Privacy Policy).
Google Fonts: the game’s typefaces
Google Sign-In: only if you choose to bind Google
YouTube: Testament thumbnails and playback (through the reduced-cookie youtube-nocookie.com)
6. Cookies and browser storage
We use one cookie, the sign-in cookie (__Host-umb_s). It is a random value; the server stores only its hash. It is bound to this site’s own address over HTTPS, so no other site can plant or change it. The name used before 26 October 2026 (umb_s) changes over on your next visit.
Graphics, volume and language settings, the last Testament link you entered and whether you have seen the prologue stay in your browser’s storage on your device and are never sent to the server.
You can block cookies in your browser, but without the sign-in cookie you cannot play. A guest Revenant can be found only through this cookie, so clearing it loses that Revenant for good. A Revenant bound to Google comes back when you sign in again.
7. Your rights
You may ask at any time to see, correct or delete your personal information, or to stop its processing.
See and correct: your profile in the game shows your name and binding, and lets you rename.
Delete: Profile → Delete this Revenant erases it at once.
Anything else: write to contact@nymphra.com. We act without delay and within 10 days at the latest. You may also ask through a representative. We have no other way to verify who owns a guest Revenant, so please delete guests in the game.
8. Children under 14
UMBRAKA is only for people aged 14 or older, and we do not knowingly collect information from children under 14. If we learn an account belongs to a child under 14, we delete it without delay. Parents and guardians can ask for deletion at contact@nymphra.com.
9. How we keep it safe
All traffic is encrypted with HTTPS (TLS).
Sign-in tokens are stored only as hashes; the cookie is HttpOnly, Secure and SameSite.
Only we can reach the servers, with SSH keys.
Backups go to private storage; the server holds upload-only access.
Rate limits and proof of work stop automated attacks and mass account creation.
From 25 November 2026, the web server access log is kept for 90 days to trace attacks and unauthorised collection. It never records the sign-in cookie’s value.
We announce changes on the game’s start screen and on this page 7 days before they take effect, or 30 days before for changes that are significant or against your interest. For significant changes we ask you to confirm again when you start the game.
The changes announced on 26 October 2026 (the web server access log in sections 1 and 2, and keeping it in section 9) take effect on 25 November 2026. They add information we collect, a significant change, so we announce them 30 days ahead and ask you to confirm again when you start the game. The cookie name in section 6 was corrected to the name actually used; the information processed does not change.
First published 16 October 2026 · Effective 16 October 2026 · Revision published 26 October 2026 · Revision effective 25 November 2026
