The short version: we keep only what the games need. In Meow Box online rounds, your name, character and score are shown to the other players in your round, and the round is deleted shortly after it ends. No advertising cookies, no third-party analytics, nothing sold.
Privacy Policy
Effective 2 October 2026 · previous version 27 September 2026
divethrone.com and every game on it — SUMBI, Meow Box (냥박스), CHAIN and Fruit Pop — including the information that reaches our server when you play the same games on a game portal such as CrazyGames.
- Who we are, and how to reach us
- What we collect, and why
- Meow Box online rounds
- How long we keep it
- Who else handles it
- International transfers
- Playing on a portal
- Ads and cookies
- Children
- Your rights
- Security
- Changes
Who we are, and how to reach us
divethrone.com is made and run by an independent operator, who is the controller of the information described here. Every privacy question or request goes to one place:
- Privacy contact: the divethrone.com operator — [email protected]
- We answer within 30 days, and only ask what we need to confirm it is you.
What we collect, and why
Every game
- A random ID made by your browser — so your progress can be shown to you again. Kept in your browser and on our server.
- A one-way hash of your IP address — to see whether several players share a household and to spot spam or cheating. The address itself is never stored.
- Which game page was opened — a date plus one hashed marker made from the address and browser type.
- Game result numbers — CHAIN sends a few numbers (score, length) when a run ends, with nothing attached that says whose run it was.
- Game settings — sound, language and so on. In your browser only.
SUMBI
- Your display name and haenyeo name, today's score, depth and attempts, your collection and log (so they follow you to another device), and your 12-character continue code.
- The bulteok (message board): posts and replies are kept with the haenyeo name attached and are visible to anyone who opens it. Report records are used only so the same post cannot be reported twice.
- The village count: how many divers reached each tier today — a device marker and a tier, no names.
- This week's seats: among players who chose a name, the most active of the week may be shown by name to everyone.
Meow Box
- Your nickname, chosen animal and colour, the moves you made and your score — to run online rounds and to let the server recompute every score so nobody can fake one. Details below.
- Paws (daily plays) — in your browser if you play as a guest; if you sign in with Google, your account number, paw count and a timestamp on our server.
- Your Dex, medals and best score — in your browser only.
Fruit Pop
- In-game coins, bullets and gear (game currency, never real money) — on our server, tied to your browser ID or account.
- If you reach the Hall of Fame, your nickname at that moment and your record are shown to everyone.
Fruit Wall online and ranked play
- Your nickname, the cells you tap and when, the garbage rows you send, and who won — so two people can play the same board live, and so the server can replay both sides' inputs to confirm the result is real. Input logs live in memory only and are deleted when the room closes.
- Ranked record — a random ID and secret made by your browser, your nickname, a hidden skill rating (MMR), tier, LP, wins and losses, placement count, season wins, and per-match winner/loser IDs with the LP change (kept to detect cheating). The leaderboard shows nickname, tier, LP, record and badges to everyone. Your opponent sees your nickname, tier and badges, never your ID.
- If you sign in with Google here, this game stores only a hashed account identifier — no name, no email. Signing in moves this browser's anonymous ranked record into the account; signing out starts this browser on a fresh anonymous ID.
Only if you sign in with Google
- The account identifier, name and email Google sends us. This lets your progress follow you between devices; the email is used only to confirm it is you when you ask us to delete your data. We ask for no other permission and cannot see your contacts or files.
Legal bases
We process this information to provide the games you ask to play (scores, online rounds, sign-in), and for our legitimate interest in running the service safely (stopping spam and cheating, usage counts built from hashed markers). Sign-in only starts when you press the button, and you can sign out or ask for deletion at any time.
Meow Box online rounds
A Meow Box round lasts three minutes and seats up to 12 players. Empty seats are filled by computer players, which are always labelled CPU.
- What other players see: your nickname, chosen animal and colour, your score and your box — only the players in the same round.
- What reaches our server: the above, plus the list of your moves (so the server can recompute the score) and the game version.
- How long: rooms live only in the server's memory and are never written to disk. A room is deleted automatically about 100 seconds after its round ends.
- Friends' rooms: a room made with “Play with friends” can only be entered with its six-character room code (the invite link) and never appears in public lists. The code identifies no one and is deleted with the room. If you make the room open, or press “share a link” in a quick-play lobby, people without the link can also join through quick play and will see your nickname, character and score in that round.
- Name filter: a nickname containing slurs or profanity is replaced with “Kitty” before anyone else sees it. There is no chat and no private messaging.
- Flood protection: to block bursts of requests, your IP address is counted in memory for at most two minutes.
- If you play on CrazyGames while signed in there, the portal's rules have us show your CrazyGames username as your nickname, so your friends can recognise you.
How long we keep it
| Information | Kept for |
|---|---|
| Meow Box online rooms (name, character, moves, score) | Memory only · deleted about 100 seconds after the round ends |
| Fruit Wall online rooms (input logs) | Memory only · deleted 30 seconds after the room closes, 10 minutes at most |
| Fruit Wall ranked record and match log | Until you ask us to delete them (kept across seasons) |
| IP address for flood protection | Memory only · at most 2 minutes |
| Page-open and daily usage counts (hashed) | Deleted automatically after 60 days |
| “Played today” markers | Deleted automatically after 40 days |
| Sign-in session | Until you sign out |
| Account, scores, paws, in-game currency | Until you ask us to delete them |
| Bulteok posts, Hall of Fame | Until the author removes them or asks us to |
| Anything kept only in your browser | Gone as soon as you clear your browser storage |
When a period ends the information is deleted beyond recovery. Backups stay on the operator's own equipment and are never shared.
Who else handles it
We never sell or rent data, and never pass it on for advertising or marketing. Only the services the site needs to run touch it:
- Cloudflare — the network provider that carries traffic to the site and blocks attacks. It processes IP addresses and similar data in transit.
- Google — Google sign-in (only if you press it) and, on some pages, fonts from Google Fonts; loading those fonts makes your browser contact Google.
- Game portals such as CrazyGames — what the portal handles itself is explained below.
- Authorities, where the law requires it — and only as far as it requires.
International transfers
Our game server and database are in Australia. If you play from Korea, Europe or anywhere else, your information is transferred to Australia. Cloudflare and Google process traffic on equipment in many countries.
- What is transferred: the items listed under What we collect
- When and how: while you play, over an encrypted (HTTPS) connection
- Purpose and retention: as in the table above
- If you would rather not: play as a guest without signing in, or play the solo practice round instead of online rounds, and the least possible reaches our server (page-open counts still apply).
Playing on a portal (CrazyGames and others)
- The portal's pages, accounts and ads are run by the portal itself and follow its own privacy policy — for example the CrazyGames Privacy Policy.
- The only things that reach our server are what Meow Box online rounds need: your nickname (your CrazyGames username if you are signed in there), character, moves and score. We do not receive your portal account number or email.
- Portal versions have no Google sign-in and no paw limit.
Ads and cookies
divethrone.com shows no ads right now. We use no tracking or advertising cookies and no third-party analytics; progress is kept in your browser's local storage, not in cookies.
Ads you see when playing on a portal (between rounds, or “watch an ad to keep playing”) are served by the portal and its advertising partners, and cookie consent for them is handled on the portal's own screens. If we ever put ads on divethrone.com, this page will be updated before a single ad appears, naming every partner and the cookies it uses.
Children
Nothing is age-restricted, nothing is for sale, and there is no chat or private messaging. Nicknames (Meow Box, Fruit Pop, Fruit Wall) and bulteok posts are visible to other players. We do not knowingly collect personal information from children under 13 in the United States, under 14 in Korea, or under the age of digital consent in their EU country. If you think your child has signed in or entered a nickname and you want it removed, email us and we will delete it once confirmed.
Your rights
Wherever you live, we offer everyone the same:
- Access and a copy — ask what we hold about you, including in a machine-readable form.
- Correction — change your name in the game, or ask us to.
- Deletion — email us from your sign-in address and we erase your account and records. Guest data disappears as soon as you clear your browser storage.
- Restriction and objection — ask us to stop a particular use.
- Withdrawing sign-in — sign out in the game at any time.
- Complaints — if our answer does not satisfy you, you can contact a regulator: the Office of the Australian Information Commissioner (OAIC), your EU data protection authority, or Korea's Personal Information Protection Commission (privacy report centre, 118).
Requests: [email protected] — answered within 30 days.
Security
- Every connection is encrypted with HTTPS.
- We store a one-way hash of IP addresses, never the addresses themselves.
- The database sits on a single machine only the operator can reach, and the admin view does not open without a secret key.
- There is no payment system, so no financial information can reach us.
- If we learn of a breach affecting your information, we notify you and the regulators within the time the law sets.
Changes
If what we collect or how we use it changes, this page is updated before the change takes effect and the date at the top is changed. Important changes are also announced in the games.