Pyrogaze privacy policy

This is an English translation of the Korean privacy policy. If the two versions differ, the Korean version applies.

1. How the app works

Pyrogaze lets you design fireworks and arrange a fireworks show to music. The fireworks and shows you make are stored only on your device. The app works offline and does not need a login.

• There are no ads.
• The app uses no analytics or tracking SDKs and does not show the App Tracking Transparency (ATT) request. The app does not use an advertising identifier.
• The app offers in-app purchases that top up coins. Apple processes the payment on iPhone, and Google processes the payment on Android. You can also earn every coin by using the app (see "In-app purchases (coins)" below).

2. Information stored on your device

Your fireworks, shows, settings, and coin record (balance, items opened with coins, and grants) are kept in the app's own storage on your device. Your fireworks and shows are not sent to Collinworks servers unless you publish them to the Gallery. If you sign in with Apple or Google, your coin record is also kept with your account (see "In-app purchases (coins)" below). A random device number used for watch records is also stored on your device (see section 4).

3. In-app purchases (coins)

You can top up coins with an in-app purchase in the app's "Top up coins" list. On iPhone, Apple processes the payment through the App Store. On Android, Google processes the payment through Google Play. Collinworks and the app do not receive or store payment information such as your name, card number, or Apple or Google account.

To grant coins only once, the app receives transaction information (transaction identifier, product type, purchase time, and environment). On iPhone, the app receives transaction information that Apple signs. On Android, the app receives a purchase token from Google Play, and the server checks the purchase state with the Google Play Developer API. The server does not store the purchase token itself. It stores a hash of the purchase token as the transaction identifier. To match a purchase on Android to your account, the app gives Google Play a hash made from your account ID with the purchase. If you do not sign in, this information, your coin balance, and the fireworks, stages, and patterns you opened with coins are stored only on your device. If you sign in with Apple or Google, we keep your coin record (balance, opened items, and grants) and your purchase transactions with your account on the Collinworks server, so that your coins come back after you delete the app or change devices. The server grants coins only after it checks Apple's signature or the Google Play purchase state, and it does not grant the same transaction to another account. If you delete the app while you are not signed in, the coin record is deleted with it, and Collinworks cannot restore it.

You can earn every coin by saving shows, watching shows, publishing to the Gallery, and receiving likes. If you are signed in to the Gallery, the server computes coin rewards from your published shows and the likes you received and adds them to your account's coin record. Refunds follow the App Store or Google Play procedure.

4. The optional "Gallery" and information stored on our server

The Gallery is an optional feature to publish your show and to watch shows by other people. To publish a show, you must sign in with Apple on iPhone or with Google on Android (through Firebase Authentication). When you publish, the server gives you a creator number in the form "밤빛 제작자 #123456". The Collinworks server does not receive or store your real name, email address, or a nickname. However, Google Firebase Authentication, which handles sign-in, keeps the email address that Apple or Google gives during sign-in (a relay address if you use Hide My Email with Apple) and, for Google sign-in, your account name and profile photo address as account information. This information is used only for sign-in, is not shown in the Gallery, and is deleted when you delete your account.

If you use the Gallery, the following information is stored on the Collinworks server:

• Account identifier (Firebase user ID)
• Creator number
• Shows you published: title, show data, stage, length, and publication time
• Likes, and a first-like record used to pay a coin reward only once (the liking account, the show, and the time; it remains even if the like is taken back)
• Coin record (if you sign in): balance, items opened with coins, grants, and purchase transactions (transaction identifier, product, purchase time, and environment)
• Watch records: whether a viewer watched another person's show for more than 3 seconds, whether they watched it to the end, and the moments they marked with "Here" (the second of the show). A viewer is stored only as a hash made from the account ID when signed in, or from a random number the app creates on the device when not signed in. We do not store the account ID or the device number itself. The totals (viewers, viewers to the end, and marks per moment) are shown only to the person who published the show.
• Theme contest: shows entered in a contest (published shows with a contest mark), the two shows given to a judge, the judge's answer (A, B, about the same, or skip), and the time. Judges are not shown to other users, and results show only totals per show.
• Reports: the ID of the reporting account, the reason, and the details
• Block list
• Account deletion record: the ID of the deleted account and the deletion time

We use IP addresses only in server memory to limit the number of requests. We do not store them. Anyone can see a published show and its creator number in the Gallery.

5. Reports and blocking

• You can report a show in the Gallery. When a show receives 3 reports, it is hidden automatically.
• You can block other creators. Your block list is stored on the server.

6. Device permissions

The iPhone app asks for the "add" permission for your photo library only when you save a finished card image to Photos. The app does not read photos from your library. The Android app declares only the permissions necessary for the internet connection and network state, Google Play billing, and the biometric check (device lock) that the Google Sign-In library includes. It does not ask for photo or storage permissions, and the app does not receive or store fingerprint or face data. Neither app asks for access to the camera, microphone, location, or contacts.

7. Tracking and third parties

The app does not track you, does not use an advertising identifier (IDFA on iPhone or the advertising ID on Android), and does not give information to third parties for advertising. Sign-in uses Sign in with Apple, Google Sign-In, and Google Firebase Authentication. Payments and purchase checks use the Apple App Store and Google Play.

8. Deletion and retention

• You can delete your account in the app settings.
• When you delete your account, your published shows, likes, first-like records, the coin record and purchase transactions kept with your account, your watch records and the watch records on your shows, your contest judging records, and your account are deleted from the server. For an account that signed in with Apple, the app asks Apple to revoke your Sign in with Apple token. Coins and items opened with coins kept with your account cannot be restored.
• The account deletion record (deleted account ID and deletion time) stays on the server. When you delete your account in the app, the app also deletes your Firebase Authentication account information.
• If you already deleted the app, or if you cannot delete your account in the app, you can ask us to delete your account at the email address in section 12. Tell us how you signed in (Apple or Google) and your Gallery creator number. After we confirm the account, we delete the same information from the server as an in-app deletion, and we tell you the result by email.
• When you delete your account, the app also clears the coin record on your device. Fireworks and shows stored on your device stay on the device after you delete your account. When you delete the app, they are deleted with it and cannot be restored.

9. Children

This app is not directed primarily at children.

10. Information you give when you contact us

If you email our support address, your email address and message may be processed to reply to you. The app does not collect this information automatically. When the purpose is complete, we delete the information without delay unless a law requires us to keep it. You can ask to view, correct, delete, or stop processing your information at the email address below.

11. Access information for this web page

This privacy policy page has no ads. Cloudflare, which provides delivery, security, and performance measurement for this site, and the web server may process the access time, IP address, and request, device, and performance information. This is not data collected by the app. For details, see the Collinworks website privacy policy (Korean).

12. Privacy officer and contact

• Business: Collinworks (콜린웍스) / Representative: Sung Woo Jung
• Email: [email protected]
• Address: 5-58, Samjigok-gil 79beon-gil, Gwangju-si, Gyeonggi-do, Republic of Korea

For help with the app, see the Pyrogaze support page.

13. Changes to this policy

If this policy changes, we will post the changes and the effective date on this page before they take effect.

Effective date: October 27, 2026 (previous versions: October 24, 2026, and October 23, 2026)

Changes on October 27, 2026: we added the Android app (Google Sign-In and Google Play billing) and how to ask for account deletion by email.