AppsInToss
Your current run, seeds, collection, achievements and settings are kept in web storage inside Toss. Clearing Toss app data or web storage may remove these records.
Friend Box purchases and recovery use Toss login. The server immediately hashes the verified app-scoped Toss user key with SHA-256 and connects it to the same Firebase pseudonymous account and Platform box ledger. The original key is not stored or returned to the app. The Toss consent screen lists your name as required, but our server does not decrypt, use or store it. We do not request email, gender, date of birth, nationality, phone number or CI.
Toss processes payments; Seori Labs does not receive card or bank account numbers. Product and order IDs are sent to our server, which verifies the payment with Toss before granting boxes. Pending orders are checked again, and fulfillment is confirmed only after verified granting. The odds, guarantee rules, Hybrid League restriction and purchase and box ledger retention follow the in-app purchase section below. Toss login is required before buying boxes in AppsInToss.
If you opt into usage analytics, in-game events, version, language and runtime are sent through the Toss analytics SDK. This version does not use the Google Analytics SDK for gameplay events. Toss processes its analytics data under its own privacy policy. Turning usage analytics off in settings stops future sending.
Only the two user-selected rewarded ad placements use the Toss integrated ad SDK. Toss and Google AdMob may process advertising identifiers, device and network information, impressions and clicks for ad delivery, measurement and fraud prevention under their policies and device consent settings. Seori Labs does not link advertising identifiers to purchase accounts. We do not show interstitial ads.
Disconnecting the service in Toss and deleting the game account are separate actions. To delete server records, use Delete account in game settings or the contact procedure on this page. Purchase and box ledgers are retained for duplicate-grant prevention, refunds and disputes as described under in-app purchases.
Game records
Your current run, seeds, garden book, achievements and settings are stored only on your device. There is no cloud backup, so deleting the app deletes these records.
Pseudonymous account and rankings (Endless challenge)
On first launch, Seori Platform issues a Firebase pseudonymous account identifier and authentication token. We do not collect your name, email or phone number.
When you beat your best in this week's Endless challenge (Heirloom League or Hybrid League), the league and week, score (total points earned in the run), days cleared, a nickname randomly generated by the game (for example “Sunny Rose 42”; there is no free text), a hash of your input log, rules and app version, and submission time are stored in Google Firebase (Cloud Firestore), linked to your pseudonymous account. Your nickname and score are used for rankings and may be shown to other players.
Records of the same kind submitted when finishing Today's Garden in earlier versions are kept until deleted. Today's Garden no longer submits rankings in the current version.
Google Play Games and Game Center
If you are signed in to Google Play Games on Android or Game Center on iPhone and iPad, the same score is also recorded on that service's leaderboard, and the ranking screen is provided by that service. Signing in is optional; the game and your on-device records work the same without it.
Your gamer profile (name, avatar) and ranking visibility follow your Google Play Games or Game Center settings and each company's privacy policy. Seori Labs does not receive profile information from these services.
Usage analytics
To improve the game, in-game events such as tutorial steps, hands, pruning and market actions, day and run results and screen changes, together with app version, language, runtime and timestamps, are sent to Google Analytics with a random identifier created on your device. In-game events are not sent to Seori Platform. Analytics does not include advertising identifiers and is not used for personalized advertising.
On iPhone and iPad, “Send usage stats” is on by default; on Android, you choose on first launch. On any device, turning off “Send usage stats” in Settings stops further transmission.
Rewarded ads
The only ads are rewarded ads you choose to watch (double seeds at the end of a run, Second Wind); there are no interstitial ads. Google AdMob, which serves the ads, may process advertising identifiers, device information and IP address for ad delivery, measurement and fraud prevention. Where required, you are asked for consent before ads, and you can change it in Settings → Ad privacy options.
AdMob is initialized only after you start the game from the title screen, and only when rewarded ads are turned on and you have not bought the Ad-free Garden. Rewarded ads can be turned off remotely during operation. On iPhone and iPad, we do not ask for tracking permission and request only non-personalized ads. On Android, personalized ads may be shown depending on your Google ad settings and consent. You can play without watching ads, and ads never affect ranking scores.
In-app purchases
Payments are processed by Google Play and the App Store; Seori Labs does not receive card details. For cosmetics, the Ad-free Garden and supporter items, purchase confirmation is processed on your device to apply and restore them and is not sent to Seori Platform. These products never affect scores or rankings.
Friend Boxes contain random items; box friends and their levels affect scores only in the Endless Hybrid League. Odds are shown on the in-game box screen and on the Bloomhand odds page (https://www.seorilabs.com/en/apps/bloomhand/odds/). When you buy boxes, the app sends the product ID and the purchase token (Google Play) or transaction ID (App Store) issued by the store to Seori Platform, which confirms the purchase with Google Play or App Store servers before granting the boxes. Box results are decided by the server.
To grant, open and restore boxes, prevent duplicate grants and refund abuse, verify odds and handle support requests, the following are stored in Google Cloud (Cloud Firestore), linked to your pseudonymous account: product ID, store order number (Google Play order ID or App Store transaction ID), purchase and confirmation time, purchase status (valid or refunded), whether it was a test purchase, the number of boxes opened, copies of each box friend and the rare-guarantee count, and for each opening the friend, rarity, level, odds table version and time. Purchase tokens are recorded as a hash; the original is kept only while a store completion step is being retried or a Google Play refund review request is being handled (encrypted for refund reviews), until that finishes. Results of purchase confirmation, granting and opening are also kept in operational audit records with your pseudonymous account. Your device keeps only a copy of the latest box state.
Account linking is optional. If you link a Google (Android) or Apple (iPhone and iPad) account, you can recover boxes and box friends on a new device or after reinstalling. Only a hash of the linked account identifier is stored with your pseudonymous account; we do not store your name or email.
When “Send usage stats” is on, purchased product IDs and results and box opening records (friend and level) are sent to Google Analytics, and the Google Analytics SDK may automatically record in-app purchase events (such as product ID and price). Purchase information is not used for advertising or sent to Google AdMob.
Purchase records and the box ledger and opening records are needed for refunds, disputes, duplicate-grant prevention and odds verification, so they are kept and not deleted, even if you delete your account. After account deletion they remain as pseudonymous records without your Firebase account or account link.
Providers and security
Seori Labs uses Google Firebase, Google Cloud and Google Analytics for pseudonymous accounts, rankings, Friend Box purchase confirmation and box records, and analytics; Google AdMob for ads; and Google Play Games Services and Apple Game Center for platform leaderboards. To confirm purchases, we check them with Google Play and App Store servers. Stored data is kept in the Seoul region. Communication uses HTTPS/TLS. Google services may process information outside your country.
Request data deletion
In the app, choose Settings → Delete account to remove the game records and settings on this device and the Endless challenge records (Heirloom and Hybrid leagues) and earlier Today's Garden records submitted from it, and to delete your Seori Platform pseudonymous account (Firebase account), your Google or Apple account link, and operational records linked to your pseudonymous account (except purchase and box processing records). If you linked Apple, you confirm once more and we also revoke the Sign in with Apple authorization. This requires an internet connection, and server-side deletion runs in steps and may take a few days to complete. Deletion cannot be undone, and Friend Boxes and box friends you bought cannot be recovered. Purchase records and the box ledger are kept as described under In-app purchases. Scores recorded on Google Play Games or Game Center can be deleted in that service's account settings.
If you cannot use the app, or to also delete Google Analytics records already sent, email cs@seorilabs.com using the link at the bottom of this page with the subject “Bloomhand data deletion request.” Provide only necessary details such as the device used and your request, and do not send passwords or authentication tokens. Pseudonymous accounts are not linked to email, so additional verification may be needed.
Retention and support
Ranking records are kept until deleted. Friend Box purchase records and the box ledger and opening records are kept and not deleted, as described under In-app purchases. Raw Platform analytics and operational audit records are retained for up to 400 days, and Google Analytics records for up to 14 months; purchase and box processing audit records remain for up to 400 days even after account deletion.
When you contact support, we process your sender address, message and attachments to respond and keep them as needed for resolution. Contact cs@seorilabs.com for access, correction, deletion or restriction requests.
Audience and changes
This is a card game that uses poker hands; you cannot wager or win real money. The content rating shown by each store and local requirements also apply. It is not directed to children.
We update this page and in-app notices for material changes.
