Privacy Policy
Effective: October 29, 2026
This is a translation. If it differs from the Korean version, the Korean version prevails.
Eutopia Lab Inc. (“we”) operates D.Varium Games (party games played together on your phones) and D.Varium Destiny (NFC daily tarot) at app.dreamvivarium.com (the “Service”). This policy explains what personal information the Service processes and why. The Service has no sign-up.
1. Information we process and why
All (collected automatically)
- Information
- IP address, browser and device information (User-Agent), access time, cookies
- Purpose
- Providing the Service, preventing abuse, fixing errors
All (visit statistics)
- Information
- Page visits — counted anonymously, without cookies
- Purpose
- Improving the Service
All (feedback)
- Information
- Feedback you send, screenshots you attach
- Purpose
- Replying, improving the Service
Games — joining a room
- Information
- Nickname, chosen character, a device identifier (a random value), game records
- Purpose
- Joining a room, keeping your seat, running the game
Games — text you write
- Information
- Penalty lines and ideas, answers and text entered during games
- Purpose
- Running the game, sharing penalty lists (private lists are not shown to other rooms)
Games — Photo Guess
- Information
- Photos you add (location and other camera data removed)
- Purpose
- Running the game
Games — Color Hunt
- Information
- Color values and aiming snapshots from your camera
- Purpose
- Sent live to players in the same room only (never stored on our servers)
Games — trial room
- Information
- Device identifier, a hashed form of your IP address
- Purpose
- Providing trial rooms without a card, preventing abuse
Destiny — tarot
- Information
- NFC tag identifier, questions you type, drawn cards and readings, IP address, browser information
- Purpose
- Tarot readings, viewing them again, daily usage limits
Destiny — chat, diary, saju
- Information
- Chats with characters, diary entries, saju input (date of birth, birth hour, gender)
- Purpose
- Providing those features (including four-panel comics)
Events and pre-registration
- Information
- Email, funding link, Instagram ID, how you found us
- Purpose
- Confirming participation and sending notices (separate consent on the sign-up form)
Prize and product delivery
- Information
- Name, address, postal code, phone number, Instagram ID
- Purpose
- Shipping prizes and products
Partner store console
- Information
- Login ID, password (stored hashed), login attempts (hashed IP, browser information)
- Purpose
- Managing partner stores, protecting accounts
The Service is not directed at children under 14, and we do not knowingly collect their personal information.
2. How long we keep it
We delete personal information without delay once its purpose is met. Specific periods:
- Game room data (nickname, character, game records): kept while the Service operates; deleted without delay on request
- Photo Guess photos: deleted as soon as the game ends
- Color Hunt camera images: not stored
- Penalty lists, tarot readings, chats and diary entries you create: until you ask us to delete them or stop using the tag or card
- Trial room data: kept while the Service operates; deleted without delay on request (deactivated after 90 days without use)
- Access logs (IP address, browser information): kept while the Service operates; deleted without delay on request
- Event and pre-registration data: kept while the Service operates; deleted without delay on request
- Delivery data: kept while the Service operates; deleted without delay on request
- Partner store console data: until the partnership ends
Where another law requires us to keep information longer, we keep it separately for that period.
3. Sharing with third parties
We do not share personal information with third parties, except where required by law or requested by authorities following legal procedures.
4. Service providers and international transfers
We use the service providers below. Information handled by providers that process it outside Korea is transferred abroad over the network while you use the Service, and kept for the periods in section 2.
Supabase Inc. (data stored in Tokyo, Japan)
- Task
- Database and file storage, real-time messaging
- Information transferred
- All stored information in section 1
Vercel Inc. (processed in Seoul, Korea)
- Task
- Web hosting, anonymous visit statistics
- Information transferred
- IP address, browser information, visit records
Google LLC (USA)
- Task
- AI responses (Gemini), ads (AdSense)
- Information transferred
- Text entered into AI features (questions, chats, text to translate), ad cookies and device information
Cloudflare, Inc. (USA)
- Task
- Bot protection (pre-registration form)
- Information transferred
- IP address, browser information
If you do not want your information transferred abroad, you can stop using the Service or ask us to delete it at rlacogns7@gmail.com. Without these transfers we cannot provide the Service.
6. How we delete information
Electronic files are deleted so they cannot be recovered. Paper documents (such as shipping labels) are shredded or incinerated.
7. Your rights
You can ask to access, correct, delete or stop the processing of your personal information at any time. Contact us below and we will act without delay. Because the Service has no accounts, please include something that identifies the data (for example a tag or card number, when you used the Service, or your nickname).
8. Security
- The database is reachable only with server-side admin credentials; it cannot be read or written directly from your device
- Passwords and IP addresses (trial rooms, partner logins) are stored hashed
- All connections are encrypted (HTTPS)
- Admin pages are restricted to authorized staff
9. Privacy officer
- Company: Eutopia Lab Inc. ((주)유토피아랩)
- Privacy officer: Chaehoon Kim
- Phone: +82-10-3222-1337
- Email: rlacogns7@gmail.com
10. Getting help
For privacy complaints or advice, you can also contact the following Korean authorities.
- Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
11. Changes
We will post changes to this policy on this page at least 7 days before they take effect.
- October 29, 2026: first version