- Who we are
- Airsoft Online (airsoftonline.app and us.airsoftonline.app) is operated by Taejun Yu, an individual based in the Republic of Korea ("we", "us"). We are responsible for the personal information described in this Privacy Policy. You can reach us at dbxowns120@gmail.com or through the in-app "Send feedback" form. Address: 4-206 Hagye Hanshin Apt., 351 Gongneung-ro, Nowon-gu, Seoul, Republic of Korea.
This policy explains what we collect, why, who can see it, how long we keep it, and the choices and rights you have. Our Location Data Terms give more detail about location.
- Our basic promises
- Airsoft Online is free and has no ads. We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We do not use third-party analytics or advertising tools, and the only cookie we set is the one that keeps you logged in.
- Information you give us when you sign up
- - From your login provider: if you log in with Google, your Google account email; if you log in with Apple (when available), Apple's user ID for you and your email if Apple provides it.
- Your name or nickname (it does not have to be your real name), date of birth, country and rough airsoft experience (how many games you have played).
- If you are 18 or older, your confirmation that you are an adult.
We do not ask for your phone number and we do not verify your real name.
- Profile and content you add
- Optional details you choose to add: callsign, bio, profile photo, team, gear records and gear or team photos. If you host a game, your game posts, the contact method you write in them, and any announcement recordings you make. Ratings you give to other players. If you send feedback, its content.
- Guardian linking (ages 13–17)
- When a member aged 13 to 17 links to a guardian, we process the guardian code they enter, or the guardian name they enter and the approval request sent to the guardian. When approving, the guardian sees the minor's name and date of birth and the guardian name the minor entered. Once linked, the guardian and minor see each other's names, and hosts of a game they both join see the minor's and guardian's names in the signup list. We do not collect a guardian's phone number.
- Game-day information
- - Upper-body selfie: on game day you take a selfie so the host and your teammates can recognize you.
- Arrival check: if you allow location, we check whether you are within 1 km of the field. We keep only whether you arrived (yes or no), not your coordinates.
- Hit reports, check-in status and results of the games you play.
- Location during live tracking games
- Only in games set up for live tracking, and only if you give a separate opt-in consent, we collect your position during rounds, including step count and your phone's heading. We store it as coordinates relative to the field. Your phone's operating system measures location through your browser. Sorting nearby fields and games by distance is done on your phone; that location is not sent to us. See our Location Data Terms for details. Keeping your track history after the game is a separate, optional consent: without it, we delete your positions from that game once it ends and scores are calculated, and you are left out of its replay and POTG (your score and records stay).
- Gunshot detection (beta, optional)
- If you turn on gunshot detection, we store sound feature values made from your own gun's sound (not the raw recording), the name of the device, and the number of shots per round. If you choose to join the gunshot experiment and send recordings, we store those recordings and the notes you add about the gun and location.
- Mobile apps (Android and iOS)
- Our Android and iOS apps show this same web service and use phone features only where the web can't:
- App notifications: if you turn on notifications, we store your device's push token (the address for app notifications). To send a notification, we pass the token and the notification content to Google Firebase Cloud Messaging (Google LLC, USA) as our service provider; on iOS, Firebase passes it on to the Apple Push Notification service (Apple Inc., USA). We delete the token when you turn notifications off or delete your account.
- Location while the screen is off: only in live tracking games where you agreed to share your location during rounds, the app keeps sending your location even if the screen is off, from when you open that game's round screen until the game ends (every second during a round, and every few seconds while waiting for a round, to check readiness). During that time Android shows an ongoing notification that your location is being sent (a foreground service), and iOS shows its location indicator. It stops as soon as the game ends or you close the app; at other times we do not receive your location while the screen is off. What we send and how long we keep it is the same as in our Location Data Terms.
- Microphone: it turns on only when you tap a button with the screen on; we never record while the screen is off. Host announcements: on game day only the host team (host, co-hosts and staff) can record one, up to 15 seconds; it is uploaded to our server, played on participants' phones, and deleted the day after the game ends. Gunshot detection (beta): sounds are analyzed only on your phone and are never sent; we receive only the number of shots per round and the time of each shot.
- Camera: used when you take your game-day selfie or a profile, gear or team photo (only photos you upload reach our server), and when you scan a QR code or run the device check (the camera image stays on your phone).
You can turn off location, notification, microphone and camera permissions in your phone's settings at any time.
- Map tiles
- Map backgrounds are loaded by your phone directly from map providers. Each provider receives your IP address, browser or app information, and which map tiles you are viewing (the area of the map, which may be near you if your position is on the map). We do not send your account or name. Aerial photos of fields in Korea: VWorld (Korea's Ministry of Land, Infrastructure and Transport). Aerial photos of fields in Japan: the Geospatial Information Authority of Japan (GSI). Terrain, roads and place names on the team board: OpenFreeMap (OpenStreetMap data). Contour lines on the team board: public elevation data (Terrain Tiles) hosted by Amazon Web Services (USA). Your phone keeps downloaded tiles so it doesn't need to fetch them again.
- Information collected automatically
- - Usage statistics, first-party only: a daily hash made from your account if you are logged in, or from your IP address and browser type if not. The values used to make it are deleted the next day, so it cannot be traced back after that. With it we record the session, screens viewed and counts of key actions.
- With feedback you send: the app version, browser information (device type, browser name and version), and the game if you sent it from a game screen.
- If you turn on notifications: the push subscription your browser creates (the address used to deliver notifications to your device).
- A login session cookie that keeps you signed in.
- Information calculated by the Service
- Your trust score, calculated from your attendance, no-shows and the ratings you receive, and your level, records and scoreboard results from games you played.
- How we use your information
- We use personal information to:
- log you in and keep your account working;
- confirm who is taking part in a game, check ages and link guardians and minors;
- run games: rule briefings, check-in, live map, hit reports, scoreboards, ratings, game records and replays;
- keep games and the community safe, including the trust score, moderation and handling reports;
- detect gunshots and improve gunshot detection;
- find and fix bugs from feedback you send;
- produce usage statistics to improve the Service;
- send notifications you turned on and, once available, service emails (with a way to unsubscribe from non-essential emails);
- comply with law and protect rights and safety.
- Who can see what inside the app
- - Hosts see their signup list: name or nickname, callsign, team, and minor and guardian names. They do not see your phone number or email.
- Your trust score: you, hosts of games you signed up for, and platform admins.
- Verified field owners and staff: the host's name or nickname for games at their field until the game ends; while spectating, callsigns (or names) on the map and alive/out lists. They do not get your contact information.
- The live map is visible to the people listed in our Location Data Terms. For members aged 13 to 17, position is shown only to people taking part in the same game and the host side.
- Platform admins can see the data needed for operations, such as handling reports and moderation.
- Replays, share links and profiles
- - Replays: participants and the host side can view a game's replay after the game. From 2 hours after the game ends, replays become public (no login needed). Players who did not consent to "replay public" are shown anonymously, and to viewers who are not logged in, even consenting players appear by callsign only (no real names or IDs). Team-only games and practice games are never public. Members aged 13 to 17 are not shown in public replays or share links.
- Scoreboard share links: from 2 hours after the game, show the sharer's own path, and other players only as unnamed numbered dots.
- Profile share links (no login needed): callsign (or a partially masked name), level, team and games hosted; your records only if your profile visibility is set to "Everyone" (records derived from gear or location are never included).
- Service providers
- We do not sell or rent your personal information. We disclose it only to service providers who process it for us, as described here, or when required by law or to protect safety:
- Cloudflare, Inc. (USA, global network): hosting, database and file storage for all data in this policy.
- Google LLC (USA) and, when available, Apple Inc. (USA): login, when you choose to sign in with them.
- The push service of your browser or device (for example Google, Apple or Mozilla, USA): notification content and your device push address, if you turn on notifications.
- Google Firebase Cloud Messaging (Google LLC, USA) for our Android and iOS apps, which delivers iOS notifications through the Apple Push Notification service (Apple Inc., USA): notification content and your app push token, if you turn on app notifications.
- An email delivery service, which we will name here before we start using it: service emails, with unsubscribe.
Our server asks Open-Meteo for weather using only a field's coordinates; no personal information is sent.
- Third-party sites and requests from your device
- Your browser contacts third parties only when you choose to log in with Google or Apple, when your browser's push service handles notifications, when a map shows aerial photos, terrain or contour lines (see "Map tiles"), and when you tap links that open other sites (such as Google Maps, YouTube or a team chat link). All fonts, including on our public guide pages, are served from our own servers. Those sites have their own privacy policies.
- Where your data is processed
- Your data is stored with Cloudflare. Our database is located mainly in the Asia-Pacific region, and data travels over Cloudflare's global network, which includes the United States. We operate the Service from the Republic of Korea, so your data is accessed and managed from Korea, which has its own data protection law (the Personal Information Protection Act). By using the Service, you understand that your information will be transferred to and processed in countries other than the United States, whose laws may differ from those where you live.
- How long we keep it
- - Game-day selfie: deleted right after the rating deadline (midnight of the day after the game).
- Raw live positions: pseudonymized after 2 years, or immediately when you delete your account.
- Location use log (who was shown your location, when, and why): 1 year, then deleted.
- Feedback (including app and browser info): deleted 1 year after we receive it.
- Gunshot experiment recordings: 90 days. Gunshot feature values: until you delete them or your account. Shots per round: until you delete your account.
- Usage statistics: aggregates kept 400 days; the values used to make the daily hash are deleted the next day.
- Host announcement recordings: deleted the day after the game ends. Notification list: 30 days. Raw ratings: 2 years.
- Guardian requests: pending requests expire after 7 days and their records are deleted 30 days after expiry.
- Everything else: until you delete your account. When you do, your personal data is erased and your game records remain only as anonymous records.
- Children under 13
- Airsoft Online is not for children under 13, and we do not knowingly collect personal information from them. Our sign-up asks for date of birth and does not allow anyone under 13 to sign up. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has given us information, please contact us at dbxowns120@gmail.com.
- Teens (13–17)
- Members aged 13 to 17 can join games only after a guardian who is an adult member approves the link, and only games that accept minors and that the guardian has also joined. To protect teens, their position (live map, waiting map, replays and scoreboards) is shown only to people taking part in the same game and to the host side (for running the game and safety) — not to spectators, field owners or staff, logged-in members who did not take part in that game, or in public replays or share links.
- Your choices in the app
- - Download your data and delete your account at any time. If you can't sign in, see our Account deletion page (/account-deletion).
- Change or withdraw consents (including location, live tracking and "replay public") in Settings → Visibility · Consent.
- Choose your profile visibility.
- Turn notifications on or off; turn off location in your phone's settings.
- See your location use log in Settings → Visibility · Consent → "My location use log". - Requests by email
- You can ask us to access, correct or delete your personal information, to stop processing it, or to withdraw a consent by emailing dbxowns120@gmail.com. We may need to confirm that the request comes from you, for example by asking you to send it from the email linked to your account or to confirm in the app. We will reply within 30 days.
- Notice for California and other US state residents
- This section gives the information required by the California Consumer Privacy Act as amended by the CPRA (CCPA) and similar state privacy laws. We provide it for transparency whether or not those laws apply to us.
In the past 12 months (or since launch) we have collected the following categories of personal information, from you, your device and the Service itself, for the purposes in "How we use your information", and disclosed them only to the service providers listed above:
- Identifiers: login email or provider ID, name or nickname, callsign, push subscription address, IP address (used briefly to make the daily usage hash).
- Characteristics of protected classifications: age (date of birth).
- Internet or other electronic activity: screens viewed, key action counts, browser and device type, app version.
- Geolocation data: arrival yes/no and live tracking positions.
- Audio, electronic and visual information: selfies, profile, gear and team photos, gun sound feature values and experiment recordings, host announcement recordings.
- Inferences: trust score and level.
- Sale, sharing and sensitive information
- We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.
Precise geolocation is "sensitive personal information" under California law. We collect it only with your separate consent and use it only to provide the features you asked for (arrival check, live tracking, replays) and for safety and security, as permitted by law. We do not use or disclose sensitive personal information to infer characteristics about you, so we do not offer a "limit" link.
- Your US state privacy rights
- Depending on where you live, you may have the right to: know what personal information we collect, use and disclose, and get a copy of it; correct inaccurate information; delete your information; opt out of sale, sharing or targeted advertising (we do none of these); and limit the use of sensitive personal information (we use it only as permitted). You can use these rights in the app or by emailing dbxowns120@gmail.com, and an authorized agent may submit a request for you with proof of your permission. If we deny your request, you may appeal by replying to our decision, and we will respond to the appeal.
We will not discriminate against you for using your privacy rights: we will not deny you the Service, charge a different price or give you a different quality of service because you made a request.
- Do Not Track and Global Privacy Control
- We do not track you across other websites or apps and do not allow third parties to do so through our Service. Because we do not sell or share personal information, there is nothing additional to switch off, but we treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of sale and sharing. We do not respond differently to Do Not Track signals because we do not engage in cross-site tracking.
- Security
- We protect your information with measures appropriate for a small service, including encrypted connections (HTTPS), access controls that limit data to the people and features that need it, storing location relative to the field, deleting or pseudonymizing data on the schedules above, and making usage statistics with a daily hash that cannot be traced back. No system is perfectly secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you as required by law.
- Business transfer
- If Airsoft Online is commercialized, sold or transferred to a business, your personal information may move to the new operator, who will be bound by this Privacy Policy for that information. We will tell you before the transfer and give you the option to delete your data instead.
- Changes to this policy
- We may update this Privacy Policy. We will announce changes in the app at least 7 days before they take effect and show the new effective date here. If a change means we would use your information in a materially different way, we will ask for your consent where the law requires it.
- Contact
- Airsoft Online — Taejun Yu, Republic of Korea
Address: 4-206 Hagye Hanshin Apt., 351 Gongneung-ro, Nowon-gu, Seoul, Republic of Korea
Email: dbxowns120@gmail.com (privacy requests and questions)
In the app: "Send feedback"
Effective date: October 31, 2026. Revised version effective November 10, 2026 (added "Mobile apps (Android and iOS)" and "Map tiles", and app push providers).