Last updated: June 23, 2026
Privacy Policy
How Plithus collects, uses, and protects personal information across our website, mobile apps, and Plithus Launcher for Windows and Android. Regional addenda for Korea, the United States, Canada, and the EEA/UK appear below.
See also our Terms of Service.
Plithus Corp. ("Plithus," "we," "us," or "our") operates a playtesting platform that includes our website (plithus.com), mobile applications, and the Plithus Launcher for Windows and Android. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our services.
We comply with applicable privacy laws, including the Personal Information Protection Act (PIPA) of the Republic of Korea. Additional regional notices for the United States, Canada, and the European Economic Area / United Kingdom are included at the end of this policy.
We do not sell personal information to anyone. For playtest analysis, we may use de-identified or aggregated data that does not identify you personally in reports shown to studios.
1. Who we are
The data controller for the services described in this notice is Plithus Corp. (주식회사 플리더스), with its principal place of business in Goyang-si, Gyeonggi-do, Republic of Korea.
For privacy requests, contact us at official@plithus.kr. For EEA/UK data protection inquiries, you may use the same contact address with the subject line "GDPR Request."
2. Scope
This notice applies to personal information we process when you:
- Visit our website or submit business or support inquiries
- Create or use a Plithus mobile app account
- Participate in playtests, surveys, or community programs
- Download, install, or use the Plithus Launcher on Windows or the Plithus Mobile Launcher on Android
- Interact with our emails, Discord community, or customer support
3. Information we collect
Depending on how you use Plithus, we may collect the following categories of information:
- Account & identity: email address, display name, profile photo, social login identifiers, language preference, membership level, and account credentials (passwords are stored in hashed form)
- Business inquiry data: company name, contact name, job title, team, expected release dates, and inquiry content submitted through our website
- Playtest & gameplay data: assigned test builds, session runtime, upload status, gameplay recordings you choose to capture, feedback forms, survey responses, and in-app activity related to tests
- Device & technical data: device type, operating system, app version, launcher version, IP address, general location derived from IP, crash logs, and security/fraud-prevention signals
- Communications: support messages, Discord interactions where you contact our staff, and email correspondence
- Cookies & similar technologies: see Section 8 below
4. Plithus Launcher (Windows and Android)
Plithus offers the Launcher on Windows (desktop installer) and on Android (APK). Both are distributed only to approved testers to download assigned builds, run play sessions, and submit feedback. Many playtests are simple surveys in the mobile app or on the web and do not involve either Launcher.
- Account linking data to authenticate you with the same Plithus mobile app account
- Test assignment metadata (which builds you may access, download progress, install status)
- Gameplay recordings and related session metadata (session start/end, upload status, linked feedback)
- Launcher configuration and recording settings you review before play
- Technical logs needed to operate, secure, and troubleshoot the Launcher
When a test uses a Launcher, you start and stop gameplay recording yourself. Video recording is only used for tests that clearly ask for it and where you give explicit consent. If you do record, the video may include picture and sound from your session.
We do not collect account passwords through either Launcher, unrelated personal files on your device, or non-test personal content.
Test builds, gameplay footage, and feedback may be confidential materials covered by an NDA or separate terms when required for that test.
5. How we use information
We use personal information to:
- Provide, operate, and improve the Plithus platform, website, mobile apps, and Launchers for Windows and Android
- Authenticate users, manage accounts, and enforce eligibility for playtests
- Deliver assigned test builds, process uploads, and route feedback to publishers
- Respond to inquiries, provide customer support, and communicate about tests
- Maintain security, prevent fraud, abuse, VPN/proxy misuse, and policy violations
- Comply with law, enforce our Terms of Service, and protect our rights
- Generate de-identified or aggregated playtest insights for studios (not tied to your private contact details in those reports)
6. We do not sell personal information
Plithus does not sell, rent, or trade personal information to third parties for money or other consideration.
We do not use personal information for cross-context behavioral advertising, and we do not "share" personal information for advertising purposes as defined under laws such as the CCPA/CPRA.
For playtest analysis, we may use de-identified or aggregated data derived from gameplay sessions, feedback, and related metrics. Some internal analytics may be pseudonymized (linked to an account only inside Plithus systems) before being summarized for studios.
Game studios working with Plithus can view your public Plithus profile, such as your nickname and how many playtests you have completed. They do not receive private account details like your email, password, phone number, or payment information.
When you join a specific playtest, the studio running that test may receive what you submit for that test (for example survey answers, written feedback, session timing, or gameplay video you chose to record), linked to your Plithus account so they know which tester provided it. Most tests are surveys only; video is requested only on certain tests and only with your explicit consent.
7. Legal bases for processing (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Contract: to provide services you request, including account access, playtests, and Launcher functionality on Windows and Android
- Legitimate interests: to secure our services, prevent abuse, improve products, and communicate about your account, balanced against your rights
- Consent: where required for optional cookies, marketing, or other processing you can withdraw
- Legal obligation: where we must retain or disclose information to comply with law
10. International data transfers
Plithus is based in Korea. Your information may be processed in Korea, the United States, and other countries where our service providers operate (including Vercel for website hosting and content delivery).
If you are in the EEA, UK, or another region with rules on international transfers, we take reasonable steps to protect your information when it is sent outside your country, including contractual protections with our providers where appropriate.
11. Retention
We retain personal information only as long as needed for the purposes described in this notice, including to provide services, comply with legal obligations, resolve disputes, and enforce agreements.
Playtest recordings and feedback may be retained for the duration of the playtest program and a reasonable period afterward for quality assurance and publisher review, unless a shorter period is required by contract or law.
Inactive accounts may be deleted after extended periods of non-use in accordance with our Terms of Service.
12. Security
We protect personal information with access controls, secure transmission (such as HTTPS for data in transit), and other safeguards suited to our services. No method of storage or transmission is completely secure.
Authorized Plithus staff may access playtest data to operate the platform and support testers. Playtest footage and feedback may also be available to the relevant game studio for that test. We do not claim that all stored footage is encrypted at rest.
13. Additional notice for Korea
This section applies to users in the Republic of Korea under the Personal Information Protection Act (PIPA) and related regulations.
13.1 Data controller
The entity responsible for processing personal information is Plithus Corp. (주식회사 플리더스), located in Goyang-si, Gyeonggi-do, Republic of Korea.
13.2 Your rights in Korea
Under PIPA, you may request access, correction, deletion, or suspension of processing of your personal information. Contact official@plithus.kr to exercise these rights.
We may request information reasonably necessary to verify your identity. Where permitted by applicable Korean law, we may ask for a copy of identification to confirm your request.
13.3 Retention and destruction
Personal information is retained until the purpose of collection is fulfilled and is destroyed without undue delay thereafter, unless retention is required by applicable law.
14. Additional notice for United States residents
This section applies to residents of the United States, including California residents under the CCPA/CPRA and residents of other states with similar privacy laws.
14.1 Categories and purposes
In the preceding 12 months, we may have collected the categories of personal information described in Section 3 for the business purposes in Section 5. Sensitive personal information, if collected, is used only as permitted by applicable law.
14.2 We do not sell or share personal information
As stated in Section 6, Plithus does not sell personal information for monetary consideration anywhere in the world. We do not "share" personal information for cross-context behavioral advertising as defined under California law.
Because we do not sell or share personal information, a "Do Not Sell or Share My Personal Information" link is not required for our current practices.
14.3 Your US privacy rights
Depending on your state of residence, you may have the right to:
- Know what personal information we collect, use, and disclose
- Access and obtain a copy of certain personal information
- Request deletion of personal information, subject to exceptions
- Request correction of inaccurate personal information
- Opt out of sale/sharing (not applicable to our current practices)
- Limit use of sensitive personal information where applicable
- Not receive discriminatory treatment for exercising privacy rights
To exercise these rights, email official@plithus.kr with the subject line "US Privacy Request." We will verify your request using information associated with your account (such as your registered email). We will not require you to submit a government ID unless strictly necessary to verify your identity and permitted by law.
You may designate an authorized agent to submit a request on your behalf where permitted by law. We may deny requests that are excessive, repetitive, or unfounded.
California residents may also contact us for information about metrics regarding consumer requests where required by law.
15. Additional notice for Canada
This section applies to individuals in Canada and is intended to meet transparency expectations under PIPEDA and substantially similar provincial laws.
15.1 Consent and collection
We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law. Consent may be express (e.g., account registration) or implied (e.g., contacting support about a service you use).
15.2 Your rights in Canada
Subject to limited legal exceptions, you may:
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Withdraw consent where processing is based on consent, understanding that some services may no longer be available
- Challenge our compliance with applicable privacy principles by contacting us
We will respond to access and correction requests within a reasonable time. We may verify your identity using account information rather than requesting government identification unless necessary.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.
16. Additional notice for EEA & United Kingdom
This section applies if you are located in the European Economic Area or the United Kingdom.
16.1 Your GDPR / UK GDPR rights
You may have the right to:
- Access your personal data and receive a copy
- Rectify inaccurate data
- Erase data in certain circumstances ("right to be forgotten")
- Restrict or object to certain processing
- Data portability for data you provided, where processing is automated and based on contract or consent
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with your local supervisory authority
To exercise these rights, contact official@plithus.kr with the subject line "GDPR Request." We will respond within one month, or inform you if an extension is required.
16.2 Transfers outside the EEA/UK
When we transfer personal data outside the EEA or UK (for example to Korea or to service providers such as Vercel), we take reasonable steps to protect it, including contractual protections with those providers where appropriate.
16.3 Automated decision-making
We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you. Fraud prevention may involve automated signals reviewed by humans.
17. Children
Plithus services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children without appropriate parental consent. Contact us if you believe a child has provided information to us.
18. Changes to this policy
We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the service or by email where appropriate.
Contact
Company Name: Plithus Co., Ltd.
Address: GL Metro City, 201 Hyangdong-ro, Goyang-si, Gyeonggi-do
Email: official@plithus.kr