Attachment · Privacy notice

Privacy Policy

"Boss, Sign Here!" (Korean title: 대표님, 결재 부탁드립니다!) · Effective October 28, 2026

This is an English translation of the Korean Privacy Policy, provided for convenience. The operator is based in Korea and the Korean-language policy governs. If the two ever differ, the Korean version prevails.

The operator of "Boss, Sign Here!" (the "Site"; the "Operator") publishes this policy under Korea's Personal Information Protection Act to protect users' personal information and to handle related complaints smoothly.

1. Purposes of processing

Game saves are handled on your device. Anonymous stats and error information may be sent to improve the service. Information is processed for the following purposes.

• Providing the game: saving and resuming your lives, the Closures & Exits Ledger (Hall of Fame), the dex, daily challenge records, and keeping your sound, currency and display settings (saves are processed on your device).
• Providing and securing the Site: delivering pages, images and fonts, keeping the service stable and blocking abusive access (Cloudflare, Google Fonts).
• Serving ads: showing ads, measuring ad performance and preventing click fraud (Google AdSense; see "6. Cookies and ads" below).

2. Information processed

A. Information stored only in your browser (the Operator has no access)

The Site sets no cookies and uses only the browser's localStorage. The keys stored are:

• one100k.slots.v1, one100k.slot.<life number>Saved lives (resume slots): the full game state, including the CEO's name, background, city, assets, businesses and history, plus a summary list.
• one100k.save.v1A single save from an older version (moved into a slot if present).
• one100k.hall.v1The Closures & Exits Ledger (Hall of Fame): name, background, city, ending, age, peak net worth and timestamp of finished lives (up to the latest 100).
• one100k.dex.v1The dex: the sign-off requests, endings and industries seen on this device.
• one100k.daily.v1Daily challenge records: attempts, best score and ending per date (last 60 days).
• one100k.pref.audio, one100k.pref.currency, one100k.pref.reveal, one100k.pref.mode, one100k.pref.instantCard, one100k.pref.langSettings: sound and volume, display currency, show all actions, game mode, open new paperwork right away, language.

If you leave the "CEO name" field blank, a random name is chosen. A name you type is stored only on your device as above, so we recommend not entering your real name or anyone else's personal information.

When you first pick the display currency, the Site reads your browser's language and time zone settings. This is used only for calculation on your device and is not sent anywhere. Creating the statement image, saving the image, copying the result text (clipboard) and sharing also run only on your device when you press the button, and nothing is transmitted to the Operator. (Sending something to another app through your device's share feature goes to whatever recipient you choose.)

B. Information passed to outside services when you visit

• Cloudflare (hosting): ordinary web access records such as IP address, browser and device type (User-Agent), requested address, access time and referrer. The Operator does not separately collect or review these; Cloudflare processes them to run and secure the service.
• Google Fonts (fonts): to download fonts, your IP address, User-Agent and referrer are passed to Google servers (fonts.googleapis.com, fonts.gstatic.com).
• Google AdSense (ads): when ads are served, the information described in "6. Cookies and ads" is passed to Google and others.

The Site contains no visitor-analytics tools. Your email, contact details, precise location and payment information are not collected as statistics.

Anonymous game stats

To improve the service and to provide "other CEOs' records", when the setting is on, a finished life sends the edition, birth background, city and era, the industries you ran, the endings and achievements reached, months played and a net-worth band. Exact net worth is not sent.

When an error occurs, an excerpt is extracted and the error type, screen, game version and edition are sent. Real names, contact details such as email or phone number, device identifiers, advertising IDs and precise location are not collected. Your IP address may be processed momentarily during the connection, but it is not stored with the stats. To prevent report abuse, an IP hash mixed with a secret value and the date is kept separately and deleted at the next day's report or cleanup run.

A nickname, which is optional, is shown to other players alongside your game record. You can choose to stay anonymous. Do not put your real name or contact details in a nickname. Nicknames are kept for two years together with the record and can be deleted with "Delete my public records" in ⚙ Settings. The deletion token is stored only on your device, so delete your public records or keep a safe copy of your full records before clearing browser data. A token hash used to prevent deleted records from being re-sent is kept for up to two years. Anonymous records have no deletion token, so they cannot be deleted individually. Only totals and ratios for groups of 30 or more are shown. Raw records are deleted after two years, though aggregate figures may remain. Data is stored and processed on servers of Cloudflare, Inc. (United States).

Turn off "Send anonymous stats" in ⚙ Settings to refuse transmission. Playing the game is not restricted either way.

3. Retention and deletion

• Game information in your browser: stays on your device until you delete it. Your individual progress saves are never transmitted to the Operator.
• Cloudflare and Google access records and ad data: retained and deleted under each company's policy.

Export codes contain only the game records on your device and are not sent anywhere. An export code may include the deletion token for public records, so do not share it with anyone you do not trust.

How to delete things yourself

• Delete one saved life: on the title screen, press Delete for that life in the "Continue" list twice to confirm. Pressing "Be reborn" on an ending screen also erases that finished life's save.
• Erase all records: press "Erase all records" twice in ⚙ Settings, and your saves, Hall of Fame, dex, daily records, settings and the game's ad-related records are deleted. You can also clear site data in your browser settings. Deleted records cannot be recovered.
• In private (incognito) mode, saves disappear when you close the window, and if your browser blocks storage, Continue may not work.

4. Provision to third parties

The Operator does not put your real name or contact details into statistics or provide them to third parties. However, the services below communicate directly with those companies' servers when your browser opens the Site, and each company processes information under its own policy.

If a key is configured, the KakaoTalk share button loads the Kakao SDK only when you press it, and you choose what to share.

5. Outsourcing and transfers abroad

The Operator uses the services below to run the Site. Your connection information may be processed on these providers' servers overseas.

If you do not want your information transferred abroad, please stop using the Site. For ways to refuse a transfer, or questions about transferred information, contact the person named in "10. Privacy officer" below.

6. Cookies and ads

A. The Site's own cookies

The Site sets no cookies of its own. Game information is stored in localStorage as described above, not in cookies.

B. Google AdSense ads

The Site may serve Google AdSense ads (including rewarded and interstitial ads from H5 Games Ads, and banner ads). While no ads are actually being served, the ad-related processing below does not happen; once ads start being served, the following applies.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this Site or other sites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this Site and other sites on the Internet.
• Google and its partners may use cookies, device advertising identifiers on mobile, IP addresses and browser and device information to show ads, measure impressions and clicks, and prevent misuse. Depending on your region, a consent management screen may appear, in which case your choice applies.
• You can turn off personalized ads at https://adssettings.google.com (or https://www.google.com/settings/ads).
• Or you can opt out of third-party vendors' use of cookies for personalized advertising at www.aboutads.info.
• How Google uses information from sites or apps that use its advertising services is explained at https://policies.google.com/technologies/partner-sites.
• On mobile devices you can also limit advertising identifiers through your operating system settings (deleting the advertising ID or opting out of personalized ads on Android; turning off tracking permission on iOS).
• You can refuse or delete cookies in your browser settings. That may turn off only personalized ads while ads themselves continue to appear.

C. Rewarded ads

Rewarded ads play only when you press them yourself. You can keep playing without watching, and the reward is limited to in-game benefits with no relation to cash or real goods. On interstitial and banner ads, pressing an ad may take you to the advertiser's site, whose handling of personal information follows that provider's own policy.

7. Your rights and how to exercise them

You have the right to request access to, correction or deletion of, and suspension of processing of your personal information. Because your game information exists only on your own device, you can view and delete it yourself using the "How to delete things yourself" steps in section 3 above.

For information processed by Cloudflare or Google, you can exercise your rights with the tools those companies provide (for example, the Ad settings of your Google account), or contact the privacy officer in "10. Privacy officer" below and we will guide you as far as we can. A legal guardian may exercise the same rights on behalf of a child.

8. Security measures

• Apart from a nickname you choose to enter, real names, contact details and device identifiers are not stored with stats, and access to servers is restricted.
• The Site is served over HTTPS (encrypted communication).
• Game information stored on your device can be seen by whoever uses that device. On a shared device, please clear site data after playing.

9. Children's information (under 14)

The Site is not directed at children under 14, and the Operator does not separately collect children's personal information. The game deals with subjects such as crime and investigation, so we recommend that anyone under 14 play under a guardian's guidance. Advertising cookies and similar are handled by Google and others, so guardians can turn off personalized ads using the methods in "6. Cookies and ads" above.

10. Privacy officer

For questions about personal information handling, complaints and remedies, please contact the privacy officer below. We will answer every inquiry without delay.

• Name (or Operator display name): Tuoti (투오티)
• Position: Operator (individual)
• Contact email: [email protected]

11. Remedies for infringement

To seek relief for a privacy violation, you may apply for dispute resolution or counselling at the following Korean agencies.

• Personal Information Infringement Report Center (Korea Internet & Security Agency): dial 118 without an area code · privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: +82 1833-6972 · www.kopico.go.kr
• Supreme Prosecutors' Office, Cyber Investigation Division: dial 1301 without an area code · www.spo.go.kr
• National Police Agency, Cyber Investigation Bureau: dial 182 without an area code · ecrm.police.go.kr

12. Changes to this policy

If this policy changes, we will announce the changes and the effective date on this page starting 7 days before they take effect. For changes that matter to you, such as collecting more items or adding advertising or external services, we will announce them starting 30 days before.

• Announced / effective date: October 28, 2026