Last updated: 15 October 2026

Parent or guardian consent and signature form

Legal guardian verification and essential processing planned for players under 16 using Just a little frog online in the new release.

Language

Information for legal guardians

1. Who needs a legal guardian’s approval

The age and guardian process below is the operating standard for a planned new release and applies from app versions that include it. Just a little frog requests verification and consent from a legal guardian for players under 16, including those aged 12 and under. This applies in app versions that include this process. Online play and Firebase authentication and game-data processing do not start until approval is confirmed. The date-of-birth check is processed on the device.

This page explains the process and provides a blank signature form. Read the detailed notice about essential data processing and international transfers provided by support before signing. Do not sign if you have not received that notice. Submitting this form or sending an email alone does not complete approval.

2. From request to approval

  • A legal guardian checks the app's 64-character request ID and this guidance. Contact support@vacoz.com if you need the detailed notice or further clarification. Even if an existing app opens an email composer, the guardian can submit consent documents through the dedicated form.
  • Support matches the request ID and provides the guardian with a detailed notice covering data, purposes, retention, international-transfer recipients’ legal names and contact details, and countries, transfer timing and methods, and the effect of refusing consent.
  • After reading the detailed notice, the guardian completes the form below with the request ID, name, relationship, email, notice reference and version, separate consent choices, signature and date. Select parental consent in the dedicated form and submit the request ID and one signed PDF, PNG or JPEG file up to 4 MiB. Do not submit the secret installation key.
  • Support reviews the guardian’s authority and documents and approves only after the necessary checks. Online play begins only when the app’s approval check confirms a valid approval. Incomplete verification or refusal does not result in approval.

3. Essential processing and restrictions

Approval requests and checks use a request ID and information verifying possession of the app installation. The app communicates with the approval service over encrypted HTTPS; basic connection and security records, such as an IP address, may be processed. The app may send its secret installation key to the approval service for verification, but do not put that key in an email or signature form.

After approval, essential online-play and abuse-prevention processing includes a Firebase guest identifier, app and device information, language and time zone, game progress, rewards and daily verification records, and App Check and Play Integrity checks. See the Privacy Policy and the detailed notice provided to the guardian for the exact data and retention criteria.

Under-16 mode does not use ads, optional usage analytics or crash reporting, or cash in-app purchases. Refusing or withdrawing consent to essential processing prevents use of the related online game. Advertising and analytics choices in the 16-and-over mode follow separate privacy settings.

On iOS, only players aged 18 or over who allow personalization and tracking in advertising privacy choices are asked for iOS system app-tracking permission. Advertising tracking is used only if you also grant that permission. If refused, we do not use advertising tracking; ads, where they can be served, are non-personalized. Under-16 mode has no ads. Players aged 16–17 are not asked for tracking permission and cannot enable advertising tracking or personalization. Optional usage analytics and crash reporting are off by default and follow their respective permission conditions and choices. Turning off optional usage analytics and crash reporting does not stop connection, verification and operational error records needed to provide secure, reliable authentication, game-data storage and server requests.

4. The detailed notice to read before signing

Check the notice supplied by support for VACOZ’s contact details, essential data, purposes and retention, processing of guardian verification and consent evidence, the actual international-transfer recipients’ legal names and contact details, countries, data, purposes and retention, transfer timing and methods, and how refusal works and affects the service. Enter the notice reference and version on the signature form. Ask support@vacoz.com about missing or unclear information before consenting.

Essential game, support and international-transfer information
Service, recipient and countryData and purposeTiming and methodRetention and deletionRefusal and contact
Firebase Authentication — Google LLC, United StatesGuest identifier and authentication/security data such as IP address and user agent, for guest authentication and abuse prevention.Encrypted network transmission during authentication and reauthentication after completing the age and guardian process.Authentication data until deletion of the associated user is requested. Google describes removal from live and backup systems within 180 days after deletion, and retention of authentication IP logs for a few weeks.Refusing essential authentication prevents online play. support@vacoz.com / Google Cloud Data Protection Team.
Firestore and Cloud Functions — Google Cloud Korea LLC (Korea), Google Asia Pacific Pte. Ltd. (Singapore), Google LLC (United States)Game identifiers, app/device, language/time-zone, progress/reward/purchase-verification records; guardian request ID, approval, dates, notice version, review reference and connection-security records. Online play, verification and approval checks. Account-deletion requests, status, deadlines and the minimal linkage needed to verify ownership of the account are also processed.Game storage and function execution use Seoul. Service and approval checks use encrypted communications such as HTTPS. Necessary Google operations, security, support and subprocessors follow the official list linked below.Our records follow the 14-, 90- and 365-day criteria and separate entitlement/legal retention in section 6 of the Privacy Policy. After our deletion instruction, Google’s internal deletion process may take up to 180 days under the Cloud DPA. Minimal account-deletion ownership linkage is kept only while the account exists, removed on account deletion and never reused to authorize gameplay.Refusing essential game or approval processing prevents the related online features. support@vacoz.com / Google Cloud Data Protection Team.
Android App Check and Play Integrity — Google LLC (United States), Google Asia Pacific Pte. Ltd. (Singapore) and the official Google subprocessor listApp/device attestation material and verification tokens, to protect server access and prevent abuse.Encrypted transmission for integrity checks and protected requests in approved online mode. The service-specific official list below identifies Google’s operations and support countries.App Check does not retain attestation material; attestation-provider terms apply. Ordinary tokens are used during their validity. Google describes up to 30-day retention for tokens used with replay protection, if used.Refusing essential integrity checks prevents protected online features. support@vacoz.com / Google Cloud Data Protection Team.
iOS app integrity checks (App Attest) — Apple Inc. (US-based). Google recipients for Firebase App Check are identified in the preceding row.Verification identifiers and attestation information establish that the app and device are legitimate. Basic connection information such as IP addresses may also be processed during communication.When app verification is needed after the age/guardian process, the app communicates with Apple and sends the attestation result to Google App Check. Apple explains that personal data is generally stored by Apple Inc. in the US and may also be processed in other countries through Apple affiliates worldwide. See Apple’s information below for responsible entities and international transfers.App Check does not retain attestation material. Apple explains that it retains information as needed for service, security and other processing purposes, and deletes it when related legal or business retention needs end. Its privacy information explains retention, deletion and how to exercise your rights.Refusing essential app verification prevents protected online features. support@vacoz.com / Apple privacy contact: https://www.apple.com/privacy/contact/ .
Support iCloud Mail — Apple Services Pte. Ltd. (iCloud contracting provider for Korean users, Singapore); Apple Inc. (United States) and processing entities in Apple’s official privacy informationEmail, inquiry, request ID, game UID, minimum verification information, guardian name, relationship, signature, date and consent document; for support, privacy requests, guardian checks and consent evidence.Messages pass through the email service when you send support mail or we reply. Our operations system collects bodies and attachments addressed to support@vacoz.com. Access within our company is limited to the representative. Apple states that personal data is generally stored by Apple Inc. in the US; actual service processing follows Apple's official privacy information.Unapproved applications: at 14-day expiry or final rejection; ordinary enquiries and rights requests: 90 days after actual closure; signed evidence: 90 days after withdrawal/expiry. Legal/dispute exceptions are separated. Collected copies, originals, attachments and trash require separate deletion checks; iCloud's default 30-day trash period is not mandatory additional retention.Email submission is optional. The dedicated form accepts parental consent and privacy-rights requests; email is not required for iOS in-app account deletion. If necessary authority cannot be verified, the process cannot be completed. support@vacoz.com / Apple privacy contact: privacyoffice_korea@apple.com.
Dedicated intake and operations server — Vercel Inc. (US); execution region SingaporeContact email, request type, details, IDs, UID, verification information, guardian signatures and attachments, connection and security records. Intake, authority checks, processing and retention management.Submitted forms use HTTPS. Received support-email bodies and attachments are collected into the operations server once daily. Server execution is configured in Singapore; Vercel's US and global-infrastructure processing follows its official policies.Company-managed originals and attachments follow section 6's 14/90/365-day and legal/dispute rules. Vercel's own security and operational records also follow its purpose and legal-obligation criteria.You may decline the dedicated form. If necessary authority or consent cannot be verified, the process cannot be completed. support@vacoz.com / privacy@vercel.com.
Operations database — Neon; Databricks, Inc. (US, parent of Neon, LLC); database region SingaporeIntake and collected-support originals, contacts, status, signed documents and attachments, minimal verification and deletion records. Encrypted storage, task processing and retention management.Stored over encrypted connections in the Singapore database during intake processing or support-email collection. Operational, support and subprocessor processing follow Neon's contract and Databricks' official subprocessor list.Company-managed originals and attachments follow section 6's record-specific rules. Database recovery history, backups and providers' own security and statutory records are managed separately from operational-database deletion. The Neon operational database has a six-hour recovery-history retention setting. Deletion from the operational database does not instantly erase that recovery history, whose expiry is checked separately.If necessary intake storage is refused, we cannot receive or verify that form request. General enquiries and alternative-intake assistance: support@vacoz.com / Databricks privacy contact: privacy@databricks.com.

Apple privacy, international transfers, retention and deletion information

Google’s official subprocessor list identifies Google LLC in the US, Google Asia Pacific Pte. Ltd. in Singapore, Google Cloud Korea LLC in Korea, and service-specific operations/support entities and processing countries. Relevant service and region rows apply; this does not mean game records are copied to every listed country. The Google Cloud subprocessor link below provides legal names, addresses, countries, activities and changes. Google’s processing contact is https://support.google.com/cloud/contact/dpo .

Signed documents and guardian contact information are submitted through the dedicated form and handled in our restricted operations system to verify guardianship, evidence consent and process withdrawal and privacy-rights requests. General enquiries and existing app support emails use iCloud Mail; their bodies and attachments are collected into the operations system for retention management. Access within our company is limited to the representative. Signed originals are not published in the game or on a public webpage.

We do not add the game-account identifier, raw installation-possession secret, date of birth or guardian-signature photos to these app-integrity requests sent to Apple. Verification identifiers and connection records are separate. These requests are also distinct from our game-server and support channels that handle approval and deletion requests.

5. Request, approval and signed-evidence retention

  • Unapproved application originals and attachments are deleted when 14 days from receipt expire or rejection becomes final. We verify whether evidence has actually been approved or renewed; an old email's receipt date alone does not determine its status. Start a new request if you wish to apply again.
  • Guardian approval is valid for 365 days from issuance. Renew it and complete the necessary verification and consent again before expiry to continue using the service.
  • Signed consent evidence is retained while approval is active, then deleted 90 days after the earlier of withdrawal or expiry. Renewals are new evidence. Minimum legal or dispute records are held separately. The same criteria apply to relevant collected copies, original emails and attachments, with deletion checked for each source.
  • Minimal deletion-ownership linkage: the account identifier and minimum records needed to verify installation possession and approval are kept only while the account exists. After signed guardian-consent evidence is deleted 90 days after withdrawal or expiry, this linkage can still establish ownership for deletion of that account. It cannot be reused to authorize online play. Deleting the account also removes the linkage.

Contact information, submissions and attachments for consent-withdrawal, deletion, access and correction requests are deleted 90 days after the first actual closure. Single-use deletion-verification codes are removed at closure. Retention is checked once a day. Holds, verification mismatches and deletion failures require operator review, and an original is not marked deleted without confirmation. Recovery copies are separately restricted, and retention deadlines and deletion markers are reapplied on restore. See Privacy Policy section 6 for details.

The retention deadline itself is not extended. Records due for deletion are processed at the first daily check after the deadline (09:30 Korea Standard Time); the check interval may introduce up to one day of processing latency.

The Neon operational database has a six-hour recovery-history retention setting. Deletion from the operational database does not instantly erase that recovery history, whose expiry is checked separately.

6. Withdrawal, deletion and support

In iOS versions containing this feature, use Delete data in settings to submit a deletion request without email. Previously approved children can use this route after guardian approval is revoked or expires if approval and installation-possession information remaining on the device establishes ownership of the account. Our team processes requests within 7 calendar days of receipt, including weekends and public holidays. Check status and the deadline, or cancel before processing starts, in the app. Android’s existing verification-code email route and support@vacoz.com remain available when in-app verification cannot be used. Deletion-ownership verification does not restore permission to play.

A legal guardian may select consent withdrawal, access, correction or deletion in the dedicated form and submit the request ID or game UID and minimum verification information. Knowing a UID alone does not establish authority; an operator verifies the request. Do not submit passwords, full card numbers, raw purchase tokens or unnecessary copies of identity documents. Contact support@vacoz.com if you need help using the form.

After support revokes an approval, the app blocks online access when it checks approval at the next launch, return to the app, or a five-minute interval during use. Remote withdrawal takes effect after the check receives its result; it does not instantly close an offline screen already running. We explain deletion, retention and the outcome under applicable law and the Privacy Policy.

7. Printable legal guardian signature form

Receive and read the detailed notice first, then print this page or save it as PDF to complete it. Mark each consent choice and have the legal guardian sign. The guardian replies directly to support@vacoz.com with the completed document.

  • App request ID (64 characters): ________________________________________________________________
  • Legal guardian name: ____________________ Relationship to the player: ____________________
  • Reply email: ________________________________________________________________
  • Detailed notice reference: ____________________ Notice version: ____________________
  • I confirm that I am this player’s legal guardian, have read the notice and am authorized to make this request: □ Confirm
  • Essential personal-data processing described in the notice: □ I consent □ I do not consent
  • International transfers described in the notice: □ I consent □ I do not consent
  • Guardian’s handwritten signature: ____________________ Date (year/month/day): ____________________

Approval covers essential processing for under-16 online play. This is not consent to ads, optional analytics or cash in-app purchases. Do not include the app’s secret installation key or a password on this form.

Just a little frog parental consent and privacy requests

Use the dedicated form to submit parental consent documents or request deletion, access, correction or withdrawal of consent. Send general game enquiries to support@vacoz.com.

Open the request form

Read the signature form and privacy information first. An operator verifies identity or parental authority; submission alone does not grant approval or delete an account. iOS in-app deletion requests remain available.