Privacy Policy
This is an English translation provided for convenience. The Korean version is the original and prevails if the two differ.
“Baduk Han Su” (the “app”) takes your privacy seriously and complies with Korea’s Personal Information Protection Act and related law. To provide games against the AI (KataGo), saved game records and post-game analysis, the app stores some data on servers operated by the app’s maintainer. This policy explains, plainly, what is stored, why, and when it is deleted.
1. What we collect, and why
You can use the app without an account; signing up is optional. This is what the server keeps in each case.
| Who | Data | Purpose |
|---|---|---|
| Without an account | An anonymous session identifier (a random value issued by the server) | Providing AI games without identifying your device; rate limiting |
| Member (at sign-up) | Email address, email verification code (hashed), sign-in time | Identifying the member; email sign-in |
| Member (optional) | Password (stored only as a hash) | Only if you choose to set up password sign-in |
| Member (created while playing) | Game records (moves, result, win-rate graph, review analysis), rank profile (nickname, rank, record), stay-signed-in token (hashed) | Keeping and reviewing your games, rank and promotion, continuing on another device |
| Collected automatically | IP address, app version, request time | Stable operation, rate limiting, fixing errors |
- The app itself does not collect other personal data such as your name, phone number, location or contacts. For the cookies and identifiers Google uses in connection with ads on the website, see section 4.
- Passwords, stay-signed-in tokens and email verification codes are never stored in the clear — only their hashes are kept.
- Moves played without an account are not stored on the server. Saved records are a member feature.
2. How long we keep it
- Member data and game records: Kept until you ask for deletion. You can delete an individual game from inside the app at any time.
- Email verification codes: Expire 10 minutes after being issued; expired codes are purged periodically.
- Stay-signed-in tokens: One year at most, and discarded immediately when you sign out.
- Anonymous sessions: Deleting the app removes the identifier from your device so it is no longer used. The server periodically cleans up unused sessions.
- Access logs (IP address and similar): Kept as server logs for a limited period for operational purposes, then deleted.
- Advertising cookies: Cookies used for ads on the website are managed by Google under its own policies, and you can clear them from your browser settings at any time.
3. Permissions
The app uses only the minimum permissions it needs.
- Internet access: Games against the AI, scoring, saved records and review analysis all work by talking to the maintainer’s server, so internet access is required. All communication is encrypted with HTTPS.
4. Third parties and processing on our behalf
The app does not sell or hand your personal data to third parties. It does, however, run on the infrastructure of the providers below, and data passes through their systems.
- Google Cloud Platform: Server hosting. Everything stored on the server sits on Google Cloud infrastructure. Google Privacy Policy
- Gmail (Google): Used to send email verification codes for sign-up and sign-in.
- Google AdSense: This website shows Google AdSense ads. Google and its partners may use cookies or similar identifiers to serve ads and measure them. The maintainer does not pass member data or game records to Google for advertising. You can turn off personalised ads below. Google Ad Settings
Ads run on the website only; the Android app carries none. No other behavioural analytics or crash-reporting tools are used.
5. How we keep it safe
- All communication between the app and the server is encrypted with TLS (HTTPS).
- Passwords, verification codes and stay-signed-in tokens are stored only as hashes; the originals never remain on the server.
- A stay-signed-in token is replaced with a new one on every use; if an already-used token is presented again we treat it as theft and discard all of that member’s tokens.
- Requesting and checking verification codes is rate limited to block brute-force attempts.
- The server database is isolated so it cannot be reached directly from outside.
6. Your rights, and how to use them
- Deleting a game record: Deleting a game inside the app deletes it from the server immediately.
- Signing out: Signing out discards that device’s stay-signed-in token on the server.
- Closing your account and deleting everything: Write to the contact below with the email address you signed up with, and we will delete everything associated with the account — email, game records, rank profile and tokens. We act without delay once the request is confirmed.
- Access and correction: You can view and edit your own records and profile in the app; for anything else, please write to the contact below.
7. Children’s data
The app is not aimed at children under 14 and does not knowingly collect their personal data. If we learn that such data has been collected, we delete it without delay.
8. Changes to this policy
This policy may be revised in line with the law or changes to the service; any change is announced on this page.
Revised 7 September 2026: Google AdSense ads now run on the website, so an advertising disclosure was added to section 4 and the wording about advertising was corrected.
9. Contact
If you have questions about how your data is handled while using Baduk Han Su, want it deleted, or have a suggestion, please get in touch.
- Email: shootthemood919@gmail.com