Privacy Policy
Effective: September 14, 2026
Yeonji Yu (the "Operator") processes the personal information of Arcabe users in accordance with the Korean Personal Information Protection Act. This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.
1. Information We Process and Why
| Category | Items | Purpose | Legal basis |
|---|---|---|---|
| Sign-in | Email, name, profile photo and account ID from your Google account | Identifying members, creating and maintaining accounts, preventing abuse | Performance of contract (Article 15(1)(4) of the Act) |
| Profile | Display name, profile photo, bio | Showing member activity on the Service | Performance of contract |
| Activity | Posted games, comments, likes, recently viewed games, reports, time and version of agreement to the Terms | Providing the Service, handling reports, resolving disputes | Performance of contract |
| Automatically collected | IP address, browser and device information, access time, cookies | Keeping you signed in, remembering language, security and troubleshooting | Performance of contract |
| Usage statistics | Pages visited, device and browser information, approximate region (when Google Analytics is used) | Usage statistics to improve the Service | Used only as statistics that do not identify individuals |
Game progress is stored in your browser; the Operator does not collect it.
The Operator does not collect resident registration numbers, payment information or sensitive information.
2. Retention and Destruction
1. Member information is kept until you delete your account and destroyed promptly afterwards.
2. Information that the law requires us to keep is stored separately only for the required period.
3. Electronic files are deleted so they cannot be recovered. Information remaining in service backups is deleted when the backup retention period ends.
4. If you choose to keep your games when deleting your account, they remain with the creator name "Deleted user". If you wrote personal information in a game title or description, please choose to delete your games.
3. Provision to Third Parties
The Operator does not provide personal information to third parties, except when investigative agencies or other authorities request it through lawful procedures.
4. Processors and International Transfers
The Operator entrusts the processing of personal information to the companies below to run the Service. Transfers abroad are processing entrustments necessary to provide the Service and are disclosed in this policy under Article 28-8(1)(3) of the Act.
| Recipient | Task | Items transferred | Country of storage | Timing and method |
|---|---|---|---|---|
| Supabase, Inc. (supabase.com/privacy) | Member database, sign-in processing | Sign-in information, profile, activity | Republic of Korea (Seoul data center) | Sent over an encrypted network when you use the Service |
| Cloudflare, Inc. (cloudflare.com/privacypolicy) | Site delivery and security, storage of game files and images | IP address, browser information, uploaded files, profile photos | United States and other countries with Cloudflare data centers | Sent over an encrypted network when you use the Service |
| Google LLC (policies.google.com/privacy) | Google sign-in, usage statistics | Sign-in information, visit records | United States | Sent over an encrypted network when you sign in or visit pages |
Retention: until you delete your account or the entrustment ends
How to refuse: these transfers are necessary to provide the Service, so if you do not want them you may choose not to sign up or delete your account. Features that require sign-in will then be unavailable. You can refuse usage statistics as described in section 6.
5. Your Rights
1. You may request access to, correction, deletion or suspension of processing of your personal information at any time.
2. You can change your display name, profile photo and bio, and delete your account, in profile settings.
3. Send other requests to duswl4353@naver.com. The Operator will respond within 10 days of receiving the request.
4. People under 14 cannot sign up. Accounts found to belong to someone under 14 are deleted promptly.
6. Cookies
| Cookie | Purpose | If refused |
|---|---|---|
| Sign-in cookies (starting with sb-) | Keep you signed in | You cannot sign in |
| Language cookie (lang) | Remember your language | Your browser language is used |
| Statistics cookies (starting with _ga, when Google Analytics is used) | Visit statistics | No effect on using the Service |
You can refuse or delete cookies in your browser settings. You can also opt out of Google Analytics with Google's browser add-on (tools.google.com/dlpage/gaoptout).
7. Security Measures
- HTTPS encryption for all traffic and encryption of stored data
- Database access limited to the Service servers
- No passwords collected or stored (Google sign-in only)
- Two-factor authentication on operator accounts
- Posted games run on a separate domain so they cannot access member information
8. Privacy Officer
- Name: Yeonji Yu (Operator)
- Contact: duswl4353@naver.com
9. Remedies
For reports or consultation about privacy violations, you may contact the following Korean authorities.
- Personal Information Infringement Report Center: privacy.kisa.or.kr, 118
- Personal Information Dispute Mediation Committee: www.kopico.go.kr, 1833-6972
- Supreme Prosecutors' Office Cyber Investigation: www.spo.go.kr, 1301
- Korean National Police Agency Cyber Bureau: ecrm.police.go.kr, 182
10. Changes
This policy applies from September 14, 2026. Changes are announced on the Service at least 7 days before they take effect.