Privacy Policy
Studiobside Co., Ltd. (hereinafter referred to as the “Company”) values users’ personal information and is committed to protecting their rights. In accordance with the Personal Information Protection Act and other applicable laws, the Company lawfully processes and safely manages personal data.
Pursuant to Article 30 of the Personal Information Protection Act, this Privacy Policy provides a comprehensive overview of how personal information is collected, used, provided, and destroyed, as well as the measures in place to protect users' personal data and how users can exercise their rights.
This Privacy Policy applies to the game Star Savior and all related services provided by the Company.
Article 1. Purpose of Personal Information Processing
1. The Company processes personal information for the following purposes. The processed personal information will not be used for purposes other than those specified below. If the purpose of use is changed, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
① To establish effective communication channels for delivering notices, handling complaints, and other customer inquiries
② To provide customer service such as handling inquiries regarding paid content, fulfilling contracts, resolving disputes, processing payments, and issuing refunds
③ To support in-game gameplay and community services
④ For marketing and advertising purposes:
- To provide information on new service events
- To share updates on new game releases and service updates
- To provide various promotions and event notifications via the Company’s official channels
- To improve service quality and process statistical data
- To accurately collect shipping information for prize delivery
⑤ To provide other content and authentication services
Article 2. Period of Retention and Use of Personal Information
1. The Company processes and retains personal information within the retention/use period agreed upon by the user at the time of collection or as stipulated by applicable laws and regulations.
Article 3. Items of Personal Information Processed
1. The Company collects personal information from users after obtaining their consent, classifying it as either required or optional, depending on the purpose. Information is collected when users use the service, input data directly, or participate in events/marketing activities.
|
Category |
Purpose |
Required/Optional |
Items Collected |
Retention Period |
|---|---|---|---|---|
All Platforms |
User identification, game service operation |
Required |
Advertising ID, game usage history, nickname, chat logs, access logs and authentication date, abuse history, suspension records, payment history, device information (model name, OS version), store information, game version, device ID |
Until membership withdrawal or as required by law |
Sign in with Apple Account |
User identification, game service operation |
Required |
Member identifier information |
Until membership withdrawal or as required by law |
Sign in with Google Account |
User identification, game service operation |
Required |
Member identifier information |
Until membership withdrawal or as required by law |
Sign in with Steam Account |
User identification, game service operation |
Required |
Member identifier information |
Until membership withdrawal or as required by law |
Events |
Event participation |
Optional |
Name, address, contact number, email, SNS ID |
Until the purpose is achieved, or consent is withdrawn |
Prize delivery |
Required |
Name, contact number, address, postal code |
Until prize delivery is complete * For information related to prize tax obligations: 10 years from the date of collection (based on the longest statute of limitations under the Framework Act on National Taxes) |
|
Reporting applicable Taxes and public charges |
Required |
Name, Resident Registration Number, ID copy, address, postal code, bank account number, bank name, account holder name |
||
Customer Support |
User identification, contact, customer inquiries |
Required |
Email, device information (model name, OS version) |
3 years (in accordance with the Act on Consumer Protection in Electronic Commerce) |
Optional |
Mobile phone number, payment date, payment account, order number, product name, payment amount, payment receipt |
3 years (in accordance with the Act on Consumer Protection in Electronic Commerce) |
||
Paid Service |
Payment processing |
Required |
Open market ID, payment history |
5 years (in accordance with the Act on Consumer Protection in Electronic Commerce) |
Refund & Cancellation |
Handling refunds and cancellations |
Required |
Open market ID, payment date, payment account, order number, product name, payment amount, payment receipt, identification and family relationship documents for confirming third-party payments |
5 years (in accordance with the Act on Consumer Protection in Electronic Commerce) |
Article 4. Provision of Personal Information to Third Parties
1. The Company processes users’ personal information only within the scope
stated in the purpose of processing personal information. Personal
information is provided to third parties only in cases where the user has
given consent, or when such provision is permitted by special provisions of
the law, in accordance with Articles 17 and 18 of the
Personal Information Protection Act. Otherwise, the Company does
not provide users’ personal information to any third party.
2. For the
smooth provision of services, the Company may provide users’ personal
information to third parties to the minimum extent necessary, only after
obtaining the user's consent.
Article 5. Delegation of Personal Information Processing
1. The Company entrusts the processing of personal information to third parties as follows to ensure smooth handling of personal information-related tasks:
|
Entrusted Party |
Entrusted Tasks |
|---|---|
SAMJUNG DATA SERVICES |
Supply and management of message delivery systems |
LatisGlobal Communications Inc. |
CS |
2. When entering into an outsourcing agreement, the Company specifies in
documents such as contracts, in accordance with Article 26 of the
Personal Information Protection Act, matters including prohibition
of personal information processing for purposes other than the performance
of the entrusted tasks, technical and managerial protection measures,
restrictions on re-delegation, supervision of the trustee, and liability for
damages. The Company also supervises and manages the trustee to ensure
personal information is processed securely.
3. If there are any changes
in the contents of the entrusted tasks or the trustees, such changes will be
disclosed promptly through this Privacy Policy.
Article 6. Overseas Transfer of Personal Information
1. In accordance with Article 28-8, Paragraph 1, Subparagraph 1 of the Personal Information Protection Act, the Company transfers personal information overseas only after obtaining separate consent from the user. Users may refuse to consent to the overseas transfer of their personal information. However, refusal may result in restrictions on the use of services that involve such overseas transfers.
Google LLC ([email protected])
- Country: United States
(location of Google data centers)
- Timing: Automatically transferred
when submitting survey and event responses
- Purpose: Collection and
storage of survey and event data
- Items Transferred: All personal
information collected through the relevant survey or event
Users may request to refuse the overseas transfer of their personal information through the designated department. However, such transfers occur only when the service is accessed outside of Korea. Since these transfers are necessary for the operation of the global service, refusal may result in the inability to use the service.
Article 7. Procedures and Methods for Destruction of Personal Information
1. The Company will promptly destroy personal information when it becomes
unnecessary, such as upon expiration of the retention period or achievement
of the purpose for which it was collected.
2. If the retention period
agreed by the user has expired or the purpose of processing has been
fulfilled, but the information must be retained under other laws, the
Company will store the personal information separately in a different
database (DB) or storage location. (Refer to "Period of Retention and Use of
Personal Information")
3. The procedures and methods for destroying
personal information are as follows:
① Personal information recorded and stored in electronic files is destroyed using technical methods that render the records irrecoverable.
② Personal information recorded and stored in paper documents is destroyed by shredding or incineration.
Article 8. Disposal of Personal Information of Inactive Users
1. The Company may take necessary measures, such as classifying or
destroying the information of users who have not used the service for one
year, by converting their accounts to dormant status.
2. At least 30
days prior to converting the account to dormant status, the Company will
notify the user by a method reasonably capable of reaching them (e.g., app
push notification) about the upcoming status change, the date of dormancy,
and the items of personal information to be separated or destroyed.
3.
If users do not wish their accounts to be converted to dormant status, they
may simply log in to the service before the dormancy takes effect.
Article 9. User and Legal Guardian Rights, Obligations, and Exercise Procedures
1. Users may, at any time, view, access, or modify their personal
information, and may also request termination of their membership or
deletion of their personal information. However, if essential personal
information required for service provision is deleted, the user may no
longer be able to use the related services.
2. Users can directly
access and modify their personal information through the [Account
Information] menu within the service. They can also terminate their
membership at any time through the [Delete Account] function within the
service. Upon termination, all personal information associated with the user
will be deleted.
3. If a user requests correction or deletion of their
personal information, the Company will verify the user’s identity and take
necessary measures without delay. In cases where restrictions are imposed in
accordance with the Terms of Use, the Company may destroy personal
information, including user ID, under the supervision of the Data Protection
Officer.
4. The Company obtains the consent of a legal guardian before
collecting, using, or providing personal information of children and
adolescents.
5. Access and modification of a user’s personal
information can be requested by the user or the legal guardian of a child
under the age of 14, and such requests are granted after verifying the
identity of the requester.
6. If a user requests correction of
erroneous personal information, the Company will not use or provide the
information in question until the correction is completed. If the incorrect
personal information has already been provided to a third party, the Company
will notify the third party of the correction without delay so that the
correction can be implemented.
7. Personal information that is
terminated or deleted at the user's request will be processed in accordance
with Article 2 ("Period of Retention and Use of Personal Information") and
will not be accessed or used for any purpose other than as specified.
Article 10. Measures to Ensure the Security of Personal Information
1. The Company has established internal management regulations to prevent
loss, theft, leakage, alteration, or damage of users’ personal information
during processing.
2. A dedicated personal information protection team
is in operation, and technical and administrative safeguards are implemented
and monitored regularly.
3. In accordance with internal security
policies, users’ personal information is encrypted using secure encryption
algorithms.
4. Access rights to personal information processing systems
are managed and controlled through the installation and operation of access
control systems.
5. The Company minimizes access privileges to users’
personal information for personal information handlers and provides regular
training on personal data protection and security.
6. Security software
such as antivirus programs is installed, operated, and regularly updated on
the PCs of personal information handlers.
7. Physical security measures
are in place to ensure the safe storage of personal information, including
access control systems, locking devices, and CCTV within office premises.
Article 11. Installation and Operation of an Automatic Personal Information Collection System and the Denial thereof
1. The Company uses “cookies,” which store and retrieve user information
from time to time, in order to provide personalized services to users.
2.
A cookie is a small amount of information sent by the server (HTTP) used to
operate the website to the user’s web browser, and it may also be stored on
the user’s PC hard drive.
3. Users can choose to allow or block cookies
through their web browser settings. However, refusing to store cookies may
cause difficulties in using personalized services.
- How to manage and refuse cookie settings:
① Microsoft Edge: [Settings] > [Cookies and site permissions] >
[Cookies and site data]
② Chrome: [Settings] > [Privacy and security] > [Third-party
cookies]
③ NAVER Whale: [Settings] > [Privacy] > [Security] > [Cookies and
site data]
④ Safari: [Settings] > [Advanced] > [Enable “Show Develop menu in menu
bar”] > [Top menu] > [Develop] > [Empty Caches]
⑤ FireFox: [☰] > [Library] > [History] > [Clear Recent
History…]
⑥ Opera: [Settings] > [Privacy & security] > [Clear browsing data]
Article 12. Data Protection Officer and Requests for Access to Personal Information
1. The Company designates a Data Protection Officer who takes overall
responsibility for handling personal information, and oversees processing
user complaints and providing relief related to the handling of personal
information.
2. In accordance with Article 35 of the
Personal Information Protection Act, users may request access to
their personal information through the department below. The Company will
make efforts to process such requests promptly.
① Data Protection
Officer
- Name: Jeong Han Yeong
- Department: Live Service Team
- Email:
[email protected]
- Phone: +82-31-628-5357
Article 13. Remedies for Infringement of Rights
1. Users may contact the following organizations for dispute resolution or
consultation regarding personal information infringement. In addition, for
other reports or inquiries related to personal information infringement,
please contact the agencies below:
① Personal Information Dispute
Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr/)
② Personal Information Infringement Report Center: 118 (no area
code) (https://privacy.kisa.or.kr/)
③ Supreme Prosecutor’s Office: 1301 (no area code) (https://www.spo.go.kr/)
④ National Police Agency: 182 (no area code) (https://ecrm.cyber.go.kr/)
Article 14. Changes to the Privacy Policy
In the event of additions, deletions, or modifications to this Privacy Policy due to changes in laws, policies, or security technologies, the Company will notify users of the reason and content of such changes at least 7 days prior to implementation via the website.
However, if the changes are significant and may affect users' rights, the notice will be provided at least 30 days in advance of the effective date.
Addendum
This policy shall take effect as of January 5, 2026.