Providing Gameshot(the "Service"), considers the protection of the user’s personal data very important and in order to comply with relevant laws, such as the "Act on Promotion of Information and Communications Network Utilization and Information Protection," and the "Personal data Protection Act," the Privacy policy (hereinafter "the policy") is enacted and complied with.

The service's privacy policy can be revised due to changes in related laws and guidelines or changes in the service's internal operation policy. Having any inquiries regarding the current policy, you can provide feedback through the customer inquiry channel on our service’s website website.

---

Items of personal data collected and purposes of use

1. The company collects the following minimum amount of personal data in order to provide the service.
2. The company collects Client IDs for user analysis and service improvement purposes. Client IDs are anonymous IDs used to identify programs installed on each computer and cannot be used for personal identification purposes.
3. In addition, during the user's use of the service or business processing, the company can collect automatically generated information such as use of service records, OS types and versions, connection logs, advertisement identification information, and terminal information, also, the company can use this formation for user analysis and service improvement purposes.
4. For the purpose of service consultation to provide better services, the company collects the minimum amount of personal data, such as e-mail address, to identify and reply to customer inquiries. Customers can also send error data that occurred during the use of the service to the company for a more accurate error diagnosis. This is not a mandatory collection and the company does not use the personal data for any purposes other than those specified below.

• ※ All Stripe Transactions are covered by the Stripe privacy shield which can be found here: https://stripe.com/de/privacy

Methods of collection of personal data

The service collects personal data specified in Article 1 of this policy in the following ways to provide a smooth delivery of the service.

• Collection during installation and use of the service. Collection by generated information collection tools (including cookies).
• Collection through voluntary provision by members during use, etc.

Retention and use period of personal data

1. The service destroys the personal data of the users without delay after the purposes of use and collection are achieved. However, if preservation of the contents is necessary under the relevant laws, such as the "Protection of Communications Secrets Act," these will be preserved during that period. In this case, the company uses this information for preservation purposes only.
2. Personal data history processed to comply with the obligations provided in other laws can be kept for the period of time to prove its responsibility.

Consignment of personal data processing

In order to improve services, the service consigns the members' personal data to external businesses after obtaining the consent of the users in accordance with the relevant laws or after disclosing or notifying the relevant subject. Current information regarding the consignee and their tasks are as follows.

Consignment of personal data processing

Amazon Web Service  Data storage & System operation
Google Analytics User Analysis
Stripe Payment processing using credit cards or other transaction methods

1. Personal data collected with the consent of the user according to the use of the service generated installation information, personally unidentifiable information and statistical information is sent, processed, and stored by Amazon Web Services (AWS).
2. Google Analytics (GA), used for service analysis and statistics, collects, analyzes, and stores personal data, generated installation information, personally unidentifiable information and statistical information collected with the user’s consent.

Provision of personal data to a third party

1. The servcice uses the user's personal data within the scope as notified by Article 1 and does not use it beyond that scope or provide to other companies or organizations. However, exceptions are made in the following cases.
   1. In case the investigation agencies request the provision of personal data according to the procedure and method prescribed by the relevant law for investigation purposes
   2. In case it is provided to advertisers, business partners or research groups, in a form that an individual cannot be identified, for statistical purposes, academic research or market research
   3. In case there is a request in accordance with the provisions of other relevant laws
2. Besides, in the event that personal data is required to be provided to a third party, it can be provided to the third party with the user's consent by notifying the purpose of collection and use, collected items, and retention period.

Process and method of destruction of personal data

The serivce destroys the information immediately after the purpose of collecting and using personal data is achieved. Specific destruction procedures and methods are as follows.

1. Procedure of destruction

   Personal data collected by the company shall be preserved for the period specified in this Agreement and other related laws and destroyed after the purpose of the collection has been achieved. Such personal data will not be used for purposes other than the agreed retention purpose unless it is provided by law.

2. Methods of destruction

   1. Personal data printed on paper is shredded with a shredder or destroyed through incineration.
   2. Personal data printed on paper is shredded with a shredder or destroyed through incineration.

Rights and obligations of the user

1. A user (or its legal representative) shall have the right to access or request a modification of his/her registered personal data at any time and may withdraw consent to the use of his/her personal data by deleting the service or notifying to the company.
2. The user has a duty to protect the user's personal data and not to infringe that of others. Please be careful not to leak personal data, such as e-mail address, and not to infringe others personal data.
3. The user has a duty to protect the user's personal data and not to infringe that of others. Please be careful not to leak personal data, such as e-mail address, and not to infringe others personal data.

Children’s personal data

This service is not intended for children under the age of 14. If the company finds out that it has collected personal data of children under the age of 14 or if a legal representative requests access to or deletion of it, the company shall take the necessary actions within the boundaries of the statue.

Protection of personal data for overseas users

The service is provided and operated in accordance with the Korean statutes and this personal data processing policy is based on the personal data processing policy written in Korean which is the original copy. This policy may be translated into English and Japanese, and if there is any contradiction between the translated version and the Korean version, the Korean version will take precedence. The company complies with the personal data protection regulations applicable to the user's jurisdiction and the laws of each country.

Operation of automatic collecting device for personal data and Rights of option

1. The company operates cookies on the service website. Cookies identify your browser and are used to provide useful and convenient services, such as usage patterns analysis, to the user.
2. The user has the right of option regarding the installation and use cookies. Through options settings in the web browser, the user can permit saving all cookies, each time verifies whether cookies are saved, or refuse the storage of all cookies. Refusal to the storage of cookies may restrict the use of some services.

Technical/Administrative protection measures for personal data

The service has prepared the following technical/Administrative measures to ensure that personal data is not lost, stolen, leaked, tampered with or damaged while processing it.

1. Technical protection

   To prevent leakage or damage to the users' personal data by hacking or computer viruses, the company enables secure transmission of personal data on the network through encrypted communication.

   The firewall prevents unauthorized access from outside and all possible technical devices are installed to ensure systematic security.

2. Administrative protection

   1. The service designates management of personal data only to those in charge, and through frequent education, the company always emphasizes compliance with the personal data protection policy.
   2. The company will not take responsibility for problems related to personal data caused by any mistakes of an individual or third parties without reasons attributable to the company.



3. Chief Privacy Officer

   The company does its best to provide the best service by using personal data safely. However, the company is not liable for damage to information due to unexpected accidents caused by hacking or other basic risks in networking, despite the company has taken technical complementary measures, and does not take responsibilities for disputes caused by users and third-party postings.