Privacy Policy
Effective: 2026.09.30 · Last updated: 2026.09.30
The GAME Inc. (“the Company”) establishes and discloses this privacy policy under Article 30 of the Personal Information Protection Act of the Republic of Korea (“the Act”) to protect personal information and to handle related concerns promptly. This policy applies to personal information processed on the website operated by the Company at the-game-ai.com (“the Site”).
1. Purposes of Processing
The Company processes personal information for the following purposes and does not use it for any other purpose. If a purpose changes, the Company will take the steps required by Article 18 of the Act, such as obtaining separate consent.
- Receiving and answering consultation inquiries: reviewing your inquiry, arranging a consultation and introducing our products
- Analyzing site usage: understanding visits and improving the Site, only if you allow cookies
- Keeping and destroying former-site member data: Until September 30, 2026, the Company operated a members-only education service at the same address. That service has ended. The Company no longer collects or uses member data; it keeps the data until it is destroyed. After destruction, records that the relevant laws require to be preserved are kept for the period those laws set.
2. Personal Information Processed and Legal Basis
The Company processes only the minimum personal information needed for these purposes. The inquiry-related information below is processed on a legal basis that does not require consent, and site usage statistics are processed only if you consent. Former-site member data was collected with the consent given at sign-up.
| Category | Items | How collected | Legal basis (the Act) |
|---|---|---|---|
| Inquiry form | Required: name, phone number, clinic or company name / Optional: product of interest | Entered directly by you in the inquiry form | Art. 15(1)(4) (steps taken at your request in the course of entering into a contract) |
| Email and phone inquiries | Name, contact details, content of the inquiry | You contact the Company directly | Art. 15(1)(4) |
| Site usage statistics | Cookie identifier, visit time, pages visited and navigation path, site usage behavior (link and button clicks, scrolling, language switches, starting the inquiry form and the result of submitting it; what you type into the form is excluded), referral source, browser and device information, approximate location | Collected automatically by Google Analytics through cookies, only after you allow cookies (Section 9) | Art. 15(1)(1) (your consent) |
| Former-site member data (stored only) | Email address, password (encrypted), name, gender, nationality, occupation, years of experience, specialty and marketing-consent status (optional), social login (Google, Kakao, Naver) account identifier and profile photo, medical license image, payment records, access records | Collected through sign-up and use before September 30, 2026 (no longer collected) | Collection: consent at sign-up (Art. 15(1)(1)) / Retention: proviso to Art. 21(1), and Art. 6 of the Act on the Consumer Protection in Electronic Commerce, Etc. |
3. Retention Periods
| Category | Retention period | Reason |
|---|---|---|
| Inquiry form, email and phone inquiries | Destroyed without delay when the consultation ends. Inquiries that led to a contract are kept as contract records | The purpose of processing has been achieved (Art. 21(1)) |
| Site usage statistics | 14 months from collection | Google Analytics data retention setting |
| Former-site member data | Until destroyed. The destruction schedule will be announced through this policy once it is set | Wind-down following the end of the service |
| Contract and payment records of the former site | Records of contracts or withdrawal of subscription, payment, and supply of goods, etc.: 5 years; records of consumer complaints or dispute resolution: 3 years | Art. 6 of the Act on the Consumer Protection in Electronic Commerce, Etc. |
When the retention period ends or the purpose has been achieved, the information is destroyed without delay. Inquiries received through the form are kept only in the Company’s mailbox.
If you withdraw your consent to the collection of site usage statistics, collection stops from that point. Unless you request its deletion, information already collected is deleted once the retention period above has passed.
4. Destruction Procedure and Method
- Procedure: Personal information whose retention period has ended or whose purpose has been achieved is destroyed without delay under the responsibility of the Privacy Officer.
- Method: Electronic files, including inquiries kept in the Company’s mailboxes, are deleted by irrecoverable means; printed personal information is shredded or incinerated.
5. Provision to Third Parties
The Company does not provide your personal information to third parties, except where a law specifically requires it.
6. Processing Entrusted to Processors
The Company entrusts the following processing tasks.
| Processor | Task |
|---|---|
| Amazon Web Services, Inc. | Forwarding inquiry-form submissions to the Company’s email (Seoul region, not stored) |
| Google LLC | Analyzing site usage (Google Analytics) |
| Cloudflare, Inc. | Storing former-site member data |
The Company sets out in its processing agreements what is needed for personal information to be handled safely and supervises the processors’ compliance. Changes to the tasks or processors will be announced through this policy.
7. Transfer Outside the Republic of Korea
To analyze site usage, the Company transfers personal information to a company outside Korea, only if you have separately consented to the transfer abroad. Inquiry-form submissions are processed in the Amazon Web Services Seoul region and are not transferred outside Korea.
Former-site member data has been kept in storage operated by Cloudflare, Inc. (United States) since members signed up.
Analyzing Site Usage (Google Analytics)
The Company transfers the data as set out below under Article 28-8(1)(1) of the Act only if you have separately consented to the transfer abroad by choosing “Accept all” in the cookie consent banner or allowing analytics cookies in “Cookie settings”. No information is sent to Google Analytics before you consent.
| Item | Details |
|---|---|
| Recipient and contact | Google LLC, Google privacy contact form |
| Destination countries | United States |
| Items transferred | Cookie identifier, visit time, pages visited and navigation path, site usage behavior (link and button clicks, scrolling, language switches, starting the inquiry form and the result of submitting it; what you type into the form is excluded), referral source, browser and device information, approximate location (Section 2). Google derives the approximate location from the IP address and does not store the IP address |
| When and how | Each time you view a page on the Site after allowing cookies, over an encrypted connection (HTTPS) |
| Recipient’s purpose | Analyzing site usage |
| Retention period | 14 months from collection (Section 3) |
| How to refuse, and the effect | You can refuse in the cookie consent banner or in “Cookie settings” at the bottom of each page, and you can withdraw consent you have given at any time. Refusing or withdrawing does not limit your use of the Site in any way |
8. Security Measures
Under Article 29 of the Act, the Company takes the following measures to keep personal information secure.
- The Site does not store personal information on its own servers or databases. Inquiry-form entries are delivered to the Company’s email only, through email delivery in the Amazon Web Services Seoul region, and are not stored along the way.
- All communication with the Site and the inquiry form is encrypted (HTTPS).
- Former-site member data is only kept in storage and is no longer used, and passwords are stored in encrypted form.
9. Cookies: Installation, Operation and Refusal
- What cookies are: small text files that a website stores in your browser so that it can recognize the same browser on a later visit.
- Cookies used and purpose: The Site uses Google Analytics cookies (
_ga,_ga_<measurement ID>) to analyze visits and navigation and improve the Site. These cookies last up to two years. The Site uses no other cookies. - Stored only after consent: When you first visit the Site, a cookie consent banner appears. Google Analytics cookies are stored and information is collected only if you choose “Accept all” in the banner or allow analytics cookies in “Cookie settings”. Nothing is sent to Google Analytics before you allow it.
- Who collects what: Google LLC collects the “site usage statistics” items in Section 2, and the data is sent to and stored by Google LLC (United States) (Section 7). Google Analytics derives an approximate location from the IP address and does not store the IP address. The Company does not use this data for personalized advertising.
- Changing or withdrawing consent: You can change your choice or withdraw your consent at any time in “Cookie settings” at the bottom of each page. Once you withdraw, collection stops from that point, and the Google Analytics cookies stored in your browser are deleted. You can also block cookies or delete this Site’s cookies in your browser settings, and installing the Google Analytics Opt-out Browser Add-on also stops collection.
- Effect of refusing: Even if you refuse cookies or withdraw your consent, you can still use every feature of the Site.
- How your choice is stored: Your choice about cookies is stored in your browser’s local storage (localStorage), not in a cookie, and is not sent to the Company. If you clear the Site’s data in your browser, your choice is cleared too and the banner appears again.
10. Rights and Obligations of Data Subjects and Legal Representatives
- You may at any time request access to, correction or deletion of, or suspension of processing of your personal information. If you were a member of the former site, you can also request deletion of your member data in the same way.
- You can exercise these rights by email, phone or in writing to the Privacy Officer in Section 11. The Company will act on your request and notify you of the result within 10 days of receiving it.
- You may also exercise your rights through a legal representative or an authorized agent, who must submit a power of attorney in the form prescribed by Annex 11 of the Notice on Methods of Processing Personal Information.
- The Company may verify that the person making the request is you or your lawful representative.
- Requests for access or suspension may be limited under Articles 35(4) and 37(2) of the Act, and deletion cannot be requested for information that another law requires to be collected (Article 36(1)).
- Objections: If you disagree with a decision to limit or refuse access, correction, deletion or suspension, you may object to the Privacy Officer by email or in writing. The Company will review the decision again and notify you of the result within 10 days.
- You must enter your own personal information accurately and must not enter anyone else’s.
11. Privacy Officer
The Company has appointed the following Privacy Officer to oversee the processing of personal information and to handle related concerns. The Privacy Officer receives and handles requests to exercise your rights, including access requests, and other privacy inquiries and complaints.
- Privacy Officer: Kim Seung-gyu
- Email: ksk@gamestart.co.kr
- Phone: +82-2-6956-3177
12. Remedies for Infringement
To seek a remedy for an infringement of your privacy, you may apply for dispute resolution or advice to the following Korean authorities.
- Korea Internet & Security Agency Privacy Center (privacy.kisa.or.kr / 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Supreme Prosecutors’ Office Cybercrime Division (spo.go.kr / 1301)
- National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)
13. Changes to This Policy
This policy applies from the effective date shown above. If it changes, the Company will announce the change on the Site before it takes effect and make the changes and earlier versions available.