Privacy Policy
Effective 6 August 2026
This is a reference translation. Where interpretations differ, the 한국어 original governs.
1. What we collect
Chart Training Camp asks for the minimum needed to run the service.
- On sign-up (email)
- Email address, password (stored in a form that cannot be reversed), display name
- On sign-up (social)
- The identifier, display name and profile image URL provided by Kakao or Google
- While using the service
- Posts, comments, drawings and predictions you write, your answer history, followed markets, and your bio
- Collected automatically
- IP address, browser information and access time (server logs)
2. What we don't collect
We do not collect national ID numbers, legal names, addresses, phone numbers, or payment and bank details. Every feature is free, so there is never a reason to collect payment information.
3. Why we use it
- Keeping you logged in and verifying it's you
- Displaying and grading your posts, drawings and predictions
- Calculating XP, ranks and leaderboards
- Handling reports and preventing abuse
- Statistics for improving the service (in a form that does not identify individuals)
4. How long we keep it
When you close your account, account information is deleted without delay. Posts and comments already published may remain with the author removed, so that other people's conversations do not break; if you would rather they didn't, you can delete them yourself before closing the account.
Access logs are kept for 3 months for incident response and then deleted.
5. Cookies
We use an authentication cookie to keep you logged in. It is set HttpOnly and cannot be read by JavaScript. Your language choice is also stored in a cookie. If you block cookies in your browser, features that require logging in will not work.
6. Third-party tools
We use the tools below to run the service. Each provider's own policy applies alongside this one.
- Google Analytics
- Visit statistics. IP addresses are anonymised before being sent
- Google AdSense
- Ad delivery. Cookies may be used for ad personalisation
- Amazon Web Services
- Server hosting (Seoul region)
7. International transfers
Our servers are in the Republic of Korea (Seoul). If you access the service from outside Korea, your personal data is transferred to and processed in Korea. Some information is also transferred to the providers above, including servers in the United States.
8. Your rights
You can view and correct your information at any time, and request deletion by closing your account. Profile edits are available on the Me screen; for anything else, contact us at the address below and we will tell you what we did.
- Access, correction, deletion and suspension of processing (Personal Information Protection Act, Republic of Korea)
- Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority (EU/UK GDPR)
- Right to know, delete, and opt out of sale or sharing (California CCPA/CPRA — note that we do not sell personal information)
- Confirmation, correction, deletion, portability and withdrawal of consent (Brazil LGPD)
9. How we protect it
- Passwords are stored in a form that cannot be reversed (we never keep the original)
- All traffic is encrypted with HTTPS
- Admin permissions are re-checked on the server on every request
- The database is backed up daily and backups are handled to the same standard
10. Changes
If this policy changes we post it here with an effective date. Significant changes are also announced inside the service.