1. Why we process personal information
We process personal information only for the purposes below. If a purpose changes, we take the steps the Personal Information Protection Act requires, such as asking for your consent again.
- Accounts: confirming that you want to join, signing in and verifying it is you, managing your account, resetting passwords, preventing misuse and sending notices
- Running the service: the community (posts, comments, votes, handling reports), game scores and leaderboards, continuing where you left off in a book, launch notifications
- Enquiries: reading and answering development requests, collaboration proposals and other messages sent through the Studio page
- Protecting the service: stopping spam, hacking and other misuse, and keeping the service stable
We do not use member information or usage records for advertising, marketing or profiling. However, on pages that carry ads, ad networks may collect behavioural information directly through cookies and similar tools. Section 10 explains this and how to opt out.
2. What we process
| Category | Items and how they are collected |
|---|---|
| Sign-up (required) | Email address, password (stored encrypted), username. You enter these on the sign-up page. |
| Profile (optional) | Bio. You enter it in My page. |
| Created while you use the service | Posts, comments, votes, game scores (score and time), launch notification sign-ups, reading position (book, page, progress), reports (what was reported and why) |
| Enquiries | Name, email address, type of enquiry, message. You enter these in the Studio form. You do not need an account. |
| Collected automatically | Access records such as IP address, device and browser information and time of access, logged by our web hosting and sign-in services for security. |
| Ads (collected directly by ad networks) | On pages with ads, ad networks may collect behavioural information through cookies, ad identifiers and scripts (pages visited, ad views and clicks, cookie IDs, IP address, device and browser information). We do not receive or store this. See section 10. |
Your username, bio, posts and comments, karma, and the username and best score shown on leaderboards are public. Please do not post anything you do not want others to see.
3. How long we keep it
- Account information and what you create on the service: kept until you delete your account, then deleted without delay, including sign-in records. The content of your posts and comments is erased and only their place remains, without author information.
- Enquiries: kept for one year and seven days from receipt (a year plus time to reply), then deleted automatically once a day.
- Access records: sign-in records and IP addresses kept by our sign-in service are retained for three months to respond to security incidents, then deleted automatically once a day. Records kept by our hosting provider while delivering the website follow that provider's retention policy.
- Information that the law requires us to keep is kept for the required period. For example, the Protection of Communications Secrets Act requires access records such as sign-in logs to be kept for three months.
4. How we delete it
- We delete personal information without delay once the retention period ends or the purpose is fulfilled.
- Electronic files are permanently deleted so they cannot be recovered. We do not keep personal information on paper.
- Information left in database backups is removed as the backups rotate.
5. Sharing with third parties
We do not give your personal information to third parties, except where you have agreed in advance, where a law specifically requires it, or where investigators request it following the procedures set by law.
On pages with ads, the ad networks we allow (Google and Kakao) may collect behavioural information directly from your browser. This is not us handing over information we hold. What each network collects and how to opt out is in section 10.
6. Service providers
We use the following providers to run the service.
| Provider | What they do |
|---|---|
| Supabase Inc. | Sign-in (sign-up, login) and database hosting (account information, usage records, enquiries) |
| Supabase Inc. or an email provider we designate | Sending sign-up confirmation and password reset emails through the email service configured in our sign-in service. If we designate a separate email provider, we will add it to this policy. |
| Cloudflare, Inc. | Website hosting and delivery (CDN) |
We supervise these providers to make sure they handle information safely, and we will update this policy if they change.
7. Transfers abroad
While these providers do their work, personal information may be transferred to or processed in other countries, over the network, each time you use the service.
Supabase Inc.
- Recipient
- Supabase Inc. (a US company). Contact details are in the Supabase privacy policy.
- Where it is stored
- Republic of Korea (Amazon Web Services Seoul region, ap-northeast-2). As a US company, Supabase Inc. may access it from abroad to operate and support the service.
- What is transferred
- Sign-up information (email address, encrypted password, username), bio, information created while using the service, enquiries, sign-in records and IP addresses
- When and how
- Each time you use the service, over encrypted connections (HTTPS)
- Purpose
- Sign-in, sign-in emails and database hosting
- How long
- The periods in section 3 (account information until you delete your account, enquiries for one year and seven days, sign-in records for three months). It also ends when our contract ends.
Cloudflare, Inc.
- Recipient
- Cloudflare, Inc. (a US company). Contact details are in the Cloudflare privacy policy.
- Countries
- The United States and other countries where Cloudflare's delivery network (CDN) has servers
- What is transferred
- Access records such as IP address, browser information, requested address and time of access
- When and how
- Each time you visit the site, over encrypted connections (HTTPS)
- Purpose
- Website hosting and delivery
- How long
- As set by Cloudflare's retention policy
Behavioural information collected directly by ad networks may be processed abroad (for Google LLC, in the United States and elsewhere) under those networks' own policies. Because we do not transfer it, it is not listed above. How to opt out is in section 10.
If you do not want your information transferred abroad, you can choose not to sign up, or delete your account. Because the transfer is necessary to provide the service, you cannot use the service without it.
8. Your rights
- You can ask at any time to see, correct or delete your personal information, or to stop us processing it.
- Members can change their username and bio, check or cancel their activity and launch notifications, and delete their account in My page (/me/).
- For anything else, write to [email protected]. We will act within 10 days and let you know.
- You may also exercise these rights through a representative, such as a legal guardian or someone you authorise. Please include a letter of authorisation.
- Requests may be limited where they could harm someone else's life, body, property or interests, or where a law requires us to keep the information.
9. Security
- Passwords are stored with one-way hashing, so they cannot be turned back into the original.
- All traffic between your browser, the site and the database is encrypted (HTTPS).
- Row-level security is on for every database table. You can only change your own information, and private information such as launch notifications and reading positions is visible only to you. Enquiries are visible only to the administrator.
- Administrator access is given only to the operator.
- Too many posts, comments or enquiries in a short time are blocked automatically to reduce spam and abuse.
10. Cookies, browser storage, ads and behavioural information
A. Browser storage used by the site
- To keep you signed in, we store sign-in information (a token) in your browser's storage (localStorage). We also store convenience settings such as reading preferences. These stay on your device.
- We do not use cookies or analytics tools to track visits ourselves.
- Clearing site data in your browser signs you out, and blocking storage may stop you staying signed in.
- On the AI page (/ai/), Ether and Xync run the AI model inside your browser. Your conversations, inputs and usage are not sent to or stored on our servers. Conversation history and the ratings you give answers (“Helpful”, “Not quite”) stay only in your browser's storage (localStorage), and you can delete the history with “Clear conversation”. The book index used to ground answers is downloaded from this site, and your questions are not sent with it. Model files are downloaded from Hugging Face (huggingface.co) and GitHub and cached in your browser; we do not pass on anything that identifies you in the process. This feature is not a substitute for medical, psychological or legal advice.
B. Ads and behavioural information
- Where ads appear: only in set places on the home page, the blog, the library shelf and book pages, at the end of chapters on reading pages (below the text), under the leaderboards on the games list and game pages, the quiz list and the community list. Never in book text, during play, in AI conversations, on sign-in and sign-up, My page, Studio enquiries, the terms and this policy, the About page or error pages. Ad spaces are labelled “Ad”.
- Our own promotions: when there is no ad from an ad network, the space shows our own books, blog posts, games or apps, labelled “Recommended by EtherXync”. These use no cookies and collect no behavioural information.
- In-game billboards and sponsor pages in books: billboards inside games (marked “AD” or “EtherXync”) and sponsor pages at the end of chapters only show images hosted on this site. They load no ad network scripts and collect no cookies or behavioural information. How many times a billboard was shown is counted per day only in your browser's storage and is not sent to us. Downloaded EPUB and PDF files with sponsor pages contain nothing that collects information.
- Current status: as of October 22, 2026, when this policy was announced, we do not run ads from outside ad networks; ad spaces show only our own promotions. Outside ads will start only after this policy takes effect and the ad network approves us, and we will announce it.
- What ad networks collect: once outside ads run, third-party ad networks including Google and Kakao may use cookies to show ads based on your visits to this and other sites. They may store or read cookies in your browser and collect information through web beacons, IP addresses and similar.
| Ad network | Behavioural information collected and why |
|---|---|
| Google LLC (Google AdSense) | Items: cookie IDs and ad identifiers, addresses of pages visited, ad views and clicks, IP address, device and browser information, time of visit. How: collected automatically by Google's ad scripts and cookies on pages with ads. Why: showing ads, personalised ads, measuring ad performance, preventing invalid clicks. Retention: as set by Google. How Google uses information from sites that use its services, Google Privacy Policy |
| Kakao Corp. (Kakao AdFit) | Items: cookie IDs and ad identifiers, addresses of pages visited, ad views and clicks, IP address, device and browser information, time of visit. How: collected automatically by Kakao's ad scripts and cookies on pages with ads. Why: showing ads, personalised ads, measuring ad performance, preventing invalid clicks. Retention: as set by Kakao. Kakao Privacy Policy |
We do not receive or store behavioural information collected by ad networks, and we do not combine it with member information. If ad networks change or are added, we will update this table and let you know.
C. How to turn off personalised ads and cookies
If you opt out of personalised ads you may still see ads, but fewer based on your browsing. Blocking cookies does not stop you reading books or playing games here, but blocking all site data may stop you staying signed in.
- Google personalised ads: turn them off in Google Ad Settings. You can opt out of other networks' personalised ad cookies at aboutads.info.
- Kakao personalised ads: follow the opt-out steps in the Kakao Privacy Policy, or block browser cookies and your device's ad identifier as below.
- Chrome: Settings › Privacy and security › Third-party cookies › “Block third-party cookies”
- Microsoft Edge: Settings › Cookies and site permissions › Manage and delete cookies and site data › “Block third-party cookies”
- Safari (iPhone, iPad): Settings › Apps › Safari › turn on “Prevent Cross-Site Tracking”. To block all cookies, use “Block All Cookies” on the same screen.
- Safari (Mac): Safari › Settings › Privacy › turn on “Prevent cross-site tracking”
- Samsung Internet: Settings › Privacy and security › turn on “Smart anti-tracking”, or turn off third-party cookies under “Accept cookies”
- Firefox: Settings › Privacy & Security › Enhanced Tracking Protection › “Strict”
- Your phone's ad identifier: on Android, Settings › Security and privacy (or Google) › Ads › “Delete advertising ID”; on iPhone, Settings › Privacy & Security › Tracking › turn off “Allow Apps to Request to Track”
Menu names and locations may differ slightly by browser and system version. If you get stuck, ask us at [email protected].
D. Visitors from the EEA, the UK and Switzerland
Before showing outside ads to visitors from these regions, we will ask for consent to cookies and personalised ads through a Google-certified consent management tool. If you do not consent, you will see only non-personalised ads or no ads.
11. Children under 14
Children under 14 cannot sign up. If we learn that someone under 14 has an account, we delete the account and its information without delay. This service is not aimed mainly at children under 14.
12. Privacy officer
For questions, complaints or remedies about how we handle personal information, contact us below. We will answer and act without delay.
- Privacy officer
- EtherXync operator
- [email protected]
13. Where to get help
If your privacy has been violated, you can ask these Korean public bodies for mediation or advice.
- Personal Information Dispute Mediation Committee
- 1833-6972 (in Korea), www.kopico.go.kr
- Privacy Infringement Report Center (KISA)
- 118 (in Korea), privacy.kisa.or.kr
- Supreme Prosecutors' Office
- 1301 (in Korea), www.spo.go.kr
- Korean National Police Agency
- 182 (in Korea), ecrm.police.go.kr
14. Changes to this policy
This policy applies from November 21, 2026. When it changes, we announce it on the notice board at least 7 days before it takes effect, or at least 30 days before for changes that significantly affect your rights.
| Announced · Effective | What changed |
|---|---|
| Announced October 22, 2026 Effective November 21, 2026 | New section on ads and behavioural information (10 B, C, D), information on ad networks (Google, Kakao) and how to opt out, revisions to sections 1, 2, 5, 7, 11 and 14 |
| Effective October 1, 2026 | First version. See the previous policy (Korean) |