Privacy

1. Controller

Sujin Park, Sujin Arin DataWorld
Kurfürstenstraße 14
60486 Frankfurt am Main
Germany
Email: hello@hangul-sori.com

You may contact us about privacy at any time. Full provider details are available in the legal notice.

2. Delivery, security, and server logs

The website and tester form are delivered through Cloudflare. Requests may process technically required information such as IP address, time, requested URL, referrer, browser, and operating system in access and security logs. We use this information to deliver the site reliably and prevent abuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure operation of the website. Cloudflare, Inc. may receive the data as our processor. Transfers outside the EEA use Cloudflare's contractual safeguards. Logs are kept only as long as necessary for operation, troubleshooting, and abuse prevention. See the Cloudflare Privacy Policy.

3. Consent management with Cookiebot

We use Cookiebot CMP from Usercentrics A/S, Denmark, to record and enforce your choices about non-essential cookies and to demonstrate consent under Article 7(1) GDPR. It may process consent status, timestamp, visited URL, browser information, and an anonymized IP address for the consent log.

Storage needed to remember and enforce your choice is strictly necessary under section 25(2)(2) TDDDG. Processing needed to demonstrate consent is based on Article 6(1)(c) GDPR. Optional services remain blocked until you actively choose them. You can withdraw or change your choice at any time through “Cookie settings” in the footer.

4. Google Analytics only after consent

We use Google Analytics 4, measurement ID G-6R9J2N1PCC, only after you actively accept the Statistics category. Before that, the Google Analytics script is not downloaded and no Google Analytics request is made. Advertising storage, Google Signals, advertising user data, and personalized advertising are disabled.

After consent, visited pages, interactions, timestamps, browser and device information, an approximate region, and cookie identifiers may be processed. The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. The recipient is Google Ireland Limited; processing by Google LLC in the United States cannot be ruled out. Google uses the safeguards in its data processing terms, including adequacy decisions and standard contractual clauses where applicable.

Google Analytics cookies on this website expire 180 days after the last measurement; another visit after consent restarts that period. Event and user data may be retained in Google Analytics for up to 14 months; aggregated reports may remain longer. If you withdraw consent, further measurement stops and existing Google Analytics cookies for this website are removed. Withdrawal does not affect processing that was lawful before it. See Google's Privacy Policy.

5. Applications for the app test

When you submit the tester form, we process your name or nickname, invitation email, platform, device, operating system, explanation language, Korean level, selected test areas, age confirmation, testing commitment, and an optional message. Required fields are needed to review your application and send the correct invitation.

The legal basis is Article 6(1)(b) GDPR for steps taken at your request before participation. A Cloudflare Worker processes the form and sends it to the operator's mailbox, which is provided by Google. The website does not keep a separate applicant database. Emails are deleted no later than six months after the relevant test phase ends unless continued coordination or a legal retention duty requires them.

6. Privacy in the app

Learning progress, SRS state, game results, settings, your own learning packs, notes, and managed book or word photos normally stay on your device. The app may create a random Firebase UID and fetch Remote Config. Cloud backup, Analytics, Crashlytics, notifications, and sharing features are used only to the extent of the feature you enable.

Selected images are cropped and recognized on the device with ML Kit. Image files are not sent to text analysis or a portable backup. If you expressly request analysis or translation, extracted text and the target language may be sent by HTTPS to the named providers, including DeepL. Gye learning circles are for people aged 16 and older.

Delete account and data

7. Your rights

Subject to the GDPR, you have rights of access, correction, deletion, restriction, data portability, and objection. You may withdraw consent at any time for the future. We do not make decisions based solely on automated processing that have legal or similarly significant effects.

Contact hello@hangul-sori.com. You may also complain to a data protection authority, in particular the Hessian Commissioner for Data Protection and Freedom of Information.