HappyStock Privacy Policy

1. Information processed and purposes

We do not ask for email addresses or phone numbers during registration. The plaintext recovery code is shown to the member once, while the server uses a verification hash. Guests may join online multiplayer with a temporary nickname.

2. Retention and deletion

• Member accounts and activity records: Retained for as long as needed to provide the service. Ordinary members can request account deletion through the website’s account deletion feature. On withdrawal, the account and related data are handled through database deletion and cascading deletion procedures, although withdrawal may be restricted while a prize drawing is in progress.
• Login sessions: Valid for up to seven days from issuance. Earlier sessions may be invalidated by logout, account recovery, or account deletion.
• Login attempt restriction records: The code uses a 15-minute restriction window. The actual timing of database-row cleanup may vary according to separate operational and cleanup settings.
• Online game rooms: Deleted when the last participant leaves. Rooms that have not been updated for a period of time are subject to expiration and cleanup scheduled every minute. Game room data are not included in long-term member match records or rankings.
• Infrastructure records and backups: Logs, backups, and recovery history maintained by service providers such as Cloudflare may remain for some time according to those providers’ operational and retention settings, independently of when live data are deleted.

3. Cookies and browser storage

We use the __Host-hs_session cookie to maintain login sessions. To reconnect to online multiplayer games, temporary room information may be stored in the browser’s session storage. Users can delete cookies or site data in browser settings, but doing so may sign them out or prevent reconnection to a game room.

4. Service providers and external processing

The site uses Cloudflare Workers, D1, R2, access protection features, and Turnstile verification. During Turnstile verification for registration and account recovery, user requests and information such as IP addresses may be sent to Cloudflare. Data required for server and storage operation and security processing are handled through Cloudflare infrastructure and may be processed through infrastructure located outside Korea.

Depending on visibility settings within the service, member nicknames, profile photos, rankings, and game participation information may be displayed to other users.

5. Google AdSense advertising and related data (planned)

HappyStock is preparing to introduce advertising through Google AdSense. If advertising is not yet enabled, the advertising-related processing described in this section may not yet take place. When ads are activated, we will update this policy and related notices to reflect actual practices.

Third-party vendors, including Google, may use cookies to serve ads based on a visitor’s prior visits to HappyStock or other websites. Google’s advertising cookies enable Google and its advertising partners to show personalized ads based on visits to this site and/or other sites on the internet.

Once advertising is enabled, Google and other advertising providers may process cookies, web beacons, IP addresses and other online identifiers to deliver ads, measure ad performance and prevent invalid traffic. Advertising cookies and identifiers are separate from the essential session cookie used to keep users signed in.

Visitors can manage or opt out of Google personalized advertising in Google My Ad Center (Ads Settings). They may opt out of some third-party vendors’ use of cookies for personalized advertising through AboutAds choices. Browsers also allow visitors to manage or delete cookies, but doing so does not necessarily stop all ads.

If third-party vendors or ad networks other than Google are used, we will provide information about the vendors actually serving ads and their privacy and opt-out options when advertising begins. Where consent is required by applicable law and Google’s policies, including for the European Economic Area (EEA), the UK and Switzerland, we will implement an appropriate consent-management mechanism before serving applicable ads.

More information: How Google uses information from sites or apps that use its services

6. User rights and how to exercise them

Guests can also contact happystockcafe@naver.com with privacy inquiries or requests to exercise their rights.

Users may request access to, correction or deletion of, or suspension of processing of their personal information as provided by applicable law. Signed-in members can change their nickname and visibility settings under My Profile and use the account deletion feature. The in-site messaging feature allows messages to the operator, but requires login, at least 24 hours since registration, and compliance with message-sending interval limits.

7. Security and policy changes

The service code stores passwords using scrypt-based verification values, hashes recovery codes and session tokens, and uses HTTPS connections, login attempt restrictions, and Cloudflare Turnstile. Actual access controls, log retention, and backup practices depend on the operating environment. If the service’s processing practices change, the content and effective date of this policy will be updated.