Hotblood (hereinafter “Operator”) processes personal information of JudoWaza (hereinafter “Service”) users as follows in accordance with the “Personal Information Protection Act”.
1. Personal data collected and purpose
| Categories | Items | Purpose | Collection Methods |
|---|---|---|---|
| Registration/login (required) | Google account email, unique Google account identifier | Member identification, login, account connection (including members transferred to existing services) | Provided by Google when logging in to Google |
| Profile | Nickname (automatically generated and can be changed), introduction (optional) | Show post author | Enter member |
| Service usage | Bookmarks, notes, reference links, comments, technical aliases and votes, technical suggestions, reports, comments (feedback) | Service provision, report and comment processing | Member entry |
| Agree to the terms and conditions | Agree version and time | Manage consent history | Automatic |
| Access history | IP address, date and time of access, request history | Security, prevention of unauthorized use, fault response | Automatic |
| Usage statistics (Google Analytics 4) | Visit screen (route), search and filter usage status (search terms themselves are not collected), device/browser information, estimated access area (based on time zone) | Service improvement (usage pattern analysis) | Automatic (cookies, collection starts only** when consent is given from the consent banner) |
| Ad placement (Google AdSense) | Cookies/ad identifiers, pages visited, device/browser information, IP address — collected directly by Google | Ad placement and measurement, interest-based advertising (if agreed) | Automatic (Google cookies and scripts) |
- Memorized progress, favorites, and notes of users who have not logged in are not sent to the operator's server, and are stored only** on the user's device (browser storage).
- Emails are encrypted (AES-256-GCM) when saved, and only displayed in a hidden form on the administrator screen.
- Advertising: Place banners (images, links — no personal information collection) and Google AdSense ads contracted directly by the operator. AdSense, a third party, uses cookies, etc. to post and measure advertisements based on visits to this site and other sites (§9).
2. Period of retention and use
- Member information is retained until you unsubscribe. If you unsubscribe, you will immediately stop using it, and after the30-day grace period, the following will be processed (based on cleanup tasks that are automatically executed every day):
- Email: anonymized in an unrecoverable form (the original value does not remain on the admin screen)
- Nickname/Introduction/Display Name: Remove and replace the display name with “Unsubscribed Member”
- Private notes, favorites: Delete
- Comment (feedback) content: Deleted
- Google login linked information (linked to a social account): delete
- Even after withdrawal, public posts (reference links, comments, etc.) remain undeleted, but the author changes to an anonymous label (“withdrawn member”). If you want to delete the post itself, please delete it yourself before unsubscribing.
- Information that must be kept in accordance with the law is kept for that period.
- Access records (IP, etc.): 3 months (“Communications Secrets Protection Act”)
3. Provision of personal data to third parties
The operator does not provide users' personal information to third parties. However, exceptions are made when required by law.
4. Outsourcing of personal data processing
| Trustee | Outsourced work | Place of processing |
|---|---|---|
| Amazon Web Services, Inc. | Server and database operation (service data storage), email delivery (Amazon SES, sender address noreply@hblood.co.kr) | South Korea (Seoul region) |
| Google LLC | Login Verification (Google Account), Website Hosting (Firebase Hosting), Ad Placement (Google AdSense), Usage Statistics (Google Analytics 4, with consent only) | US, etc. |
5. Overseas transfer of personal data
During the Google login and hosting process, access information may be processed on Google's overseas servers.
- Transfer recipient: Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA · Personal Information Contact https://support.google.com/policies/contact/general_privacy_form) · Previous country: US, etc. · Previous item: login authentication information, access information, advertising cookies/identifiers, usage statistics (if agreed) · Time of transfer: when using the service (when usage statistics are agreed) · Purpose: login authentication, website provision, advertisement placement, usage statistics
- If you don't want to transfer abroad, you can use the encyclopedia without registering as a member (excluding the login function). Advertising cookies can be rejected using section 9, and usage statistics are not collected in the first place if you select “opt-out” in the consent banner.
6. User rights
Users can view, modify, or request deletion (withdrawal) of their personal information at any time.
- Nickname/Description: Edit directly from “My Information”
- Withdrawal: Request directly from “My Information → Member Withdrawal” or use the contact information below
7. Destruction of personal data
Personal information that has reached the end of its retention period will be destroyed without delay. Electronic files are irretrievably deleted or anonymized.
8. Measures to ensure safety
- Encryption of personal information (encryption when storing emails, HTTPS during transmission)
- Access rights management (separation of administrator rights, audit records of administrator tasks)
- Tenant-level data isolation (database row-level security)
9. Use of cookies, etc.
- We use secure cookies (httpOnly) to keep you logged in.
- Usage Statistics (Google Analytics 4) : Analytical cookies are planted and statistics are collected only if “Agree” is selected in the consent banner during the visit (if you do not select it or select “Reject”, the analytics tag itself will not be imported in the first place — Google Consent Mode v2). You can always re-select consent from “My Information → Cookie Settings”, and you can refuse browser settings or [Google Analytics Blocking Add-on] (https://tools.google.com/dlpage/gaoptout)으로도).
- Direct contract banners are images and links only and do not use cookies.
- Google AdSense: Third-party advertising companies such as Google use cookies to display ads based on users' visits to this site and other sites. Google can provide interest-based advertising to users with advertising cookies, and users can turn off personalized ads in [Google ad settings] (https://adssettings.google.com)에서, or refuse third party advertising cookies [www.aboutads.info] (https://www.aboutads.info)에서). For more information, see [Google's Ad Policy] (https://policies.google.com/technologies/ads)을. Users in the European Economic Area, the United Kingdom, and Switzerland receive consent via a Google authentication consent message before using advertising cookies.
10. Personal Information Protection Officer
- Name: Lee Kang-ho (CEO) · Contact: admin@hblood.co.kr
- Personal Information Infringement Report and Consultation: Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 without country code), Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972)
11. Policy changes
If we change this policy, we will notify you with a service notice 7 days prior to implementation.
Addendum
This policy will take effect on October 1, 2026.