South Korea (대한민국) - International privacy rights

If the law where you live provides additional rights, identify them in your request.

개인정보보호위원회 (PIPC)개인정보침해 신고센터 (KISA)개인정보분쟁조정위원회 개인정보 유출 신고 (PIPC/KISA)Data and content requests Legal notice 대한민국 South Korea (대한민국)Privacy Terms Delete data Support International privacy rights Legal notice Open app

Controller, purposes, consignment and provision

Alexander Goytom, established in Italy, is the personal information controller and the designated Chief Privacy Officer (personal information protection officer). Contact: ertalex@hotmail.it. The Privacy Policy lists the profile, group, game, match, media and technical-security information processed for the requested Free features, the purpose and retention period for each category, and the optional information that can be refused. Google Analytics for Firebase is unavailable while South Korea (KR) is the selected legal market, so NerdScore sends no app-install identifier, Analytics usage event or Analytics-derived approximate region.

OVHcloud, Firebase App Check, Google Play / Play Integrity and Firebase Hosting perform the separate hosting, integrity and legal-page delivery tasks described here; this is consignment or storage, not an independent third-party provision. Sharing initiated by a user with members of a chosen private group or through an invite is part of the requested service. NerdScore does not routinely provide personal information to an independent third party, sell it, use it for advertising or make automated decisions with legal or similarly significant effects.

Overseas transfers under PIPA Article 28-8

Core profile, group, game, match, media, security-log and backup data is transferred continuously over HTTPS, as the service is used, to OVHcloud in Frankfurt, Germany for hosting, security, backup and support. OVH SAS can be contacted through its Data Protection Officer at dpo@ovh.com. The data remains for the category-specific periods in the Privacy Policy and is then deleted or irreversibly anonymized, subject to backup rotation and a documented legal hold.

Firebase App Check processes provider attestation material and App Check tokens on Google's global infrastructure when app attestation occurs. App Check does not retain the attestation material; tokens remain valid for at most seven days, and the unused replay-protection feature would retain consumed tokens for at most 30 days. Google Play / Play Integrity encrypts and processes a request hash or nonce, package, version and signing-certificate data, Play licence status, and device-attestation certificate and token when integrity is requested. Google states that this data is not transferred to third parties and is deleted after its fixed retention period. Firebase Hosting processes an IP address and HTTP technical information only when a legal page is opened and may retain IP data for a few months. App Check and Hosting may process data where Google or its agents maintain facilities; current locations are published at firebase.google.com/support/privacy, cloud.google.com/about/locations and google.com/about/datacenters/locations. Contact is available at firebase.google.com/support/privacy/dpo. These necessary consignments and storage use the contract-performance basis in PIPA Article 28-8(1)(3) with this disclosure. Refusing core integrity processing makes protected requests unavailable; not opening a legal page avoids the Hosting request. Google Analytics for Firebase is unavailable while KR is selected.

PIPA rights, response and destruction

A Korean data subject may request access and a copy, correction, deletion, suspension of processing, withdrawal of optional consent and the other rights available under PIPA. Use Support, the in-app export and deletion tools, or email ertalex@hotmail.it. NerdScore acknowledges and decides a complete access request within ten days, verifies identity only to the proportionate extent necessary and explains any lawful restriction or refusal.

Corrections are propagated to active records and inaccurate data is not used while correction is pending where the law requires. Data due for deletion is erased from active systems using logical deletion and secure database or object removal; paper is not used for service records. Backups expire through the documented rotation and are used only for disaster recovery. A user may also contact the PIPC, the KISA Privacy Infringement Report Center or the Personal Information Dispute Mediation Committee through the official links below.

Personal-information incidents and the 72-hour procedure

A suspected loss, unauthorized disclosure or access is recorded and assessed immediately. Under the current PIPA rules, NerdScore reports to the PIPC/KISA within 72 hours of awareness when the statutory threshold applies, including an incident affecting at least 1,000 data subjects, sensitive or unique identifying information, or leakage caused by unlawful external access. Affected people are notified as required, with known data categories, timing and cause, mitigation, remedies and a contact point; preliminary information is supplemented when the investigation develops.

The incident playbook is already prepared for the amendment effective September 11, 2026: possible leakage known to the controller, forgery, alteration or damage are assessed without delay, available damages and dispute-resolution remedies are included, and controller-management responsibilities are recorded. This future-ready branch does not misstate the law in force before that date.

Children, adolescents and legal capacity

NerdScore is not directed to children under 16. It therefore does not accept an under-14 child into the service and does not use the Korean guardian-consent procedure as a route around that product limit. A person who has not reached local civil majority must declare that a parent or legal guardian has read the Terms and permitted use of this free service.

Korean privacy-consent capacity from age 14 and civil contractual capacity before age 19 are treated as distinct questions. The versioned 16+ and guardian-permission declaration records the current Free-service rule but is not identity or age verification. The assessment reopens before lowering the target age, introducing payment, public groups, advertising, prizes or processing data specifically about children.

Location, consumer, game and private-group scope

NerdScore does not request GPS or native location permission and does not provide a service based on personal location information. Google Analytics for Firebase is unavailable while South Korea (KR) is selected, so NerdScore does not receive an Analytics-derived approximate region for this market. Adding GPS, precise location, movement tracking or location-based matching reopens the Location Information Act assessment before release.

The current release is free, with no order, payment, advertising, wager, prize or in-app purchase, so paid distance-sale duties are not activated. NerdScore records scores for physical tabletop games and does not itself provide executable digital game content. User content is limited to invited private groups; report, formal legal notice, evidence preservation, reasoned decision and review routes remain available. Plus, Billing, Ads, prizes, public/random interaction or a playable digital game reopen the Korean consumer, platform and game-law reviews.

Your rights

You may request access, a machine-readable export, correction, deletion, restriction or portability, and may object where processing relies on legitimate interests. Write to ertalex@hotmail.it; identity checks may be required to protect other users.

You may withdraw analytics consent in the app at any time. You may also complain to your local supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

International privacy rights

We provide every user, regardless of country, a way to request access, a copy, correction, and deletion of their data. We do not discriminate against anyone who exercises a privacy right, and we do not sell or share personal data for money or targeted behavioral advertising.

Changing NerdScore's language changes only the translation you read. It does not change your country, the law that applies, the competent authority, or any mandatory rights you have where you live.

Data controller

The data controller is Alexander Goytom. For privacy, access, export, correction, deletion or removal requests, write to ertalex@hotmail.it.

NerdScore is a scorekeeping service for private board game groups. It does not require an email account and does not sell personal data.