Privacy Policy

1. What we collect

Browsing the game catalogue and getting recommendations requires no personal data and no account.

If you sign in with Google, we receive and store your email address, name, profile image URL and account identifier through our authentication processor (Supabase). We never receive or store your password.

While signed in, your game ratings (game identifier, one of liked / fine / not for me, the occasion selected at the time, and a timestamp) and any game suggestions you submit are stored alongside your account identifier.

With your consent, analytics cookies collect visit time, pages viewed, referring source, browser, device and operating system, approximate location, and identifiers derived from your IP address.

We do not collect phone numbers, postal addresses or payment details. The Service does not sell products and never handles payment information.

2. Why we use it

To identify your account, keep you signed in, and show the same ratings across your devices.

Your ratings personalise the ranking shown to you only. They never change what other visitors see.

Game suggestions are used to review and decide whether to add a game to the catalogue, and to follow up with you if needed.

Analytics data is used in aggregate to understand which screens are actually used and improve the Service. We do not profile individuals or serve advertising.

3. Legal basis (EEA / UK visitors)

Account data and ratings: performance of a contract — we cannot provide a signed-in experience without them (GDPR Art. 6(1)(b)).

Analytics cookies: consent, which you give in the cookie banner and may withdraw at any time (Art. 6(1)(a)).

Security, abuse prevention and keeping the site online: our legitimate interests (Art. 6(1)(f)).

4. Processors and international transfers

Supabase, Inc. — authentication and database hosting. Vercel, Inc. — website hosting and content delivery. Google LLC — website analytics (Google Analytics, Google Tag Manager) and Google sign-in.

Account data, ratings and submissions are stored in a database located in Seoul, Republic of Korea (AWS ap-northeast-2). Korea holds an adequacy decision from the European Commission (December 2021), so this storage requires no further transfer safeguards for EEA visitors; UK visitors are covered by the equivalent UK adequacy regulations.

Supabase, Inc. (United States) may access that data from outside Korea for maintenance and support. Vercel and Google process request logs and analytics data on servers in the United States. These transfers rely on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework where applicable.

If you prefer no international transfer, use the Service without signing in and decline analytics cookies. Features that require an account will then be unavailable.

5. Retention

Account data and ratings are kept until you delete your account, after which they are erased without undue delay; ratings are deleted together with the account by database cascade.

Game information accepted into the catalogue remains as site content, but its link to the submitter is removed when the account is deleted.

Analytics data is retained for at most 14 months under Google Analytics retention settings.

6. Sharing

We do not sell or share personal data with third parties. The processors listed above act only on our instructions.

We disclose data only where required by law or by a lawful request from an authority.

7. Your rights

You may request access to, correction of, deletion of, or restriction of processing of your personal data, and you may object to processing or ask for your data in a portable form. Ratings can be edited or removed directly on the My ratings screen.

Send any other request to kighfk@gmail.com. We respond without undue delay and within one month at the latest.

You may withdraw consent to analytics at any time without penalty. EEA and UK residents may also lodge a complaint with their national supervisory authority; Korean residents may contact the Personal Information Dispute Mediation Committee (kopico.go.kr).

The Service is not directed at children under 14 and we do not knowingly collect their data.

8. Cookies

Strictly necessary storage (session cookies and browser local storage) keeps you signed in and remembers your language. Ratings made without signing in stay in your browser and are never sent to our server.

Analytics cookies (Google Analytics, Google Tag Manager) run only after you accept them in the cookie banner. Until then, analytics tags are set to a consent-denied state and do not collect identifiable data.

Your choice is stored in your browser; clearing site data brings the banner back. You can also block cookies in your browser settings.

9. Security

Row-level security policies in the database restrict every signed-in user to their own ratings and their own submissions.

All traffic is served over HTTPS, and credentials are handled by our authentication provider using standard practice.

10. Contact and changes

Data protection officer: Seongeun Bang (Gahong). Questions, complaints and requests: kighfk@gmail.com.

This policy takes effect on 2026-08-13. Material changes are announced on the site at least 7 days in advance, or 30 days where they significantly affect your rights.

Operator

Service

Tabletop Lens

Business name

Gahong

Representative

Seongeun Bang

Business registration no.

171-06-03484

Data protection officer

Seongeun Bang

Contact

kighfk@gmail.com