Privacy Policy

Article 1 (Purposes of processing)

The Team processes personal information for the following purposes. It will not be used for any other purpose, and if a purpose changes, the Team will take the necessary steps, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. ① Discord server verification and member management: confirming Discord accounts, identity verification, granting roles on verification, maintaining and managing eligibility to use the server
2. ② Preventing misuse: checking multiple (alt) accounts by the same person, preventing ban evasion via VPNs or proxies, and checking re-joins by sanctioned users
3. ③ Server operation and dispute handling: checking rule violations, managing warning and sanction history, and establishing facts when disputes arise between users
4. ④ Consultation and service delivery: answering inquiries via Discord tickets, providing quotes, and carrying out and reporting on requested services
5. ⑤ Benefits: issuing coupons based on invites and total spend, and applying tier discounts
6. ⑥ Server recovery: re-adding verified members if the Discord server is deleted, suspended or moved

Article 2 (Items processed and how they are collected)

① The Team processes the following personal information.

② The Team collects personal information in the following ways.

• Receiving it from Discord within the scope you approve on the Discord login (OAuth2) consent screen
• Collecting information generated and sent automatically in the course of communication when you access the verification page (IP address, browser information)
• The server bot recording server activity while you use the Discord server
• You providing it directly through Discord tickets

③ The Team does not look up or record location information such as country or region, and does not collect values that uniquely identify a device (device serial numbers, advertising IDs, etc.).

④ The Site does not ask visitors to enter information such as names or contact details.

Article 3 (Processing and retention periods)

① The Team processes and retains personal information within the retention period set by law or consented to by the data subject at collection.

② The processing and retention period for each item is as follows.

③ Notwithstanding paragraph 2, information may be retained until an investigation or inquiry into a violation of law has concluded.

Article 4 (Destruction procedure and method)

① When personal information is no longer needed, such as when the retention period has passed or the purpose has been achieved, the Team destroys it without delay.

② If personal information must be kept under other laws even after the consented retention period has passed or the purpose has been achieved, it is stored separately.

③ The destruction procedure and method are as follows.

1. 1. Procedure: information kept in storage is saved with a 365-day expiry and deleted automatically when it passes. In admin-only channels, the bot deletes verification logs older than 365 days and other logs older than 90 days. When a data subject requests deletion, we verify identity and delete the information immediately.
2. 2. Method: personal information stored as electronic files is deleted so that it cannot be recovered. The Team does not print or keep personal information on paper.

Article 5 (Provision to third parties)

① The Team processes personal information only within the scope stated in Article 1, and provides it to third parties only in cases under Articles 17 and 18 of the Personal Information Protection Act, such as the data subject's consent or special provisions of law.

② The Team does not currently provide personal information to third parties, except when law enforcement or other authorities request it through lawful procedures.

Article 6 (Outsourcing of processing)

① To provide the Service smoothly, the Team outsources processing as follows.

② If the outsourced work or processors change, the Team will disclose it through this Privacy Policy without delay.

Article 7 (Transfers abroad)

① To carry out the outsourced work in Article 6, the Team transfers personal information abroad as follows.

② You may refuse transfers abroad. If you don't want them, simply don't verify on the Discord server; information already transferred can be deleted on request under Article 9. In that case, some parts of the Service, such as channels requiring verification, will not be available.

Article 8 (Processing to detect alt accounts and ban evasion)

To prevent verifying multiple accounts to avoid sanctions, the Team processes personal information as follows.

1. ① The connection IP address at verification is recorded in a private channel only admins can view and is not shown to regular members.
2. ② To check accounts verified from the same network or email, we generate one-way hashes (HMAC-SHA256) of IP and email addresses using a secret key and compare those. The original IP or email cannot be recovered from the hash, and the original values are not stored.
3. ③ Email/IP comparison hashes of sanctioned (blacklisted) accounts are used only to check for matches when another account verifies, and are deleted immediately when the sanction is lifted.
4. ④ When several people share the same internet connection (internet cafés, schools, a shared household), they may appear as the same network; the Team does not sanction anyone on that basis alone. If you disagree with a result, you can explain via a ticket.

Article 9 (Rights and duties of data subjects and how to exercise them)

① You may at any time exercise rights such as requesting access, correction, deletion or suspension of processing of your personal information.

② You can exercise these rights through a ticket on the Discord server, and the Team will act without delay after verifying your identity.

③ You may exercise these rights through an agent, such as a legal representative or someone you have authorized. In that case, documents proving the authorization must be submitted.

④ Requests for access and suspension of processing may be limited under Article 35(4) and Article 37(2) of the Personal Information Protection Act.

⑤ You cannot request correction or deletion of personal information that other laws specify must be collected.

⑥ On a deletion request, IP records, comparison hashes, and the server recovery token and username are deleted immediately. Sanction (blacklist) records may be kept until the sanction is lifted to prevent ban evasion.

⑦ You can disconnect the Team's app in Discord under Settings › Authorized Apps; once disconnected, the stored login token can no longer be used.

⑧ You must keep your personal information accurate and must not misuse others' personal information or infringe their rights.

Article 10 (Personal information of children under 14)

① The Team operates the Service in line with Discord's minimum age (14 or older in Korea) and does not collect personal information of children under 14.

② If it is found that personal information of a child under 14 has been collected, the Team destroys it without delay.

Article 11 (Security measures)

The Team takes the following measures to keep personal information secure.

1. 1. Administrative: keeping the number of admins who handle personal information to a minimum and limiting access to verification log channels to admins.
2. 2. Technical
   • a. IP and email addresses are compared as hashes made with a secret key; the original values are not stored.
   • b. Admin functions such as deleting records, server recovery and sanctions can only be run by admins holding a separate secret key, which is sent in a way that never exposes it in a URL.
   • c. All communication on the Site and verification page is encrypted with HTTPS.
   • d. Credentials such as storage access keys are managed only as server environment variables and never made public.
3. 3. Physical: the Team does not run its own server room or records room; personal information is kept within the security facilities provided by the processors in Article 6.

Article 12 (Automatic collection tools and how to refuse them)

① The Team's Site and verification page do not use cookies that store and retrieve your information, and do not install tracking tools for advertising or visitor analytics.

② However, the processors in Article 7 may keep access logs under their own policies while providing their services.

Article 13 (Right to refuse consent and its consequences)

You have the right to refuse consent to the collection and use of personal information in Article 2. However, if you refuse, Discord server verification will not complete and some parts of the Service, such as channels requiring verification, will not be available.

Article 14 (Privacy officer)

① The Team has designated the privacy officer below, who is responsible for overseeing personal information processing and for handling complaints and remedies related to it.

② You may contact the privacy officer about any privacy-related questions, complaints or remedies arising from use of the Service. The Team will respond and act on your inquiry without delay.

Article 15 (Remedies for infringement)

① To seek remedies for infringement of personal information, you may apply for dispute resolution or consultation to bodies such as Korea's Personal Information Dispute Mediation Committee or the KISA Privacy Infringement Report Center. For other reports or consultations on privacy infringement, please contact the agencies below.

• Personal Information Dispute Mediation Committee (Korea): 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Center (Korea): 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office (Korea): 1301 (www.spo.go.kr)
• Korean National Police Agency: 182 (ecrm.police.go.kr)

② Anyone whose rights or interests are infringed by a disposition or omission of the head of a public institution regarding requests under Article 35 (access), Article 36 (correction/deletion) or Article 37 (suspension of processing) of the Personal Information Protection Act may file an administrative appeal under the Administrative Appeals Act.

Article 16 (Changes to this policy)

① This Privacy Policy applies from September 25, 2026.

② When content is added, deleted or corrected due to laws or policy, we will announce it through the Discord server and this page from 7 days before it takes effect. For changes important to your rights, such as changes to the items collected or purposes of use, we will announce them at least 30 days in advance.

③ You can view previous versions of this Privacy Policy by requesting them through a Discord server ticket.