Privacy notice

Hangeul Square · 한글스퀘어 is a Korean learning service with practice games, a shared virtual town, community posts, and teacher classes. Effective: October 5, 2026.

Information we use

Accounts use your email address, nickname, password hash for email sign-in, interface language, and learning level. Google and Apple sign-in use the provider account identifier and verified email; a provided name may initialize your nickname. We request basic identity information only, not Gmail, Drive, contacts, or payment access.

We store learning answers, progress, XP and virtual learning-card transactions to provide practice and prevent duplicate rewards. Community posts, comments, guestbook entries, stamps, follows, friends, whispers, reports, class bookings, submitted materials and feedback support the features you choose to use. Public posts and your nickname are visible to other members. Do not post private identifiers or sensitive information.

Sessions and temporary sign-in cookies keep you signed in and protect authentication. Language and interface preferences may be stored in your browser. Security controls process request IP addresses and operational logs. These are used to run and secure the service, not sold to advertisers.

Voice and video

Microphone, camera and screen sharing start only when you enable them and grant browser permission. WebRTC transmits media to the other participants, directly or through Cloudflare TURN; an available emergency coturn server may be used when the relay allowance is exhausted. The service does not record calls. Session membership, call limits and relay usage are processed to operate calls. Other participants may still make their own recordings; share carefully.

Providers and locations

Cloudflare operates the website, API, D1 database, R2 files, transactional email and primary TURN relay. Google or Apple processes sign-in when selected. These providers may process data outside your country through their infrastructure. Optional YouTube playback, Discord invitations and Buy Me a Coffee links connect to those services when you choose them; their privacy policies also apply.

Retention and your choices

Account and learning data are retained while needed to provide your account. Sign-in sessions expire after 7 days; password-reset links after 30 minutes and email-verification links after 24 hours. Expired action tokens are removed during account-email operations. Posts, uploaded materials and activity records remain until removed or a verified deletion request is processed. Security, moderation and reward audit records may need separate review to preserve other members’ rights and prevent abuse.

You may request access, correction, export or deletion, including withdrawal from the service, at buingoffical@gmail.com. Contact us from your account email and describe the request. Never send your password or authentication codes. We verify ownership before processing and tell you what data must remain and why. This is an operator-reviewed request process, not an instant automatic deletion feature.

For privacy questions and complaints, contact the Hangeul Square operator at the same address. Material changes will be announced on the site.