Privacy Policy

1. Who We Are and Scope of This Policy

This Privacy Policy explains how Shardmonics collects, uses, stores, shares, and protects personal information when you use the Shardmonics website, dashboard, studio, score analysis tools, help pages, subscription features, community features, sharing and embeds, support channels, and related services (collectively, the "Service").

This Policy applies to information processed in connection with user accounts, uploaded score data, project metadata, analysis results, feedback submissions, subscriptions, and support interactions. It also applies to public community activity such as questions, comments, ratings, accepted results, reports, and reputation records.

2. What Information We Collect

3. Why We Process Personal Information

We process personal information only to the extent necessary for the following purposes:

• Create and manage user accounts and authenticate sign-ins
• Store projects, render scores, and provide requested score analysis features
• Provide and moderate community posts, comments, ratings, accepted results, reports, and reputation scores
• Provide AI-assisted feedback and explanatory responses that you request
• Process subscriptions, cancellations, billing changes, and refund requests
• Provide customer support, security monitoring, abuse prevention, and troubleshooting
• Maintain settings, user preferences, and consent records
• Improve the Service where legally permitted, including through separately consented model-improvement workflows
• Comply with legal obligations, accounting duties, dispute resolution, and law enforcement requests where required

4. Model Improvement and Separate Consent

Playability ratings, accepted results, reports, and comment-quality signals submitted in the public community may be managed as model-improvement candidate data. Test data or incorrect data can be excluded or reversed through administrator review. You may withdraw optional model-improvement consent through the Service settings or by contacting us, unless retention is required by law or is necessary to resolve already-completed operational records in de-identified or legally permitted form.

5. Retention Period

1. 1Account information and active project data are generally retained until you delete your account or request deletion, unless a longer period is required by law or necessary to resolve disputes, enforce agreements, or prevent abuse.
2. 2Billing, transaction, and refund-related records may be retained for the period required under applicable accounting, tax, e-commerce, or consumer protection laws.
3. 3Public community posts, comments, accepted-result records, and reputation records may remain visible until deleted by the user or moderated by Shardmonics. Report and enforcement records may be retained for the period necessary to operate community safety.
4. 4Logs, security records, and abuse-prevention records may be retained for a limited period reasonably necessary for fraud prevention, incident response, and service stability. Redis rate-limit counters are retained for short configured expiry windows.
5. 5Where data is no longer needed, we delete or anonymize it unless continued storage is legally required or otherwise permitted under applicable law.

6. Sharing, Processing, and International Transfers

We do not sell your personal information. We share or entrust processing only as needed to provide the Service, operate infrastructure, process payments, send service emails, or comply with law.

Because these providers may process data in jurisdictions outside your country, your information may be transferred internationally as necessary to provide the Service. Where required, we rely on contractual, technical, or other lawful safeguards appropriate to the relevant transfer context.

7. Cookies, Local Storage, and Similar Technologies

• We use essential cookies or similar storage to maintain sessions, security state, and login status.
• We use functional storage to remember preferences such as theme, language, and studio settings.
• Vercel Web Analytics provides cookie-free aggregate analytics, and Speed Insights processes anonymous performance data points.
• Depending on your browser and device settings, you may be able to block or delete cookies or local storage, but some features of the Service may stop working properly.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access or receive a copy of your personal information
• Correct inaccurate or incomplete information
• Delete your account or request deletion of certain data
• Withdraw consent where processing is based on consent
• Object to or request restriction of certain processing in cases provided by law
• Request explanation about how we handle international transfers or provider processing where required by law

You can exercise many of these rights through the Service settings, including account deletion and preference controls, or by contacting gsik.artist@gmail.com.

9. Security

We take commercially reasonable administrative, technical, and organizational measures designed to protect personal information, including authentication controls, encrypted transport, role-based access limits, logging, and service-provider safeguards. However, no internet transmission or storage system can be guaranteed to be completely secure.

10. Children and Sensitive Content

The Service is not designed to intentionally collect personal information from children in violation of applicable law. Please do not upload scores, annotations, or support materials that unnecessarily contain third-party personal information or sensitive information.

If you believe that a child or another person's personal information has been uploaded to the Service without proper authority, please contact us so that we can review and respond appropriately.

11. Complaints and Dispute Assistance

If you have a complaint or request relating to privacy, please contact gsik.artist@gmail.com first. If you believe your rights under applicable Korean privacy law have been infringed, you may also seek assistance from the Personal Information Protection Commission, the Korea Internet & Security Agency, or other competent authorities.

12. Changes to This Policy

We may update this Policy to reflect changes in law, service features, processing practices, or provider relationships. If the changes are material, we will provide reasonable notice through the Service, by email, or through another suitable method before the revised Policy takes effect.