Privacy Policy

1. Operator and contact

You can email the MW GOBLIN operator about the service or privacy at jswoo030@gmail.com.

2. Information collected and purposes

• Google sign-in: We receive your Google account's unique identifier, name, email address, and email verification status to identify signed-in users. We store the identifier, name, and email as member information.
• Membership records: We store registration and latest sign-in times to manage membership and sign-in.
• Paper trading and chart games: We store virtual balances, positions, trades, progress, and request identifiers linked to a server-generated hash of your Google identifier. This restores individual games and prevents duplicate orders. Chart-game leaderboards show other signed-in users a stored account nickname combining an adjective and animal, rank, current balance, and realized returns for the current account and lifetime history. Emails, names, account identifiers, and individual trades are not public. Account resets clear virtual balances and progress while retaining completed trades.
• Email inquiries: We use the sender's email address and inquiry to reply and process requests.
• Service activity: We record visited paths, access times, public-summary and full-report views, sign-in starts, successes and failures, and sign-outs to analyze use and errors. Daily logs on the operator's server store a random browser identifier, a hash of the member identifier, referring domain, and mobile/desktop classification. These logs exclude names, emails, raw IP addresses, URL search terms, and authentication codes.
• Abuse prevention: To prevent repeated calls and forged logs, we temporarily reference the connecting IP and use temporary rate-limit keys hashed with a server secret. Neither these keys nor raw IPs are stored in activity JSONL logs.
• Connection information: Hosting and network providers may process IP addresses, access times, request paths, browser information, and similar connection records to deliver the site and handle security or outages.

Google sign-in requests only basic identity verification and name/email access. We do not receive or store Google passwords or access Gmail content, contacts, calendars, or Drive files. Google profile photos, access tokens, and ID tokens are not stored in the member database.

Google Analytics visitor analytics

We use Google Analytics 4 to understand visitor counts, referrals, and page usage. On the production site with analytics enabled, browser identifier cookies, page URLs and titles, referrers, device/browser information, and usage events are sent to Google. Google may process network information such as IP addresses when receiving analytics requests.

We do not send Google sign-in names, emails, account identifiers, paper-account balances, or trades as analytics user properties. Ad personalization and Google signals are disabled. Analytics tags are not loaded in development, previews, or signed production test visits.

Analytics cookies are normally retained for up to two years and may be renewed on visits. You can block or delete cookies in your browser or use the Google Analytics Opt-out Browser Add-on. For details, see How Google uses data from partner sites.

3. Storage and use

Member information is stored in a database on the operator's server. Sign-in information such as names and emails supports member identification, sessions, service screens, and inquiries. Google member information is not sold, used for ad targeting, or supplied as input for AI reports or model training.

Reports are independently written using public company materials and other sources. They are not personalized reports based on members' Google account data.

4. External service providers

• Google: Handles account sign-in and identity verification. Site fonts load from Google Fonts, which may receive IP addresses and browser request information. Email inquiries are received through Gmail. Google Privacy Policy
• Vercel: Hosts the website and handles sign-in and page requests. Sign-in and connection information passes through Vercel infrastructure. Vercel Privacy Notice
• Cloudflare: Relays communications between the web server and the operator's server. API traffic, including member-storage requests, and network information pass through this infrastructure. Cloudflare Privacy Policy
• Bitget: Provides public market-data connections on the live paper-futures screen and receives the browser's IP and connection information. Google account data, paper accounts, and order history are not sent to Bitget.

Information may be processed outside Korea through these providers' global infrastructure. MW GOBLIN does not disclose member information to other users beyond the service purposes described above.

5. Retention and deletion requests

Member information is retained for identification and sign-in. Signing out or disconnecting the service from your Google account does not automatically delete stored membership records.

To request access, correction, deletion, or account closure, use your registered email to contact jswoo030@gmail.com. The operator verifies your identity, processes the request, and informs you of the result. Any legally required retention and its reasons will be explained separately. The scope of deleting service logs, inquiry emails, and provider-managed access records is reviewed with your request.

You can also disconnect the service in Google account connections. Signing in with Google again after deletion may create a new membership record.

6. Sign-in cookies and safeguards

Before you choose a language, we use the country provided by our hosting service to open Korean pages for visitors in Korea and English pages for visitors elsewhere. Your manual language choice is stored in this browser in a cookie for up to one year. You can change it with the language button or remove it by clearing cookies.

Light/dark appearance and chart-game indicator settings are saved to signed-in accounts across devices. Appearance is also kept in a browser cookie for up to one year for faster display. Before sign-in, appearance is saved only in this browser.

For free reading without sign-in, a signed cookie stores the Korean calendar date and up to three report identifiers read that day. Scripts cannot access it, and it expires at midnight KST. Rereading the same reports that day uses no additional views.

Sign-in verification cookies last up to 10 minutes, and session cookies up to seven days. A random browser identifier cookie also lasts up to seven days and renews on activity-record requests. Session cookies contain signed account identifiers, names, and emails. Signing out removes the current browser's session cookie. You can delete or block cookies in browser settings, though sign-in may then fail.

The production site uses HTTPS and prevents script access to sign-in cookies. Full reports are provided after checking sign-in or daily free-reading access. Server connection credentials are not exposed to browsers.

7. Policy changes

If collected information or its purposes change, we update this page and its effective date, and provide notice or request consent when needed. Send privacy inquiries to jswoo030@gmail.com.