WAME

WAME Privacy Policy

Blackhoods Inc. (the “Company”) explains below how it processes personal information in the WAME service and how users may exercise their rights.

Article 1. Personal Information We Process

  • General members: email address, nickname, Google account identifier, and game preference information selected by the user
  • Creator members: channel URL, primary content genre, and optional contact information
  • Game company members: company name, contact person’s name and email address, business registration number, and optional contact details and company materials
  • External platform connections: game library, playtime, and achievement information provided by connected services such as Steam, PlayStation Network, and Xbox Network
  • Service use: IP address, access time and logs, first-party cookies, browser and session identifiers, device information, search, view, click, save, favorite, and share history, content use and recommendation responses, personalization setting and its source, and country or region classification inferred from the IP address
  • Events: name, contact information, shipping address, and other information needed to operate an event, as separately described on the event page

Information about non-members may be processed using a browser identifier instead of an email address or real name.

Article 2. Purposes of Processing

  • Member administration, prevention of misuse, customer support, and provision of service features
  • Remembering recently viewed games, calculating game fit, personalized recommendations, and selecting personalized sponsored content
  • Content analysis and recommendation improvement, service statistics, and de-identified insights for game companies
  • Security and incident response, dispute handling, and event operation

Article 3. Personalization, Automated Processing, and Cookies

1. The Company may use preferences entered by the user, recent game view, search, click, and save history, and connected platform play information to generate a game preference profile, game-specific fit, recommendation order, and suitable sponsored content.

2. The initial personalization setting may vary by access region. It starts disabled where prior choice is required or the region cannot be determined. A setting directly changed by the user takes precedence over the regional default.

3. Users may disable personalization at any time. Once disabled, new activity is not used for personalization, and non-personalized content based on popularity, recency, or the content currently being viewed is provided instead of personalized sponsored content. Existing data may be deleted through the service or by contacting the Privacy Officer.

4. The Company may use cookies, similar technologies, Google Analytics, and Umami for essential functions, personalization, and usage analysis. Where prior choice is required, optional processing is restricted in accordance with applicable law and user settings. The Company does not use personalized activity information for ongoing remarketing by third-party advertising networks. However, when conducting an external advertising campaign or hypothesis test at a client’s request, the Company may use tools such as Google Ads to measure advertising traffic and conversions. In that case, the scope, purpose, data, and period are disclosed for the campaign, any required consent is obtained, and activity information of users unrelated to the campaign is not used for its advertising measurement.

5. Where an automated decision materially affects a user’s rights or obligations, the user may request an explanation or review.

Article 4. Use of AI and User Content

The Company may use AI to analyze posts, comments, video links, and tags submitted by users in order to provide search, recommendations, and fit results. Unnecessary real names and contact details are excluded or minimized, and faces and voices are not analyzed for identification purposes.

Article 5. Retention and Deletion

  • Member account information: until account withdrawal
  • Personalization activity information, preference profiles, and recommendation data: one year from the last activity
  • Technical page-view and search analytics logs: 90 days from collection
  • External platform connection information: until disconnection or account withdrawal
  • Customer inquiry records: three years after resolution; ordinary inquiries with no further retention need are deleted without delay
  • Event information: for the period stated on the event page
  • Contract, cancellation, and payment records: five years as required by law; consumer complaint and dispute records: three years

When the retention period ends or the processing purpose is fulfilled, electronic information is securely deleted and paper records are shredded or destroyed. Information required by law is stored separately. Long-term statistics may be retained after identifiers that could link the data to an individual have been removed.

Article 6. Disclosure to Third Parties

The Company does not disclose personal information to third parties without consent or another legal basis. Game companies receive only aggregated insights that are not reasonably capable of identifying individual users.

Article 7. Processing by Service Providers and Overseas Processing

Microsoft Azure

  • Service provider: Microsoft Corporation
  • Services: cloud infrastructure, data storage, networking, security, and AI classification, tagging, and recommendations
  • Primary storage location: Korea Central, Republic of Korea
  • AI resource location: East US, United States
  • Retention: until the outsourced purpose is fulfilled or the contract ends; information stored by the Company is subject to Article 5

When Azure AI Global Standard is used, pseudonymized AI inputs and outputs may be processed temporarily in other Azure regions. Where required, notice and consent are provided before the feature is used. Basic search and browsing remain available without consent.

Azure AI deployment types and processing locations · Azure AI privacy information

External Analytics and Advertising Measurement Tools

The Company may use Google Analytics provided by Google LLC and Umami Cloud provided by Umami Software, Inc. for usage statistics. Cookie and session identifiers, page and event data, referral information, device and browser information, and approximate location information may be transmitted over encrypted connections and processed in countries where Google processes data or on Umami Cloud servers in the United States or European Union. Google Analytics retains event data for two months and user data for 14 months, with the user-data period reset upon new activity. Umami Cloud retains data until the applicable contract ends or the data is deleted.

When Google Ads is used for an external advertising campaign, Google LLC may process advertising click identifiers, campaign information, and landing and conversion events within WAME. The specific scope and period of processing are disclosed separately for that campaign.

Google Analytics data safeguards · Umami Cloud information

Article 8. User Rights

Users may request access, correction, deletion, suspension of processing, withdrawal of consent, refusal of personalization, an explanation or review of automated decisions, and disconnection of external platforms. Requests may be made through the service settings or by emailing peter@wame.is.

Non-member data is deleted based on the identifier in the current browser. If the relevant data cannot be identified because cookies were deleted or the device changed, the data is automatically deleted one year after the last activity.

Article 9. Safeguards, Children, and Contact

The Company applies appropriate safeguards, including least-privilege access, encryption of important information and data in transit, access and intrusion monitoring, separation of operational and security logs, service-provider management, and physical access controls.

The service does not permit registration by children under 14. If the Company learns that a child’s personal information was collected without valid consent from a legal representative, it will delete the information without delay unless retention is required by law.

Article 10. Changes and Effective Date

This Policy takes effect on September 3, 2026. Changes and their effective dates will be posted in a service notice or on this page. Changes that materially affect user rights will be explained clearly in advance, and any separately required consent will be obtained before the changed processing begins.

  • May 14, 2026: previous policy effective
  • September 3, 2026: this Policy effective