Privacy Policy
MOA (the "Site") complies with the Personal Information Protection Act and other applicable laws, collects only the personal information it needs, and handles it securely.
1. Personal Information Collected and How
Entered directly when signing up
- Required: email address, password, nickname
- Optional: date of birth, gender, profile photo
- Receiving marketing information is optional; you can sign up without agreeing to it.
- Passwords are stored encrypted in a way that cannot be reversed (bcrypt); we do not keep the original text.
Collected automatically while using the Services
- Access IP, login records (IP and browser information), most recent login IP — to prevent flooding and spam and to confirm account misuse
- Post view records (IP) and reporter IP — to prevent duplicate view counts and to respond to false reports
- A value derived from your IP in a way that cannot be reversed when you take part in games, polls or surveys — to respond to duplicate or fraudulent participation
Content you provide voluntarily
Posts, comments, private messages, guest game-ranking names, and responses to surveys created by members are content you write yourself. Public posts and ranking names can be seen by anyone, so please do not include sensitive information such as your real name or contact details.
When using the Android app
- App screens: The app displays this Site inside the app, so this policy applies equally to sign-up, posting, messages, file attachments, advertising and analytics (Google Analytics) used within the app.
- App launch information: When the app starts, it sends the app version, Android version (API level), device language and a processed value of the connecting IP to the server. It does not send an advertising ID or the device's ANDROID_ID. It does send a random installation identifier that the app generates itself the first time it runs; this value becomes a new value if you delete the app or its data. The server stores it only as an irreversible hash and uses it for statistics on installs, active devices and returning use, and deletes it 13 months after the last launch. For members who receive app push notifications, the same hash is also stored with the push device information (device name and app version) so that the same device is counted once and you can review and delete devices on My Page; it is removed when you log out, delete the device or withdraw. Raw launch records are deleted after 30 days.
- Push notifications: To deliver notifications, the device's FCM (Firebase Cloud Messaging, Google LLC) registration token is stored on the server. It identifies the device and is linked only to a logged-in member. It is not stored if you deny the notification permission, and is deleted on logout, app uninstall or withdrawal. Notifications pass through Google's servers for delivery.
- Location: Only when you tap "My location" yourself (for example in weather, adding a place or sunrise/sunset) and only if you have allowed the location permission, the device's location (approximate or precise) is passed to the Site while you are using the app. The app does not collect location in the background. Weather lookups use coordinates rounded to about 1 km and do not store them. If you save a place yourself, that place's coordinates remain as your own record. You can turn the permission off in device settings at any time.
- Camera and photos: When attaching a photo you can take it with the device's camera app. The app itself does not hold the camera permission and only the photos you take or choose and upload are passed on. Temporary photo files are deleted the next time the app starts. The app does not request microphone or contacts permissions.
- Receiving shares: Text or links you send from another app with "Share" are passed to this Site's link, note or place saving screens only when you choose to share them.
Information we do not collect
We do not collect your real name, mobile phone number, address or resident registration number.
Visit statistics do not store IP addresses
Visitor counts are tallied only with a hash value that changes every day. The IP cannot be recovered from this value, and visits on different days cannot be linked to track you.
2. Purposes of Use
- Identifying members, keeping you logged in, and providing services such as bulletin boards
- Preventing flooding, spam and improper use
- Service usage statistics and improvement
- Serving advertisements and covering the Site's running costs through them (sections 5 and 7)
- Sending marketing information (only to members who have agreed)
- Handling reports, checking violations of the Terms, and complying with the law
3. Retention Period
| Item | Retention period |
|---|---|
| Raw access statistics, post view records | Automatically deleted after 30 days |
| App installation identifier (hashed) | Deleted 13 months after the last launch |
| Processed IP values from game, poll and survey participation | Deleted after 30 days |
| Deleted posts | Kept for 30 days, then permanently deleted |
| Records of sent emails | 14 days |
| Private messages | 365 days |
| Administrator action records (including views) | Not deleted |
| Member information | Until withdrawal (see section 4 below) |
4. Handling upon Withdrawal
- When you withdraw, your account is deactivated immediately and you can no longer log in.
- Posts and comments you wrote are not deleted and remain. This is to preserve the context of other users' conversations; if you want them removed, please delete them yourself before withdrawing.
- Account information (email, nickname, etc.) is not deleted automatically after withdrawal and is retained. If you want it completely deleted, please request it at the contact address below. We will process it without delay.
5. Provision to Third Parties and Outsourcing
We do not sell or provide your personal information to third parties, and we do not outsource the processing of member information. Some features, such as movie and place search, may pass your search terms to external search services, but no personally identifying information is sent. If any provision or outsourcing arises in the future, we will announce it in this policy first.
Advertising (Google AdSense)
The Site uses Google AdSense, an advertising service of Google LLC (USA), to display advertisements. On screens where ads appear, Google and its advertising partners may store or read cookies directly in your browser, and the information below is sent to those operators. The Site does not pass members' email addresses, nicknames, written content or the like to advertising operators.
| Item | Details |
|---|---|
| Recipient | Google LLC and advertising partners |
| Purpose | Serving ads, measuring ad performance, preventing click fraud, and providing ads matched to your interests |
| Information sent | Cookies and advertising identifiers, IP address, browser and device information, the address of the page visited, ad impression and click records |
| Country and method of transfer | The countries where Google's servers are located, such as the USA; your browser communicates directly with those servers when it opens a screen showing ads |
| Retention period | According to Google's policy (policies.google.com/technologies/retention) |
How Google uses cookies for advertising and processes information is described in How Google uses information from sites or apps that use its services.
6. Rights of Data Subjects
- Access and correction: you can check and edit your information yourself on My Page.
- Deletion and suspension of processing: you can withdraw on My Page or make a request at the contact address below. Requests to delete records left by non-members (such as ranking names) are made the same way.
- Even if you cannot log in because of a suspension, you can still inquire at the contact address below.
7. Cookies
Cookies the Site uses itself
We use a session cookie to keep you logged in and a security cookie to block forged requests. Visit statistics are tallied in-house without cookies. Separately, we use Google Analytics 4 (Google LLC) to analyze usage; it sends cookies and approximate location (derived from IP), device and visited-page information to Google, and visits by administrators are not sent. The Site does not pass your email, nickname or written content. To opt out, install the Google Analytics opt-out add-on or block cookies in your browser. Your screen theme choice (light/dark) is stored only in your browser and is not sent to the server. If you refuse these cookies, you will not be able to use features that require login.
Advertising cookies
On screens where ads appear, Google and its advertising partners named in section 5 may use cookies to show ads based on your browsing history. These cookies are set by the advertising operators, not by the Site.
- Turn off personalized ads: you can turn off personalized ads in Google Ads Settings (adssettings.google.com). Ads will still be shown, but they will not be based on your interests.
- Block or delete cookies: you can block or clear cookies in your browser settings. Blocking only advertising cookies does not affect use of the Site, such as logging in.
- Other advertising operators: at aboutads.info/choices you can turn off personalized ads from several advertising operators at once.
8. Security Measures
- Encrypted storage of passwords and HTTPS communication throughout
- Storing uploaded files where they cannot be accessed directly from the web, and serving them only after a permission check
- Tiered restriction of administrative permissions and recording of administrator actions
- Separation of database access permissions
9. Personal Information Protection Officer
- Officer: the Site operator
- Contact: master@go3.co.kr
You may also report or seek advice on personal information infringement from the following organizations.
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cybercrime Investigation Division (spo.go.kr / 1301)
- Korean National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)
10. Changes to This Policy
When the content is changed, we will announce it in the notices section at least 7 days before it takes effect (30 days before for significant changes to users' rights).
Announced: October 26, 2026
Effective: October 26, 2026 (sections 1 and 7 on the Android app, push notifications and Google Analytics added)