So what?! (쏘왓) Privacy Policy

1. Information we collect

• Nickname — you type it in yourself when you enter. It does not have to be your real name.
• Device token — a random value the server issues and stores in your browser the first time you enter this site. We do not collect phone numbers, email addresses or advertising IDs.
• Usage records — the situations you set up, the lines exchanged during matches, judging results and coin usage.
• Payment records — when you buy a coin pack: order number, item, amount, payment method, approval time and the payment gateway's payment identifier. Card numbers and other payment-instrument data are handled by the gateway (Toss Payments) and are not stored on our servers.
• Photos (optional) — only when you use "Create a character from a photo", the photo you upload yourself.
• Referral source — the access-path values from your first entry (utm values, src, ref), the previous page address, and the invite code. Used only to count which path people came through (by ad or streamer code). Stored with your account and deleted together with it when you delete your account.

2. Purposes of use

• Providing the game (generating the AI opponent's lines, judging, and displaying characters).
• Improving quality during the closed beta — we analyze line and judging records to adjust rules and balance.
• Payment processing — approving, delivering and refunding coin-pack purchases, and keeping transaction records as required by e-commerce law.

3. Provision to third parties and international transfer

• Anthropic (USA) — situation settings, lines and nicknames are sent to generate the AI opponent's lines and judging. Photos and device tokens are not sent.
• Google (USA, Gemini API) — only when you create a photo character, the uploaded photo is sent. It is a paid API, so the data is not used for training. We give separate notice and obtain your consent before upload.
• Higgsfield (overseas) — used only when the operator needs to touch up a photo character's artwork.
• Toss Payments (Korea, payment gateway) — when you buy a coin pack, the order number, amount and payment-method data are processed for payment approval (processing on our behalf).
• We do not provide information to any other third party and do not use it for advertising.

4. Retention period

• Original photos are deleted as soon as the character's base artwork is ready. They are also deleted if creation fails.
• Other records are kept until you request deletion. Payment and refund records are kept for 5 years under the Act on Consumer Protection in Electronic Commerce and then destroyed.

5. Your rights

Tap Delete my data in the menu (⋯) at the top right of the game screen and your account, coins, characters and photos are deleted immediately and your token is invalidated. Deleted data cannot be recovered. You can request access or correction through the contact below.

6. Age

This service is available only to people aged 19 or older. If we learn that we hold information about someone under 19, we delete it immediately.

7. Security measures

Traffic is encrypted (HTTPS), tokens are stored only as hashes, and server access is limited to the operator. Characters you create are visible only on your own screen, and there is no sharing feature.

8. Contact

9. Changes

This policy is the closed-beta edition and will be revised before the public launch (real-name adult verification and more). When it changes, we will announce it on the game screen and on this page.

• 2026-10-19 — The data controller and Chief Privacy Officer are now listed based on the business (FortyWeeks).
• 2026-10-18 — Added "Referral source" to the information we collect and updated the wording for the web service.