Half Cut Privacy Policy

Information processed

• Account creation stores your username, display name, one-way password hash, required consent timestamps and registration/sign-in times. Recovery email and phone are optional. Sign-in uses an HttpOnly session cookie.
• The server records and validates the date, object, cut-line coordinates, score, volume ratio, request ID, input method and save time. Accounts synchronize records across devices; a random guest cookie maintains that browser’s attempt budget.
• The app retains language, tutorial completion, sound, haptics, motion preferences and sign-in cookies on the device. Network requests may leave IP, browser and request-path information in server security logs. The web version uses the general ITLAND visit analytics; the Android package omits that web visit script.
• Ranking display names, scores and positions are public. User-created friend challenges show the date, score and input method. Cut lines and contacts are not disclosed through friend links.

Purposes and service providers

Data supports sign-in/recovery, daily budgets and server scoring, synchronization, rankings, badges, sharing, troubleshooting and security. AWS hosts the server and Seoul-region database; Gmail receives email support. The Half Cut game package includes no advertising or payment SDK and does not request camera, microphone, location or contacts access. Other ITLAND web services have their own applicable notices.

Retention and deletion

Deletion removes shared ITLAND account details and all sessions; Half Cut attempts, rankings, friend links and badges; linked Queue Zero profiles, results and challenges; TYPELAND and TENMATH records; ITTY progress and account-linked chats/activity; and your Lobby posts, images, comments, reactions and reports. Comments by others under your posts are also removed.

Account-linked source data is removed from the active database when deletion is processed. Attached post images become inaccessible immediately and are deleted by cleanup jobs, retried hourly if necessary. Server file backups use a 30-day retention policy with hourly expiry cleanup. RDS automated backup retention was configured to one day when checked on October 20, 2026. Separately created manual snapshots are also subject to a 30-day operational limit. Deletion suppression is reapplied before a restored service resumes. For this purpose only, SHA-256 hashes of the account ID and deletion receipt token, plus the deletion time, are kept separately for up to 60 days. This ledger contains no username, contact, password or game content.

Non-account-linked aggregate statistics may remain. Under the existing policy, server access logs rotate for up to 14 days, and email inquiries may be retained for up to three years after resolution as needed for disputes. Optional support transactions are not linked to this account and follow their separate existing policy. Copies shared externally or saved by others, and local data in other devices/browsers, cannot be erased by this request. Haruyak uses a separate account system and is not included.

Your rights and users under 14

Accounts are available only to users aged 14 or older. Request access, correction, deletion or suspension through account settings, the deletion page or email. Never email your password.