PRIVACY POLICY · Effective September 22, 2026
How we handle
your personal data.
The Raiders operator (the “operator”) publishes this privacy policy under the Republic of Korea's Personal Information Protection Act to protect personal data and rights and respond to enquiries.
1. Purposes, data and retention
| Activity | Purpose | Data processed | Retention and basis |
|---|---|---|---|
| Direct service submissions | Checking submissions and duplicates, reviewing publication and contacting the maker when needed | Required Service name, website, short description, maker name and email Optional Additional notes | Up to one year from submission. Published service information is retained until the listing ends or removal is requested |
| Enquiries and rights requests | Responding to enquiries and requests for access, correction, deletion or suspension of processing | Sender email, names, content and attachments included in messages | Up to one year after the request is completed |
| Service protection | Preventing repeated submissions, unauthorized logins and abnormal requests | HMAC digests of IP addresses or User-Agent values, and request timestamps | Up to 7 days |
| Service reports | Preventing duplicate reports and reviewing spam, phishing, illegal content and other reported services | Report reason, optional details and evidence URLs, and HMAC digests of IP addresses or User-Agent values | Up to one year from the report |
| Visit analytics | Improving site navigation and content | Page URLs and titles, visit and usage times, browser and device information, approximate location, and pseudonymous identifiers based on Google Analytics cookies. IP addresses are sent to Google during connection but are not logged or stored in Google Analytics | User and event data: up to 14 months according to Google Analytics settings. _ga cookies: up to two years from last use |
| Public service discovery | Reviewing public indie services for inclusion and preventing duplicates | Service names, URLs and descriptions from public webpages, and maker names or nicknames made public by the maker | For the period needed for review and listing. Maker names and nicknames: up to one year after collection |
We do not collect resident registration numbers, sensitive data or payment information. Any separate retention obligation imposed by law will follow that law and its retention period.
2. Collection and consent
Information is collected through submission forms, enquiry emails and public webpages. Personal data required for direct submissions is processed after separate mandatory consent. You may refuse consent, but submissions cannot be accepted without the data needed to verify and contact the maker.
3. Disclosure to third parties
The operator does not sell or disclose personal data to third parties, except with prior consent or where specifically provided by law.
4. Processing providers
| Provider | Processing tasks |
|---|---|
| Cloudflare, Inc. | TLS, CDN and security, Cloudflare Tunnel, and enquiry email routing |
| Google LLC | Operating and storing the enquiry email inbox (Gmail) |
| Google LLC | Google Analytics visit analytics |
5. International transfers
The following information is disclosed under Article 28-8(1)(3) of the Republic of Korea's Personal Information Protection Act for processing and storage needed to provide site access, accept submissions and receive enquiries requested by users.
| Recipient and contact | Country and processing region | Data and purpose | Timing, method and retention |
|---|---|---|---|
| Cloudflare, Inc. [email protected] | Provider location: United States Cloudflare's official notice: data is primarily stored in the United States and European Economic Area and may be accessed or processed in other countries during global operations | IP addresses, traffic routes and system information, submitted form data, enquiry email sender and recipient information, message content and attachments / site connections via CDN, security and Tunnel, and email delivery | Transferred over the network on site access, submission or email receipt / until the earlier of contract termination or when no longer needed to provide the service |
| Google LLC Google privacy policy | Provider location: United States Google's official notice: data may be processed on servers worldwide | Sender email, email sender and recipient information, content and attachments / receiving, storing and responding to enquiries | Transferred over the network when Cloudflare Email Routing forwards to Gmail / deleted by the operator after up to one year in the inbox. Deleted messages are permanently removed from Gmail Trash after up to 30 days |
| Google LLC (Google Analytics) Google privacy policy | Provider location: United States Global processing locations under Google's official notice | Page URLs and titles, visit and usage times, browser and device information, approximate location, and cookie-based pseudonymous identifiers / site usage analytics | Transferred over the network during site use / user and event data up to 14 months; cookies up to two years |
Processing locations and retention are based on Cloudflare privacy policy, Cloudflare DPA, Google privacy policy and Gmail deletion guide.
If you do not want international transfers, you may avoid the submission form and email enquiries; those submissions and enquiries will then not be accepted. You may request access, correction or deletion of submission data, public listings and received emails directly managed by the operator using the contact below. The operator cannot guarantee individual deletion times for logs or backups processed in Cloudflare or Google systems; their policies and contracts apply.
6. Deletion procedures
Data is deleted from the database or email inbox when its retention period expires or processing purpose ends. Listing removal requests are handled separately from submitter contact data.
7. Your rights
You may request access, correction, deletion, suspension of processing or withdrawal of consent for your submission data, public listings and enquiry emails directly held by the operator. You or an authorized representative may contact [email protected]to make a request. After verifying your identity, the operator will process the data and inform you of the outcome. Provider logs and backups outside the operator's direct control follow provider policies and contracts. If another person's rights or legal obligations prevent all or part of a request from being fulfilled, the reason will be provided.
8. Security measures
- Administrator authentication and access restrictions
- HTTPS protection during transmission
- HMAC digests stored instead of raw IP addresses in the operational database
- No direct external access to the database
- Secrets stored separately in environment variables
9. Cookies and automated collection
Google Analytics is used to analyze visits and site usage. To distinguish visitors and sessions, we may use _ga, _ga_* cookies. Ad personalization and Google signals are disabled. You can block or delete cookies in your browser settings.
Private administrator pages use secure cookies valid for 12 hours to maintain login sessions. Weekly pick impressions, listing opens and website visits are stored only as per-service, per-day totals, without IP addresses, cookies, user identifiers or individual navigation paths. These totals are retained for up to two years.
10. Privacy requests
- Scope
- Submission data, public listings and received emails
- [email protected]
For privacy infringement advice or dispute mediation outside the operator's control, contact Korea's Privacy Infringement Report Center (118 in Korea) or the Personal Information Dispute Mediation Committee (1833-6972).
11. Policy changes
Changes to processing and their effective date will be reflected on this page.
Published and effective: September 22, 2026