Privacy policy

Effective date: 2026-11-12

1. Purpose

This website (bugmori.com) introduces games by BUGMORI. There is no sign-up, login or contact form, and visitors are never asked to enter personal information.

Personal information is processed for visit statistics (to improve the site and see how game pages perform), admin login attempt limits (security), and replying to email inquiries.

2. What we process

Visit statistics: a randomly generated visitor identifier (cookie bm_v), visit time, the type, language and game of the page viewed, store link clicks (platform), the domain and UTM campaign values of the referring site, and device type (mobile, tablet, desktop, other). Stored in the site database.
Admin login attempts: the IP address and time of each attempt. Admin pages only, used solely to block repeated attempts.
Email inquiries: only when a visitor sends an email — the sender’s email address and name, subject, body, attachments, and the IP address of the sending mail server.
Server access logs: not kept. Access logging is turned off on the web server and the app server; only error logs are kept on the server when an error occurs, and once they exceed 30MB the oldest entries are deleted first.

IP addresses are not used or stored for visit statistics. Browser information (User-Agent) is used only to exclude bots and classify the device type; the original string is not stored. For the referring site, only the domain is stored and the rest of the address is discarded.

Visits from automated clients such as search robots, from the admin’s browser, and from browsers with GPC or Do Not Track turned on are not recorded in visit statistics.

3. Retention

Visit statistics: each visit record (session) is kept for 395 days (about 13 months) from the last activity of that visit.
Admin login attempts: deleted for that IP on successful login; entries older than 15 minutes are deleted on the next login attempt.
Email inquiries: kept for 1 year after the inquiry is resolved, then deleted.
Server error logs: kept up to 30MB; beyond that the oldest entries are deleted first.

5. Outsourcing

We outsource the processing of personal information as follows.

Outsourcing of personal information processing
Processor	Outsourced work
Cafe24 Corp. (카페24 주식회사)	Server hosting (virtual server), Republic of Korea

6. Transfers abroad

When we receive and keep email inquiries, personal information is transferred abroad as follows.

Transfers of personal information abroad
Recipient	ImprovMX Incorporation	Google LLC
Contact	https://improvmx.com/privacy-policy/ (opens in new tab)	https://policies.google.com/privacy (opens in new tab)
Destination country	United States (Delaware corporation); mail processing servers in France and the United States	United States
Items transferred	The sender’s email address and name, subject, body, attachments, and the IP address of the sending mail server
When and how	Sent over the network as soon as an inquiry email is received	Sent over the network as soon as ImprovMX forwards it to the operator’s Gmail
Purpose	Receiving and forwarding inquiry emails	Keeping inquiry emails (operator’s mailbox)
Retention	Forwarding logs for 7 days; the email itself is deleted after forwarding	1 year after the inquiry is resolved

How to refuse and its effect: if you do not send an email, nothing is transferred, and your use of the site is not affected. There is no way to contact us other than email.

7. Cookies

The two cookies for keeping the admin login session and preventing request forgery are used only on the admin path (/admin). In addition, the site uses the two cookies below.

bm_v: a random value that tells visitors apart. It is set on public page visits that are recorded in visit statistics and is kept for 395 days. It contains no other information.
bm_x: a marker that excludes the admin’s browser from visit statistics. It is set only when the admin opens the admin pages, contains no login information, applies to the whole site and is kept for 395 days.

How to refuse: you can block or delete cookies in your browser settings; you will then be recorded as a new visitor not linked to earlier visits. If you turn on GPC (Global Privacy Control) or Do Not Track in your browser, visits are not measured and no cookie is set. Refusing has no effect on your use of the site.

8. Deletion

Admin login attempt records are deleted from the site database: for that IP on successful login, and entries older than 15 minutes on the next login attempt.

Visit records past the retention period (395 days) are checked once a day and deleted from the site database. The check runs when the site handles a request.

Email inquiries are deleted from the mailbox once their retention period has passed.

Server error logs are deleted automatically, oldest first, once they exceed 30MB.

9. Your rights

You may ask to access, correct, delete or stop the processing of your personal information. Please contact us at privacy@bugmori.com.

10. Security measures

Admin pages are protected by an additional authentication layer in front of the server, plus password authentication and login attempt limits. Admin login cookies are used only on admin paths.

Communication with the site is encrypted with HTTPS.

11. Privacy officer

Title: Representative (대표)
Contact: privacy@bugmori.com

12. Remedies for infringement

If you need to report or get advice about an infringement of personal information, you can contact the organizations below (Korea).

Personal Information Dispute Mediation Committee — 1833-6972 — www.kopico.go.kr
Personal Information Infringement Report Center — 118 — privacy.kisa.or.kr
Supreme Prosecutors’ Office — 1301 — www.spo.go.kr
Korean National Police Agency — 182 — ecrm.police.go.kr

13. Children under 14

This site does not separately collect personal information from children under 14.

14. Changes

Any change to this policy will be posted on this page with its effective date.

This policy is effective from 2026-11-12.