Preregistration terms and privacy notice effective: October 31, 2026
1. Controller and purposes
The personal-information controller is Earlybug (얼리버그), represented by Hong Jin-wook (홍진욱), at 15-6, Dorim-ro 6-gil, Guro-gu, Seoul, Republic of Korea. We collect and use information to send one Android launch email and receive, deduplicate and manage requests, inquiries, changes, withdrawal and deletion.
For privacy inquiries or to exercise your rights, contact [email protected].
2. Information collected and your choice
Required information: email address, page language, confirmation of age 14 or older, acceptance of the terms and personal-information collection and use, the one-time launch-email request, document version, and request/consent timestamp. We do not collect your name, phone number, date of birth or app ledger data.
You may refuse personal-information collection and use or the launch-email request. In that case you cannot complete this email-based notification signup, but you can still browse the website.
To prevent repeated or abusive requests, we separately keep a rate-limit key made by hashing the connection IP with a server secret, a request count, and an expiry time. The preregistration database does not store raw IP addresses or device information. The key expires 20 minutes after the start of the last accepted request window and is deleted within 30 minutes of that start when the cleanup job runs normally.
3. Retention and deletion
We keep information for at most 1 year after signup or 30 days after the launch notification is sent, whichever comes first. The post-delivery period is for checking delivery and preventing duplicate sends; we delete the information sooner when those checks are complete. An unauthenticated repeat submission does not change an existing request.
A cleanup job runs every 10 minutes to delete information past its retention period. Information that is no longer needed because of a cancellation, consent withdrawal, deletion request, or closure of preregistration is destroyed without delay. Electronic data is deleted in a way that makes recovery or reconstruction difficult.
Copies remaining in backups made before deletion are not used for routine registration management or email delivery. They are removed through the backup cycle, which keeps a rolling 7 days of backups. After a backup is restored, email delivery to the restored list is paused and recipients' willingness to receive email is confirmed again.
4. Processing providers and overseas transfers
We entrust operation of the preregistration database and server functions to Supabase Pte. Ltd. ([email protected]). At submission, your email address, page language, required confirmations and consents, launch-email consent, document version, and registration and consent timestamps are transferred through encrypted communications to, and stored on, the application server and database in Singapore (ap-southeast-1). The purposes are receiving, storing, and managing registrations. The retention period is as described in Section 3 above.
Overseas outsourced processing and storage necessary to perform the preregistration agreement are based on this notice under Article 28-8(1)(3) of the Republic of Korea's Personal Information Protection Act (PIPA). If you do not want this transfer, do not submit, or request withdrawal and deletion at [email protected]. In that case, we cannot maintain your preregistration.
Supabase, Inc. (United States) may access only the minimum data necessary, and only when needed for purposes such as security incident response or technical support you request. We do not record registration emails in function or analytics logs. Operational metadata such as connections, usage, and errors may be processed separately in systems outside the selected region and in EU-based log centers for the provider's operational and security purposes. Provider processing scope, subprocessors, and retention details: https://supabase.com/legal/privacy-resources/data-residency-and-transfers-faq and https://supabase.com/legal/customer-resources/subprocessor-list
Cloudflare, Inc. handles website hosting, content delivery, security, and aggregated traffic and performance measurement. See the site's privacy policy for website visit information and overseas processing. This page sends preregistration emails directly to the Supabase server.
5. Safeguards and your rights
Preregistration information is kept separately from app accounts and ledger data. Database permissions prevent the public website from retrieving the email list. We protect the data with encryption in transit and request validation.
You may request access, correction, deletion, suspension of processing, or withdrawal of consent at [email protected]. We verify your identity or your status as a lawful representative and handle the request under the applicable laws of the Republic of Korea. This notice applies to preregistration processing. Other website processing is explained in the site's privacy policy.
