Privacy Policy

1. Data we collect

Required at sign-up: name, ID, password (stored hashed), date of birth, residency, and a Korean mobile number or an email address. Optional: gender, region, email, DUPR ID. At tournament entry (optional): DUPR account email, romanized name, depositor name. Automatically: access logs and browser information for session management.

2. Purpose

Member management, tournament registration and operations, minimal identity disambiguation in partner search (name plus last 4 digits of mobile or birth year), and — only with separate consent — submission of match results to DUPR.

3. Retention

Data is deleted without delay upon account deletion, except where Korean law requires retention (e-commerce records up to 5 years, access logs 3 months).

4. Cross-border transfer

For members who separately consent, the following is transferred to DUPR (USA) to calculate ratings: name (Korean and romanized), DUPR ID, DUPR account email, birth year, gender, and match records — in bulk after each tournament. Declining does not affect participation; consent can be withdrawn at any time.

5. Processors

Vercel Inc. (USA) — hosting; Neon Inc. (USA) — database; Resend (USA) — email delivery.

6. Your rights

You may request access, correction, deletion, or suspension of processing at any time via your profile or the contact below.

7. Security

Passwords are one-way hashed; transport is encrypted (HTTPS); access is limited to the minimum necessary.

8. Privacy officer

Dawon An · 02-6332-2017 · master@whitz.co.kr

Effective date

This policy applies from September 15, 2026.