1. General

Artemo Inc. (주식회사 아르테모, the "Company") complies with the Personal Information Protection Act of Korea and related laws, and establishes and publishes this Privacy Policy to protect users' personal information.

"SHOBO" (the "Service") is an investing simulation game set in Korean economic history from 2008 to 2026. The game can be played without signing in. Exchanging guilders, the auction and the museum require signing in with a Google account.

2. Information we collect

Direct Information the Company collects directly

The Service has no payment features, and signing in is optional. From users who don't sign in, the Company does not directly collect personal information such as names, email addresses or phone numbers, except for the launch alert sign-ups described below.

Account Collected only if you sign in with Google

• Provided by Google: email address, name, profile picture URL, Google account ID. When you sign in with Google, Google passes this information to the Company.
• Created by the Service: member ID (6 letters and digits), nickname, a random per-device identifier, first record date, sign-in times
• Activity records: guilder ledger (exchanges, bids, refunds, weekly resets), exchange records (date, difficulty, grade, final amount), bids (amount, time), collection, records of operator actions (settlement holds, guilder and item take-backs, account restrictions, and the reasons)
• Run records: records that let an exchanged run be replayed from the start (seed, difficulty, currency, start date, list of actions) and the automatic check results for that run
• Purpose: identifying you, the once-a-day exchange and run verification, running and settling auctions, showing your museum, preventing and investigating abuse
• Retention: destroyed without delay when you delete your account. Run records and automatic check results are destroyed 120 days after the exchange
• Refusal: simply don't sign in. You then can't use guilder exchange, the auction or the museum, but the game is unaffected.

Launch alert Collected only if you agree and sign up

Only if you agree to receive it and sign up through "출시 알림 받기" (launch alert) on the Korean-language title screen (PC or mobile), the Company collects the following.

• Items: email address, time of consent, a random per-device identifier (to limit repeated sign-ups)
• Purpose: sending the SHOBO 1996 launch alert (promotional information)
• Retention: destroyed without delay after the alert is sent
• Refusal: you may decline; you then won't get the alert, and the game is unaffected.
• Withdrawal: anytime via the unsubscribe link in the email or the email address below; the information is destroyed immediately.

Challenge code Data you choose to send to the server

When you create a challenge code, the data below is sent to and stored on the server (Supabase). This works only through your explicit action.

• Game result: grade, final net worth, return, difficulty, number of pauses
• Net worth history: the net worth curve during the game (about 50 sample points)
• Challenge code: a random 8-character alphanumeric code (not personally identifying)

Automatic Generated and collected automatically while using the Service

• Access logs: IP address, access time, browser type, operating system, screen resolution
• Cookies and browser storage: analytics cookies, a random per-device identifier, nickname and settings, sign-in session
• Usage statistics: page views, time on site, gameplay statistics (anonymous aggregates)

Public Information other people can see

• Museum page (shobo.kr/m/your member ID): nickname, member ID, collection (name, sale, number, winning price), first record date. Anyone with the link can see it.
• Auction results: winners' nicknames and member IDs
• Your email, name and profile picture are never shown. Other people's bid amounts and the number of bids are not shown either.

3. Processors and overseas transfers

The Company entrusts the processing below to the following companies to run the Service.

Overseas transfers

The following information is transferred abroad to provide the website and visitor statistics.

• Recipients (contact): Vercel Inc. (privacy@vercel.com), Google LLC (policies.google.com/privacy)
• Country: United States
• When and how: sent over the network when you access the Service
• Items: access logs (IP address, access time, browser and device information), visitor statistics
• Purpose: providing the website, visitor statistics
• Retention: according to each company's policy
• How to refuse: you can block visitor statistics with the Google Analytics Opt-out Browser Add-on or your browser's tracking protection. Access logs needed for hosting are essential to provide the Service; if you refuse them, you can't use the Service.

• Supabase Privacy Policy: supabase.com/privacy
• Vercel Privacy Notice: vercel.com/legal/privacy-notice
• Google Privacy Policy: policies.google.com/privacy

4. Cookies and browser storage

Cookies are small text files a website sends to your browser, used for things like visitor statistics. The Service keeps a random per-device identifier, your nickname and settings, and your sign-in session in browser storage.

How to refuse:

• You can allow, block or delete cookies and site data in your browser settings.
• Blocking cookies doesn't affect the game. Clearing site data signs you out and creates a new per-device identifier.

5. Retention period

• Account information and activity records: kept until you delete your account, then destroyed without delay.
• Run records and automatic check results: kept for 120 days from the exchange, then destroyed; destroyed without delay sooner if you delete your account.
• Launch alert sign-ups: destroyed without delay after the SHOBO 1996 launch alert is sent, or immediately if you withdraw before then.
• Information collected by third-party services (Google, Vercel) is kept according to their policies.

6. Your rights

You can exercise the following rights at any time.

• Delete your account: [Delete account] in the account window. Your guilders, bids and collection are deleted with it and can't be restored.
• Change your nickname: in the account window
• Reset analytics cookies by deleting browser cookies
• Opt out of statistics with the Google Analytics Opt-out Browser Add-on
• Withdraw consent to launch alerts (unsubscribe link in the email, or the email address below)
• Request access, correction, deletion or suspension of processing of your personal information (email below)

7. Security measures

The Company takes the following measures to protect personal information.

• HTTPS (SSL/TLS) encrypted connections
• Restricted database access: users can read only their own account data, and records change only through fixed server functions.
• Administrative keys are kept only on the server and never sent to browsers.
• Regular security checks and software updates

8. Children's privacy

Children under 14 can't sign in (create an account). If we learn that we have an account or information of a child under 14, we delete it without delay.

9. Privacy officer and contact

• Privacy officer: Seo Jinmo (서진모), CEO of Artemo Inc.
• Email: contact@artemo.biz

Please send questions and requests for access, correction, deletion or suspension of processing to the email above.

10. Changes to this policy

When this policy changes, we announce it in the Service at least 7 days before it takes effect. Changes that matter to your rights, such as using information already collected for a new purpose or providing it to third parties, are announced 30 days in advance.

• Effective: November 3, 2026
• Previous version: effective June 1, 2026