Privacy Policy

Kyusung Interactive Co., Ltd., based in South Korea, operates kyusung.io. This policy explains how we handle information when you visit this company website, complete an app sign-in or contact us. The website introduces our projects and helps return sign-in results to our apps.

Our apps and their websites have separate privacy policies describing their features and data handling. See the PoE Overlay and PoE Overlay II Privacy Policy and the Last Epoch Overlay Privacy Policy.

This website has no payment forms, embedded advertising or browser-based analytics integration. Hosting and network services may process technical request information, including your IP address, browser information, requested page and time of access, to deliver and protect the website.

When you sign in from a supported app, this website temporarily relays the authentication result to that app. The handoff stores an app identifier, expiry time, status, hashed security credentials and a hashed IP address used to limit repeated attempts. It may temporarily hold a single-use authorization code or a provider error. The app exchanges the code directly with Supabase; the website handoff does not store your account access or refresh tokens.

If you email us, we receive your email address and the message content you provide. We use this information to respond to your request and investigate reported issues. Please avoid sending passwords, access tokens or unrelated personal information in your messages.

Following a project or third-party link takes you to another website. Its own privacy policy applies to information handled there.

We use information to operate and protect the website, answer messages and comply with applicable legal obligations. Where a legal basis is required, we rely on our legitimate interests in maintaining the website and responding to requests, providing the service you request, or compliance with legal obligations, as applicable to the processing.

We use Railway for website hosting, Supabase for account authentication and temporary sign-in handoffs, and email providers to handle correspondence. Google also processes authentication when you choose Google sign-in. These providers process information needed to deliver their services. We may also disclose information when required by law or necessary to address security incidents or legal claims.

We operate from South Korea. Our service providers may process information in other countries, including the United States. Railway describes its processing in its Privacy Policy and Data Processing Addendum.

Sign-in handoffs expire after five minutes. Their callback payload is cleared when the app acknowledges completion, failure or cancellation. Scheduled cleanup removes expired handoff records after a further short grace period. Account information is handled under the app privacy policies linked above.

We retain correspondence to handle requests and any related legal obligations or claims. Hosting and email providers' retention settings also apply to records held by those services.

Depending on applicable law, you may have rights to access, correct or delete personal information, object to or restrict processing, or withdraw consent where processing relies on it. You may also complain to your local data-protection authority.

Send requests to [email protected]. We may need information to locate the relevant records and verify your request. We will explain what is needed and any applicable limits.

We will update this page and its date when our practices change, and provide additional notice where required. Questions about this policy or your information can be sent to Kyusung Interactive Co., Ltd. at [email protected].

Business mailing address: 7-113, 8 Gangnam-daero 53-gil, Seocho-gu, Seoul, South Korea.