Privacy and analytics notice

Google Analytics

We use Google Analytics 4 to understand site usage and improve search visibility and content. The analytics tag is not loaded before consent.

Information used

After consent, we use the page path and title, the previous path within this site, and visit and session statistics generated by Google Analytics.

Information not used

We do not send URL queries or fragments, external referrer addresses, form values, or operator identifiers to analytics. Advertising, remarketing, and User-ID features are not used.

Retention

Google Analytics event-level and user-level data retention is set to 14 months.

ALT+G applications

When you submit an ALT+G application, we process personal and work information within the scope described below.

Effective August 11, 2026 · Notice version selection-2026-v1

Purposes

We use the information to judge works, operate the exhibition and event, communicate with participants, manage the ALT+G participant community, prevent authentication-email abuse, protect the application system, and respond to service failures.

Information processed

We process the representative email, team or company name, contact person's name and phone number, work information such as title, genre, and business model, and submitted materials such as images, video, and game builds. When an authentication link is requested, we do not store the raw access IP address in the application database. We process a pseudonymous identifier generated from the access IP using HMAC and the request timestamp. Separate Cloud Run security request logs record the access IP address, browser information (User-Agent), and the request path without the authentication token.

Before the application form opens

At the applicant's request, we first process the representative email, pseudonymous access-IP identifier and request timestamp, and Cloud Run security request logs, and send the authentication email through Google Workspace (Gmail). These are steps requested to begin the application process before entering into the application agreement, under Article 15(1)(4) of Korea's Personal Information Protection Act. They do not rely on the later consent for information entered in the application form. The international transfer of Gmail messages is based on Article 28-8 as described below. If you refuse this processing, we cannot issue an application link.

Data controller

Indie Games Group Korea (IGG-K) staff process application information and submitted materials only as needed for the purposes above.

Service providers

We entrust Google Cloud Korea LLC with web hosting, databases, file storage and backups, and Cloud Run security request logs for the application system. The primary data storage region is Seoul. We use Google Workspace (Gmail), provided by Google Asia Pacific Pte. Ltd., to send and store authentication and operational email. Google and its disclosed subprocessors may process data in other countries while providing support and operating the services. Google Cloud Data Processing Addendum Google contracting entities and addresses Google data protection contact Google Cloud subprocessor list Google Workspace subprocessor list

International transfer for Google Workspace email

Google Workspace email processing is an international transfer necessary to enter into and perform the application agreement under Article 28-8(1)(3)(a) of Korea's Personal Information Protection Act. When email is sent, the representative email address and the subject and body of authentication and operational messages, including the authentication link, are transferred over an encrypted network to Google Asia Pacific Pte. Ltd. and Google's subprocessors in Singapore, the United States, and countries where those subprocessors operate. The transfer is used for Gmail delivery and storage, security, and spam prevention. The recipient's address and data protection contact route are available in the official notices linked above. IGG-K deletes operational email within six months after the event ends, and Google deletes the data under its contract. You may refuse the transfer, but you will not be able to complete an application because email authentication is required.

Retention and deletion

We use the pseudonymous access-IP identifier and request timestamp only to assess abuse within the most recent 15 minutes. Older records are deleted in batches on subsequent authentication-link requests. Cloud Run security request logs are retained for 30 days and then deleted. Active application records, submitted materials, and authentication and operational email are deleted within six months after the event ends. Google deletes data removed by IGG-K under its contract. Deleted copies in point-in-time recovery (PITR) data or Cloud Storage soft delete expire within seven additional days. Cloud SQL automatic backup copies can remain until replaced by eight subsequent successful backups, while separately created backups remain until an operator deletes them.

Access, correction, and deletion requests

Applicants may ask the Privacy Officer to provide access to, correct, or delete their personal information.

ALT+G online public review

To provide online public review and prevent duplicate or abusive voting, we process the email address, a pseudonymous email identifier, an HMAC-based pseudonymous access-IP identifier, work exposure and dwell time, ratings and revision history, and security-review results. We do not store the raw access IP address in the voting database. Participant, exposure, and rating information and authentication email are retained for 90 days from each processing event. Authentication-request abuse records are used for the most recent 15-minute assessment and then deleted in batches; Cloud Run retains the access IP, User-Agent, and token-free request path for 30 days. As an international transfer needed to provide the online review participation process, authentication email is processed through Google Workspace (Gmail) under Article 28-8(1)(3)(a) of Korea's Personal Information Protection Act. When sent, the email address and message subject and body are transferred over an encrypted network to Google Asia Pacific Pte. Ltd. and Google's subprocessors in Singapore, the United States, and countries where those subprocessors operate. The purposes are Gmail delivery and storage, security, and spam prevention. The recipient contact route and Google's contractual deletion terms are available in the official notices above. If you refuse this processing, we cannot issue an authentication link or provide access to the online review.

ALT+G sponsorship inquiries

For sponsorship consultation, we process the company or organisation, contact name, business email, optional phone number, areas of interest and message. Only authorised IGG-K operators can access an inquiry. The inquiry database is retained until the earlier of one year after closure or two years after submission. Confirmation and follow-up email follow the organisation's separate mail retention policy. Google Cloud Korea LLC supports web and database operations in the Seoul region, and Google Asia Pacific Pte. Ltd. supports Gmail delivery and storage, which may involve processing outside Korea. You may refuse consent, but we cannot accept the inquiry. The version is sponsorship-2026-v1, and its effective date appears on the sponsorship inquiry page.

Privacy Officer

For questions about how we handle personal information, or to request access, correction, or deletion, contact the Privacy Officer.

Hyeonu Kim (Representative) · hyeonu@iggk.net

Contact

Questions about privacy and visitor analytics can be raised through the official Discord.