Effective date: June 19, 2026

This page is the English version of the GeekNews privacy policy, prepared for reviewing the GeekNews bot for Slack. The Korean version is available at /privacy.

GeekNews tries to process only the information needed to operate the service. This policy explains what information GeekNews processes, why it is processed, how long it is kept, which third-party services may be used, and how to contact us about privacy requests.

1. Information We Process

• Account and login information: user ID, password hash, sign-up date and time, and sign-up IP address.
• Profile and notification information: email address, email verification status, and profile text entered by the user.
• Community activity: posts, comments, votes, favorites, flags, activity times, and activity IP addresses.
• Weekly subscription information: email address, subscription and verification records, unsubscribe records, and email open status.
• Automatically collected information: session information, remember-me cookies, IP address, usage records, browser cookies or similar technologies used by third-party services, advertising identifiers, and security verification tokens.
• Slack app installation information: Slack workspace ID and name, installer Slack user ID, Enterprise Grid ID when provided by Slack, selected channel name and ID, OAuth access token and granted scopes, incoming webhook URL, and webhook configuration URL.

GeekNews does not collect Korean resident registration numbers or similar government identifiers. Text that users enter in posts, comments, or profiles may be publicly visible.

2. Purposes of Processing

• Providing account functions, including user identification, login, account protection, password reset, and email verification.
• Providing community functions, including posting, commenting, voting, saving, flagging, and notifications.
• Sending the Weekly newsletter, verifying subscriptions, processing unsubscribes, and checking email delivery statistics.
• Preventing spam, abuse, abnormal sign-ups, duplicate voting, and violations of operating policies.
• Improving service quality and checking traffic statistics.
• When advertising is enabled, showing ads, measuring ad performance, preventing invalid ad traffic, and supporting operating costs.
• For the GeekNews bot for Slack, installing and maintaining the Slack integration, sending selected GeekNews updates to the selected Slack channel, diagnosing delivery errors, and responding to support requests.

3. Retention Period

• Member information and activity records may be kept while the account remains active and, where necessary, for anti-abuse, security, operational, or dispute-response purposes.
• When an account deletion request is processed, the account is changed to a deleted state that can no longer log in or use normal account functions. Email verification information, password reset information, and remember-me tokens are deleted or invalidated.
• User IDs, sign-up and activity IP addresses, public post and comment records, vote and flag records, and operating action records may be retained or converted to deleted-account indicators where necessary for spam prevention, abuse response, security incidents, policy enforcement, dispute response, ID reuse prevention, and service integrity.
• Email verification and password reset information is kept until the relevant purpose is completed.
• Remember-me tokens may be kept for up to one month after the user selects the remember-me option, or until logout or invalidation.
• Weekly subscription email addresses and related records are kept until unsubscribe or termination of the subscription.
• Slack installation records are kept while the Slack integration remains installed or as needed to prevent repeated failed deliveries, diagnose abuse, or handle support and operational issues. If the integration is removed or becomes invalid, related records may be deleted or archived with only the information necessary for operational recovery and abuse prevention.
• Information may be kept for longer where required by applicable law.

4. Sharing Personal Information

GeekNews does not sell users' personal information and does not provide personal information to third parties except where the user has consented, where required by law, or where necessary to use service providers described in this policy.

5. Third-Party Services and International Processing

GeekNews may use the following third-party services for email delivery, analytics, spam prevention, advertising, Slack integration, and service operation. Some information may be processed on servers outside Korea.

Provider	Purpose	Information Processed	Processing Location
Amazon Web Services, Inc. Amazon SES	Sending account verification, password reset, and Weekly emails	Email address, template data needed for sending email, and sending logs	United States us-west-2
Google LLC Google Analytics	Traffic analytics	IP address, cookies, browser information, and usage records	United States and other regions
Google LLC Google AdSense / Google Ads	Ad display, ad measurement, and invalid ad traffic prevention	IP address, cookies, advertising identifiers, browser information, accessed URL, and ad interaction information	United States and other regions
Cloudflare, Inc. Turnstile	Preventing abnormal or automated requests for sign-up, Weekly subscription, and similar functions	IP address, browser information, interaction information, and security verification tokens	United States and other regions
Slack Technologies, LLC / Salesforce, Inc.	Installing and operating the GeekNews bot for Slack, and sending GeekNews updates to the selected Slack channel	Workspace ID and name, installer Slack user ID, Enterprise Grid ID when provided, channel name and ID, OAuth access token, granted scopes, incoming webhook URL, webhook configuration URL, and GeekNews message payloads sent to Slack	United States and other regions

Each external service may process and retain information according to its own policies.

When Google advertising is enabled, Google or third parties may set or read cookies in the user's browser and may use web beacons and IP addresses to collect information for ad delivery. More information is available in Google's partner sites policy.

6. Deletion

Personal information is deleted without undue delay when the purpose of processing has been achieved, unless there is a lawful or operational reason to retain it.

Electronic files are deleted in a way that makes recovery difficult. Where retention is required by law or legitimate operational reasons, the information may be stored separately.

When an account is deleted, GeekNews invalidates or deletes account access information such as login tokens, password reset information, and email verification information.

Public posts and comments may remain with the author changed to a deleted-account indicator in order to preserve community records and service context. If a public post or comment contains personal information or needs to be deleted for a specific reason, the user may request separate action.

7. Individual Rights and Requests

Users may request access, correction, deletion, or suspension of processing of their personal information within the scope provided by applicable law.

Email information can be changed or deleted through service functions where available. If a function is not available, contact news@hada.io.

To request account deletion, log in to the account to be deleted, verify the email registered to the account, and contact news@hada.io using the verified email or another identity verification method provided by the operator. GeekNews may request the minimum information needed to confirm that the requester is the account holder or a lawful representative.

For Slack integration data, a workspace administrator or installer may request deletion or support by contacting news@hada.io. Removing the app from the Slack workspace also stops future delivery to that workspace or channel.

Requests that cannot be verified, including requests from unverified email addresses or third parties, may be delayed or denied to protect accounts and workspace integrations.

8. Cookies

• Session cookies are used to maintain login state.
• If a user selects the remember-me option, a remember_me cookie may be used for up to one month.
• External services such as Google Analytics, Google AdSense/Ads, and Turnstile may use their own cookies or similar technologies for analytics, advertising, measurement, and security verification.

Users may refuse cookies in browser settings, but some functions such as login state or security verification may not work properly. Advertising personalization may vary depending on browser settings, Google account settings, and consent choices where a consent management screen is provided.

9. Security Measures

• Passwords are stored as hashes and not in plaintext.
• Email verification, password reset, and remember-me tokens may be stored as hashes or managed with secure cookie attributes where appropriate.
• Access to personal information and Slack installation secrets is limited to the scope needed for operation.
• GeekNews operates monitoring and restriction measures to respond to spam and abuse.

10. Privacy Contact

Privacy-related requests for GeekNews are handled through the following contact point.

• Privacy contact: Hada Studio privacy team
• Operator: Hada Studio Inc.
• Website: https://hada.io/
• Business registration number: 439-86-03704
• Email: news@hada.io

11. Changes to This Policy

This privacy policy may be updated due to changes in applicable law, service features, or operating policies.

Important changes will be announced through reasonable methods such as site notices or document updates.