Privacy policy
A clear account of what we process, why it is needed, and when it is deleted.
Written from the service's actual behavior. We update this document and its change history when features or external services change.
Purpose and core principles
HyunTools (the “Service”) is an independent service hub that provides text, development, design, calculation, file, account-sync, and community features. We process personal data only to the extent needed to provide a feature and design browser-capable work to stay on the user’s device whenever practical.
This policy explains what information may be processed, why it is needed, how long it is retained, and how users can access, delete, or withdraw consent.
Personal data we process
The information below is processed only when the related feature is used.
| Feature group | Information | How it is created |
|---|---|---|
| Age assurance | Whether the user is under 14 or at least 14 | Selected by the user before account, storage, or community features. Date of birth is not collected. |
| Google sign-in and profile | Google account identifier, verified email, session; optional display name, status, accent color, and uploaded avatar | Received at sign-in or saved by the user. Google name and photo are defaults only and are not copied into the database profile. |
| Connected devices and security alerts | Account-specific pseudonymous hash of a random browser-generated device identifier, browser and operating-system label, first and latest connection time, and new-device alert read state | Created to distinguish signed-in devices and notify the account of a new connection. IP address, screen size, language, and time zone are not stored in this feature's server records. |
| Invites and benefits | Account identifiers, random invite code, participation time, and earned benefit | Created when a signed-in user shares or accepts an invite. Invite records do not store email or display name. |
| Communities, forum, collaboration, and HyunSocial | Memberships, user-chosen public profile, posts, comments, reactions, follows, saves, blocks, reports, conversation messages, and visibility settings | Created when a signed-in user participates. Email and Google identifiers are not shown publicly; anonymous features use pseudonymous identifiers for continuity and abuse prevention. |
| HyunCowork and account workspaces | Workspace display name and role; space, task, comment, activity, favorite, recent-use, layout, automation, schedule, document, code, design, focus, and task data | Provided or created when the user saves or synchronizes supported work. Only the workspace name chosen by the user is shown to other members. |
| HyunQuest daily and weekly quests | Quest date, visited tool identifiers, favorite and HyunFlow activity, completion identifier for today’s recommended arcade game, completion and reward state, streak, QP, and badges | Created when the user completes quest actions. Beyond the daily completion marker, individual plays, game scores, input timing, and tool input content are not collected for HyunQuest. |
| Browser-only products | Data for HyunWorktree, HyunReview, HyunNotes, HyunBook, HyunTier, HyunInbox, HyunWorld, HyunArtifacts, local focus sessions, and similar device features | Stored in the current browser and not sent to the HyunTools server unless the user chooses a separate sync or share function. |
| Hyun Library and HyunShare | Selected file, name, size, type, expiration, share permissions, encrypted or encoded share content, comments, attachment metadata, and view count | Provided when a signed-in user stores or shares an item. Password-protected shares retain encrypted content and the cryptographic parameters needed to unlock it, not the password or a password hash. |
| Public game data | Player or clan tag, location or leaderboard choice, and public profile, deck, battle, clan, ranking, or event results | Submitted by the user to Supercell APIs or the RoyaleAPI proxy. Results may be cached briefly and are not linked to the account database. |
| Anonymous views and reactions | Content identifier, count, reaction, date, and purpose-specific pseudonymous hash | Created when content is viewed or reacted to. Raw IP, account identity, and browser fingerprint are not stored in the analytics tables. |
| Analytics, operations, and support | Pages, flow, device/browser, approximate region when analytics is allowed; technical request, error, security logs; support email and message | Analytics is loaded only after consent. Infrastructure logs may be generated automatically. Support data is sent by the user. |
Google email is not stored in the account profile database, but it may be included in a signed security cookie for up to 30 days to maintain the session and check administrator access.
Purposes and retention periods
| Purpose | Retention |
|---|---|
| Age protection and sign-in | Age choice cookie: up to 180 days. Sign-in session: up to 30 days and removed from the current device on sign-out. |
| Connected-device security | Only the 12 most recently connected devices and 20 latest security alerts per account are retained. Older records over those limits are removed on the next device registration and are otherwise managed until an account-data deletion request or the Service ends. |
| Invites, memberships, social relationships, and synchronized work | Until the user removes the item, leaves the space, requests account-data deletion, the owner closes the space, or the Service ends. Abuse records may be removed or excluded. |
| HyunQuest | Unsigned users: up to 40 days in the browser. Signed-in accounts: daily records are managed on a 370-day retention period and expired records are deleted on the next HyunQuest service activity; points and badges are calculated from those records. |
| Hyun Library | Up to seven days from storage, or earlier when the user deletes the file. |
| Managed HyunShare | Accessible until the chosen expiration, no longer than seven days. Expired or revoked share data is blocked and normally deleted within seven additional days. |
| Share rate limits and abuse prevention | Purpose-specific pseudonymous request records expire after the minute window; daily-limit records are deleted within two days. |
| Public game lookups | Tags and public results may remain in server memory cache for up to three minutes. They are not written to the account database. |
| Forum and collaboration safety | Anonymous cookie: up to one year. Accepted conversations and messages: up to 14 days. Posts, reports, blocks, and request states remain until deletion or the operational purpose ends. |
| Anonymous popularity and reactions | Daily duplicate-prevention hashes: up to 31 days. The weekly popularity ranking restarts every Monday at 00:00 Korea Standard Time. Aggregate counts contain no personal identifier and may remain while the Service operates. A reaction record is removed when the user cancels it. |
| Analytics, support, security, and incidents | Analytics follows the consent and Google Analytics settings. Support and technical records remain only as long as needed for the request, investigation, legal duty, or infrastructure policy. |
Data is deleted in a manner intended to make recovery impractical when the retention period ends. Residual copies in backups or distributed storage may be removed in later operational cycles.
Your rights and how to exercise them
You may request access, correction, deletion, suspension of processing, or withdrawal of consent for your personal data.
- Sign out to end the current device session, and use each product’s delete or reset controls for supported items and preferences.
- Leave Communities, cancel reposts, close collaboration conversations, remove reactions, and revoke Google Drive access using the relevant controls.
- Withdraw analytics consent by changing browser-data settings.
- Request invite history, synchronized account data, or complete deletion by emailing hyuntools.owner@gmail.com. We may ask for the minimum information needed to confirm the requester.
Security safeguards
- Secure, HttpOnly, and SameSite attributes for sign-in and anonymous session cookies where applicable.
- Origin checks, input validation, account-level authorization, and storage or request limits.
- Download responses with cache prevention and content-type protections.
- Restricted operational privileges and credentials, with secrets kept out of public source code.
- Access blocking, investigation, and user notice when a material issue is found.
No internet service can remove every risk. HyunTools reviews safeguards appropriate to the Service’s size and the information it processes.
Children’s privacy
HyunTools does not currently operate a parental-consent verification process. Users under 14 therefore cannot use Google sign-in, account sync, Hyun Library, voting, creating or joining Communities, forum posting, reactions or reposts, or anonymous collaboration conversations.
Age assurance stores only the chosen age range, not a birth date or exact age. This is self-declaration, not verified proof of age. While a valid under-14 cookie remains, a direct switch to 14 or older is blocked. For mistaken selections, see age-selection correction. Contact does not automatically lift restrictions. Enforcement does not persist across cookie deletion, expiry, or different browsers.
Correction requests store a request ID, a hash of a random browser proof, status, reviewer ID and timestamps. We do not request identity documents or birth dates. Requests and approvals remain valid for 7 days after creation. Up to 100 expired records are removed when a new request is created; this is not scheduled deletion and does not guarantee immediate removal at expiry. An approved correction still requires the requester to confirm the self-declaration and apply it in the original browser.
A child or legal guardian who believes a child’s data was processed incorrectly can contact us for restriction, deletion, and preventive action.
Privacy contact and changes
- Contact
- HyunTools privacy contact
- Effective date
- September 4, 2026
We announce material changes to processed data, retention, or external providers on this page before they take effect. Changes that significantly affect user rights may also be announced inside the Service.
Change history
- September 4, 2026: Added today’s recommended arcade goal to HyunQuest and clarified the completion identifier that may be synchronized.
- September 1, 2026: Changed service popularity to a weekly ranking that restarts every Monday at 00:00 Korea Standard Time.
- August 19, 2026: Added secret-key pseudonymous hashing standards for abuse prevention without retaining raw IP addresses.
- August 10, 2026: Added repost handling and public Supercell game-data processing.
- August 9, 2026: Added anonymous reactions, view counts, and seven-day popularity rankings.
- August 8, 2026: Added HyunVibes local routines, sessions, and browser-generated ambience.
- August 5, 2026: Added browser media-command, translation, and voice-tool processing.
- August 4, 2026: Added personalization and HyunQuest synchronization.
- August 2, 2026: First published.