Privacy Policy

This Privacy Policy applies to EPSTOPIK HUB websites, progressive web app features, accounts, learning content, examinations, premium access, and related services that link to this Policy. In this Policy, “we,” “us,” and “our” refer to EPSTOPIK HUB, the operator of the Service.

Depending on how you use the Service, we may process:

• Account information: name, username, email address, profile image, account role, membership status, and authentication-provider information.
• Authentication and security information: session data, a locally generated device identifier, login events, password-reset requests, and security logs. Passwords are handled by the authentication system and should never be sent to us through support messages.
• Learning and examination information: lesson progress, answers, scores, attempt dates, time spent, unfinished attempts, saved results, activity history, pronunciation or writing interactions, and other study settings.
• Premium and transaction information: selected package, transaction identifier, amount, currency, payment status, paid date, refund or chargeback status, activation status, and access-expiration date.
• Technical and usage information: IP address, browser and device type, operating system, language, referring page, pages viewed, approximate location, timestamps, interactions, diagnostic logs, and advertising or analytics identifiers.
• Communications: information you provide when requesting support, reporting a problem, or making a privacy request.

We receive information:

• directly from you when you register, study, take a test, purchase, or contact us;
• automatically from your browser, device, cookies, local storage, and server logs;
• from services you choose to use, such as Google Sign-In, PayPal, and Buy Me a Coffee; and
• from payment, hosting, analytics, advertising, media, and security providers where needed to operate the Service.

• create and secure accounts and authenticate users;
• deliver lessons, audio, tests, scoring, progress, and saved results;
• activate, renew, verify, refund, or revoke premium access;
• remember language, theme, PWA, device, and learning preferences;
• measure performance, diagnose errors, prevent abuse, and improve the Service;
• display and measure advertising for eligible free users;
• respond to support, legal, security, and privacy requests;
• comply with law and enforce our Terms of Use.

Where data-protection law requires a legal basis, we rely as appropriate on performance of a contract, your consent, compliance with legal obligations, and our legitimate interests in providing, securing, measuring, and improving the Service. You may withdraw consent at any time, although withdrawal does not affect earlier lawful processing.

We use browser storage and cookies to maintain sessions, protect accounts, remember theme and language, identify a device for login security, preserve unfinished work, store recent learning activity, and remember installation-prompt choices. Clearing browser data may remove local progress, preferences, or unfinished attempts that have not been synchronized with an account.

If Google Analytics is enabled, it may use first-party cookies such as _gato distinguish browsers and sessions and may receive page, device, browser, approximate location, and interaction information. Advertising partners may also use cookies or similar identifiers subject to their own policies and your available consent choices.

Google Sign-In may provide profile information that you authorize, such as your name, email address, and profile image. Google Analytics helps us understand traffic and use of the Service. Google explains how it uses information from partner sites in itspartner-sites notice. You may use browser controls or Google’s available opt-out tools to limit analytics collection.

Checkout is handled by PayPal, Buy Me a Coffee, Pay2S, and their payment processors. They collect the payment and contact information required for a transaction under their own policies. We may receive enough information to match a purchase to your HUB account, such as email, product, transaction identifier, amount, currency, status, and relevant dates. We do not receive or store your complete payment-card number.

Review the applicable provider policy, including thePayPal Privacy Statementor theBuy Me a Coffee Privacy Policybefore purchasing.

Free areas may load advertisements supplied by external advertising networks. Those providers may process IP addresses, device and browser information, page context, cookies, or advertising identifiers to deliver, secure, limit, and measure ads. The Service may also embed or link to YouTube and other external media. These providers act under their own terms and privacy policies.

We do not provide your account password or complete payment-card information to advertisers. Browser privacy controls, cookie settings, content blockers, or consent tools may affect whether advertising and embedded content work correctly.

We may disclose information:

• to vendors that host, secure, analyze, advertise, process, or support the Service;
• when you direct us to interact with an external service;
• to comply with law, court orders, or valid government requests;
• to investigate fraud, abuse, security incidents, or violations of our Terms;
• in connection with a merger, restructuring, financing, sale, or transfer of the Service, subject to appropriate safeguards.

We and our providers may process information in countries other than your own. Privacy laws and government-access rules may differ. Where required, we use available legal and contractual safeguards for international transfers.

We retain information only as long as reasonably necessary for the purposes described above, including maintaining accounts and learning records, fulfilling premium access, resolving disputes, preventing fraud, and meeting legal or accounting requirements. Retention periods vary by data type and provider. Browser-local data remains until it expires, is replaced, or you clear it. Some security logs and transaction records may be retained after account closure where law or legitimate security needs require it.

We use reasonable technical and organizational measures designed to protect information. No internet transmission, browser storage, or server is completely secure, so we cannot guarantee absolute security. Use a unique password, protect your device, and sign out from shared devices.

Subject to applicable law, you may have the right to:

• request access to or a copy of your personal information;
• correct inaccurate or incomplete information;
• request deletion or restriction of certain processing;
• object to certain processing or withdraw consent;
• request portable information where legally applicable;
• complain to an appropriate data-protection authority.

You can also clear local browser storage, adjust cookie controls, disable optional analytics or advertising through available consent tools, or stop using the Service. We may need to verify your identity before completing a request.

The Service is intended for EPS-TOPIK learners and is not directed to children under 16. If local law requires a higher minimum age or parental consent, that requirement applies. If you believe a child provided personal information improperly, contact us so that we can review and take appropriate action.

We may update this Policy to reflect changes in law, providers, data practices, or Service features. We will publish the revised Policy here and update its effective date. Material changes may also be communicated through the Service where appropriate.

Submit privacy questions or rights requests through the official support channel published on the Site. Describe your request and the account email involved. Do not send your password, authentication token, or complete payment-card number.