Index-RankBETA

Privacy Policy

View current and previous privacy policy versions.

Last Updated: February 12, 2026

1. Introduction

Welcome to Index-Rank ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our website and services (the "Service"), strictly in accordance with global privacy laws including GDPR (Europe), CCPA (California), and PIPA (South Korea).

2. Information We Collect

We collect information in the following ways:

A. Information You Provide to Us

  • Account Information: When you register using a third-party identity provider (Google, Naver, Kakao), we collect your Name, Email Address, Profile Picture, and Provider ID. We do not store your passwords.
  • User Profile: You may voluntarily provide a Nickname and additional profile details.
  • User-Generated Content (UGC): Strategies, investment logic, community posts, comments, and other content you create on the Service.
  • Communications: Information you provide when contacting us for support.

B. Information Collected Automatically

  • Usage Data: We collect data about your interactions, such as pages visited, buttons clicked, and stock search queries (to improve our search ranking algorithms).
  • Device & Log Data: Our servers automatically record standard log data, including your IP address, browser type, operating system, and timestamps. This is used for security monitoring and audit trails (e.g., StockSearchAuditLog, AuditEvent).
  • Cookies: We use Strictly necessary cookies for core operation, plus optional Analytics and Marketing performance controls where applicable. For category details and controls, see our Cookie Policy.

C. Information from Third Parties

  • Social Media Services: If you link your account to Google, Naver, or Kakao, we receive authentication tokens and basic profile information permitted by your privacy settings on those services.

3. How We Use Information

We use the collected data for the following purposes:

  • Service Provision: To create your account, manage your strategies, and provide market simulation features.
  • Gamification & Ranking: To calculate simulated returns and display your Nickname on public leaderboards (Leagues/Arenas).
  • Security & Integrity: To detect spam, abuse, or unauthorized access using our internal monitoring tools (e.g., SpamFilter).
  • Service Improvement: To analyze search trends and optimize system performance.
  • Legal Compliance: To comply with applicable laws and regulations.

4. Sharing and Disclosure of Information

We do not sell your personal information. We share data only in the following circumstances:

  • Publicly Visible Information: Your Nickname, Public Strategies, and Ranking Performance are visible to other users. Your Email address remains private.
  • Service Providers: We may share data with trusted third-party vendors (e.g., cloud hosting, analytics) solely to operate the Service.
  • Legal Requirements: If required by law, court order, or government regulation.

5. International Data Transfers

Index-Rank is operated in the Republic of Korea.

For European (EEA) Users: South Korea has received an Adequacy Decision from the European Commission, ensuring that your data receives a level of protection essentially equivalent to the GDPR.

Global Users: By using the Service, you acknowledge that your information will be transferred to, stored, and processed in South Korea.

6. Data Retention

We retain your personal data only as long as necessary:

  • Active Accounts: Retained for the duration of your membership.
  • Deleted Accounts: Upon account deletion request, your personal identifiers (Name, Email) are removed immediately or within 30 days. However, non-identifiable content (e.g., community posts, anonymized strategy stats) may remain.
  • Audit Logs: Security and access logs are retained for up to 1 year for security auditing purposes.
  • Retained Data for Safety & Abuse Prevention: Even after you request account deletion, we may retain your Social Provider Identifier (hashed) for a period of 60 days. This is strictly for the purpose of preventing abuse, fraud, and enforcing our re-registration cooling-off period. After this period, this identifier is permanently deleted, and re-registration will be treated as a new user.

7. Your Privacy Rights

Depending on your location, you have the following rights:

  • Access & Correction: You can view and edit your profile directly in the Service settings.
  • Deletion (Right to be Forgotten): You may request the deletion of your account and personal data.
  • Objection/Restriction: You may object to certain processing activities.
  • California Residents (CCPA): You have the right to know what personal info we collect and the right to non-discrimination for exercising your privacy rights.

To exercise these rights, please contact us at [email protected].

8. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If we discover such data, we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with a new "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: [email protected]

Jurisdiction: Seoul, Republic of Korea