Legal

Privacy Policy

How we collect, use, and protect your data on ESLForge.

Last updated: July 23, 2026

We at ESLForge (https://www.eslforge.com/) are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, including any related services, tools, and features. Please read this policy carefully. If you do not agree with its terms, please do not access the site.

Information We Collect

Account Information

When you create an account, we collect the information needed to register and authenticate you:

  • Email address
  • Username
  • Password (stored only in encrypted/hashed form; applies to email signup)
  • If you sign up through Google or Kakao: your name, email address, and account identifier as provided by that service

This information is necessary to create and operate your account. We collect it only when you voluntarily provide it.

Usage Data

When you visit the site, certain information is collected automatically through the analytics services described in the "Cookies and Analytics" section below. This data is not linked to your account and does not directly identify you. It may include:

  • Pages visited and access times
  • Browser type and operating system
  • Device type and screen size
  • Approximate region (derived from IP address)
  • Referring website URL

User-Generated Lesson Content

When you create and submit lesson content on ESLForge, including words, expressions, questions, and other lesson data, we collect and store that content. See the "User-Generated Lesson Content" section below.

How We Use Your Information

We use the information we collect to:

  • Create and manage your account, and authenticate you when you log in
  • Operate, maintain, and improve the site and our services
  • Communicate with you about your account, including email verification and important service updates
  • Analyze aggregate usage trends to understand how the site is used and improve it
  • Detect, prevent, and address technical issues or security breaches

Cookies and Analytics

Cookies

This site uses cookies — small text files stored in your browser — for authentication (keeping you logged in) and for the analytics described below. You can block or delete cookies at any time through your browser settings. Blocking cookies does not prevent you from using the site, though you will need to log in again on each visit if authentication cookies are blocked.

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC, to understand how visitors use our site in aggregate. Google Analytics uses a cookie (_ga) containing a randomly generated identifier to distinguish browsers. It collects the usage data described in the "Usage Data" section above. This identifier is not connected to your ESLForge account, your name, or your email address, and we do not use Google Analytics to identify individual visitors. Google's own privacy policy is available at https://policies.google.com/privacy. You can additionally opt out of Google Analytics across all websites by installing Google's browser add-on: https://tools.google.com/dlpage/gaoptout

Vercel Analytics

Our site is hosted by Vercel Inc., and we use Vercel Analytics to measure aggregate page views and site performance. Vercel Analytics does not use cookies and does not store any persistent identifier about you.

Overseas Transfer of Information

To operate the site, some information is processed and stored on servers located outside the Republic of Korea. We entrust the following processing to overseas service providers as necessary to provide the service:

Google LLC — United States

Usage data described in the "Usage Data" section above, including a random cookie identifier and IP address, transferred at the time of your site visit, for the purpose of aggregate web analytics via Google Analytics. You may contact Google's privacy team at https://support.google.com/policies/contact/general_privacy_form.

Retention: event-level data for 2 months; user-scoped data for 14 months, per our Google Analytics configuration.

Vercel Inc. — United States

Data processed in the course of hosting the site, including IP addresses in server logs, and aggregate, cookie-less analytics data, transferred in the course of hosting and at the time of your site visit, for the purpose of website hosting and infrastructure and aggregate performance analytics.

Retention: for the duration of hosting service provision; server logs retained per Vercel's log retention schedule.

Resend, Inc. — United States

Your email address and a one-time verification token, transferred at the time of signup, for the purpose of delivering account verification and other service emails.

Retention: until delivery is complete, per Resend's retention schedule.

You may refuse the overseas transfer of your information by not using the site, or, for analytics specifically, by blocking cookies or using the Google Analytics opt-out described in the "Cookies and Analytics" section above. If you have questions about these transfers, contact us at the address in the "Contact Us" section below.

Payment Information

When you subscribe to ESL Forge Pro, your payment is processed by our payment provider. We never receive, see, or store your full card number, expiry date, or security code (CVC) — these are handled entirely by the payment provider under their own security standards.

Toss Payments (토스페이먼츠) — Republic of Korea

Card payments and recurring subscription charges are processed by Toss Payments Co., Ltd., a payment gateway licensed in the Republic of Korea. When you register a card, your card details are transmitted directly to Toss Payments, who process them to authorize the card and to carry out each monthly charge. Toss Payments processes this data within the Republic of Korea. Their privacy policy is published on the Toss Payments website at https://www.tosspayments.com.

Because Toss Payments operates within the Republic of Korea, this processing is not an overseas transfer of your information.

What we store

So that we can bill your subscription each month and show you your payment history, we store the following on our own servers — but never your full card details:

  • A billing key — a secure token issued by Toss Payments that authorizes us to charge your registered card. It is not your card number and cannot be used to reconstruct it.
  • Your card company and a masked card number (for example, the last four digits), shown to you only to identify which card is on file.
  • Transaction records for each charge — our order ID, the Toss payment key, the amount, currency, status, date, and a link to the receipt (매출전표).

Under the Act on Consumer Protection in Electronic Commerce (전자상거래법 Article 6), we are required to retain records of payments and contract performance for 5 years, and records of consumer complaints or disputes for 3 years. We keep these transaction records for the periods required by law even after you delete your account, dissociated from your active account. Your billing key is deactivated when your subscription ends or your account is deleted, so no further charges can be made.

Sharing Your Information

We do not sell, trade, or rent your personal information. We share information only:

  • With the service providers described in the "Overseas Transfer of Information" and "Payment Information" sections above, who process it on our behalf for hosting, analytics, email delivery, and payment processing, and who are not permitted to use it for their own purposes
  • For legal obligations, if required by law or in response to valid legal requests or processes

Retention and Destruction of Information

  • Account information is retained while your account exists. When you delete your account or request deletion, we destroy your personal information without undue delay, except where a law requires us to retain specific records for a set period.
  • Google Analytics data is retained for 2 months (event-level data) or 14 months (user-scoped data) and then deleted automatically.
  • Unverified accounts: if you register but never verify your email, your account record is currently retained until you complete verification or contact us to request deletion — we do not yet delete unverified accounts automatically.
  • Payment and transaction records are retained for 5 years, and consumer complaint or dispute records for 3 years, as required by the Act on Consumer Protection in Electronic Commerce, even after your account is deleted. See the "Payment Information" section above.

When personal information is no longer needed for the purpose it was collected for, we destroy it in a manner that prevents recovery.

Security of Your Information

We use administrative, technical, and physical security measures to protect your personal information, including password hashing and encrypted connections (HTTPS). However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

User-Generated Lesson Content

When you create and submit lesson content on ESLForge, including words, expressions, questions, and other lesson data, you grant us a non-exclusive license to use that content to improve and develop our services. This may include using submitted content to train, evaluate, and enhance the features we offer. Please do not include personal information about yourself or others (such as student names) in lesson content.

Children's Privacy

Our site is intended for use by teachers and other users aged 14 and over. We do not knowingly collect personal information from children under 14 without the consent of a legal guardian. If we learn that we have collected personal information from a child under 14 without such consent, we will delete it as soon as possible.

Your Rights and Choices

You have the right to:

  • Access, correct, or delete your personal information
  • Request suspension of the processing of your information
  • Withdraw consent at any time, where processing is based on consent
  • Refuse cookies and analytics as described in the "Cookies and Analytics" section above, without losing access to the site

To exercise any of these rights, contact us at the address below. We will respond without undue delay. Exercising these rights will not result in any disadvantage in your use of the service, except where the information is strictly necessary to provide it (for example, we cannot maintain an account without an email address).

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date above and, for material changes, provide notice on the site. Prior versions will remain available on request.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at kbeslgames@gmail.com.