Privacy Policy

1. What we process and why

• Guest purchases · the email you enter at checkout — order confirmation, download links, purchase restoration
• Google sign-in · stable Google account ID, verified email, display name and profile image — account identification, My Page (purchases, linked devices, voice credit balance), exclusive buyout records
• Member profile (optional) · nickname and organization you enter on My Page — shown on My Page and in CuePlayer
• Orders & payments · order ID, product (pack or voice credit), amount and currency, status, payment provider transaction ID, payment country — payment confirmation, delivery of downloads and credits, refunds and disputes
• CuePlayer account link · device name sent by the app (computer name), link code, hashed app token, linked and last-used times — linking the app to your account, viewing and removing devices on My Page
• Phone remote (Cue Remote) · a random ID created when the phone app is installed, the phone's name, a hashed connection token, the 5-minute pairing code shown by CuePlayer, linked and last-used times, and the linked CuePlayer's device number, name, type and playback state (current and next song titles, pad names, remaining credits, etc.) — controlling CuePlayer from a phone on the same account. Playback, pad and announcement commands and status only pass through our server (Cloudflare); command contents are not stored. The phone app creates no account and does not collect location, contacts or advertising identifiers.
• CuePlayer announcement voice · the sentence you enter, chosen voice, speed and style, account ID, request ID, a hash of the sentence and settings, the generated audio, and credit top-up/usage/return history — generating audio, reusing results for identical requests, charging and returning credits, preventing double charges. The hash can be linked to your account through request history. Please do not include unnecessary personal or sensitive information in announcements.
• CuePlayer device count · a random device number created when the app first opens, Mac or Windows, app version and the date — sent once on each day the app is opened and used only to count devices in use. The same number is sent with in-app update downloads so our own test devices can be excluded. Account, name, email, details of the files you play and IP addresses are not stored with it.
• Trial credits · account ID and an IP-based limit record — preventing duplicate free trial credits
• Usage note (optional) · a one-line note you leave (up to 120 characters) and the purchased pack — service improvement and use-case display. As noted at the input box, notes we review may appear on that pack's page without your name or email, and names or contact details inside a note are removed before display. Notes are optional, do not affect your purchase, and you can ask us to stop showing or delete them anytime.
• Download protection · hashed one-time download credentials and per-purchase browser download sessions — preventing unauthorized downloads from shared links
• Usage stats · public page path, external referrer host, country and a random per-tab session ID — service improvement and acquisition analysis (account, payment and download-token paths are excluded)
• Acquisition source · first-touch source (ref) and campaign labels (UTM), stored in localStorage — attributing orders (the latest tagged ad touch takes precedence for 30 days)
• Abuse prevention · connection IP or a hashed identifier and request time — rate-limiting abnormal requests to sign-in, restore, checkout, preview, app-link and voice endpoints

2. What CuePlayer sends and does not send

Music files, playlists, event files, notes and settings you load into CuePlayer stay on your computer and are not sent to our servers. The app only sends the account-link and voice information, a once-a-day device count (section 1) and update checks. Update checks and installer downloads pass ordinary connection data (IP address, OS, app version) through Cloudflare; we record only daily download totals by type and version. We do not collect what you play or when.

3. Legal basis

Purchases, payments, downloads, account linking and voice generation are processed to perform our contract with you; transaction records are kept to meet legal obligations; profiles, published usage notes and ad measurement rely on your choice and consent. Abuse prevention, minimal usage stats and the CuePlayer device count are processed for our legitimate interest in security and service quality, only as needed, without linking them to your account or email and with short retention to limit the impact on your rights.

4. Retention

• Account and profile: until you close your account (deletion request)
• CuePlayer app tokens and device names: up to 1 year from issue; expire after 90 days of non-use. Removing a device on My Page deletes it immediately; expired tokens are deleted by a daily cleanup
• Link codes: valid for 10 minutes, deleted within a day of expiry
• Phone remote tokens and phone names: up to 1 year from issue; expire after 90 days of non-use. Disconnecting in the phone app deletes the token immediately; expired tokens are deleted by a daily cleanup / phone pairing codes: valid for 5 minutes, deleted within a day of expiry / CuePlayer playback state: only while that CuePlayer is connected (deleted on disconnect) / list of previously connected CuePlayers: 30 days from the last connection
• Generated announcement audio: kept for 30 days for reuse of identical requests, then removed by an automatic storage rule (usually within a day)
• Voice request history (double-charge prevention; the sentence itself is not stored): deleted within a day after 90 days
• Purchase, top-up, usage and refund records needed as evidence of contracts, withdrawals, payment and supply: 5 years under the Korean E-Commerce Consumer Protection Act. Announcement text and audio and technical logs not needed as evidence are excluded.
• Consumer complaint and dispute records: 3 years under the same Act
• Browser download sessions: up to 30 days / one-time download credentials: deleted after use or expiry
• Sign-in sessions: up to 30 days, deleted within a day of expiry / one-time sign-in and purchase-claim values: deleted a day after expiry
• Abuse-prevention and trial-limit records: deleted within a day once older than 24 hours
• Usage notes: until you ask us to delete them or close your account / usage stats (path, country, random session ID): 3 years / CuePlayer device-number counts: 2 years from the last day the app was opened
• Acquisition data in your browser: removed when you clear browser storage

5. Sharing with third parties

We use personal information only for the purposes in section 1 and do not provide it to third parties except with your consent or where required by law. Only if you allow it in ‘Ad measurement settings’ is the ad measurement data in section 8 sent to Meta, Google or NAVER.

6. Processors and connected services

• Cloudflare, Inc. — hosting for the website and app server, database and file storage, security
• Toss Payments Co., Ltd. — payment processing
• Plus Five Five, Inc. (Resend) — order, download and purchase-restore emails
• Neosapience, Inc. (Typecast) — converting CuePlayer announcement text to speech
• With Google sign-in, Google LLC passes your account information (section 1) to us when you authenticate; Google's own processing follows Google's privacy policy.
• Our contracts or the providers' data processing terms restrict processing to the entrusted task and cover security, sub-processing, oversight and liability. We will update this policy if processors or tasks change.

7. International transfers

To perform our service contract, personal information is processed and stored abroad as follows. The site and CuePlayer server run on Cloudflare, so even a simple visit passes connection data through Cloudflare. If you do not want this transfer, you can stop using the service or ask us to delete your account; the service will then be unavailable. Optional ad measurement is transferred only with your consent under section 8 and declining does not affect purchases or the app.

• Cloudflare, Inc. (headquartered in the USA, dpo@cloudflare.com) — countries: database in the Asia-Pacific region; file storage and request handling in the USA and countries hosting the Cloudflare data center nearest you / data: the information in section 1 / when and how: transmitted over the network as you use the service / purpose: hosting, storage, security / retention: as in section 4
• Plus Five Five, Inc. (Resend, USA, support@resend.com) — data: email address and order/download message content / when and how: transmitted when an email is sent / purpose: email delivery / retention: as needed to deliver and confirm delivery (Resend's log retention period)

8. Optional ad measurement

• Meta: when Meta measurement is enabled, only after you choose Allow do we send public-page visits, previews, cart and checkout/purchase events (pack identifiers, value and currency), ad/browser identifiers (_fbc/_fbp), IP address and browser information to Meta Platforms, Inc. (USA) for ad measurement and optimization. We do not send email, name, payment credentials, download tokens or full URL queries. Choice and identifier cookies last up to 90 days; declining stops future transmission and deletes these cookies. Data is handled under Meta's privacy policy (https://www.facebook.com/privacy/policy/).
• Google Ads: if you allow it, the Google tag processes ad-click identifiers and cookies, public-page visits, IP address and browser information, and purchases send value, currency and a deduplication transaction ID to Google LLC (USA). Enhanced conversions with email or name and ad-personalization signals are disabled. Payment credentials and download links are not provided. Your choice lasts up to 90 days and Google ad-linking cookies (_gcl_*) are used; declining stops the tag and deletes these cookies. Google's privacy policy applies (https://policies.google.com/privacy).
• NAVER: if you allow it, public-page visits, previews, cart and checkout actions and verified purchase value, currency and a deduplication ID are sent to NAVER Corp.; its tag processes ad-inflow cookies, page URL and referrer, IP address and browser information. Email, payment credentials and download links are excluded and tags do not run on private routes. Your choice lasts up to 90 days; declining stops further transmission.
• You can change your choice anytime in ‘Ad measurement settings’ at the bottom of the site. Declining does not affect previews, purchases or the app.

9. Cookies and similar storage

We use a sign-in session cookie (cue_member, up to 30 days), a short-lived sign-in flow cookie (cue_oauth), per-purchase download session cookies (up to 30 days), an ad-measurement choice cookie (up to 90 days) and, with consent, the ad identifier cookies in section 8. localStorage holds acquisition source, campaign labels and your cart; sessionStorage holds a random per-tab session ID. You can block or delete cookies in your browser, but sign-in and downloads may not work without their cookies.

10. Deletion procedure

Information is deleted without delay once its retention period ends or its purpose is fulfilled. Electronic records are deleted irrecoverably; information kept by law is stored separately and deleted when that period ends.

11. Your rights

You, or your legal or authorized representative, may request access, correction, deletion, suspension of processing, or withdrawal of consent. Email support@cuetone.cc; after minimal verification of identity or authority we act within the legal deadline and explain any refusal and how to object. You can remove CuePlayer devices on My Page and withdraw ad-measurement consent in ‘Ad measurement settings’. When you ask to close your account we also guide you through refunding remaining paid voice credits. Information we must keep by law may not be deleted until that period ends.

12. Children under 14

CueTone and CuePlayer member services (sign-in and voice credit top-ups) are intended for users aged 14 or older, and paid purchases by minors, including guest purchases, may require a legal guardian's consent. If we learn that information from a child under 14 was collected without a legal guardian's consent, we delete it without delay.

13. Security measures

We use HTTPS, store sign-in sessions, app tokens and download credentials as hashes, restrict admin access, never store payment-method details (handled by Toss Payments), and rate-limit abnormal requests, reviewing these measures as our environment changes.

14. Privacy officer and remedies

• Privacy officer and complaints: 정희수 (CEO) · support@cuetone.cc
• Korea Personal Information Infringement Report Center: privacy.kisa.or.kr · 118 (in Korea)
• Personal Information Dispute Mediation Committee: www.kopico.go.kr · 1833-6972
• Supreme Prosecutors' Office: www.spo.go.kr · 1301 (in Korea)
• Korean National Police Agency: ecrm.police.go.kr · 182 (in Korea)

15. Changes

This policy applies from October 21, 2026. We post changes and their effective date on this page at least 7 days in advance, and start any processing that needs new consent only after obtaining it.