Privacy Policy

Effective · October 29, 2026

NEGENTROPY ("we") runs negentropy.it.kr (the "site") and handles visitors' personal information as described below. The site has no sign-up, and there is no form where visitors enter their name or contact details. The NEGENTROPY Forum (forum.negentropy.it.kr), which has sign-up, follows its own policy.

1. What we collect, why, and for how long

Access logs

  • Items: IP address, requested page, request method, time
  • Purpose: to notice and block floods of requests
  • Retention: deleted automatically after 2 hours. An IP that sends more than 240 requests in one minute is blocked for 10 minutes and stays on the block list only for that time.

Anomaly records

  • Items: time of the anomaly, request counts, up to five IPs with the most requests and the pages they requested, the IP of a connection locked out of the admin login
  • Purpose: to check for and respond to attacks
  • Retention: deleted automatically after 30 days

Admin login attempts

  • Items: a hash of the IP address of each failed admin login, number of failures, time
  • Purpose: to block password-guessing attacks
  • Retention: deleted within one day after the lockout ends

Email

  • Items: sender address, name (if given), message and attachments
  • Purpose: to answer questions and handle bug reports
  • Retention: deleted one year after the matter is closed

2. Cookies

The site uses two cookies. It uses no advertising or analytics cookies.

  • lang: remembers the language you chose (Korean or English). Kept for one year.
  • PHPSESSID: created only to keep the site admin signed in. Removed when the browser is closed.

You can block or delete cookies in your browser settings. The site still works; it just won't remember your language.

3. Sharing with third parties

We do not give personal information to third parties, except where a law specifically requires it or it is unavoidable to meet a legal obligation, and then only to the extent the law allows.

4. Outsourcing and overseas transfer

The site's server, content delivery and email are run by the hosting company Hostinger, outside Korea, so personal information is transferred to and stored abroad as follows.

  • Recipient: HOSTINGER, UAB (Lithuania) · privacy contact gdpr@hostinger.com
  • Work outsourced: running the server, storing data, delivering pages (CDN), handling email
  • Country: United States (web server in Phoenix, Arizona). Pages are delivered through Hostinger's content delivery network and may pass through servers Hostinger runs abroad. Email is stored on mail servers Hostinger runs outside Korea.
  • Items: the information in section 1, and the IP address and browser details sent when you visit the site
  • When and how: sent over the network when you visit the site or send us email
  • Retention: the same periods as in section 1. Server logs Hostinger keeps to run its service follow Hostinger's own policy.

Besides the web pages, HCl Edition's update check and file downloads (game builds, update files) also connect to this server. We do not keep our own records of those connections; any server logs follow Hostinger's policy.

If you do not want your information transferred abroad, you would need to avoid visiting the site and emailing us, because a visit alone sends connection details such as your IP address to the server abroad.

5. Outside services

Some pages load fonts and videos from outside services. Your browser connects to those companies directly, so they receive your IP address and browser details, and their own privacy policies apply.

  • Google Fonts (Google LLC): fonts
  • jsDelivr: fonts
  • YouTube (Google LLC): videos, loaded in privacy-enhanced mode (youtube-nocookie.com)
  • Vimeo (Vimeo.com, Inc.): videos, loaded with the do-not-track setting

Sites we link to, such as itch.io, Patreon, Discord and X, follow their own policies.

6. Deletion

Information is deleted without delay once its retention period ends. Logs are deleted automatically by the server, and email is deleted by us. Electronic files are deleted so they cannot be restored. Information that was included in a server backup made by the hosting company is removed when that backup is replaced under its backup schedule.

7. Security

  • All connections are encrypted with HTTPS.
  • The admin area sits at an unpublished address, the admin password is stored as a hash, and repeated failed logins are locked out.
  • Log files are blocked from being opened on the web, and we check them only through the admin area.

8. Your rights and how to use them

You can ask to see, correct, delete or stop the processing of your personal information by emailing the address below. You can also make a request through a legal representative or someone you authorise. We will handle it and tell you the result within 10 days of receiving it. Because access logs are deleted after two hours, we may have no record left that matches your visit.

9. Privacy officer and contact

Questions, complaints and requests for remedies about personal information are handled by:

10. Where to get help (Korea)

11. Other policies

The NEGENTROPY Forum follows the forum privacy policy. NEGENTROPY Management, the work tool used by team members and partners, and the team wiki follow a separate policy: NEGENTROPY Management Privacy Policy (Korean).

12. Changes

If this policy changes, we will post the changes and the effective date on this page 7 days before they take effect.