Privacy policy
This policy explains the information we process for TASTEDEV accounts and the community, news subscriptions, the remote desktop service, payments and licences, and error reports and update checks in desktop products, how long we keep it, and the choices available to users.
Effective date: official service launch · Last reviewed: 2026-09-22This document is a translation of the Korean original. If there are any differences, the Korean original takes precedence.
Information we process
- For email sign-up: name, email address, a one-way hash of the password, and email verification status
- When using GitHub login: account identification information and public profile information provided by GitHub
- Content registered directly by users, such as profiles, projects, development logs, prompts, marketplace theme and icon packs, comments (including on news and developer documentation), reactions, and bookmarks
- Technical information required for security and incident response, such as sessions, access times, IP addresses, and user agents
- The IP address, product, version, platform, and time when you download a product. We use them to count each version only once per IP address; the country is looked up on our own server using DB-IP data, and the IP address is never sent outside
- The IP address from which you opened the checkout when paying for a licence, and the country identified from it. We use them to check purchase records, and they are also passed to the payment provider to verify the payment
- When you send a business inquiry: the type of inquiry, company or organisation name (optional), the message, the account email address and display language at the time of sending, and the reply and handling status
- When you act as a sales partner: your referral code, the account holder, bank and account number for commission payouts, whether you are an individual or a business, the product, amount and commission of payments resulting from your referrals, and payout records. Only the last four digits of the account number are shown on screen
- For members who subscribe to news: whether they are subscribed, their language, the subscription and cancellation times, and a record of the daily news emails sent (delivery date, posts sent, and result)
- For members who agree to receive promotional email: whether, when and in which language they agreed. Used only to email news such as sales partner invitations and discounts; you can withdraw at any time in Account › Profile or with the unsubscribe link in each email
- If the first administrator chooses the sign-up invitation during a TASTEREMOTE server's first-time setup: the email address, language, server version, install ID and consent time sent by that server, and the sending IP address. We use these to send the invitation and to confirm the person through the email link; we do not receive other members' information or passwords. If the person finishes signing up or links the server to an account, the install ID, server version and the record of agreeing to the Terms and this Policy are kept with the account
- The posts you leave as ideas and bug reports and the files attached to them (file name, size and upload time). Posts and attachments are public. Metadata such as where a photo was taken is removed from images when they are stored
- When signing up, the record of agreeing to the Terms and the Privacy Policy and of confirming you are 14 or older (document, version, time). We do not collect personal information from children under 14
Purposes of use
- Account creation, authentication, maintaining login status, and account recovery
- Publishing community content, providing collaboration features, and answering user inquiries and business inquiries
- Product downloads, payments, licence issuing and renewal notices, and settling sales partner commissions
- Sending subscribed members one news email a day, and providing remote desktop access
- Preventing abuse, access control, rate limiting, and ensuring service stability
Remote desktop (remote.tastedev.net)
The remote desktop server operated by TASTEDEV (remote.tastedev.net) processes the information below. Information on TASTEREMOTE servers that other companies or individuals install and operate themselves is processed by the operator of that server, and this policy does not apply to it.
- Account: email address, a one-way hash of the password (Argon2id), and login sessions (only a hash of the cookie value is stored, for 30 days)
- Devices: the name of each device paired with the account (initially the computer name), operating system, public key, host ID, last connection time, and host program version
- Connection records: for each session, the start and end times, host ID, the account that connected (empty for instant connections), the mode such as control or view, and the reason it ended. Deleted 90 days after the session started
- Screen, sound, input, clipboard and files: exchanged directly and encrypted between the computer being accessed and the browser, and never stored on the server. Even when the path is blocked and traffic goes through a relay server (TURN), it only passes through in encrypted form and the server cannot decrypt it
- IP addresses: used only in memory to limit failed logins and the number of connections, and not kept in the database. The server's operation logs may contain the connecting IP address, which is used only for incident and security response
- Session recordings are created in the viewer's browser and saved on that device; they are never sent to the server. The computer being accessed keeps its own connection records
- Licence: the TASTEREMOTE licence file added to the account. When you obtain a licence with an installation code, that code is sent to tastedev.net
Retention and deletion
Information is deleted without delay once the purpose of processing has been achieved, and information that the law requires us to keep is stored separately for the required period. Until an account deletion feature is provided, deletion requests are accepted by the privacy officer below or through the announced contact channel. Electronic files are deleted in a way that cannot be recovered, and copies remaining in backups are deleted when the backup retention period ends.
- Account, profile and user content: until you leave (your deletion request is processed)
- Per-page visitor records: 90 days
- Hash of the visitor counting cookie and visit count: 1 year after the last visit
- IP addresses in download records: 1 year (download statistics with the IP address removed are kept)
- IP address from which the checkout was opened: 1 year (the country is kept with the purchase record)
- Business inquiries: 3 years after they are answered or closed
- News email delivery records: 1 year. Subscription details remain after cancellation, together with the cancellation time, and are deleted when you leave
- Remote desktop connection records: 90 days
- Sales partner details: until you leave. When you leave, the bank and account number are deleted at once; the account holder, individual/business type and commission and payout records are kept for 5 years after the last record, as tax law requires
- Payment and licence records and error reports from desktop products: the periods stated in the respective sections below
- Sign-up requests from product servers: 7 days (deleted together if sign-up is not finished). Rate-limit records (hashes of IP address, install ID and email): 30 days. Install ID, server version and consent records linked to an account: until the account is closed
- Ideas, bug reports and their attachments: until you close your account. Attachments not added to a post: 24 hours
- Records of agreeing to the Terms and Privacy Policy and of confirming age 14 or older: until the account is closed
Processors and transfers abroad
Servers, databases and email delivery are run directly by GXSOFT on its own servers in the Republic of Korea and are not outsourced. When the services below are used, information is passed to the provider concerned, and that provider's privacy terms also apply.
- Payments: KG Inicis Co., Ltd. and PortOne Korea Co., Ltd. (KRW payments, processors in Korea), Paddle.com Market Limited (USD payments, United Kingdom; see the payments section below)
- GitHub, Inc. (United States): login if you choose GitHub login, update checks in desktop products, and the private repository to which error reports are moved
- Cloudflare, Inc. (United States): the transmission path for error reports from desktop products
- Kakao (AdFit) and Google LLC (AdSense, United States): displaying advertisements and collecting behavioural information (see the advertising section below)
- Google LLC (YouTube, United States): product introduction videos. They are embedded from the cookie-reduced youtube-nocookie.com address and loaded when the video comes into view
- DB-IP: we only download the data file that maps IP addresses to countries and look them up on our own server; IP addresses are never sent to DB-IP
Payments and licence issuing
When you buy a product, we process the information below to take payment and issue your licence. Payment instrument details such as card numbers are collected directly by the payment provider; we neither receive nor store them.
- Information processed: buyer name, email address, mobile number (required by the payment provider for KRW payments; we do not store it), order number, product, plan and amount, payment and refund times and status, and the licence number and licence file issued
- Processors: KG Inicis Co., Ltd. — processing and cancelling KRW credit card payments; PortOne Korea Co., Ltd. — payment integration and delivery of payment results. Both process the information only to the extent needed for the entrusted work.
- Transfer abroad: USD payments are handled by Paddle.com Market Limited (United Kingdom) as merchant of record for payment, receipts, tax and refunds. When you pay, your name, email address, country and payment details are sent to Paddle through its checkout, and Paddle's privacy terms apply. If you do not want the transfer abroad, you can pay in KRW.
- Retention: under the Korean E-Commerce Act, records of contracts or withdrawals and of payment and supply are kept for 5 years, and records of consumer complaints or disputes for 3 years, and then deleted. Licence records are kept while the licence is valid so that you can keep using the versions you received.
Error reports and update checks in desktop products
Error reporting in TASTEDEV desktop products is off by default and reports are sent only if you agree in the product settings. You can withdraw consent in the settings at any time; reports not yet sent are then deleted from your device.
- Sent: product name, version and build identifier, time of occurrence, severity, error code and type of operation, operating system type, CPU architecture and features, thread count, and static module names
- Never sent: file names, paths, file contents, raw error messages, logs, or account information
- While sending, your IP address reaches Cloudflare and the collection server. The collection server uses it only for rate limiting: it reduces IPv4 addresses to /24 and IPv6 addresses to /56, handles only a hash made with a key that changes daily, and does not store it with reports.
- Reports are kept as long as needed to fix problems and improve the products, and may be copied into issues in a private GitHub repository.
- Update checks: products with an update check look up new version information on GitHub. Your IP address and the product version reach GitHub, and GitHub's privacy terms apply. You can turn off automatic checks in the product settings.
Your rights
Users may edit their own profiles and posts, or remove them using the deletion features provided. You can cancel a news subscription at any time on the news page or with the unsubscribe link in each email, and withdraw consent to promotional email at any time in Account › Profile or with the unsubscribe link in each email. Devices paired with the remote desktop can be removed from the dashboard. Requests to access, correct, delete, or restrict the processing of personal information can be sent to the privacy officer below and will be handled without delay.
Cookies and security
We use essential cookies for login sessions and security verification. If you arrive through a sales partner's referral link, the referral code is kept in a cookie for 14 days to link it to a payment, and the remote desktop (remote.tastedev.net) uses a login cookie for 30 days. To count site visitors, we use an anonymous cookie that is kept for one year; the server stores only a SHA-256 hash of the cookie, not the original value, together with the first and most recent visit times and the visit count. Revisits from the same browser within 30 minutes are not counted again. To count visits per page, we store only the page address (excluding anything after it, such as search terms) and the date alongside the same hash, and the per-page visitor records are deleted after 90 days. Account and settings pages that are visible only after login are not counted. You can refuse cookies in your browser settings, but if you refuse essential cookies you cannot log in. Plaintext passwords and authentication or reset tokens are never recorded in logs, passwords are stored only as one-way hashes, and we apply encryption in transit and the principle of least privilege.
Advertising
Kakao AdFit and Google AdSense advertisements may appear on the home, downloads, and community pages and on documentation, prompt, and project list and detail pages. To select advertisements and count impressions and clicks, the advertising providers may collect behavioural information such as cookies, advertising identifiers, IP addresses, and browser information, and that information is subject to the providers' own privacy terms. Advertising cookies can be blocked in your browser settings, and personalised advertising can be turned off in Google Ads Settings and Kakao advertising settings. No advertisements are placed on pricing, checkout, account, or settings pages, and the advertising scripts are not loaded when you first open these pages.
Privacy officer and remedies
Please send questions about the processing of personal information, requests for access, correction or deletion, and complaints to our privacy officer, Choi Young-gu (privacy@tastedev.net). If you need advice or a remedy for an infringement of personal information, you can contact the bodies below.
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (Korea Internet & Security Agency): 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
Effective date and change history
- This policy takes effect on 3 November 2026.
- 1 November 2026: added the remote desktop service, news subscriptions, business inquiries, sales partner payout details, retention periods and deletion methods, processors and recipients of transfers abroad, and the privacy officer and remedies; advertising scripts are now loaded only on pages that show advertisements.
- 2 November 2026: added the information used for the sign-up invitation in a product server's (TASTEREMOTE) first-time setup and how long it is kept.
- 3 November 2026: added attachments to ideas and bug reports and how long they are kept.
Business information
- Company
- GXSOFT
- Representative
- CHOI YOUNG GU
- Business registration number
- 853-44-00368
- Address
- 9F V24, 351 Gyeongin-ro, Michuhol-gu, Incheon, Republic of Korea
- Support hours
- Weekdays 10:00–17:00 (KST), excluding public holidays
