Member bug reports, administrator calls and location attachments

Bug reporting is optional. Sending a report requires an available Google or Kakao account and permission to use browser location for that report.

• Only when you press the location button in the report form do we request browser-provided coordinates, reported accuracy and the observation time. This reporting feature does not request location for automatic error detection or ordinary study-room use.
• The report also stores the signed-in Café account ID, sign-in provider, nickname, server-observed connection IP, submission time and error/device information. Browser coordinates are client-reported data, not independently verified physical GPS location or a street address.
• Exact attachments and the connection IP are used for review in protected owner operations and are not published to ordinary participants. Only when the owner explicitly requests an approximate region lookup for a verified connection IP is that IP sent to GeoJS over HTTPS. The lookup sends no account, email, report text or browser coordinates. IP-derived regions are not verified physical GPS locations or street addresses.
• General descriptions of city-name display in study rooms do not apply to an explicitly consented report attachment. Report records are stored separately from temporary room state; the attachment does not change your room or account location.
• Before sending a bug report or administrator call, you must acknowledge the submission notice. We store the acknowledged version, server time, verified account and server-observed connection information as submission evidence. Automatic error collection does not require this checkbox.
• Profanity, insults, threats and harassment are prohibited and may result in a report or access restriction. Ordinary criticism or a good-faith bug report is not itself a violation. Account and connection records may be disclosed only to the extent necessary where there is a lawful law-enforcement request or a basis under applicable law. Acknowledging this notice does not waive your privacy rights.

Group chat writing and private submission records

Writing in group chat is optional. To send or edit a message, sign in with an available Google or Kakao account, acknowledge the chat notice and allow browser location. If you decline, you can continue studying and reading chats under your existing access permissions.

• This chat feature requests browser location only when you press its location button. A recent position can be used for writing for up to five minutes. It does not track your location in the background for reading chats or ordinary study, and does not request camera or microphone access.
• A separate audit record accompanies each send or edit: group and message IDs; the server-verified Café account ID, sign-in provider and nickname at submission; server receipt time and notice version; server-observed connection IP; browser-reported device/browser information; and permitted coordinates, reported accuracy and observation time. Recorded times use UTC and are converted to the display timezone in administration.
• Browser location and device information are client-reported evidence, not independently verified physical GPS location, a home address or unique hardware identity. An IP address does not establish a physical address or that two accounts belong to the same person.
• Exact location, IP and device audit data are accessible only to a verified administrator account with group-read permission. They are not published to ordinary members, group leaders or staff; an ordinary member cannot view this audit information even for their own messages, and chat attachments do not change your public profile or study-room city.
• Routine submission-audit metadata is retained for 30 days after receipt and then cleared by scheduled expiry processing. We do not duplicate the chat body in this audit. Message deletion and audit-metadata expiry are separate, and historical messages are not given fabricated consent or location records.
• Abusive language, insults, threats or harassment may lead to reporting or access restrictions; ordinary criticism is not itself a violation. External disclosure of account and connection records is limited to what is necessary under a lawful request or applicable legal basis. Acknowledgement does not waive privacy rights.

Privacy Policy

Last updated: 5 October 2026

1. Overview

Study at Café (studyatcafe.com, hereinafter "the Site") is an online multiplayer virtual study lounge service designed to help users worldwide study together in real-time. The Site is dedicated to protecting user privacy and complies with standard privacy requirements.

2. Information We Collect

2.1 Automatically Collected Information

To provide a secure and interactive real-time study experience, the following information is automatically collected during service usage:

Basic Information & Study Activity Data

• IP Address & General Location: Used to block spam bots, secure the application, and resolve approximate IP-based location (approximate city name).
• Location Data (Optional): If you grant location permissions to the browser, approximate location coordinates may be used at session creation. This information is simplified to a city name (e.g., Seoul, Melbourne) to show on the map for participant visualizations. Guests cannot view precise location coordinates.
• Study & Avatar Settings: Custom avatar configuration, study goals set by the user, timer elapsed states (study time, break timers), and study session history.
• Visit statistics: We record page type, visit time, device category and a server-side hash of a browser visitor identifier. Where available, we also record the referring site's domain and source category (such as search or social), and public UTM source, medium and campaign labels. An existing local IP-location cache may provide coarse country and region information; this is not verified GPS data or a street address. These visit-statistics tables do not retain full referring URLs, search terms or raw IP addresses, and this analytics feature does not add GPS collection or send IP addresses to an external location service. The new attribution and region fields apply only to visits recorded after the feature is enabled; older records are not backfilled. Missing data does not establish a direct visit or an actual location.

Browser and Device Information

• User-Agent: For browser environment optimization.
• Preferences: Connection timezone and default browser language settings (e.g. ko, en, ja, th).

2.2 Information Collected via Social Login

The following information may be collected upon logging in or registering with social accounts:

• Social Account ID: Unique identification number for authentication.
• Nickname: Display name used in the study room (customizable).
• Profile Image: Profile avatar image URL (optional).

2.3 Information Provided by Users

• Content of real-time chat messages and group (somoim) chat logs.
• Study calendar history and selected drinks/desserts record.

2.4 External Integration Data

• Music Streaming Connection (Optional): When integrating with Spotify or YouTube Music, display names, email addresses, and session access tokens are temporarily logged to support playlist rendering and sound playback controls inside the room.

3. Purpose of Collection

• Virtual Study Lounge Services: Rendering characters, syncing real-time positions, chat rooms, timer synchronization, and displaying approximate cities to encourage peer motivation.
• Audio & BGM Integrations: Supporting background music (BGM) selection and Spotify / YouTube Music playback synchronization.
• Security & Abuse Prevention: Detecting malicious automated bots, preventing cheating or spamming, and filtering inappropriate nicknames.
• Application Performance Optimization: Resolving application errors and rendering customized interfaces matching the browser.
• Legal & Regulatory Compliance: Saving access logs to secure systems and complying with mandatory legal requests.

4. Data Storage, Security and Destruction

• Data Protection Measures: The Site protects logs and location coordinates using secure connection protocols (SSL/TLS), database protection, and strict administrative access controls.
• Deletion upon Session Closure/Withdrawal: When a session is closed or a user account is deleted, all temporary study data—including avatar setups, active goals, nicknames, and location coordinates—is immediately and permanently destroyed.
• Streaming Token Disposability: Disconnecting Spotify or YouTube Music instantly and permanently removes authentication tokens from the server.
• Exceptions for Retention: Access logs may be kept for a limited time to block malicious users (spammers, hackers) and to comply with statutory retention laws, after which they are permanently deleted.

5. Contact Us

If you have any questions regarding privacy or technical support, please contact us at:

• Email: hello@studyatcafe.com