Privacy Policy

Last updated: 5 October 2026

1. Overview

Study at Café (studyatcafe.com, hereinafter "the Site") is an online multiplayer virtual study lounge service designed to help users worldwide study together in real-time. The Site is dedicated to protecting user privacy and complies with standard privacy requirements.

2. Information We Collect

2.1 Automatically Collected Information

To provide a secure and interactive real-time study experience, the following information is automatically collected during service usage:

Basic Information & Study Activity Data

• IP Address & General Location: Used to block spam bots, secure the application, and resolve approximate IP-based location (approximate city name).
• Location Data (Optional): If you grant location permissions to the browser, approximate location coordinates may be used at session creation. This information is simplified to a city name (e.g., Seoul, Melbourne) to show on the map for participant visualizations. Guests cannot view precise location coordinates.
• Study & Avatar Settings: Custom avatar configuration, study goals set by the user, timer elapsed states (study time, break timers), and study session history.
• Visit statistics: We record page type, visit time, device category and a server-side hash of a browser visitor identifier. Where available, we also record the referring site's domain and source category (such as search or social), and public UTM source, medium and campaign labels. An existing local IP-location cache may provide coarse country and region information; this is not verified GPS data or a street address. These visit-statistics tables do not retain full referring URLs, search terms or raw IP addresses, and this analytics feature does not add GPS collection or send IP addresses to an external location service. The new attribution and region fields apply only to visits recorded after the feature is enabled; older records are not backfilled. Missing data does not establish a direct visit or an actual location.

Browser and Device Information

• User-Agent: For browser environment optimization.
• Preferences: Connection timezone and default browser language settings (e.g. ko, en, ja, th).

2.2 Information Collected via Social Login

The following information may be collected upon logging in or registering with social accounts:

• Social Account ID: Unique identification number for authentication.
• Nickname: Display name used in the study room (customizable).
• Profile Image: Profile avatar image URL (optional).

2.3 Information Provided by Users

• Content of real-time chat messages and group (somoim) chat logs.
• Study calendar history and selected drinks/desserts record.

2.4 External Integration Data

• Music Streaming Connection (Optional): When integrating with Spotify or YouTube Music, display names, email addresses, and session access tokens are temporarily logged to support playlist rendering and sound playback controls inside the room.

3. Purpose of Collection

• Virtual Study Lounge Services: Rendering characters, syncing real-time positions, chat rooms, timer synchronization, and displaying approximate cities to encourage peer motivation.
• Audio & BGM Integrations: Supporting background music (BGM) selection and Spotify / YouTube Music playback synchronization.
• Security & Abuse Prevention: Detecting malicious automated bots, preventing cheating or spamming, and filtering inappropriate nicknames.
• Application Performance Optimization: Resolving application errors and rendering customized interfaces matching the browser.
• Legal & Regulatory Compliance: Saving access logs to secure systems and complying with mandatory legal requests.

4. Data Storage, Security and Destruction

• Data Protection Measures: The Site protects logs and location coordinates using secure connection protocols (SSL/TLS), database protection, and strict administrative access controls.
• Deletion upon Session Closure/Withdrawal: When a session is closed or a user account is deleted, all temporary study data—including avatar setups, active goals, nicknames, and location coordinates—is immediately and permanently destroyed.
• Streaming Token Disposability: Disconnecting Spotify or YouTube Music instantly and permanently removes authentication tokens from the server.
• Exceptions for Retention: Access logs may be kept for a limited time to block malicious users (spammers, hackers) and to comply with statutory retention laws, after which they are permanently deleted.

5. Contact Us

If you have any questions regarding privacy or technical support, please contact us at:

• Email: hello@studyatcafe.com