Privacy policy

This site works without third-party advertising and without third-party analytics scripts. A voluntary portal statistic counts views and selected actions without a visitor ID. Whatever data is processed anyway is listed here — completely, and in the order in which it happens.

Controller

Severin Lüdcke, Jinjja World, Goethestraße 42, 73630 Remshalden, Germany
Email: hello@jinjja.world — see the imprint. No data protection officer has been appointed; the requirements of § 38 of the German Federal Data Protection Act (BDSG) are not met.

When you simply visit the site

The server processes the technically necessary connection data (IP address, time, requested address, browser identifier). The legal basis is Art. 6(1)(f) GDPR — the interest in being able to deliver the site at all and to detect attacks. For the visitor count without cookies, this data is only processed briefly; see below.

No cookies without a reason. If you only read, you don’t get one. The fonts are hosted on our own server; nothing is fetched from Google Fonts or any other CDN.

Visitor count without cookies

So that we know how many people use the portal and the game, our own server counts visits — without a cookie, without storing anything on your device and without third-party services. When a page is requested, the server combines your IP address and your browser identifier with a random value that is newly generated every day and derives a one-way identifier from them (SHA-256, truncated). Its only purpose is to make sure the same browser counts as one visitor per day. The IP address itself is not stored for this. The random value and the identifiers are deleted at the end of the day (on the first request after midnight); after that, no identifier can be linked to an address any more, and visits on different days cannot be connected with each other.

Only daily counters are kept: the number of visitors and page views, the rough source (search engine, social network, other website, direct), for referrals from other websites only their domain (never the path or search term), the site section, the portal page requested and the device class (phone, tablet, computer). Requests from search engine crawlers and similar programs are counted separately. In the game we also count how many accounts entered the game world on a given day, how many of them are new and the maximum number online at the same time; here too, a one-way identifier is formed from the account ID only with the daily value and deleted with the day.

We keep the daily counters for 400 days and the list of requested pages for 90 days. The numbers are only visible to the editorial team in the protected admin area; they are not passed on and not combined with any other data. The legal basis is Art. 6(1)(f) GDPR — our interest in knowing the reach of the portal and the game without building profiles. If your browser sends the “Global Privacy Control” or “Do Not Track” signal, we don’t count your page views. Regardless of that, you can object to this counting at any time (Art. 21 GDPR).

Images from third parties

Posters, stills and portraits in the editorial catalog are partly loaded directly from the source’s servers — mostly image.tmdb.org (TMDB, USA). The respective provider learns the IP address and browser identifier of the request.

This can’t be switched off without making the site unusable: a catalog without posters isn’t a catalog. That’s why it’s stated here and not in the consent banner — pretending there’s a choice where there isn’t one would be the worse solution. The legal basis is Art. 6(1)(f) GDPR.

Consent and storage on your device

Necessary

Payload’s session cookie — only after you log in, valid for 30 days, httpOnly and not readable by JavaScript. Plus the storage of this choice itself. Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG); no consent required.

Convenience

kcp.territory in local storage: the country last chosen in the “Where to stream?” box. Only with consent; without it, the box starts over with the default country on every visit.

Statistics on the portal

Only with your consent do we count public page views, clicks to Jinjja World and to the game entry, trailer starts and solved listening exercises on the portal. We also count successful email confirmations of new accounts if the current statistics consent exists in this browser at the time of confirmation. Only a daily counter is increased; email address, account ID and confirmation link do not enter the statistics. These confirmations are not attributed to any source or ad. Older consents do not activate this added purpose. Only defined page groups, the type of action and a rough source category (search engine, social network, internal, direct or other) are transmitted. The original referring address, search terms, account data and form entries are not transmitted. For the portal statistics, our server stores only daily counters — no individual visits, IP addresses or visitor IDs. Counters older than 370 days are removed at the next count. The legal basis is your consent (Art. 6(1)(a) GDPR).

You can withdraw a given consent at any time using the “Privacy settings” button in the page footer (Art. 7(3) GDPR).

Voluntary game statistics in Jinjja World

This additional measurement has been active since 26 September 2026. It has its own consent in the game; consenting to the portal statistics does not switch it on.

We want to find out whether new game accounts reach the world and then successfully complete a first learning activity. You decide on this separately in the game settings. The measurement is switched off there by default; you can play regardless of your decision. A consent is valid for one year at most. The legal basis for the voluntary measurement is your consent (Art. 6(1)(a) GDPR).

With consent, we count the confirmed display of the game world and the first learning success afterwards that the game accepts and saves, each once per account. Merely logging in, creating a profile, opening a task, story progress and failed attempts do not count. Game profiles created before activation on 26 September 2026 are not recorded retroactively.

For this, the game server stores on the account your choice with version and time, the time of the first recorded world entry and a yes/no marker for the recorded learning success. This link to the account prevents double counting; storage in the game is therefore not completely anonymous. No lists of individual answers, words, tasks or places visited are created for these statistics. Email address, display name, advertising and visitor IDs are not stored for them.

Only the UTC date and the two daily counts reach the internal statistics for the portal’s editorial team and operations. The account markers are not transmitted. There is no link to your original portal visit or to any ad. Daily numbers are kept for 370 days and removed during the daily clean-up.

You can withdraw your consent at any time in the same game settings. After that, no further game events are counted for these statistics. Your stored choice and any account markers already set remain until the account is deleted; they are not supplemented with further game events and prevent double counting if you consent again later. When the account is deleted, these entries are removed as well. Daily numbers that have already been aggregated contain no account ID and remain until the end of their retention period. Withdrawing the portal statistics in the page footer is a separate choice.

Account, ratings and watchlist

You can read the public portal without an account. An account is required for Jinjja World and personal account features. We store your email address, a password hash and a display name you choose. The legal basis is Art. 6(1)(b) GDPR. Ratings and watchlists are linked to the account and to nothing else.

Deletion. In your account under “Delete account” — or on request to the address above. For security, you confirm the deletion via a link we send to the account’s address. After that, the account and all data belonging only to it are removed in one go: ratings, watchlist, your own lists, friendships and your entire progress in Jinjja World. Remains stay in our backups until they expire: game progress after 14 days, account data after 7 days.

Information about people

This site has profile pages for actors, directors and hosts of Korean productions. The following is information under Art. 14 GDPR — the data was not collected from the people concerned themselves.

What data

• Name, where applicable in Korean script and romanization
• A reference to a portrait photo at the source provider
• Participation in productions, including role and number of episodes
• Identifiers in public film databases

Not recorded are address, contact details, place of birth, information on health, religion, political views, relationships or criminal proceedings.

Where from

From publicly accessible film databases, mostly TMDB.

Why

Art. 6(1)(f) GDPR. The interest is making Korean productions findable through the people who worked on them. The presentation is limited to professional activity — the sphere in which being mentioned must usually be accepted.

How long

For as long as the related productions are listed in the catalog.

Correction and deletion

Anyone who wants information about themselves corrected or their profile page removed can write to hello@jinjja.world with a link to the page concerned. Proof of identity is only requested where there are reasonable doubts (Art. 12(6) GDPR). We reply within one month.

The right to object under Art. 21 GDPR also applies. Since the processing is based on a legitimate interest, an objection on grounds relating to your particular situation is enough — it doesn’t need to be justified in order to be examined.

Jinjja World (the game)

The “Play” button in the page header takes you to the game at game.jinjja.world, operated by the same controller. A Jinjja account is required; there is no guest access. Portal and game use the same account but manage their sessions separately. The link to the game passes neither login data nor a character in the address. Logging in to the game is verified by its server with the portal. The resulting game session with account ID, display name and signed session token is stored in the game’s local browser storage. You create and manage your character in the game.

The game creates save data (progress, inventory, quests, friendships) and, while you play, transient data such as position, chat lines and presence. This is stored in a database on the same server. The legal basis is Art. 6(1)(b) GDPR.

Voice chat. If you switch it on, a direct connection to the other participants is established. If that fails, a relay on the same server forwards the packets. In the process, the IP addresses of those involved become visible — this is technically unavoidable for voice connections. Conversations are not recorded.

The game website jinjja.world

At jinjja.world we present the game. The controller is the same as for this portal (see above); the imprint also applies there. The site is hosted on the same server in Frankfurt am Main (see “Hosting and logs”).

When you simply visit it, jinjja.world is a static site without cookies. Fonts, images, sound and videos come from our own server; no third-party services are embedded. When delivering the site, the server processes the technically necessary connection data just like the portal: the IP address only for delivery and for an abuse limit (number of requests per address, in memory only). The access log contains no IP addresses and no identifiers, only time, request type, address without query string, response code, duration and size. Which language version the start address opens depends on your browser’s language setting; it is not stored in the process. The legal basis is Art. 6(1)(f) GDPR.

In your browser, the site remembers your progress in the small exercises (words heard and collected, points), the chosen language and the name you enter on the ID card — in local storage (localStorage); session storage (sessionStorage) only records whether the intro animation has already played. None of this is transmitted; it stays in your browser until you delete it there or reset your progress on the site. The legal basis for this storage in the browser is Section 25(2) no. 2 TDDDG: it is strictly necessary for the features you use on the site.

Account via the ID card. If you create a Jinjja account via the ID card on jinjja.world, your email address, password and the name entered (as display name) — plus the answer to the math question against automated sign-ups — go via the game server game.jinjja.world to the Jinjja account, the same way as when registering in the game. What is then stored and for how long is described under “Account, ratings and watchlist” and “Jinjja World (the game)”. The legal basis is Art. 6(1)(b) GDPR. Like every registration, this one is not attributed to any source or ad.

Links from this portal to jinjja.world carry the addition ?von=portal-… with the place they come from (for example portal-serie). It says nothing about you; the site doesn’t read it, and the access log omits it like any query string.

Live lounges and chat on the portal

In the live lounges, those present see the display names of the others and the lines written. Both are kept only in the server’s memory and are gone after the session ends or after a restart; they are not written to the database and not analyzed.

Friendships and your own lists

A friend request stores who sent it and who received it, along with its status and time. Either side can end it at any time; the entry then disappears.

Anyone who publishes a list makes its title, description, entries and their own display name publicly visible. Unpublished lists are only visible to your own account.

Our own videos and audio samples

The Jinjja World trailers, film scenes and Korean audio samples on the new game and learning pages are loaded from our own server. No third-party player is embedded for this. Optional counting of trailer starts and solved portal listening exercises depends on your statistics choice.

Videos from YouTube

Third-party trailers and music videos in the editorial catalog may be YouTube embeds. They load only on click: until then, a preview image is shown and no request is sent to YouTube. After the click, the browser loads the player from youtube-nocookie.com; Google learns the IP address and browser identifier. The legal basis is consent given by the click (Art. 6(1)(a) GDPR).

Hosting and logs

The site runs on a server of OVH SAS (2 rue Kellermann, 59100 Roubaix, France) in the Frankfurt am Main data center. The data is therefore located in Germany; a data processing agreement under Art. 28 GDPR is in place.

The web server writes an access log without IP addresses and without identifiers: time, request type, requested address without search terms, response code, duration and size of the response. Browser identifier, referring page and cookies are not logged. The log serves only to detect faults and overload; it cannot be used to tell who requested a page. Like the technical operating messages of the services, which also contain no IP addresses, it rotates automatically (at most 5 × 20 MB per service). System messages of the server are deleted after 30 days. Database backups stay on the same server for 7 to 14 days.

Your rights

• Access to the data stored about you (Art. 15)
• Rectification of inaccurate information (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7(3))
• Complaint to a supervisory authority (Art. 77)

Recipients

No data is passed on for advertising or analytics purposes. Data is only exchanged insofar as the browser contacts the servers of the respective source directly when loading images (see above) and the hosting provider technically delivers the site.

As of 28 September 2026. This policy describes the actual state of the software. It is not legal advice and should be reviewed by a lawyer before the public launch.