Effective date: 2026-10-16
Privacy notice version: 2026-10-16.1
This is a previous version, in effect from 2026-10-16 to 2026-10-21. View the current version
유향 스튜디오 (YouHyang Studio) operates the Windows game Somewhere, Together, Somewhere, Together Playtest, and their online rooms and text chat. The two apps share online rooms and moderation, while each app's Steam ticket and access rights are verified separately. This policy explains the processing performed by the studio and its game servers. Separate notices apply to Flourish, Steam itself, and visits to the studio website.
1. Information and purposes
We do not ask for your legal name, address, telephone number, national identification number, Steam password, or payment card details to connect to the game. You can choose a nickname. Information you voluntarily put in messages, reports, or support requests may nevertheless identify you or someone else.
| Category | Information | Purpose |
|---|---|---|
| Steam authentication | Steam ID, authentication ticket, game access and authentication/restriction results | Identify the account, verify access, authenticate and renew the connection |
| Connection | Temporary user/session identifiers, a hash of the authentication token, expiry time, connection status | Maintain connections, reconnect, and manage duplicate connections |
| Profile | In-game nickname and selected cloak color | Show participants and identify message senders |
| Rooms | Room name, optional mood note, visibility, capacity, scenery, participants, seats, host and invitation code | List and join rooms, seat participants, invite friends and manage rooms |
| Text chat | Message text, sending time, temporary sender ID, nickname and cloak color | Deliver live messages to connected participants in the same room |
| Reports | Reporter and reported account Steam identifiers, reported nickname, room ID, category, optional explanation, time and processing status | Review reports and protect participants; earlier chat is not automatically attached |
| Moderation | Target identifiers/nicknames, restriction reason and end time, room removal targets, action time/type/target/reason and related report ID | Manage rooms, enforce restrictions and review actions |
| Connection protection | IP address during communication, request counts and hashes of identifiers such as the IP address | Establish connections and limit excessive requests |
| Support | Email address, request text and materials you choose to send | Answer requests, handle privacy requests and review appeals |
We process authentication, connection, profile, room and chat information to provide the online service under the Terms of Service you accepted (Korean PIPA Article 15(1)(4)). Report, moderation and connection-protection information is processed only as needed to operate the conduct rules and restrictions in the Terms and to protect the service and other users (Article 15(1)(4) and (6)). Support information is processed to answer your request and handle privacy requests (Article 15(1)(4)). You do not have to write a mood note, send chat messages or add optional report text to enjoy the scenery.
The current game has no advertising SDK, advertising identifier collection, microphone recording or voice chat. Selecting the currently available scenery does not upload user files. Features that are not currently offered, such as paid DLC sales, uploaded avatar models or scenery, and Workshop sharing, are not described as current processing; this policy will be updated if they are introduced.
2. What other people can see
Public room listings show the room name, mood note, capacity, participant count and scenery. Participants in the same room can see nicknames, cloak colors, seats, connection status and sent messages. Our server does not send account Steam IDs or reporter Steam identifiers to ordinary participants.
The Steam SDK supplies friend display names and connection/invitation information. We do not upload your entire friend list to our server. Joining a public room can set Steam connection information that lets friends join you. Private rooms do not advertise a public join capability in the same way, but an explicit invitation sends invitation information to the selected friend. Participants can separately save or share received messages and invitation codes, including from private rooms.
We do not maintain a server chat archive and cannot erase screenshots or copies saved independently by other participants. You can use the service without posting sensitive details, contact information, or someone else's personal data in room names, mood notes or chat.
3. Retention
| Information | Current retention and cleanup |
|---|---|
| Original Steam ticket | Used during verification, without a persistent ticket archive. A replay-prevention hash lasts 10 minutes |
| Authentication, connection and profile state | A 24-hour validity period from authentication or renewal. Continued use can renew it, extending the period; expired state is cleaned up |
| Rooms, seats, invitation codes and room-specific exclusions | While the room exists. During normal operation, a disconnected seat is reserved for about 45 seconds, and empty rooms are removed. Leaving a room does not by itself erase the separate authentication session |
| Ordinary chat text | No server transcript, chat file or database archive. The receiving game displays up to 60 recent items in memory and clears them on events such as changing rooms, ending the connection or exiting |
| Duplicate-send prevention | Request identifiers and content hashes for up to 10 minutes, without a message-text archive |
| Request limiting | IP-based authentication/connection limit hashes last one minute; other temporary counters expire with their short limiting windows |
| Reports and action records | A 30-day cleanup threshold from the record's creation; bounded record counts can remove some entries earlier |
| Active online restrictions | Until the selected 1-, 7- or 30-day restriction ends or is lifted |
| Server operational logs | Current cloud configuration: 14 days. The application logs startup status and aggregate server metrics, without intentionally logging chat text or authentication tickets |
| Support requests and attachments | Retained for 90 days after the request has been resolved, then removed. Records subject to a specific legal retention duty are handled separately for that purpose and period |
Cleanup requires the service to be running. Report/action expiry cleanup runs hourly or on the next change, so updates to stored records can lag by about an hour. If the service or database is stopped, cleanup resumes when operation resumes.
Automatic operational database backups are kept for one day. Manual snapshots or exported copies made for maintenance or server replacement, and the final snapshot left when a server is deleted, are deleted within 30 days of creation. Deleted records may remain in backups during that time, but backups are used only for recovery. If we restore from a backup, we reapply the retention rules above and any deletion requests received up to that point.
If a specific legal preservation duty applies, we will identify the relevant information, purpose and period and restrict its use. We do not assign blanket long-term retention periods to payment information we do not collect or ordinary conversations we do not archive.
4. Information on your PC
Your nickname, cloak color, language, sound/display settings and window preferences are saved on your PC. Automatic language selection reads the Steam game language and operating-system language without sending this selection to a separate analytics service. Settings are not automatically synchronized to a cloud service, and the main game and Playtest use separate local settings folders. Uninstalling the game does not necessarily remove its user data folder; you can separately remove the remaining local data.
When you agree to the Terms in the online notice, the Terms version, Privacy Notice version, confirmation time, acceptance scope and automatic-connection/solo choice are saved on your device. This choice record is not sent to the studio's servers or Steam. We do not newly save a separate age self-declaration or date of birth. The main game and Playtest keep these choices in their separate local settings.
The ordinary chat display is held in the running game's memory; the game does not create a chat-history file. If you explicitly enable the long-running diagnostic test option, performance and connection-state files are written locally. They are not automatically uploaded and can be deleted by you. Diagnostic files that you choose to attach to a support request become part of that request.
5. External services and processors
| Service | Role | Information involved |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, temporary room/connection storage, moderation database, backups and server logs | Game-server information described in this policy; the game-server storage region is Oregon, United States |
| Valve / Steam | Independent Steam account, friend and invitation services, and game authentication verification | Verification ticket/game identifier, Steam ID for access verification; friends/invitations use the Steam SDK |
| Support email service | Receive support requests and send replies | Email addresses, request text and voluntarily sent attachments |
Our AWS contracting party is Amazon Web Services Korea LLC, and game-server information is stored in the US Oregon region (Section 6). Support email is received through Google LLC's Gmail, and messages and attachments are cleaned up by the operator under the rules in Section 3. Steam account, download, friend and Steam payment processing is also described in Valve's Privacy Policy. The studio does not receive your Steam password or payment card details through these game features.
We do not sell your personal information for advertising. Any disclosure beyond the functions described here must have an applicable basis and appropriate notice.
6. International processing and transfers
The online game servers operate in the AWS Oregon region in the United States. Information needed for online features is therefore processed and stored in the United States.
| Item | AWS game-server processing |
|---|---|
| Country | United States |
| Recipient and contact | Amazon Web Services Korea LLC (AWS privacy contact: aws-korea-privacy@amazon.com) |
| Information | Steam ID and authentication/connection state, nickname/cloak color, room/seat/invitation information, live chat delivery information, reports/restrictions/action records and connection-protection information |
| Timing and method | During online authentication/use, reconnection/renewal and report/moderation actions, using encrypted communications |
| Purpose | Online rooms, chat, connection protection, moderation, hosting and recovery |
| Retention | The category-specific periods in section 3; ordinary chat is relayed without a transcript archive |
| Transfer basis | Outsourced processing and storage needed to provide the online service under the Terms of Service (performance of a contract), disclosed in this policy (Korean PIPA Article 28-8(1)(3)) |
| Refusal and effect | Not using, or ending, the server connection prevents further online use. Requests concerning information already processed can be made through section 8 |
Steam tickets and IDs are also transmitted to Valve's external authentication API for verification. This asks Valve to confirm the ticket and ownership it issued, and happens when you connect or renew a connection. The recipient is Valve Corporation (United States), the operator of Steam, which keeps and processes this information as the operator of the Steam service you signed up for, under its own Privacy Policy. You can contact Valve through Steam Support.
If you email us, your email address, message and attachments are delivered when you send them to Google LLC's Gmail (United States) and processed and stored on Google's servers in the United States and other countries. This storage is needed to answer you and is disclosed in this policy (Korean PIPA Article 28-8(1)(3)); it is kept under the rule in Section 3 (90 days after the request is resolved). Google privacy contact: googlekrsupport@google.com. If you prefer not to use email, you can call the number in Section 8.
When you first request online features, you can review the intended age range and links to the Terms and Privacy Policy before server authentication. If you do not agree to the Terms, or close the notice and choose to enjoy the scenery solo, you can view the scenery without connecting to the game server. Your solo choice is saved on your device and prevents automatic connection on the next launch. You can explicitly request online features again later. Choosing to disconnect and enjoy the scenery solo while connected ends the current connection.
If you have accepted the same document versions and selected automatic connection, later launches may automatically attempt Steam authentication and server connection. In this state, authentication and connection information is processed even if you have not joined a room. To request deletion or restriction of information already processed, use the contact in section 8.
7. Deletion and security
We remove expired temporary information and moderation information that is no longer needed. Information subject to a specific legal retention duty is restricted to that purpose. Backup expiry and restored-data cleanup follow the backup rules in Section 3.
Game-server communications use HTTPS/WSS. The Release temporary store and operational database use encrypted communication and storage encryption and are not directly accessible from the public internet. Administration requires authorization and an allowed network. Server authentication secrets are not included in game builds. The current game has no advertising-tracking cookies or SDKs; separate Steam and website notices cover their processing.
8. Requests and contact
You or an authorized representative can contact us to request access, correction, deletion, restriction of processing or withdrawal of applicable consent. We verify authority using only necessary information and handle requests under applicable law. Do not send your Steam password, Steam Guard codes or private keys.
There is no separate account-deletion screen in this game. Contact the studio about records held by the studio, and Steam about the Steam account itself or its purchase records. We cannot recover ordinary conversations that we did not archive. If a legal retention duty or another person's rights prevent us from fulfilling a request in full, we will explain the reason.
- Operator: 유향 스튜디오 (YouHyang Studio)
- Privacy officer: 김지원, Representative
- Complaints: handled directly by the representative
- Email: youhyangstudio@gmail.com
- Telephone: +82-70-8983-7614
For assistance or mediation in Korea, you can contact the Personal Information Infringement Report Center or the Personal Information Dispute Mediation Committee.
9. Children and young people
The online service is intended for people aged 14 and older. We do not currently offer a service directed at children under 14 or a parental-consent feature. Please use the contact in section 8 for questions about children's information.
The initial online notice displays the intended age range. It does not include a separate age-confirmation checkbox alongside the Terms checkbox. The game does not ask you to enter a date of birth or identity document, or provide an age-verification feature.
10. Moderation and policy updates
Reports do not automatically impose a restriction; an operator reviews them. Connection limiting, full-room rejection and authentication failures are automated protective processing. You can ask about restrictions or appeal through the contacts in section 8.
We will publish changes and their effective date on the website and keep prior versions available. Publishing an updated policy does not replace consent where separate consent is required for new processing.