GolfCutGolfCut Privacy Policy
1. What is not processed
Analysis, review and highlight export all run on your own PC. Video, images, previews, audio, review history (keep, drop, trim) and personal-taste learning data are never sent to the Operator or to any third party. The App sends no usage statistics or automatic error reports. If opt-in collection of numeric data is introduced later, this policy will be updated first and consent asked for in the App.
2. Personal data collected, purpose and retention
| When | Data | Purpose | Retention |
|---|---|---|---|
| Buying Pro | Name, email, payment details, country and tax details, order history — collected and processed by the payment provider (Lemon Squeezy). The Operator sees name, email, order number and license key in its dashboard. | Fulfilling the contract, issuing the license, invoices, refunds, identifying the customer | As required by Korean e-commerce law (contract, payment and supply records: 5 years) |
| License activation and checks | License key, a PC identifier (SHA-256 hash of the PC name and the Windows installation ID — the originals are not sent), activation time. Stored in the App as license.json. | Enforcing the 2-PC limit, checking license status | While the license is valid. "Deactivate on this PC" deletes that PC's activation record. |
| Problem report (Pro, only when you send one) | App log (user-folder paths masked), system info (Windows version, CPU, memory, App version, language), engine info (encoder, decoder), license status with a partially masked key, key hash and activation ID, job summary (number of videos, analyses, settings), analysis numbers (detection times, scores, flags, clip ranges — video file names are hashed, your captions are masked) and the description you type. Video, images and previews are never included. | Fixing the problem, improving detection rules and the App | 12 months after receipt, or immediately on your request |
| Automatic updates | When the App asks GitHub for the latest version, GitHub processes your IP address and request details under its own policy. The Operator receives nothing. | Finding and downloading new versions | Not held by the Operator |
| Visiting the Site | Cloudflare processes access logs (IP address and similar) for hosting and security. The Site uses no cookies and no analytics. | Serving and securing the Site | Per Cloudflare's policy |
| Emailing us | Your email address, name if given, the message and attachments | Answering your request | 1 year after the matter is closed |
Data is deleted without undue delay once the retention period ends or the purpose is fulfilled (electronic files are erased irrecoverably).
3. How a problem report travels
Nothing is sent until you open App Settings → "Report a problem…", see the list of what is included and click "Send". The same content is first saved as a zip on your PC so you can inspect it. A sent zip is stored in the Operator's Cloudflare R2 bucket under your customer identifier, and a summary with the zip is forwarded to the Operator's Telegram notification chat. Keep the receipt number; it lets us find and delete the report on request.
4. Processors, third parties and international transfer
The Operator does not sell personal data. The following services process data to the extent needed for the purposes above; all are located outside Korea (mainly in the United States).
- Lemon Squeezy, LLC (US) — payment, taxes, invoices, license-key issuing and validation. As Merchant of Record it applies its own privacy policy.
- Cloudflare, Inc. (US, global edge) — Site hosting, the problem-report endpoint and storage (R2), email forwarding for [email protected].
- GitHub, Inc. (US) — installer distribution and update checks.
- Telegram — delivery of problem-report notifications (summary and zip) to the Operator.
No other disclosure is made except where required by law.
5. Your rights
You can ask at any time to access, correct, delete or restrict the processing of your personal data. Email [email protected] with your order email (or receipt number) and we will act without undue delay, at the latest within 10 days. Activation records can be deleted yourself with "Deactivate on this PC" in the App. Purchase data held by the payment provider can also be managed in its My Orders page. Residents of the EEA and similar jurisdictions also have the rights granted by their local law (objection, portability, complaint to a supervisory authority).
6. Data that stays on your PC
For transparency, here is where the App writes on your PC. All of it is yours and can be deleted after uninstalling.
%APPDATA%\golfcut-app— jobs (video list, settings), analysis results, previews, review history, App log, saved problem-report zips%APPDATA%\golfcut— the license file%LOCALAPPDATA%\golfcut\work— audio extraction cache%LOCALAPPDATA%\golfcut-app-updater— downloaded update installers
7. Security
All transfers are encrypted with HTTPS, and the problem-report endpoint accepts reports only from Pro users after a license check. Storage access is limited to the Operator's account, and potentially sensitive data such as video is never collected by design.
8. Children
The App and the Site are not directed at children under 14, and we do not knowingly collect their personal data.
9. Privacy contact
[개인정보 보호책임자 성명 / Privacy officer] · [email protected] · [주소 / Address]
10. Changes
Changes to this policy are published on the Site with their effective date; changes that add data items or purposes are announced at least 7 days in advance. This policy is effective from 2026-10-06.