SAGAWORKS · US SERVICE
Privacy Notice
Updated: September 26, 2026
US Gold checkout is available to signed-in US members. This notice also describes Live payment records.
1. Information
Public Powerball history, number selection, recommendations, and comparisons need no account. Hosting and security systems may process request time, IP address, browser and connection information, and security signals.
When US registration is enabled, the service processes email, nickname, a one-way password hash, an internal US member number, security and account status, join time, failed-login count, and temporary lock time. Email verification tokens are stored as SHA-256 hashes with creation, expiration, and one-time-use status; the original token is not stored.
The US account database is separate from Korean membership. US member numbers, status, membership periods, payment orders, and AI usage limits are not shared with another country service.
Saved combinations
When you save a combination, we store its five white balls, Powerball, scheduled draw date, creation time, and your internal US member number. These records let you revisit your selections and compare them with published results. You can delete your saved combinations from My numbers; closing your US account also removes them. The list shows your latest 200 saved combinations.
Optional Gold AI explanations
When this feature is enabled and you request it, OpenAI receives your selected numbers and calculated public draw statistics to produce an English explanation. We do not include your email, nickname, password, or internal account identifier in that request. We retain the validated explanation, its saved-combination reference, the public-data date, and internal member and pass references so you can reuse the result without another paid analysis. Request time, success or failure status, and reported input/output token counts support usage limits, cost monitoring, and abuse prevention. Deleting a saved combination does not reset usage limits; account closure removes these private AI records. We do not store the prompt body or raw provider response in these records.
Community
Posts, comments, attached images and your nickname are public. We store your US member reference, content, timestamps, votes, reports and moderation decisions to operate the boards and prevent abuse. Uploaded images are resized and re-encoded; originals and their metadata are not retained. Do not post private contact, payment or identity information. Closing your account removes your post and comment text, image references and votes; limited report and moderation records remain for abuse handling. Image files are deleted on a best-effort basis and inaccessible orphan files are subject to operational cleanup.
2. Sandbox checkout
The public USD 1.00 test keeps a short-lived browser session in server memory and grants no membership. The signed-in USD 3.99 test stores a member-owned server reference, expected amount and currency, PayPal Sandbox order and capture IDs, state, timestamps, separate Sandbox entitlement end time, and verified refund-event IDs and status.
PayPal processes Sandbox test-account and checkout information. SAGA WORKS does not store a PayPal password or card number. Sandbox funds are virtual.
Live PayPal checkout
When Live checkout is enabled, PayPal processes your payment and provides us with the order and capture identifiers and payment status. We store your internal US member number, server order reference, price and currency, PayPal order and capture IDs, order status and timestamps, and the start and end of the access granted by that order. For verified refund, reversal and dispute notices, we store the PayPal event and resource IDs, event type, related order and member, receipt time and review status. We use these records to confirm payment, prevent duplicate processing, adjust access after a full reversal, and review partial refunds and disputes. Partial refunds and disputes do not automatically adjust an already granted pass.
3. Purposes
- Provide public draw data and analysis.
- When enabled, verify email ownership, create and secure a separate US account, and maintain login.
- Verify Sandbox tests and Live payments, prevent duplicate processing, and reconcile verified reversals.
- Provide requested Gold AI explanations and enforce the pass allowance.
- Protect availability, investigate faults or abuse, and answer support requests.
4. Service providers
- Microsoft Azure: hosting and database infrastructure. Azure Communication Services Email has a confirmed United States data location and receives the destination address and verification message when registration is enabled.
- Cloudflare Turnstile: processes IP, browser, TLS, site, and connection signals for bot detection when registration is enabled. See its privacy information.
- PayPal: processes virtual Sandbox tests and, when Live checkout opens, real US Gold payments and related refund or dispute information.
- OpenAI: receives selected numbers and calculated public draw statistics only when a Gold member requests a personal AI explanation; we do not send account identifiers in that request.
- Google Gmail: customer-service email processes sender address, message, and attachments on systems that may operate globally. See Google's policy.
This notice does not claim that a supplier is limited to one country or that an unverified regional or contract term applies.
5. Retention and deletion
An unused verification link becomes unusable after 30 minutes, and a used link cannot be reused. Used or expired registration records are eligible for automatic deletion 24 hours after creation. The service checks hourly while running; delayed cleanup resumes when the service restarts. This short retention supports email delivery limits.
Sandbox and Live order and webhook records are retained to verify transactions, prevent duplicates, and investigate refund or dispute requests, subject to applicable record-keeping requirements. Support messages are kept only as needed to respond, operate the service, or handle a complaint or dispute, subject to provider and legal-retention exceptions.
6. Cookies and safeguards
Essential cookies support US login and request-forgery protection. Safeguards include encrypted transport, one-way password hashing, hashed verification tokens, HttpOnly and Secure cookies, access controls, a separate US account database, and server verification of payment state.
7. Requests and changes
Requests to access, correct, delete, or restrict account information may be sent below. When signed in, you can close your US account from your profile by confirming your current password and the closure phrase. Closure removes your email, nickname and password hash, ends US access, and invalidates existing sessions. A deactivated member number and limited Sandbox and Live transaction records remain for numbering, duplicate prevention, refund reconciliation and dispute review. Material data or feature changes will be reflected here.
Operator and privacy contact
- Business
- SAGA WORKS (사가웍스)
- Representative and privacy contact
- 임현정
- Business registration number
- 775-05-03839
- Address
- 제주특별자치도 제주시 애월읍 고내안길 2, 502호(건우연립), Republic of Korea
- Phone
- 010-7928-1719
Password recovery
When password recovery is enabled, Azure Communication Services Email sends a reset link and Cloudflare Turnstile checks the request. We store a one-way hash bound to the US account and its current security state, together with the email address and creation, expiry and use times. Links expire after 30 minutes, are single-use, and become invalid when the account security state changes. These records share the 24-hour retention and hourly cleanup described above. Resetting a password ends existing US sign-in sessions.