Privacy Policy

We collect the following personal information when you create an account and use the service.

• Email sign-up: email address, password (stored hashed), name (optional)
• Google sign-in: Google account identifier, email address, name, profile photo
• Kakao sign-in: Kakao user ID, nickname, profile photo, and email address (when registered with Kakao and shared with your consent)
• Automatically generated during use: access logs, IP address, browser type, cookies, visit timestamps, usage records
• When you comment: comment text, display name, profile photo, timestamp

We use personal information only for the purposes below. If a purpose changes, we will ask for your consent again.

• Identifying you, keeping you signed in, and resetting your password
• Displaying content you create, such as comments (your name and profile photo are visible to other users)
• Preventing abuse, keeping the service stable, and handling disputes
• Analysing and improving how the service is used
• Serving personalised advertising through Google AdSense (see “Cookies and advertising”)

We keep your personal information until you delete your account, and erase it without delay afterwards, except where a law requires us to keep it for a set period.

• Account information (email, name, profile photo): until account deletion
• Comments and other posts: until you delete them or delete your account (author details are removed or anonymised on deletion)
• Access logs and IP addresses: 3 months, under the Protection of Communications Secrets Act
• Records of complaints or dispute handling: 3 years, under the E-Commerce Act

We do not share your personal information with outside parties, except when you have given prior consent or when a law enforcement or regulatory body requests it under a lawful procedure.

We rely on the following providers to run the service. Their servers are located outside Korea, so your information is transferred abroad.

• Google LLC (United States) — Firebase Authentication, Cloud Firestore, Cloud Storage: authentication and storage of account data and posts. Data: email, name, profile photo, social account identifier, comments. Retained until account deletion.
• Google LLC (United States) — Google Analytics, Google AdSense: usage statistics and advertising. Data: cookies, access records, device information.
• Kakao Corp. (Republic of Korea) — Kakao Login: social sign-in.
• Vercel Inc. (United States) — website hosting: access logs, IP addresses.

We use cookies to provide a personalised experience. A cookie is a small piece of data a website stores in your browser. You can refuse or delete cookies in your browser settings, though some features such as staying signed in may then stop working.

We show advertising through Google AdSense. Google and other third-party vendors use cookies to serve ads based on your visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings (https://www.google.com/settings/ads). See Google's advertising policy (https://policies.google.com/technologies/ads) for details on how Google handles data.

We also use Google Analytics to collect aggregated usage statistics. This data does not identify you personally. You can opt out with the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).

You may at any time ask to access, correct, or delete your personal information, to stop its processing, or to withdraw consent (delete your account). Send your request to the contact email below from the address registered to your account so that we can verify it. We will act without undue delay.

Your name and profile photo can be changed directly in your Google or Kakao account settings; changes apply on your next sign-in.

When the retention period ends or the purpose is fulfilled, we erase the information without delay. Electronic records are deleted irrecoverably, and paper records are shredded or incinerated.

We take the following measures to keep your information safe.

• Passwords are hashed by Firebase Authentication and cannot be read even by the operator.
• All traffic is encrypted over HTTPS.
• Database access is restricted by security rules, and administrator accounts are kept to a minimum.

We do not accept sign-ups from children under 14 and do not knowingly collect their personal information. If we learn that such information has been collected, we delete it immediately.

We have designated the following person to oversee personal information handling and to address complaints and remedies.

Data protection officer: Meydan operator · Email: neondr0812@gmail.com

For reports or consultations on privacy violations in Korea you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

If this policy is added to, removed from, or amended, we will post a notice on the site at least 7 days before it takes effect. Changes that materially affect your rights will be announced at least 30 days in advance.