Privacy Policy

1. Personal Data Collected and How It Is Collected

• At registration (required): email address, display name, password (stored one-way encrypted), beta invite code
• Collected automatically during use: access logs (IP address, access time), cookies, service usage records

Social sign-in (e.g., Google) is not currently offered; if introduced, this policy will be updated accordingly.

2. Purposes of Processing

• Identifying Members, confirming registration and managing accounts
• Providing and operating the Service and responding to inquiries
• Preventing fraudulent use and ensuring service stability
• Analyzing usage statistics to improve the Service (Google Analytics — see Section 5)

3. Retention Period

• Personal data is destroyed without delay when a Member closes their account.
• However, data required to be retained by law is kept for the prescribed period (e.g., access logs for 3 months under the Protection of Communications Secrets Act).

4. Provision to Third Parties

The Operator does not provide personal data to third parties, except where lawfully required under applicable legislation.

5. Outsourcing and Cross-Border Transfers

The Operator entrusts the following providers with processing personal data to deliver the Service; some processing occurs outside Korea.

• Amazon Web Services, Inc. — data storage and server operation. Data is stored in the Republic of Korea (Seoul region).
• Vercel Inc. (USA) — website hosting and content delivery. Web request information (such as IP addresses) is transmitted and processed when you access the Service.
• Google LLC (USA) — usage analytics (Google Analytics 4 / Google Tag Manager). Cookie-based usage records and an internal identifier (UUID) for signed-in Members are transmitted; directly identifying data such as email addresses is never sent. Advertising use and ad personalization features are disabled.

Users may refuse cross-border transfers of their personal data, in which case use of the Service may be limited. Refusal requests can be sent to the privacy officer contact below.

6. Destruction of Personal Data

Personal data whose retention period has expired or whose processing purpose has been fulfilled is deleted without delay using irreversible methods.

7. Your Rights and How to Exercise Them

Users may at any time request access to, correction or deletion of, or suspension of processing of their personal data by contacting the privacy officer below. The Operator will act on requests without delay.

8. Cookies

The Service uses cookies for the following purposes:

• Authentication cookies to keep you signed in
• A language preference cookie (NEXT_LOCALE)
• Google Analytics cookies for usage statistics

You can refuse cookies in your browser settings, though some features such as sign-in may then be unavailable. No cookies are used for personalized advertising.

9. Security Measures

• One-way encryption of passwords
• TLS (HTTPS) encryption in transit
• Least-privilege access controls

10. Privacy Officer

• Officer: Privacy Officer
• Contact: buzzwide2025@gmail.com

For consultations or reports regarding personal data infringement in Korea, you may contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118).

11. Changes to This Policy

Changes to this policy are announced on this page at least 7 days before taking effect.

Effective date: July 5, 2026