Privacy Policy

We collect the following personal information when you create an account and use the service.

• Email sign-up: email address, password (stored hashed), name (optional)
• Google sign-in: Google account identifier, email address, name, profile photo
• Kakao sign-in: Kakao user ID, nickname, profile photo, and email address (when registered with Kakao and shared with your consent)
• Automatically generated during use: access logs, IP address, browser type, cookies, visit timestamps, usage records
• When you comment: comment text, display name, profile photo, timestamp
• When you like a post: which post and when (other users see only each post's like count, not who liked it)
• When you comment as a guest: nickname, password (stored as an irreversible hash and used only to confirm deletion), comment text, timestamp. To prevent spam, your IP address is converted to an irreversible hash used only to limit how often comments can be posted; the IP address itself is not stored.
• When you follow or block: the members you follow or block, and when
• When you use messages (DMs): who you talk to, message text, when each message was sent and read, and your message settings
• Notifications: records such as who followed you and new comments by members you follow, and whether you have seen them
• When you report: who reported, what was reported, the reason and any detail you add, the text of the reported comment or message, and the page it was reported from

We use personal information only for the purposes below. If a purpose changes, we will ask for your consent again.

• Identifying you, keeping you signed in, and resetting your password
• Displaying content you create, such as comments (your name and profile photo are visible to other users)
• Providing follows, messages and notifications between members (your profile page shows other users your name, profile photo, join date, follower and following lists and counts, and the comments you have left)
• Protecting users through blocking and reporting, and acting on breaches of the Terms
• Preventing abuse, keeping the service stable, and handling disputes
• Analysing and improving how the service is used
• Serving personalised advertising through Google AdSense (see “Cookies and advertising”)

We keep your personal information until you delete your account, and erase it without delay afterwards, except where a law requires us to keep it for a set period.

• Account information (email, name, profile photo): until account deletion
• Comments and other posts: until you delete them or delete your account (author details are removed or anonymised on deletion)
• Guest comments and their hashed password: until the author deletes them with the password or the operator removes them
• Follows, blocks and message settings: until you remove or change them, or delete your account
• Likes: until you remove them or delete your account
• Messages: deleted as soon as both people in a conversation have left it. If only one of you leaves, it disappears from their list but stays with the other person. Because messages are also the other person's conversation history, they stay with that person after you delete your account (shown as from “Deleted user”) and are deleted when they leave the conversation. You can ask for earlier deletion via the contact email.
• Notifications: deleted automatically 90 days after they are created, and immediately when you delete your account
• Reports: 1 year after they are resolved, to prevent repeat abuse and handle disputes. They are kept for this period even if the reporter deletes their account.
• Access logs and IP addresses: 3 months, under the Protection of Communications Secrets Act
• Records of complaints or dispute handling: 3 years, under the E-Commerce Act

We do not share your personal information with outside parties, except when you have given prior consent or when a law enforcement or regulatory body requests it under a lawful procedure.

We rely on the following providers to run the service. Their servers are located outside Korea, so your information is transferred abroad.

• Google LLC (United States) — Firebase Authentication, Cloud Firestore, Cloud Storage: authentication and storage of account data and posts. Data: email, name, profile photo, social account identifier, comments, follows and blocks, messages, notifications, reports. Retained as described in “How long we keep it”.
• Google LLC (United States) — Google Analytics, Google AdSense: usage statistics and advertising. Data: cookies, access records, device information.
• Kakao Corp. (Republic of Korea) — Kakao Login: social sign-in.
• Vercel Inc. (United States) — website hosting: access logs, IP addresses.

We use cookies to provide a personalised experience. A cookie is a small piece of data a website stores in your browser. You can refuse or delete cookies in your browser settings, though some features such as staying signed in may then stop working.

We show advertising through Google AdSense. Google and other third-party vendors use cookies to serve ads based on your visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings (https://www.google.com/settings/ads). See Google's advertising policy (https://policies.google.com/technologies/ads) for details on how Google handles data.

We also use Google Analytics to collect aggregated usage statistics. This data does not identify you personally. You can opt out with the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).

You may at any time ask to access, correct, or delete your personal information, to stop its processing, or to withdraw consent (delete your account). Send your request to the contact email below from the address registered to your account so that we can verify it. We will act without undue delay.

Once signed in, you can change your name and profile photo, unblock members, set who can message you, and delete your account yourself on the Account settings page. Follows and blocks can also be removed from each member's profile.

When the retention period ends or the purpose is fulfilled, we erase the information without delay. Electronic records are deleted irrecoverably, and paper records are shredded or incinerated.

We take the following measures to keep your information safe.

• Passwords are hashed by Firebase Authentication and cannot be read even by the operator.
• All traffic is encrypted over HTTPS.
• Database access is restricted by security rules, and administrator accounts are kept to a minimum.
• Security rules let only the two people in a conversation read its messages. The operator does not read conversations, except messages shared with us through a report or where a lawful request requires it.

We do not accept sign-ups from children under 14 and do not knowingly collect their personal information. If we learn that such information has been collected, we delete it immediately.

We have designated the following person to oversee personal information handling and to address complaints and remedies.

Data protection officer: Meydan operator · Email: neondr0812@gmail.com

For reports or consultations on privacy violations in Korea you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

If this policy is added to, removed from, or amended, we will post a notice on the site at least 7 days before it takes effect. Changes that materially affect your rights will be announced at least 30 days in advance.