Privacy policy (draft)

1. What we collect

• Sign-up: email, password (stored encrypted), nickname
• Guest posts: the nickname entered and the first two parts of the IP address (shown with the post)
• Event entry (optional): mobile number — only if a member enters it in My account and agrees
• Generated automatically: a one-way transformed IP value for abuse prevention (cannot be reversed to the original IP), access logs

2. Purpose

Identifying members, running the boards, preventing spam and abuse, and complying with law. Mobile numbers are used only to confirm event entry (one account per number) and to send prizes (gift cards).

3. Retention

Data is deleted without delay when you delete your account. A mobile number is deleted as soon as you remove it in My account or delete your account. Abuse-prevention records are kept for up to 2 days. Where the law requires retention, data is kept for that period.

4. Third parties and processors

We do not provide personal information to third parties, except that a mobile number may be passed to a gift card provider when sending a prize. We use Supabase (data storage) and Vercel (hosting) as processors.

5. Your rights

You may request access to, correction, deletion or suspension of processing of your personal information at any time.

6. Privacy officer

Name: [to be set] · Contact: [to be set]

This is a translation. If it differs from the Korean version, the Korean version prevails. Effective date: [to be set]