Personal information consent

Effective date 2026-10-07

This document is a translation provided for convenience. If there is any discrepancy between this translation and the Korean original, the Korean original prevails.

The Company collects and uses personal information as follows to provide the Dear Place service.

1. Items Collected

- Required: email address (the ID you verify directly or that is received through social login), the account identifier for social login, a password hash for email login (the original password is not stored), nickname, sign-up date and time, and terms consent records

- Email verification and security: the email address being verified, hashes of one-time verification codes and sign-up proofs, expiry times, number of failed attempts, and irreversible hashes of email addresses and IP addresses used for rate limiting

- Optional: saved signatures, profile photo URL

- Information generated while using the Service: Notes you leave and their spots, the signature, whether to show the date, and the date format chosen at the time of posting, review results of submitted posts and the original text of rejected posts (including the author's Member ID and writing location), report reasons and outcomes (including the reporter's Member ID), review appeal reasons and responses, and usage restriction records, post hiding and author blocking records (post IDs and internal user identifiers)

- Automatically generated information: access date and time, access IP address, app version, operating system version, device model name, and the fact that location information was used (date and time, and purpose; coordinates are not recorded)

- Public landing page visit statistics: when a page is displayed, the access time, IP address, page path and language, browser, operating system and device type and User-Agent, and referring site address (the referrer's domain) are collected to analyze visits and traffic sources. No statistics cookies or persistent visitor identifiers are used, and this data is not linked to Member accounts or app locations. Search terms, query strings, and hash fragments in URLs and the detailed paths of referring pages are not stored. Depending on browser settings, the referring site may not be identifiable.

- Location: the device's location while you are using the app. How it is used and how long it is retained are governed by the Location-Based Service Terms.

2. Items Not Collected

- The real name, phone number, and profile photo of your social account. They are not stored even if the social account provider sends them.

- Movement paths. Locations received when finding, reading, or reporting nearby Notes are used only for the location check and are not stored.

3. Purposes of Use

- Identifying Members (email ID), keeping you signed in, sending email verification and password reset emails, and linking multiple sign-in methods that use a verified email address to a single account

- Providing the Note service (including viewing your own Notes and limiting how many Notes you can write)

- Pre-publication review, handling reports and appeals, preventing fraudulent use, usage restrictions, and restricting re-registration after account deletion or usage restrictions

- Fulfilling legal obligations such as retaining access logs

4. Retention Period

Personal information is destroyed immediately upon account deletion. However, the information below is retained for the period stated and then destroyed.

- Temporary email verification data: verification codes are valid for 10 minutes, and the sign-up proof issued after verification for an additional 10 minutes. Deleted once used; expired data is cleaned up on a 1-hour cycle. Rate-limiting hashes are valid for up to 1 hour and cleaned up on a 1-hour cycle

- Access logs (access date and time, IP address, device information): 3 months (Protection of Communications Secrets Act)

- Records confirming the use and provision of location information: 6 months (Location Information Act). Destroyed immediately upon account deletion

- Review records (including the original text of rejected posts): 1 year. Upon account deletion, the author and writing location are removed immediately

- Report and appeal handling records: 1 year from the date handling is completed

- Re-registration restriction: upon account deletion, the email address and social account identifiers are deleted immediately, and only irreversibly transformed values of them are retained for 30 days (if the account was deleted during a usage restriction, until the restriction ends; for a permanent usage restriction, indefinitely)

- Notes you left: erased over one week or kept without an author, according to the choice made when deleting the account

5. Right to Refuse Consent

You may refuse to consent to the collection and use of personal information. However, the required items are essential to the Service, so you cannot sign up without consenting to them. You can use all features even if you do not provide the optional items.