This English version is provided for convenience. If it differs from the Korean version, the Korean version applies.

Looner Community (the "Service") values your personal information and follows the Korean Personal Information Protection Act and related laws. This policy explains what we collect, why, how long we keep it and how we protect it.

1. Information we collect

  • Google login: your Google account ID and email address
  • Kakao login: your Kakao member number (we do not receive your name, photo or email)
  • Naver login: your Naver member ID (we do not use your name, photo or email)
  • Email login: your email address, and your password if you create one (we never store the password itself — only a one-way hash)
  • Information you enter: nickname, profile photo (optional), posts, comments, photos, upvotes and downvotes
  • Information created automatically: login session records, the IP address used to request an email code or used in a failed password attempt, and access logs kept by our service providers (IP address, browser information), and anonymous visit statistics collected without cookies (pages viewed, referrer, country, device type)

Location (GPS) and other embedded data are removed from photos before they are stored.

2. How we use it

  • To identify members and keep you logged in
  • To provide community features such as posting, comments and votes
  • To recognize the operator account
  • To prevent spam and abuse and keep the Service secure
  • To answer inquiries

3. Retention and deletion

  • Account information, posts, comments, photos and votes: kept until you close your account, then deleted promptly.
  • Email login codes and the requesting IP address: deleted one day after they are created. Codes stop working after 10 minutes.
  • Failed password attempts (email and IP address): deleted after one day.
  • Password: kept (as a one-way hash only) until you change it or delete your account.
  • Login session records: deleted when you log out or after 30 days.
  • Information the law requires us to keep is kept for the required period.

Deleted information is erased so that it cannot be restored.

4. Sharing with third parties

We do not sell or give your personal information to others, except when required by law, such as a request from investigative authorities.

5. Service providers and international transfer

We use the systems of the providers below to run the Service, so your information is stored and processed on servers outside Korea. It is transmitted over the internet when you use the Service and kept until you close your account or the arrangement ends.

  • Vercel Inc. (USA) — website hosting and photo storage, servers in Singapore — all items
  • Neon (USA) — database, servers in Singapore — account information, posts, comments and votes
  • Google LLC (Gmail) or Resend (USA) — sending email login codes (only if you use email login) — email address

If you do not want your information transferred abroad, you can choose not to join or close your account, but you will not be able to use the Service. Google, Kakao and Naver logins are handled under those companies' own privacy policies.

6. Cookies

  • Login cookie (30 days)
  • Language preference cookie (1 year)
  • Short-lived verification cookies used during login (10 minutes)

We do not use advertising or tracking cookies. You can block cookies in your browser, but you will not be able to log in.

7. Your rights

You may ask at any time to access, correct or delete your personal information, or to stop its processing. You can change your nickname and profile photo in Profile settings, and delete all your information with Delete account there. For other requests, use the contact below.

8. Children under 14

People under 14 cannot join, and we do not knowingly collect personal information from children under 14.

9. Security measures

  • We never store your password itself — only a one-way hash — and temporarily block logins after repeated wrong passwords.
  • Login records and verification codes are stored in a form from which the original value cannot be recovered.
  • All connections are encrypted (https).
  • Only the operator can access personal information.

10. Privacy officer

The operator of the Service is responsible for personal information. Please send privacy questions, complaints or requests for help to the contact below.

11. Getting help

You can also contact these Korean authorities about privacy violations: the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office (www.spo.go.kr, 1301) and the Korean National Police Agency (ecrm.police.go.kr, 182).

12. Changes

We will announce changes to this policy at least 7 days before they take effect. This policy takes effect on September 29, 2026.