ARVOTCGv1.1.75
Privacy Policy

Privacy Policy

Effective Apr 26, 2026

ARVOTCG (the “Service”) values your personal information and complies with applicable laws, including the Personal Information Protection Act of Korea. This policy explains what we collect and how we handle it. 한국어 버전 보기 (Korean version)

1. Information We Collect

The Service collects the following information for sign-up, service provision, and customer support.

a. Collected automatically via social login

  • Kakao — Kakao member number (service identifier), email (only if you consent)
  • NAVER — NAVER member identifier, email (only if you consent)
  • Google — Google account identifier (sub), email (only if you consent)

※ We do not collect profile photos, legal names, gender, age range, or phone numbers. Your in-service avatar and nickname are auto-generated at sign-up and can be changed at any time.

b. Information you enter while using the Service

  • Nickname (auto-generated, changeable)
  • Content and attached images of trade listings, feed posts, and direct messages
  • KakaoTalk ID entered in a trade listing (optional)
  • Bookmarks, owned avatars/backgrounds/frames, points, and draw history

c. Collected automatically

  • IP address (daily unique-visitor counting, deduplicated to one per IP per day)
  • User-Agent (browser/device type), referer, access path
  • Cookies — session persistence, analytics (Google Analytics), and advertising (Google AdSense, Kakao AdFit)

2. Purposes of Collection and Use

  • Member identification, login persistence, and abuse prevention
  • Providing features such as trading, posting, and messaging, and enabling communication between users
  • Visitor statistics, service improvement, and content analytics
  • Serving ads (personalized ads only with consent) and revenue analytics
  • Customer support and dispute resolution

3. Retention Period

In principle, personal information is destroyed without delay when you delete your account. Where retention is required by law, the following applies.

  • Member information (social identifier, email) — destroyed immediately upon account deletion
  • User-generated posts (trade listings, feed posts, messages) — anonymized upon account deletion by unlinking the author (retained for the statutory period where laws such as the Protection of Communications Secrets Act or the E-Commerce Act require)
  • Access logs and IP addresses — retained for 3 months under the Protection of Communications Secrets Act, then destroyed
  • Records of fraudulent use — retained for the applicable period when needed for dispute resolution or required by law

4. Provision to Third Parties

We do not provide your personal information to third parties, except in the following cases.

  • You have given prior consent
  • A lawful request is made by an investigative or administrative agency under applicable law

5. Data Processors

We entrust the following processors with data processing for service operation.

  • Supabase Inc. — database hosting (members/posts). Region: ap-northeast-2 (Seoul)
  • Vercel Inc. — web application hosting and image storage (Vercel Blob)
  • Google LLC — social login (Google), analytics (Google Analytics 4), advertising (Google AdSense)
  • Kakao Corp. — social login (Kakao), advertising (Kakao AdFit)
  • NAVER Corp. — social login (NAVER), map SDK (NAVER Cloud Maps)

These processors handle data only to the extent necessary for the stated purposes. For some services, data may be processed overseas (e.g., in the United States) where their servers are located.

6. Your Rights

You may exercise the following rights at any time.

  • Access — view your information directly on My Page
  • Correction — edit your nickname/profile directly on My Page
  • Deletion and suspension of processing — delete your account in the app (My Page > Withdraw) or contact us below
  • Withdraw consent to personalized ads — clear browser cookies or opt out with each ad provider

Personalized-ads opt-out:
· Google: adssettings.google.com
· Kakao AdFit: adfit.kakao.com/optout

7. Cookies

The Service uses cookies to provide a better experience. You can refuse cookies in your browser settings, but some features such as login may be limited.

  • Session cookies — login persistence (required)
  • Analytics cookies (_ga, etc.) — visitor statistics, Google Analytics
  • Ad cookies — Google AdSense, Kakao AdFit (personalized ads)

8. Security Measures

  • Encrypted transport (HTTPS) across the web service
  • Session tokens issued as HttpOnly/Secure cookies
  • Least-privilege access and secret management (isolated environment variables)
  • Rate limiting against abnormal access and periodic reviews

9. Children Under 14

The Service does not accept sign-ups from children under 14. If we learn that a member is under 14, we destroy the member’s information immediately.

10. Privacy Officer and Contact

For reports or counseling regarding privacy infringement in Korea, you may also contact:

  • Personal Information Infringement Report Center (privacy.kisa.or.kr / ☎ 118)
  • Supreme Prosecutors’ Office Cyber Crime Investigation (spo.go.kr / ☎ 1301)
  • National Police Agency Cyber Bureau (ecrm.cyber.go.kr / ☎ 182)

11. Notice of Changes

This policy is effective as of the date above. If any content is added, deleted, or amended due to changes in laws, policies, or security technology, we will announce the change at least 7 days before it takes effect.

Effective date: Apr 26, 2026. In case of any discrepancy between this English translation and the Korean original, the Korean version prevails.