Privacy Policy

1. General

The operator (the "Operator") of Maegim (the "Service") complies with the Personal Information Protection Act and other applicable laws. This policy explains what personal data the Service processes, for what purposes and for how long, and how data subjects can exercise their rights. It applies to the Service (the website).

Privacy inquiries are received by email (woody.chiz@gmail.com). The Korean text of this policy is authoritative; the English text is provided for reference.

2. Personal Data Collected and How

The Operator collects the following personal data. Passwords are never collected or stored through any channel, and email is not collected for Kakao or Naver sign-in.

3. Purposes of Processing

Collected personal data is used only for the following purposes.

1. Identifying Members and maintaining sign-in state
2. Providing personalized features such as watchlists
3. Operating the community and maintaining order (handling prohibited conduct, rights-infringement reports, and temporary measures)
4. Responding to inquiries and reports
5. Fulfilling legal obligations

4. Retention and Destruction

① Personal data is destroyed without delay when a Member withdraws.

② Exception: records of content moderation are retained after withdrawal — as evidence of measures taken under Article 44-2 of the Network Act and for dispute response — in a form not linked to information that could directly identify the author.

③ Posts and comments a Member has deleted are no longer displayed to other users and may be stored only within the scope of the record-keeping purpose in Paragraph 2.

④ Method of destruction: personal data in electronic form is deleted in a way that makes recovery impossible.

5. Provision to Third Parties

The Operator does not provide personal data to third parties, except where a lawful request is made under applicable law.

6. Outsourcing and Cross-Border Transfer

① To perform the service agreement, the Operator outsources personal-data processing as follows. Because the processors are foreign corporations, the cross-border transfer details are disclosed in this policy pursuant to Article 28-8(1)3 of the Personal Information Protection Act.

② Data subjects may refuse the cross-border transfer by email (woody.chiz@gmail.com). However, since these processors are essential infrastructure for providing the Service, refusing the transfer makes Member features unavailable; the Operator will guide you through withdrawal and destruction.

7. Automatic Collection and Similar Technologies

① Cookies: the Service uses a single functional cookie (NEXT_LOCALE) to remember your language setting, and no advertising or tracking cookies. You can refuse cookies in your browser settings, though your language choice may then not persist.

② Visit statistics (Vercel Web Analytics): anonymous statistics that use no cookies. The identifier used to distinguish visits is automatically discarded within 24 hours, and no personally identifiable information is collected.

③ Browser storage (localStorage): your recently viewed stocks are stored only on your device and are not sent to the server. Sign-in session data is stored on your device to keep you signed in. Both can be removed directly with your browser's clear-site-data feature.

8. Rights of Data Subjects and How to Exercise Them

① Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal data by email (woody.chiz@gmail.com); the Operator acts without delay after verifying identity. Rights may also be exercised through a legal representative or an authorized agent.

② You can disconnect your social account from the Service in the account settings of each social provider (Kakao, Naver, Google).

③ The Service does not accept sign-ups from children under 14 and therefore does not process children's personal data requiring legal-representative consent.

9. Security Measures

The Operator takes the following measures to process personal data securely.

1. Access control: database row-level security (RLS) restricts each user to viewing and editing only their own data
2. Data minimization: a design that collects only the minimum necessary items, e.g., email only optionally (Google sign-in only)
3. Admin access control: server-side verification of moderation privileges and tamper-proof (append-only) records of measures
4. Encryption in transit: all data is transmitted over HTTPS

10. Privacy Officer

The officer responsible for overall personal-data processing and for handling data subjects' grievances is as follows.

1. Privacy officer: the Maegim operator (in charge of all privacy matters)
2. Contact: woody.chiz@gmail.com

Data subjects may direct any privacy-related inquiry, complaint, or request for remedy arising from use of the Service to the contact above; the Operator responds and acts without delay.

11. Remedies for Infringement of Rights

If you need to report or seek counsel about a personal-data infringement, you may contact the following Korean authorities.

1. Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center: 118 (privacy.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency Cyber Bureau: 182 (ecrm.cyber.go.kr)

12. Changes to This Policy

Changes to this policy are announced on the Service at least 7 days before they take effect — or at least 30 days for changes with material impact on data subjects, such as changes to the items collected or the purposes of use. The history of previous versions is kept in the addendum.