1. Information collected and purpose of use

• Email address — collected only when you enter it yourself, for sign-in and identity verification. Used to send you a verification code, and stored in encrypted form in the database.
• Device key — a random identifier generated in your browser to distinguish signed-in devices and synchronise your data across them. Retained as sign-in history together with the access time and active status.
• Your saved data — owned list, wishlist, memos, and purchase prices you enter. Stored on the server only if you sign in and use synchronisation.
• Visit statistics — a visitor identifier and session identifier generated in your browser, the page paths you visit, the referrer, and a device-type classification (mobile, tablet, desktop). IP addresses and User-Agent strings are not stored in the database; the User-Agent is discarded immediately after the device type is derived. IP addresses may still appear in web server and CDN access records.
• Locally stored data — the product catalogue cache and display settings such as theme and filters are stored in your browser's IndexedDB and localStorage and are not transmitted to the server.

2. Cookies and advertising

The Site displays third-party advertising through Google AdSense to cover operating costs. Google and its partners may use cookies and similar technologies to serve those ads.

Google may serve ads based on your visits to this and other sites. You can turn off personalised advertising in Google's Ads Settings.

• Google Ads Settings: https://adssettings.google.com
• How Google uses cookies in advertising: https://policies.google.com/technologies/ads
• Opt out of third-party vendors: https://www.aboutads.info/choices/

3. Visitors in the EEA, UK and Switzerland

No advertising is served and no visit statistics are collected for visitors from these regions. The advertising and analytics code is never executed there, so no cookies or on-device storage requiring consent are created, and the Site therefore does not operate a consent management platform (CMP). All of the Site's information features remain fully available.

Region detection uses only the country code of the incoming request, which is not stored.

4. Retention and deletion

• Email address, device key and your saved data (owned list, wishlist, memos, prices) — all deleted, including sign-in history, when you delete your account, which you can do yourself under Settings → Info → Delete account.
• Sign-in token — expires 60 days after it is issued.
• Visit statistics — only the most recent 180 days are kept; older records are deleted automatically by a daily scheduled task. Statistics are aggregated by the visitor identifier stored in your browser and never linked to account information.
• Locally stored data — you can remove it yourself using your browser's site data controls.

5. Sharing and processors

The Site does not sell your personal information and does not share it with third parties except where required by law. The following providers are used to operate the service:

• Google LLC — advertising delivery (Google AdSense). Cookies and device information may be processed for ad selection.
• Google LLC — delivery of sign-in verification emails (Gmail).
• Cloudflare, Inc. — traffic delivery and protection (CDN). Request information is processed.
• Servers and database — operated on hardware managed directly by the site operator, without a third-party hosting provider.

6. International transfers

The database holding user data is located on the operator's own servers in South Korea and is not transferred abroad. However, information may be processed on servers outside your country, including the United States, through the Google (advertising, email) and Cloudflare (CDN) services listed in section 5.

7. Your rights

You may request access to, correction of, deletion of, or restriction of processing of your personal information, and you may withdraw consent. Send requests to the contact address below; they are handled without delay and answered in writing. Data you saved in the app, such as your owned list, can also be edited or deleted directly in the app.

8. Children's information

The Site is intended for adult collectors. It is not directed at children and does not knowingly collect personal information from children. If such information is found to have been collected, it is deleted immediately.

9. Security

The Site uses HTTPS for all traffic, stores email addresses in encrypted form, and applies token-based access control and data minimisation. The administrative usage dashboard is restricted to designated administrator accounts.

10. Changes to this policy

Any change to this policy will be announced on this page together with its effective date.