Privacy Policy

This is an English translation for convenience. The Korean version is the official and legally binding version; if they differ, the Korean version prevails. View the Korean version (한국어 원문)

1. Information Collected and Purposes

• Account: email and password (stored encrypted) — member identification, login, sending verification emails, and prevention of misuse (blocking re-registration under Section 2).
• Profile: nickname, BattleTag (optional), bio and channel link (optional), icon, available trading hours, and visibility settings — displayed to other users.
• Usage records: builds, comments, and likes; board posts, comments, and attached images (for videos, only the URL); party room join/leave records; listings, trade requests, and chats; purchase alert settings; block list; and activity experience points — to provide Service features.
• Nickname change history: the previous nickname and the time of the change — to prevent impersonation and evasion of sanctions. Shown on the public profile as 'previous nickname'.
• Notifications: browser push subscription information (push endpoint and encryption keys) — stored only if you enable notifications, and deleted when you turn them off.
• Reports: the target, category, and content of the report, the email address logged in at the time of the report, and, if the report was made from a trade chat, that trade chat's number — so that the operator can review and respond to the report. For reports made from a chat, the operator reviews the contents of that trade chat.
• Sanction records: the type, reason, and duration of posting/trading restrictions and suspensions, and operator notes — to respond to violations of the operating rules.
• Automatically collected: access logs (IP and browser information), cookies (keeping you logged in), and browser storage (settings for guide pop-ups and notification sounds) — for Service operation and security.

2. Retention Period and Destruction

• When a member withdraws, the account and the items above (profile, nickname change history, builds, comments, board posts and comments, uploaded images, party room participation records, listings, trade requests, notifications, push subscriptions, block list, reports you submitted, and sanction records) are deleted immediately and cannot be recovered. However, if another member has replied to your board comment, only a 'This comment has been deleted' placeholder remains, without the author or content, in order to keep that reply. In party rooms opened by other members, your join/leave record lines are also shown only as '(withdrawn)' without a name, in order to keep the room history. Trade chats are retained for the period below.
• Trade chats: retained for 3 years from the date the trade ended (completed, declined, or canceled) for the purpose of resolving trade disputes and responding to requests under applicable law, and then deleted. Even if a member withdraws, the conversation of that trade and the information identifying the participants (nickname, BattleTag, email) are kept separately during this period and are not used for any other purpose.
• Exception: only when a member whose use has been permanently suspended withdraws, a value irreversibly transformed from their email address is retained for 1 year from the withdrawal date for the purpose of preventing misuse (blocking re-registration), and then deleted. The original email address is not stored, and the retained value is not used to restore the email address or for any other purpose. No such value is kept for other members.
• Backups for disaster recovery may contain data from before deletion; backups are automatically deleted no later than 90 days after creation.
• Read notifications are automatically deleted after 90 days.
• Nickname change history is automatically deleted 90 days after the change.
• Images removed by a member while editing a post, and images attached to a post the member deleted, are deleted at that time.
• Access logs are retained for a short period according to the hosting provider's retention policy and then deleted.

3. Provision to Third Parties and Outsourcing of Processing

• Provision to third parties: as a rule, we do not provide personal information to third parties, and we do not sell or hand over personal information for advertising or marketing purposes. However, when an investigative agency, court, or similar body requests it in accordance with procedures prescribed by law, or when necessary to resolve a trade dispute (e.g., handling a report), we may provide trade chat contents and information on the participants to the extent necessary.
• Data storage and member authentication: Supabase Inc. (storage location: Seoul region, Republic of Korea)
• Push notification delivery: delivered via the push service of the browser you use (Google, Apple, Mozilla, Microsoft).
• Reference videos in builds (YouTube, CHZZK (치지직)) are loaded from those services only when you press play, and the policies of those services apply at that time.
• The live (ON AIR) indicator for featured creators on the home page uses YouTube API Services. The Service's server only checks public broadcast status, and no personal information of users is transmitted to YouTube (Google) in this process. After you move to YouTube, the Google Privacy Policy applies.

4. Transfer of Personal Information Overseas

We entrust processing necessary to operate the Service to the overseas providers below (outsourcing of processing), and personal information is transferred overseas in this process. In all cases, it is transmitted encrypted (HTTPS) over information and communications networks at the time you use the Service.

• Vercel Inc. (USA, privacy@vercel.com) — Items: access logs (IP and browser information), page view records. Purpose: Service hosting and access statistics (Vercel Analytics, counting page views without cookies). Retention period: a short period according to the provider's log retention policy.
• Zoho Corporation (USA, privacy@zohocorp.com) — Items: email address. Purpose: sending sign-up verification and password reset emails, receiving inquiry emails. Retention period: the retention period for sending records, or until the member withdraws.
• GitHub, Inc. (USA, privacy@github.com) — Items: database backup files (all items in Section 1, with passwords in encrypted form). Purpose: storing backups for disaster recovery. Retention period: up to 90 days after the backup is created.
• Cloudflare, Inc. (USA, privacyquestions@cloudflare.com) — Items: IP and browser information when accessing the sign-up and login screens. Purpose: preventing automated sign-ups (security check, when used). Retention period: a short period according to the provider's retention policy.
• If you do not want your information transferred overseas, you may refuse by not signing up or by withdrawing your membership. However, because the above processing is essential to providing the Service, if you refuse you will not be able to use member features.

5. Rights of Users

• You can edit your information or withdraw (delete your account) yourself at any time on the My Account page.
• Please send requests for access, correction, deletion, or suspension of processing, and any other inquiries, to the contact below. We will process them without delay.
• Persons under the age of 14 may not sign up; if identified, their accounts will be deleted.

6. Chief Privacy Officer

• DiaFriends operator — admin@diafriends.net
• For consultation regarding infringement of personal information, you may also contact the Personal Information Infringement Report Center (개인정보침해신고센터, privacy.kisa.or.kr, dial 118 without an area code) or the Personal Information Dispute Mediation Committee (개인정보분쟁조정위원회, kopico.go.kr, 1833-6972).
• Effective date: revised October 5, 2026 (added items for board, reports, sanctions, and nickname change history; clarified the scope of deletion upon withdrawal; 3-year retention of trade chats and retention after withdrawal; stated provision in accordance with law)
• Effective date: revised October 1, 2026 (added 1-year retention of transformed email values for blocking re-registration of permanently suspended members)
• Effective date: revised September 20, 2026 (supplemented the notice on overseas transfer; added notice of use of YouTube API Services)