OOTD Co., Ltd. ("Company") operates the Today Stock website and related services ("Service"). The Company values the personal information of its users and complies with applicable data protection laws. This Privacy Policy explains how personal information is collected, used, and protected.
1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes:
- Providing the website, app, and Service
- Creating and maintaining a member account via social sign-in
- Analyzing usage patterns and improving service quality
- Identifying errors, maintaining security, and preventing misuse
- Handling user inquiries and providing responses
- Serving advertisements through Google AdSense and measuring ad performance
- Complying with legal obligations and resolving disputes
- Sending app notifications the member has agreed to receive
2. Personal Information Collected
The Service provides optional social sign-in (Kakao, Google, and Apple on iOS). We do not collect or store a password. The following information may be processed:
A. Information collected at sign-in
- Email address provided by the social login provider
- An automatically generated nickname (adjective + animal + number)
- Gender and age group, collected once after sign-in
- A social account identifier issued by the provider, used only to sign you back in
B. Automatically Collected Information
- IP address
- Date and time of access
- Pages visited and usage records
- Referral source
- Browser type and version
- Operating system and device information
- Cookies and online identifiers
- Ad impression and click records
- Error and security logs
C. Information Provided via Email Inquiry
- Email address
- Name and other information voluntarily included in the inquiry
- Inquiry content and response records
Users are advised not to include sensitive or unnecessary information (such as government ID numbers, financial account details, or health information) in their inquiries.
3. Retention Period
- Member account (email, nickname, gender, age group, social identifier): until account deletion
- Access and security logs: 3 months from collection
- Email inquiries and responses: 1 year after resolution
- Google Analytics data: up to 14 months, per the service's configured retention period
- Advertising-related data: per Google's advertising and privacy policies
- Where required by law: per the period prescribed by the applicable statute
Personal information is destroyed without delay once the purpose of processing has been achieved or the retention period has expired.
4. Outsourcing of Processing
The Company may outsource personal information processing to the following entities for smooth service operation:
| Provider | Purpose |
|---|---|
| Vercel Inc. | Website hosting, content delivery, access and error log processing |
| Google LLC | Usage analytics via Google Analytics; advertising via Google AdSense |
The Company manages and supervises outsourced entities to ensure that personal information is processed safely.
5. International Data Transfers
Personal information may be processed outside of South Korea during service operation:
| Recipient | Country | Data Transferred | Purpose | Method | Retention |
|---|---|---|---|---|---|
| Vercel Inc. | U.S. and Vercel data centers | IP address, access logs, device/browser info, error logs | Website hosting, security, and incident response | Encrypted network transfer upon access | Per Section 3 or until contract ends |
| Google LLC | U.S. and Google data centers | Cookies, online identifiers, access/usage records, device/browser info, ad interaction data | Usage analytics, ad delivery and measurement | Encrypted network transfer during use | Per Google's policies and service settings |
Users may restrict some international processing by blocking cookies or adjusting ad settings in their browser. However, blocking essential hosting services may prevent the Service from functioning.
6. Disclosure to Third Parties
The Company does not provide personal information to third parties except in the following cases:
- When the user has given prior consent
- When required by law or to comply with a legal obligation
- When necessary to protect life, bodily safety, or property in an emergency
7. Cookies and Behavioral Information
- The Company and third-party providers such as Google may use cookies and similar technologies to provide the Service, analyze usage, and deliver advertisements.
- Third-party ad networks, including Google, may use cookies based on your prior visits to this and other websites to serve ads.
- Through Google's advertising cookies, Google and its partners may serve personalized or non-personalized ads based on your visits to this Service or other websites.
- Users may manage cookies and personalized ads through:
- Deleting cookies or blocking third-party cookies in browser settings
- Google Ad Settings: https://adssettings.google.com/
- Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
- Blocking cookies may cause some features of the Service to not function properly.
8. Destruction of Personal Information
- Personal information is destroyed without delay once the retention period has expired or the processing purpose has been achieved.
- Electronic files are deleted using methods that prevent recovery or reproduction.
- Paper documents, if any, are shredded or incinerated.
- Information stored in backup systems is sequentially deleted as each backup cycle concludes.
9. User Rights
- Users may request access to, correction, deletion, suspension of processing, or withdrawal of consent for their personal information.
- Requests can be submitted to join@ootdkorea.com.
- The Company will verify the requester's identity and process the request without delay in accordance with applicable law.
- If a request is made by a legal representative or authorized agent, the Company may ask for proof of authority.
10. Security Measures
The Company implements access controls, encrypted transmissions, authentication safeguards, access log management, and other administrative and technical measures to protect personal information.
11. Privacy Officer
- Privacy Officer: Gung Kwon
- Email: join@ootdkorea.com
Users may contact the Privacy Officer with questions, complaints, or requests related to the processing of personal information.
12. Remedies for Rights Infringement
For consultation or remedies regarding personal information infringement, users may contact the following organizations:
- KISA Personal Information Infringement Report Center: 118 / https://privacy.kisa.or.kr/
- Personal Information Dispute Mediation Committee: 1833-6972 / https://www.kopico.go.kr/
- Supreme Prosecutors' Office: 1301 / https://www.spo.go.kr/
- National Police Agency: 182 / https://ecrm.police.go.kr/
13. Changes to This Policy
If this Privacy Policy is updated, the Company will announce the changes and effective date on the Service in advance. Changes that materially affect user rights will be notified with reasonable advance notice.
Effective Date
This Privacy Policy is effective as of August 1, 2026.