Privacy Policy

1. Purposes of Personal Information Processing

The Operator processes personal information for the following purposes and shall not use it for any other purpose:

· Member authentication and provision of membership-based Service (Battle.net account login).

· Member identification, nickname display, and provision of information between trading parties.

· Registration, search, and brokerage of game item trade information, and provision of review/rating features.

· Operation of in-service activity features such as Mana, member tier, and attendance.

· Prevention of fraudulent use (price manipulation, false trades, repeated listing, etc.) and securing the stability of Service operations.

· Handling inquiries and complaints, and delivering announcements.

· Statistical analysis of Service usage and Service improvement.

· Advertising (including personalized advertising).

2. Items of Personal Information Collected and Collection Methods

The Operator collects the following items for the provision of the Service:

· Battle.net account information: Battle Tag, Battle.net account email address, Battle.net account identifier (collected during Battle.net login).

· Member-entered information: nickname, display name, languages used (native and additional), country (collected during the in-service registration step).

· Profile information: profile image (avatar) URL (when entered by the member).

· Service activity information: member tier, Mana balance, experience points, trade ratings/reviews.

· Trade posts: listing information, seller notes, offer history, and reviews.

· Uploaded images: game screenshots uploaded by members for item information recognition (OCR).

In addition, during use of the Service, access logs, IP address information, device/browser information, Service usage/error records, and authentication tokens / user identifiers stored in cookies and browser storage are automatically generated and collected; cookies and behavioral information are also automatically collected through advertising and analytics services (Google Analytics, Google AdSense).

Collection methods: provided by the game operator during the Battle.net OAuth authentication process; entered, registered, or uploaded directly by the member on the Service; or automatically collected through cookies, browser storage, and analytics/advertising tools.

The Operator does not collect sensitive information defined in Article 23 of the Personal Information Protection Act (such as beliefs, political views, health, and sexual life), unique identifiers defined in Article 24 of the same Act (such as resident registration numbers or passport numbers), or financial information such as bank accounts or credit cards.

3. Personal Information of Children Under 14

The Operator does not collect personal information of children under the age of 14, and this Service is not intended for children under 14.

4. Retention and Use Period of Personal Information

1. The Operator retains and uses members' personal information from the date of registration until termination of the usage agreement (membership withdrawal), and shall destroy the personal information without delay upon withdrawal.

2. However, information for which retention is required by applicable laws shall be retained for the period prescribed by such laws and then destroyed.

3. Images uploaded by members for item information recognition (OCR) are used only for the recognition process and are not separately retained after processing.

4. The retention period of cookies and behavioral information collected through analytics/advertising services follows the policies of the respective service providers (such as Google).

5. Provision of Personal Information to Third Parties

1. The Operator does not provide members' personal information to third parties beyond the scope of the processing purposes.

2. However, exceptions apply when the member has given prior consent, when there is a specific provision in applicable laws, or when investigative agencies request information in accordance with legal procedures.

3. Due to the nature of trades between members, member information necessary for the trade (such as nickname, rating, and Battle Tag) may be displayed to the counterparty during the trade process. This is for the essential operation of the brokerage Service.

6. Outsourcing of Personal Information Processing

For smooth Service provision, the Operator outsources personal information processing tasks or uses external services as follows:

· Blizzard Entertainment (Battle.net): member authentication (OAuth login).

· Google LLC (Firebase Hosting): Service website hosting and content delivery.

· Google LLC (Google Analytics): Service usage statistical analysis.

· Google LLC (Google AdSense): advertising and personalized advertising.

Item information recognition (OCR) processing is performed on servers directly operated by the Operator, with no separate external outsourcing.

7. Cookies, Automatic Collection Tools, and Behavioral Information

1. Use of cookies and browser storage: The Operator uses cookies and browser storage (localStorage, sessionStorage) to maintain the member's login state and provide convenience of Service use. Members may refuse cookie storage through browser settings; however, in such cases, certain Service uses including login may be restricted.

2. Google Analytics: The Service uses Google Analytics for statistical analysis of usage, during which page view records, device/browser information, and similar data are collected through cookies. Members may opt out via the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).

3. Google AdSense (personalized advertising): The Service displays advertisements through Google AdSense, and Google and its partners may use cookies to collect and use behavioral information such as members' visit records to the Service for personalized advertising. Members may opt out of personalized advertising or change settings at Google Ads Settings (adssettings.google.com).

4. The Operator does not process behavioral information in combination with members' sensitive information.

8. Transfer of Personal Information Abroad

1. The Service uses services of overseas operators such as Google and Blizzard, so some of members' personal information may be processed overseas.

2. Google LLC: hosting data, cookies/behavioral information, and usage records are transferred to countries hosting Google data centers (such as the United States), and used for hosting, statistical analysis, and advertising. The retention period follows Google policies.

3. Blizzard Entertainment: Battle.net account authentication information is transferred to countries such as the United States and used for member authentication. The retention period follows Blizzard policies.

9. Destruction of Personal Information

1. When the retention period of personal information has elapsed or the processing purpose has been achieved, the Operator shall destroy the relevant personal information without delay.

2. Electronic file-form information shall be deleted by technical means that prevent recovery or reproduction, and paper documents shall be shredded or incinerated.

10. Rights of Data Subjects and Legal Representatives and How to Exercise Them

1. Members may at any time request access to, correction of, deletion of, or suspension of processing of their personal information.

2. Such rights may be exercised through the in-service settings or by emailing supportonlytems@gmail.com, and the Operator shall process such requests within the period prescribed by applicable laws.

3. Members may terminate the usage agreement through membership withdrawal and request deletion of their personal information.

11. Measures to Secure Personal Information

To secure personal information, the Operator implements measures such as access control and management of important information including authentication tokens, access privilege management for personal information processing systems, encryption of personal information transmission channels, and minimization and management of personnel handling personal information.

12. Personal Information Protection Officer

The Operator designates the Personal Information Protection Officer below to take overall responsibility for personal information processing operations and to handle complaints and remedy from members regarding personal information processing.

· Personal Information Protection Officer: onlytems

· Contact: supportonlytems@gmail.com

Members may contact the address above for all inquiries, complaints, and remedy matters regarding personal information protection that arise during Service use.

13. Remedies for Rights Infringement

Members may apply for dispute resolution or consultation to the following agencies to seek remedy for personal information infringement:

· Personal Information Dispute Mediation Committee: 1833-6972 (no area code) / www.kopico.go.kr

· Personal Information Infringement Reporting Center (KISA): 118 (no area code) / privacy.kisa.or.kr

· Cyber Investigation Division, Supreme Prosecutors' Office: 1301 (no area code) / www.spo.go.kr

· Cyber Investigation Bureau, National Police Agency: 182 (no area code) / ecrm.police.go.kr

14. Changes to the Privacy Policy

This Privacy Policy is effective from May 21, 2026. If the contents are changed due to changes in laws, policies, or the Service, the changes shall be announced through the Service screen at least 7 days before the effective date.

Announcement date: May 21, 2026 / Effective date: May 21, 2026.