Privacy Policy

① When you sign up with Google: email address, name, profile photo, and Google account identifier.

② Information you enter while using the Service: username, display name, bio, country, pen names, uploaded images and captions, comments, messages, writing manuscripts, and board, like, and follow activity.

③ Information generated automatically: country estimated from your IP address (at sign-up and at your latest sign-in), last activity time, and cookies used to keep you signed in.

④ Visit statistics: pages visited, referrer, device type, on-site search terms, and time on page. These are stored with a randomly generated visit ID and are not linked to your account.

⑤ Optional: an email address for replies when you contact us or file a report, and an email address if you sign up for launch notifications of paid features.

Your IP address is used only temporarily to prevent excessive requests and is not stored.

· Identifying members, keeping you signed in, and preventing abuse

· Providing features such as image uploads, comments, messages, and writing tools

· Operating the community, including handling reports and restricting accounts

· Answering inquiries and sending notices

· Improving the Service through visit statistics

· Showing ads (see the cookies section below)

· Account information (email, name, profile photo, username, bio): kept until you delete your account, then deleted without delay. Likes, bookmarks, follows, and notifications are deleted as well.

· Content you created or uploaded (images and captions, comments, messages, pen names, writing manuscripts, etc.) is not deleted when you delete your account; the author is shown as “Deleted member.” If you want it removed, please delete it yourself before deleting your account. After deletion we may be unable to verify your identity to process removal requests.

· Usage records that remain after account information is deleted (sign-up and sign-in country, last activity time, etc.) are kept only for statistics in a form that cannot identify you.

· Inquiry and report records (including reply email): 1 year after they are resolved.

· Visit statistics: up to 2 years, in a form not linked to any member.

· Where other laws require retention, we keep the information for the required period.

Electronic files are deleted in a way that cannot be recovered.

We do not provide your personal information to third parties, except with your consent or when required by law through due process.

We use the following companies to run the Service. Their servers are located outside Korea, so personal information is transferred abroad.

· Supabase, Inc. — member and content database, file storage, and authentication / server location: Virginia, USA (supabase.com/privacy)

· Vercel Inc. — website hosting and server operation (vercel.com/legal/privacy-policy)

· Cloudinary Ltd. — image storage, transformation, and delivery (cloudinary.com/privacy)

· Google LLC — Google sign-in, analytics (Google Analytics), and ads (Google AdSense) (policies.google.com/privacy)

Items transferred: the information in Section 1 needed for each task.

Destination: the United States and other countries where each provider operates data centers.

When and how: transmitted over encrypted connections whenever you use the Service.

Retention: until the contract ends or you delete your account (following Section 3).

If you do not want your information transferred abroad, you may choose not to sign up or delete your account, though features that require sign-in will not be available. Analytics and ad cookies can be refused as described in Section 6.

We use cookies and browser storage to keep you signed in and to remember display settings.

Google Analytics (visit analytics) and Google AdSense (ads) also use cookies. Google may use this information to produce visit statistics or show ads based on your interests.

How to refuse: you can block or delete cookies in your browser settings. Personalized ads can be turned off in Google Ad Settings (adssettings.google.com), and analytics with the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). Blocking all cookies may prevent you from staying signed in.

You may access, correct, or delete your personal information, or ask us to stop processing it, at any time.

· On My Page you can edit your profile, review and delete the images and posts you have made, and delete your account.

· For other requests, email contact@lorearc.com. After verifying your identity, we will respond within 10 days.

· Requests may also be made through a legal representative or an authorized agent.

The Service does not accept sign-ups from children under 14. If we learn that we have collected personal information from a child under 14, we will delete it without delay.

· All communication is encrypted with HTTPS.

· We use Google sign-in only, so no passwords are stored by the Service.

· Database access-control policies ensure that only you and authorized operators can access your information.

· Administrative features are available only to operator accounts.

For questions, complaints, or requests regarding personal information, please contact:

· Privacy Officer: LoreArc Operator

· Email: contact@lorearc.com

If you need counseling or dispute resolution regarding a privacy infringement, you may contact the following Korean agencies:

· Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)

· Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

· Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)

· Korean National Police Agency: 182 (ecrm.police.go.kr)

We will announce changes on the Service at least 7 days before they take effect, or 30 days before for changes that significantly affect your rights.