CLOKIE Privacy Policy

Last updated: 2026.07

Essence (the "Company"), which operates CLOKIE (the "Service"), values users' personal information and complies with applicable laws, including the Personal Information Protection Act. This Privacy Policy explains what personal information is collected while using the Service and how it is used and stored. Matters concerning the use of the Service itself are described separately in the Terms of Service.

1. Personal Information Collected

When registering as a member (required)

• Email address
• Password (stored encrypted)
• Nickname

When logging in via Google social login

• Email address, name (limited to the scope consented to for provision)

When ordering digital goods from EDITION

• No additional personal information is separately collected; the name (nickname) and email address registered at membership registration are used as the orderer's information.

When making payments or refunds

• Payment method information is processed through PortOne and payment gateway providers, and sensitive payment information such as card numbers and account numbers is not directly stored by the Company.
• When requesting a refund, refund account information (bank name, account number, account holder) may be collected.

Information automatically collected while using the Service

• Access records, service usage records
• Visitor identifiers, cookies
• Information generated during Cloudflare Turnstile processing to prevent fraudulent use (bot prevention)

2. Purpose of Collection and Use of Personal Information

Collected personal information is used for the following purposes:

• Membership registration and management, identity verification
• Processing orders, payments, and refunds for digital goods
• Responding to customer inquiries and partnership inquiries
• Preventing fraudulent use and maintaining service security
• Improving service quality and analyzing usage
• Operating and managing the Service

3. Handling of Uploaded Images

Photos uploaded by users when writing reviews are used only for the purpose of posting and displaying the review, and are not used for any other purpose without separate consent.

4. Personal Information Retention and Use Period

The Company follows the principle of destroying personal information without delay once the purpose of its collection and use has been achieved.

Even upon withdrawal of membership, use of the Service is immediately suspended, and information that must be retained under applicable law is separately retained for the statutory retention period as follows before destruction.

• Payment and transaction records (orders, payment information): 5 years from the date the transaction ends
• Customer complaint or dispute handling records: 3 years from the date the handling ends

After the above retention periods have passed, personally identifiable information such as name, email, and account information, as well as uploaded photo files, are destroyed (de-identified) together through an automated process.

5. Provision of Personal Information to Third Parties

As a general rule, the Company does not provide users' personal information to outside parties.

However, the following are exceptions:

• Where the user has separately consented
• Where required by law
• Provision within the minimum scope necessary for service operations, such as payment processing

6. Outsourcing of Personal Information Processing and Overseas Transfer

The Company outsources part of its personal information processing tasks to outside companies as follows in order to operate the Service:

• Payment processing: PortOne and affiliated payment gateway provider (Korea Payment Networks), PayPal
• Cloud services and system operations: Vercel
• Member authentication and data storage: Supabase
• Email delivery: Resend

Among these, PayPal, Vercel, Supabase, and Resend operate servers overseas to provide stable services, and the Company verifies through contracts, etc., in accordance with applicable law, that these companies manage personal information safely.

7. Rights of Users

Users may exercise the following rights regarding their personal information at any time:

• Viewing and modifying personal information through My Page
• Requesting deletion of personal information by withdrawing membership in My Page
• Requesting suspension of processing of personal information

Related requests can also be made through the Personal Information Protection Officer listed below.

8. Personal Information Protection Measures

The Company implements the following measures to safely protect users' personal information:

• Encrypted storage of passwords
• Encryption of data in transit (HTTPS)
• Minimization of and control over access to personal information
• Compliance with the principle of minimal collection of personal information
• Regular security updates and vulnerability inspections

9. Use of Cookies

The Service uses cookies to maintain login status, save language settings, and similar purposes.

Users may refuse to store cookies through their browser settings; however, in this case, some service functions, such as staying logged in, may be restricted.

10. Personal Information Protection Officer

The Company designates a Personal Information Protection Officer as follows to handle inquiries, complaints, etc. regarding the processing of personal information.

• Name: Hyeongsan
• Email: clokie@naver.com
• Contact: 010-8783-6065

11. Changes to the Privacy Policy

This Privacy Policy may change in accordance with applicable law and service policy.

If changed, we will provide notice through announcements within the Service, etc.

Addendum

This Privacy Policy applies from July 2026.