Pictoreal Inc. ("the Company"), which operates the K-fandom travel platform DUCPIC ("the Service"), protects the personal information of its users (data subjects) and safeguards their rights in compliance with the Personal Information Protection Act of the Republic of Korea ("PIPA") and other applicable laws. This Privacy Policy explains the categories of personal information the Company processes, the purposes of processing, retention periods, disclosures, delegated processing, overseas transfers, and the rights available to users.
| Item | Details |
|---|---|
| Controller (legal entity) | Pictoreal Inc. |
| Representative | Lee Seungjun |
| Business registration no. | 264-87-03349 |
| Address | 217 Jungang-ro, Jeju-si, Jeju Special Self-Governing Province, Republic of Korea (Ido 2-dong, Jeju Venture Maru) |
| Contact | [email protected] |
The Company collects the minimum personal information necessary to provide the Service. Declining to provide optional items does not restrict your basic use of the Service.
a. Account registration and identity or age verification (entered directly by the user)
b. Information generated and collected automatically during use of the Service
The Company uses Google Analytics 4, provided by Google LLC, to analyze how the Service is used. When a user accesses the website or launches the app, the following information is collected automatically through the measurement tag embedded in the web pages (gtag.js) and the Google Analytics for Firebase SDK embedded in the app.
| Category | Details | Where stored |
|---|---|---|
| Online identifiers | Client ID (web) and app instance ID (app) — randomly generated values assigned per browser or per app installation. | Web: _ga and cookies beginning with _ga_ / App: on-device app storage |
| Member identifier | The member ID assigned by the Company (User-ID). Transmitted only while a member is signed in and using the Service. | Google servers |
| Access information | IP address, date and time of access, screen paths viewed, referrer URL, time spent | Google servers |
| Device and environment information | Device type and model, operating system and version, browser type and version, screen resolution, language settings, network type, app version | Google servers |
| Advertising identifiers | Android Advertising ID (ADID). The iOS Identifier for Advertisers (IDFA) is collected only where the user has permitted tracking through the App Tracking Transparency (ATT) prompt. | Google servers |
| Estimated location | Approximate location at the country, state/province, or city level, inferred from the IP address. Precise location data such as GPS coordinates is not collected (see Article 5). | Google servers |
| Behavioral (event) information | Screen views, session starts, scrolls, clicks, search terms, views of artists, spots and travel information, spot visit check-ins, content views and uploads, Expedition participation, and the parameters accompanying each event | Google servers |
| Acquisition information | Source, medium and campaign name (UTM parameters), search keywords, ad click identifiers | Google servers |
Transmission of the member identifier (User-ID)
The Company uses the User-ID feature of Google Analytics 4 to analyze, as a single continuous journey, how a signed-in member uses the Service across the web, the app, and multiple devices.
| Item | Details |
|---|---|
| Value transmitted | The member ID assigned by the Company — and nothing else |
| When transmitted | While the member is signed in and using the Service |
| Purpose | Analysis of a single member's journey across web and app, removal of duplicate counts, and improvement of the Service |
| Values not transmitted | Email address, nickname and mobile phone number, social login identifiers, identity verification information (CI/DI), delivery addresses and any other information that directly identifies an individual are not transmitted. |
| Nature of the information | A member ID cannot identify a specific individual on its own. However, because it can identify a specific member when combined with the member records held by the Company, the Company treats it as personal information and protects it in accordance with this Policy. |
Information not sent to Google Analytics
Apart from the member ID described above, the Company does not send Google Analytics any information that directly identifies an individual, including email addresses, nicknames, mobile phone numbers, delivery addresses and identity verification information (CI/DI). This is also prohibited under Google's terms of service, and the Company enforces it through a review procedure carried out before any measurement tag is deployed (see Article 12).
The Company likewise does not collect sensitive information as defined in Article 23 of PIPA, such as information on beliefs, health or sex life, and — in accordance with Article 5-2 — does not transmit the content of users' chats or calls to Google Analytics or to any other analytics tool.