Privacy Policy
Last modified: 2026-05-13
Fuzzyline Studio (hereinafter "the Company") values users' personal information and complies with the Personal Information Protection Act and other applicable laws. This policy describes how personal information collected through the reservation service (hereinafter "the Service") is processed.
1. Personal Information Collected
The Company collects the following personal information to provide the Service.
- Email address (account identification and notifications)
- Password (securely stored as a one-way hash by Supabase Auth)
- Nickname (identification within the Service)
- Phone number (reservation notifications via KakaoTalk/SMS, stored with AES-256-GCM encryption)
- IP address (security and suspicious login detection)
- Browser information (User-Agent)
- Service usage records, payment records
- Google/Kakao account identifiers, name, email
2. Purpose of Collection and Use
- Membership registration and service agreement fulfillment
- Reservation processing, confirmation, and payment
- Reservation notifications via KakaoTalk/SMS
- Prevention of fraudulent use and security enhancement
- Complaint handling and customer support
3. Retention and Use Period
A 7-day grace period applies after account deletion request, during which re-registration is possible. After the grace period, identifying information such as email, phone number, name, and password is immediately anonymized. Reservation records are retained for up to 5 years in accordance with applicable laws (e-Commerce Consumer Protection Act, etc.) and then deleted.
- Contract/withdrawal records: 5 years
- Payment/supply records: 5 years
- Consumer complaint/dispute records: 3 years
- Access logs: 3 months
4. Disclosure to Third Parties
The Company does not, in principle, provide users' personal information to external parties. However, minimal information is shared with the following provider for payment processing.
- TossPayments: payment method information, payment amount (for payment processing, until payment completion)
5. Outsourcing of Personal Information Processing
- Vercel: application hosting and serverless infrastructure operation (until contract termination)
- Supabase: database, authentication (Auth) and session management (until contract termination)
- Solapi: KakaoTalk notification and SMS delivery (until delivery completion)
- Resend: transactional email delivery (until delivery completion)
- Upstash: request rate limiting (until contract termination)
6. User Rights and How to Exercise Them
Users may exercise the following rights at any time.
- View/edit personal information: directly through "Account Settings" in the Service
- Account deletion and personal information removal: use "Delete Account" feature in the Service
- Request to suspend personal information processing: contact customer service email below
7. Privacy Officer
Name: Taegyeom Kim
Email: contact@fuzzyline.io
Service URL: https://play.fuzzyline.io
8. Security Measures
- Passwords: one-way hashing by Supabase Auth (plaintext never stored)
- Phone numbers: stored with AES-256-GCM symmetric encryption
- Phone lookup hash: stored separately with HMAC-SHA256 (irreversible)
- Sessions: JWT issued by Supabase Auth managed via HttpOnly cookies
- Data access control: dual protection with PostgreSQL Row Level Security (RLS) policies
- API Rate Limiting: automatic blocking of brute-force and abuse attempts
9. Changes to Privacy Policy
This policy may be amended due to changes in laws or services. Changes will be announced through in-service notices. Amended policies take effect 7 days after announcement.