Privacy Policy

The Company processes the following personal information to provide the service.

(1) Automatically received through Google OAuth when you sign up

• Required: email address, name, Google profile photo URL, and Google unique user identifier

(2) Information you provide while using the service

• Public handle, display name, and optional bio
• Content you submit and related information, including title, description, image URLs, AI tools used, prompts, tags, and visibility settings

(3) When you use the AI Maker Type Test

• Information needed to provide results: the name shown on the result page (a name you enter or an automatically generated guest name), answers to 15 questions, the calculated maker type, and percentage scores for each type
• If you consent to unlock the full guide and receive updates: email address and result URL, including a result identifier that contains the display name and question answers
• If you link the result to your member profile: maker type and result-page path

(4) When you subscribe to the newsletter

• Email address, the screen you subscribed from, and language preference. Membership is not required to subscribe; for members, the account email is prefilled.

(5) Information collected automatically

• Access logs, IP address, browser type, and access time, which hosting and authentication contractors process for operational purposes
• Service-usage data, including content impressions and clicks, in-service search terms, display order, and event time. This data is stored with a member identifier for signed-in users or a random session identifier that does not directly identify a visitor for signed-out users.

• When you sign in through Google OAuth
• When you enter information directly in a service form
• When you answer the AI Maker Type Test and select “View my results,” or submit an email address to unlock the full guide
• When you enter an email address in the newsletter form and subscribe
• When information is generated or collected automatically as you use the service

1. Identify and authenticate members
2. Provide the service, including content submission, publishing, search, and curation
3. Display project authors through their public handle and display name
4. Analyze content popularity and improve service and search quality
5. Provide AI Maker Type Test results, calculate participation statistics, and improve the service
6. Display a member's selected maker type and result page on their profile
7. Send consenting users updates about new XPLORED tools and insights
8. Send the weekly curation email to newsletter subscribers
9. Operate the service and prevent abuse
10. Respond to reports of rights infringement
11. Comply with legal obligations

1. The Company retains member information while the member account remains active.
2. When a member closes their account, the Company destroys personal information without delay, except as follows:
   • Public projects and related public images may remain available after the author's handle, display name, profile image, bio, and other identifying information are removed and replaced with a non-identifying author label.
   • Information that applicable law requires the Company to retain is kept for the legally required period and then destroyed.
   • When there is a legitimate reason such as dispute resolution, the minimum necessary information may be stored separately until that reason no longer applies.
3. Service-usage data, including content impressions and clicks and in-service search terms, is retained for 12 months from collection and then destroyed. Aggregated statistics that can no longer identify an individual may be retained and used without a time limit.
4. AI Maker Type Test display names, question answers, calculated types, and percentage scores are retained until the test is discontinued or the individual requests deletion. The email address and result URL are retained until the individual unsubscribes or withdraws consent. A maker type and result-page path linked to a member profile are retained until the member removes the link or closes the account.
5. Newsletter subscription data (email address, subscription source, and language preference) is retained until the subscriber unsubscribes or withdraws consent. When a member closes their account, the subscription is destroyed along with it, regardless of unsubscribe status.
6. The Company destroys the applicable information without delay when the relevant period ends. Aggregated AI Maker Type Test statistics that can no longer identify an individual may be retained and used without a time limit.

The Company does not disclose personal information to third parties, except in the following circumstances:

1. The individual has separately consented to the disclosure.
2. Disclosure is specifically required by law or requested by an investigative authority through a lawful process.

The Company uses the following contractors to support reliable delivery of the service.

The Company includes the safeguards required by Article 26 of PIPA in its contracts or terms with contractors and supervises their handling of personal information.

External identity provider and source of personal information. The Company uses Google LLC's OAuth authentication service for member sign-up and sign-in. Google is not the Company's personal-information processing contractor in this context; it is an external identity provider that supplies information to the Company with the member's consent. The information received from Google is listed in Section 1(1). Google's own processing is governed by Google's privacy policy.

Supabase, Vercel, and Resend are service providers that may operate servers in the United States and other countries, so personal information processed under the arrangements above may be stored or processed outside the Republic of Korea. These transfers are made to provide contracted service operations and storage. Under Article 28-8(2)(1) of PIPA, the Company discloses these transfers in this Privacy Policy instead of obtaining separate consent for the transfer. Some data entrusted by the Company is configured to be stored in Supabase's Korea region (ap-northeast-2).

• Information transferred: the same information listed for each contractor in Section 6
• Destination countries: the United States and other countries where each contractor's data centers are located
• Timing and method: real-time transmission over the network when the service is used
• Recipient purpose and retention: limited to performing the contracted services and retained until the processing contract ends

You may exercise the following rights at any time:

1. Request access to personal information
2. Request correction or deletion of inaccurate information
3. Request suspension of processing
4. Close your account and request deletion of personal information

You may exercise these rights through the service's settings or by emailing xplored@xplored.design. The Company will respond within the period required by applicable law.

1. TLS encryption for authentication and data transmission
2. Database access controls, including row-level security policies
3. Limited personnel access and managed access permissions
4. Periodic reviews of contractor security safeguards

The service may use cookies or similar storage such as localStorage for essential features, including keeping members signed in. You may block cookies in your browser settings, but doing so may limit some service features.

Behavioral data. The Company does not collect or use behavioral data to infer a user's interests or preferences for advertising or personalized marketing, and it does not provide such data to third-party advertising businesses.

For service operation and quality-improvement statistics, the Company does process service-usage data—content impressions and clicks, in-service search terms, and display order—together with a member identifier for signed-in users or a random session identifier that does not directly identify signed-out visitors. See Sections 1(4) and 3. This information is used only to provide and improve the service, including calculating content popularity, and is not used for advertising or marketing or disclosed to third parties. You may block or delete cookie or localStorage values in your browser to reset session-level linkage, though some features may be limited.

The AI Maker Type Test stores the automatically generated guest name and full-guide unlock status in the browser's localStorage. You may delete these values in your browser settings. If you select “View my results,” the guest name is also stored on the Company's server with the test answers as described in Section 1(3).

Under Article 31 of PIPA, the Company designates the following officer to oversee personal-information protection and respond to questions, complaints, and requests for relief.

• Name: Sookmi Park (박숙미)
• Title: Representative
• Organization: XPLORED Operations Team
• Contact: xplored@xplored.design

You may use the contact information above for any privacy-related question, complaint, or request for relief concerning the service.

If you believe your personal information rights have been infringed, you may seek dispute resolution or advice from the following Korean authorities:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center (KISA): 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cybercrime Investigation Division: 1301 (www.spo.go.kr)
• Korean National Police Agency Cyber Bureau: 182 (cyberbureau.police.go.kr)

This Privacy Policy takes effect on August 9, 2026. If the Company adds, removes, or changes any provision because of changes in law, policy, or security technology, it will announce the revised Privacy Policy within the service beginning seven days before the revised policy takes effect.

• Previous effective date: July 25, 2026
• Key changes: added the categories, collection methods, purposes, and retention period for newsletter subscription data (email address, subscription source, and language preference), and disclosed Resend, Inc. as an email-delivery contractor and cross-border recipient