This Privacy Policy explains how we collect, use, share, and protect information when you use the Service. It applies jointly to PRIVATEDREAMCOLLECTION as the data controller and MIXNEXTEND Inc. as a processor for payment and infrastructure services.

PRIVATEDREAMCOLLECTION is the controller of personal data for the Service, responsible for determining the purposes and means of data processing in compliance with applicable data-protection law, including the Korean Personal Information Protection Act ("PIPA") and, where applicable, the General Data Protection Regulation ("GDPR") of the European Union, the California Consumer Privacy Act ("CCPA"), and analogous laws. MIXNEXTEND Inc. acts as a processor on behalf of PRIVATEDREAMCOLLECTION for limited purposes: payment processing (via Stripe), technology infrastructure, and related services. MIXNEXTEND Inc. processes personal data only under instructions from PRIVATEDREAMCOLLECTION and in accordance with applicable contractual safeguards. Data-subject rights requests should be directed to PRIVATEDREAMCOLLECTION at the contact address below.

We collect information needed to provide, operate, improve, secure, and analyze the Service: • Email address — for sign-in, receipts, and account recovery • Payment confirmations from Stripe — we do not store card details • Avatars you pull, collect, and own • Standard request logs — IP address, user-agent, timestamp • Camera imagery, audio, and facial-landmark and other biometric-derived data — captured during mirror and other interactive features, including during anonymous and signed-out sessions • Snapshots, recordings, derived media, and analytics generated from the above • Usage, analytics, and advertising-measurement data, including via third-party tools such as Meta We do not sell your personal data for money.

The mirror and related interactive features may use your device's camera and microphone. Facial-landmark inference may run in your browser and/or on our infrastructure. We may capture, transmit to our infrastructure, process, and store camera imagery, audio, facial-landmark and other biometric-derived data, derived avatar-animation values, snapshots, and recordings — including during anonymous and signed-out sessions and outside of any paid balance — for purposes connected with providing, operating, improving, securing, analyzing, and developing the Service, and to generate derived media and analytics. We may retain this data and any derived outputs for as long as needed for these purposes. You may request deletion of recordings associated with your account at the contact address below. By using these features, you consent to this collection, processing, transmission, and storage.

We use personal data to authenticate you, deliver and price purchases, render your collection across sessions, operate and improve the mirror and other interactive features, generate derived media and analytics, measure and improve marketing and advertising, investigate abuse, and comply with legal obligations. We do not sell your personal data for money.

We share personal data with the following providers, each for the stated purpose: • Stripe — payment processing • Cloudflare — hosting, CDN, and infrastructure • Resend — transactional email delivery (sign-in codes, receipts, alerts) • Discord — operational notifications (redacted summaries only) • Meta and similar analytics and advertising-measurement providers — to measure and improve the Service and our marketing We disclose personal data when required by applicable law, valid legal process, or to protect the rights, property, or safety of users, the public, or us.

Personal data may be transferred to and processed in jurisdictions outside your country, including the Republic of Korea, the United States (Delaware), and the global Cloudflare network. We rely on standard contractual safeguards and the legitimate-interest balance under applicable law for these transfers. By using the Service, you consent to these transfers.

We retain personal data only as long as necessary for the purposes described: • Email + account data — for the life of your account plus a reasonable post-deletion window (typically 90 days) for legal and audit purposes • Avatar and pull records — indefinitely while the account is active; deletion on account closure • Mirror and session media (camera imagery, audio, recordings, snapshots) and derived outputs — retained as long as needed to operate, improve, secure, and analyze the Service; deletion of account-associated recordings available on request • Standard request logs — typically 30–90 days You may request earlier deletion subject to applicable legal-retention obligations.

Subject to applicable law, you may have rights including access, correction, deletion, portability, restriction of processing, and objection to certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, email [email protected]. Deletion removes your collection and personal data; it does not reverse completed transactions or release ownership of previously-shared content.

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you become aware that a child has provided personal data without parental consent, contact us and we will delete it.

We may update this Privacy Policy at any time. Material changes will be reflected by an updated "Last updated" date below. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Privacy questions and rights requests: [email protected].

Last updated: 2026-06-01