Privacy Policy

Effective date: September 22, 2026

피코 온라인 (the "Company") operates "Resource Lab & PICO" (the "Site") in compliance with the Korean Personal Information Protection Act and other applicable laws, and handles Members' personal information as described below.

1. Personal Information We Collect

• Registration and sign-in: email address, name and profile image of your Google account, or email address, username and avatar of your Discord account
• Member details (required): name, nickname, mobile phone number
• Member details (optional): gender, Minecraft server address — you can use the service without providing them.
• Orders and payment: depositor name and order history (products, amounts, dates)
• Collected automatically while you use the service: IP address, browser information and content download records
• Designer settlement: payout account details (bank, account number, account holder)

2. Purposes of Collection and Use

• Identifying Members and keeping them signed in
• Name and mobile phone number: identity verification, and contacting you about refunds or disputes
• Nickname: identifying you within the site
• Server address (optional): stated as the place of use in the license file of purchased Content
• Gender (optional): user statistics
• Accepting orders, confirming deposits, delivering Content, and handling withdrawals and refunds
• Preventing misuse such as unauthorized sharing, and handling disputes
• Settling Designers' sales proceeds
• Responding to inquiries and delivering notices

3. Retention Period

The Company destroys personal information without delay when a Member withdraws. However, the following information is retained for the periods required by law:

• Records of contracts or withdrawal of purchase: 5 years (Act on the Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods: 5 years (same Act)
• Records of consumer complaints or dispute handling: 3 years (same Act)
• Website access logs: 3 months (Protection of Communications Secrets Act)

4. Provision to Third Parties

The Company does not provide Members' personal information to third parties, except where required by law through lawful procedures, such as a request from an investigative authority.

5. Outsourcing of Processing

To provide the service, the Company entrusts the following processing:

• Google LLC: sign-in authentication
• Discord Inc.: sign-in authentication
• Cloudflare, Inc.: site connectivity and security (access records pass through it)

6. Transfer of Personal Information Overseas

In accordance with Article 28-8 of the Korean Personal Information Protection Act, the Company transfers personal information overseas as follows:

• Recipient: Google LLC (USA) / Items: email address, name, profile image / When and how: transmitted over the network at sign-in / Purpose: sign-in authentication / Retention: until membership is withdrawn
• Recipient: Discord Inc. (USA) / Items: email address, username, avatar, OAuth identifiers / When and how: transmitted over the network at sign-in / Purpose: sign-in authentication / Retention: until membership is withdrawn
• Recipient: Cloudflare, Inc. (USA) / Items: IP address, request logs / When and how: transmitted over the network each time the Site is accessed / Purpose: connectivity and security / Retention: according to Cloudflare's retention policy

You may refuse this transfer. If you do not want your information transferred to Discord, sign in with Google instead. However, because sign-in is available only through Google or Discord and all access to the Site passes through Cloudflare, refusing all transfers means you cannot use the service.

7. Destruction Procedure and Method

Personal information whose retention period has ended or whose purpose has been fulfilled is destroyed without delay. Electronic files are deleted in a way that cannot be recovered.

8. Rights of Data Subjects

Members may at any time request access to, correction or deletion of, or suspension of processing of their personal information, and may withdraw consent.

Requests can be made to the Privacy Officer below, and the Company will act on them without delay.

Member details (name, nickname, mobile phone number, gender, server address) can be corrected directly on the account page.

Consent to receive marketing information can be withdrawn directly in account settings.

9. Security Measures

• Designers' payout account details are stored encrypted.
• All connections use encrypted transport (HTTPS).
• Administrative access is limited to the minimum number of people, and administrative actions are logged.
• Content files are kept outside public paths and delivered through links that are valid only for a short time.

10. Cookies

The Site uses cookies to keep you signed in. You can refuse cookies in your browser settings, but features that require sign-in will then be unavailable.

11. Privacy Officer

• Business name: 피코 온라인
• Contact: [email protected] · 010-5962-6061

12. Changes to This Policy

If this Policy changes, the Company will announce it on the Site at least 7 days before the effective date.

This Policy is provided in Korean and English. If the two versions differ, the Korean version prevails.

This Policy takes effect on September 22, 2026.