Privacy Policy
Effective: October 15, 2026
This page is an English translation of the Korean original. If they differ, the Korean version prevails.
It’s My Type (잇츠마이타입) (“we”) runs the It’s My Type website (itsmytype.kr) and complies with the Korean Personal Information Protection Act and related laws. This policy explains what personal information we process and why, how we protect it, and your rights.
1. Information we process and why
| When | Information | Purpose |
|---|---|---|
| Sign-up and login (Google account) | Name, email address, profile picture URL, Google account ID | Identifying members, keeping you signed in, account management |
| Sign-up and login (NAVER account) | Name, email address, profile picture URL, NAVER account ID | Identifying members, keeping you signed in, account management |
| Sign-up and login (email) | Email address, password (stored encrypted), name or company, email verification records | Identifying members, verifying your email, keeping you signed in, password resets |
| Buying fonts | Order number, licensee name (person or company), items (font, license, weights), amount, payment method type, payment approval details, receipt URL, payment and cancellation times | Orders, payments, refunds and license management |
| Downloading fonts | Download time, IP address, browser information | Delivering files, checking refund eligibility, detecting unlicensed distribution |
| Billing details (optional) | Company or name, business registration number or VAT/Tax ID, address | Issuing invoices and quotations |
| Purchase email and certificate | Name, email address, order details | Payment confirmation and license certificate |
| Enquiries | Name, email address, message, order number (if needed) | Answering enquiries, refunds and disputes |
| Collected automatically | Access logs, IP address, browser and device information, cookies, pages visited, on-page activity such as clicks and scrolling | Keeping you signed in, language and display settings, security, visit statistics, improving the site |
- Card numbers and other payment details are handled directly by our payment provider (Toss Payments); we never store them.
- If you sign up with email, your password is stored only as an irreversible hash; no one, including us, can see it. Sign-up confirmation and password resets use codes sent to your email only; we do not collect phone numbers.
- Purchased font files contain the licensee name and order number so the license can be verified.
- We do not process resident registration numbers or other sensitive information.
2. How long we keep it
- Member information is kept until you close your account and is then destroyed without delay. Records that the law requires us to keep are stored separately for the periods below.
| Record | Legal basis | Period |
|---|---|---|
| Contracts and order withdrawals | E-Commerce Act Enforcement Decree, Art. 6 | 5 years |
| Payments and delivery (orders, payments, downloads) | E-Commerce Act Enforcement Decree, Art. 6 | 5 years |
| Consumer complaints and disputes | E-Commerce Act Enforcement Decree, Art. 6 | 3 years |
| Transaction books and evidence | Framework Act on National Taxes, Art. 85-3 | 5 years |
| Website access logs | Protection of Communications Secrets Act Enforcement Decree, Art. 41 | 3 months |
- Visit statistics (Google Analytics) are kept for the retention period set in Google Analytics (up to 14 months), and behavior analytics (Microsoft Clarity) for 30 days (session recordings) and up to 13 months (aggregate data).
3. Sharing with third parties
- We do not share personal information with third parties, except where the law specifically requires it or investigative authorities request it under legal procedures.
4. Service providers
- We use the following providers to run the service and manage them through agreements so your information is handled safely.
| Provider | Service |
|---|---|
| Toss Payments Co., Ltd. | Payments, cancellations and refunds |
| Supabase Pte. Ltd. | Member and order database, sign-in, font file storage |
| Vercel Inc. | Website hosting and servers |
| Plus Five Five, Inc. (Resend) | Purchase emails and license certificates |
| Google LLC | Visit statistics (Google Analytics) |
| Microsoft Corporation | Behavior analytics (Microsoft Clarity) |
5. International transfers
- The providers below are based abroad or process data abroad, so your information may be transferred outside Korea. We make these transfers to perform our contract with you, by disclosing them in this policy (Personal Information Protection Act, Art. 28-8(1)(3)(a)).
| Recipient (contact) | Country | Information | When and how | Purpose and retention |
|---|---|---|---|---|
| Supabase Pte. Ltd. (privacy@supabase.com) | Stored in Korea (Seoul); company in Singapore | Member information, orders, download records | Sent over the network when you use the service | Database, sign-in and file storage / until account closure or the end of the legal retention period |
| Vercel Inc. (privacy@vercel.com) | Servers run in Korea (Seoul); requests may pass through Vercel’s global network (company in the United States) | Access logs, IP address, browser information, member and order details needed to show pages | Sent over the network when you use the site | Website hosting / until the end of Vercel’s log retention |
| Plus Five Five, Inc. (Resend, support@resend.com) | Japan (Tokyo sending servers); company in the United States | Name, email address, order details, license certificate | Sent over the network when a payment completes | Sending email / until the end of Resend’s record retention |
| Google LLC (support.google.com/policies) | United States | Pages visited, device and browser information, cookie IDs, approximate location | Sent from your browser when you visit | Visit statistics / Google Analytics retention period (up to 14 months) |
| Microsoft Corporation (privacy.microsoft.com) | United States | On-page activity such as clicks, scrolling and mouse movement, device and browser information, cookie IDs (text you type is masked and not sent) | Sent from your browser when you visit | Behavior analytics / 30 days for session recordings, up to 13 months for aggregate data |
- If you do not want your information transferred abroad, email info@itsmytype.kr or close your account. Transfers to Supabase, Vercel and Resend are essential to running the site and selling fonts, so without them you cannot sign in or buy. You can refuse visit statistics and behavior analytics by blocking cookies, and Google Analytics also with its opt-out add-on (tools.google.com/dlpage/gaoptout); this does not limit your use of the site.
6. Destruction
- When the retention period ends or the purpose is achieved, we destroy the information without delay. Information we must keep by law is stored separately and destroyed when its period ends.
- Electronic files are deleted so they cannot be recovered; paper documents are shredded or incinerated.
7. Your rights
- You may ask to access, correct, delete, or stop processing your information, or withdraw consent, at any time. Email info@itsmytype.kr; after verifying your identity we will act within 10 days and tell you the result.
- A legal representative or someone you authorize may also make the request, with a letter of authorization.
- Information the law requires us to keep may be retained for that period even if you ask for deletion.
8. Cookies and similar technologies
- We use cookies and browser storage to keep you signed in (login cookie), remember your language (NEXT_LOCALE cookie) and display theme (browser storage), measure visits (Google Analytics cookies) and understand how pages are used (Microsoft Clarity cookies).
- You can refuse or delete cookies in your browser settings. If you block the login cookie, you cannot sign in or buy.
- We do not use visit data for targeted advertising.
9. Security
- All traffic is encrypted (HTTPS), and personal information and retail font files are kept in private storage with restricted access.
- Only the representative can access personal information, and administrative secret keys are kept on the server only.
- Font files are delivered through short-lived links after verifying the buyer.
10. Children under 14
- We do not accept sign-ups from children under 14.
11. Privacy officer
- Privacy officer: Hansol Park (Representative), email info@itsmytype.kr
- Send any privacy questions, complaints or requests for remedy to this contact and we will respond without delay.
12. Remedies
- For advice or remedies regarding privacy infringement, you can contact:
- Personal Information Dispute Mediation Committee: +82 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
13. Changes
- We announce changes on the site at least 7 days before they take effect, or 30 days for changes that significantly affect your rights.