Privacy Policy
Effective November 16, 2026 · 한국어
This English version is a translation provided for convenience. If it differs from the Korean version, the Korean version prevails.
Metapet Co., Ltd. (the “Company”) establishes and discloses this Privacy Policy under Article 30 of the Korean Personal Information Protection Act (PIPA) to protect data subjects’ personal information and to handle related complaints quickly and smoothly. This Policy applies to linktocut (https://linktocut.com, the “Service”) operated by the Company.
1. Purposes of Processing
The Company processes personal information for the following purposes only. If a purpose changes, the Company takes the necessary measures, such as obtaining separate consent under Article 18 of PIPA.
- Sign-up and log-in: identity verification by email code, member identification, keeping you logged in
- Providing the Service: retrieving information from product links you enter, making and delivering videos, managing usage history
- Paid services: payment and subscription management, granting credits, handling withdrawals and refunds, keeping transaction records required by law
- Preventing abuse: limiting repeated verification emails, preventing duplicate use of free credits, blocking excessive requests
- Notices and inquiries: important notices such as changes to the Terms or Policy and Service suspension, and handling inquiries
The Company does not send advertising to members’ email. If it wishes to in the future, it will obtain separate consent.
2. Personal Information Processed
| Category | Items | How collected |
|---|---|---|
| Required (sign-up, log-in) | Email address | Entered on the log-in screen |
| Visit statistics | A randomly generated visitor ID (browser storage), page address viewed, referrer (previous site address, ad source tags), device type (mobile/PC). IP addresses are not stored | Generated automatically on visit |
| Generated during use | Log-in records (IP address, browser information, log-in time), product links entered and the IP address used to enter them, usage history (videos made, remaining credits), time of agreement to the Terms | Generated automatically during use |
| Collected automatically | Server access logs (IP address, access time, requested address, browser information) | Generated automatically on access |
| When paying | Payment records (plan, payment date, amount and currency, order/subscription/invoice numbers, payment and subscription status), Lemon Squeezy customer ID. Payment details such as card numbers and billing address are received directly by Lemon Squeezy; the Company does not receive them | Payment notifications sent by Lemon Squeezy after payment |
- We do not collect passwords. Verification codes sent by email are used only for verification and their original values are not stored.
- Product names, prices, product photos, etc. retrieved from product links are product information publicly shown in online stores and are not used to identify individuals.
- The Company does not accept sign-ups from children under 14.
3. Retention Period
When a member withdraws, the Company destroys personal information without delay, except that the following is kept for the stated period and then destroyed.
| Item | Retention | Reason |
|---|---|---|
| Email address, usage history, product links entered | Until withdrawal | Providing the Service |
| Visit statistics | 13 months after collection | Improving the Service and analyzing sign-up channels. Linked to the member after log-in; the link is removed on withdrawal |
| Log-in records (IP address, browser information) | Until log-out or expiry (up to 400 days after last use); deleted immediately on withdrawal | Keeping you logged in and detecting fraudulent log-ins |
| Verification codes (irreversibly transformed) | 10 minutes (deleted immediately when used) | Identity verification |
| Verification email log (unidentifiable email hash, requesting IP address) | 1 day | Limiting repeated verification emails |
| Withdrawal record (unidentifiable email hash, remaining credits) | 1 year from withdrawal | Preventing duplicate use of free credits |
| Server access logs | Oldest records are deleted automatically when the set size (about 50 MB) is reached | Responding to security incidents and failures |
| Database backups | Up to 8 weeks from backup | Recovery after failures or incidents (stored encrypted and deleted automatically after the period) |
For paid services, under the Korean Act on the Consumer Protection in Electronic Commerce, records of contracts and withdrawals and of payments and supply are kept for 5 years, and records of consumer complaints and dispute handling for 3 years.
4. Destruction Procedure and Method
- Procedure: when a member withdraws in My account, the email address, log-in records, product links entered and retrieved product information are deleted immediately. Information with a separate period under Section 3 is deleted by automated jobs when the period ends.
- Method: electronic files are deleted in a way that cannot be recovered; paper documents are shredded or incinerated.
5. Provision to Third Parties
The Company processes personal information only within the purposes in Section 1 and does not provide it to third parties except with the data subject’s consent or under special provisions of law (Articles 17 and 18 of PIPA).
When a member pays for a paid service, the Company provides the following with separate consent obtained on the payment screen. Lemon Squeezy processes payments directly as the Merchant of Record, and information the member enters on its checkout is processed under Lemon Squeezy’s Privacy Policy (https://www.lemonsqueezy.com/privacy).
| Recipient | Lemon Squeezy — Link, LLC (formerly Lemon Squeezy, LLC), United States ([email protected]) |
|---|---|
| Purpose | Payment processing, tax calculation and receipts, subscription management, refunds |
| Items | Email address, member number (random identifier), selected plan |
| When and how | Sent over the network when the member presses the payment button (overseas provision — United States) |
| Retention | As set out in Lemon Squeezy’s Privacy Policy and applicable law |
You may refuse this provision; you then cannot use paid services, but you can still use free credits.
6. Outsourcing of Processing
The Company outsources the following processing to provide the Service. The Service’s servers, databases and backups are kept on equipment the Company operates directly in the Republic of Korea.
| Contractor | Task |
|---|---|
| Plus Five Five, Inc. (service name Resend) | Sending sign-up and log-in verification emails (overseas transfer, Section 7) |
| Cloudflare, Inc. | Website connectivity, transport encryption, attack blocking (overseas transfer, Section 7) |
When outsourcing, the Company sets out, under Article 26 of PIPA, prohibition of processing beyond the outsourced purpose, security measures, restrictions on re-outsourcing, supervision of contractors and liability for damages, and supervises contractors’ safe processing. Changes in tasks or contractors are announced through this Policy.
7. Overseas Transfer
The Company transfers personal information overseas as follows for outsourcing necessary to provide the Service (performance of contract) (Article 28-8(1)(3) of PIPA).
| Recipient (contact) | Plus Five Five, Inc. — Resend ([email protected]) | Cloudflare, Inc. ([email protected]) |
|---|---|---|
| Country | United States | United States and countries where Cloudflare data centers are located |
| When and how | Sent over the network each time a verification code is requested | Sent over the network each time the site is accessed |
| Items | Email address, verification code | IP address, browser information, request content |
| Purpose | Sending verification code emails | Connectivity, transport encryption, attack blocking |
| Retention | Per Resend’s policy after sending (destroyed when the contract ends) | Per Cloudflare’s policy after processing (destroyed when the contract ends) |
If you do not want this transfer, you may choose not to sign up or to withdraw. Because verification emails and connectivity are essential to the Service, you cannot use the Service if you refuse the transfer.
8. Rights of Data Subjects and How to Exercise Them
- You may at any time request access to, correction, deletion or suspension of processing of your personal information, and withdraw consent. In My account you can view your sign-up information and usage history and withdraw immediately.
- Other requests can be made by phone (+82-31-343-8656) or email ([email protected]), and the Company acts without delay (within 10 days).
- Requests may also be made through a legal representative or an authorized person, who must submit a power of attorney in the form prescribed by the Korean notice on personal information processing methods.
- Access and suspension requests may be restricted under Articles 35(4) and 37(2) of PIPA, and deletion cannot be requested for personal information that other laws require to be collected.
- The Company verifies that the requester is the data subject or a legitimate representative.
9. Security Measures
- Administrative: minimizing staff who handle personal information, internal management rules
- Technical: password-less authentication, storing verification codes and log-in tokens only as irreversible hashes, HTTPS encryption end to end, blocking external access to servers and restricting access rights, limiting authentication requests, encrypted backups
- Physical: keeping servers and backup equipment in locked Company spaces with access control
10. Cookies
The Company uses a single cookie (lc_session) to keep you logged in. It contains only a randomly generated log-in token, is kept for up to 400 days after last use, and is deleted when you log out. We do not use advertising cookies. For visit statistics we keep one random visitor ID (lc_vid) in browser storage instead of a cookie, which is deleted when you clear the site’s data. We also keep your language choice (lc_lang) in browser storage if you switch languages. You can block cookies in your browser settings, but then features that require log-in will not work.
11. Privacy Officer
| Privacy officer | Park Sungyong (CEO) |
|---|---|
| Phone | +82-31-343-8656 |
| [email protected] |
You may contact the privacy officer about inquiries, complaints and remedies regarding personal information arising from using the Service, and the Company will respond and handle them without delay.
12. Remedies for Infringement
- Personal Information Dispute Mediation Committee (Korea): 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
- Supreme Prosecutors’ Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
If you live outside Korea, you may also contact the data protection authority of your country.
13. Changes to This Policy
This Policy applies from November 16, 2026. Additions, deletions or changes are announced on this page from 7 days before they take effect.
History: established November 8, 2026 · amended November 16, 2026 (added payment processing purposes and items, and overseas provision to Lemon Squeezy).