Privacy Policy

MinBapE (the “Operator”) operates UmByul (음별), a music review and rating service (the “Service”). We protect users’ personal information in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable laws.

This Privacy Policy explains what personal information we collect and how we process it.

1. Purposes of Processing Personal Information

We process personal information for the following purposes:

1. Registering and managing accounts, verifying identity, and authenticating users
2. Providing the Service, including ratings, reviews, comments, Mixes, and social features
3. Responding to inquiries and delivering notices
4. Preventing misuse, maintaining the security and stability of the Service, and handling disputes
5. Complying with obligations under applicable laws

2. Personal Information We Collect and How We Collect It

2.1 Information collected during registration and use of the Service

Required information:

• Email address
• Password, stored in encrypted form
• Nickname
• Date of birth, used to verify that the user is at least 14 years old
• Country

Optional information:

• Gender
• Profile image or avatar
• Preferred music genres
• Preferred language

2.2 Information collected through social login

When you use Google or Discord to sign in, we may receive the following information from the applicable provider:

• Email address
• Profile information, including your name and profile image

2.3 Information generated or collected through use of the Service

We may collect:

• Content you create, including ratings, reviews, comments, and Mixes
• Activity records, including likes, follows, blocks, and reports
• Records of your consent to the Terms of Service and this Privacy Policy

2.4 Information collected when you contact us

• Email address
• Contents of your inquiry

2.5 Information collected automatically

We may automatically collect:

• IP address, which may be encrypted and used to prevent misuse and avoid duplicate view counts
• Cookies
• Service usage records
• Device and browser information

2.6 Methods of collection

We collect personal information through:

• Information you provide directly when registering, using the Service, or submitting an inquiry
• Information provided by social login providers
• Information automatically generated or collected while you use the Service

3. Retention and Use Period of Personal Information

1. As a general rule, we retain personal information until you close your account. When your account is closed, we delete the information without undue delay.

2. We may retain certain information for the following periods:

   • Where retention is required by applicable law: for the period required by that law
   • Enforcement and audit records required to prevent misuse or handle disputes: for as long as reasonably necessary
   • Records of consent to the Terms of Service and Privacy Policy: for legal evidence and compliance purposes

3. Certain content associated with another user’s content, such as replies to comments, may be retained in a de-identified form to maintain continuity of the Service.

4. Disclosure of Personal Information to Third Parties

We do not provide users’ personal information to third parties.

However, we may disclose personal information where required by law or in response to a lawful request made by an investigative or government authority through proper legal procedures.

5. Outsourcing and Cross-Border Transfer of Personal Information

We use the following service providers to operate the Service. Some personal information may be processed outside the Republic of Korea.

Personal information is transferred when you use the relevant part of the Service and is transmitted electronically through information and communications networks.

Voluntary support is provided through a link to an external platform, such as Ko-fi. Payment information is processed directly by the external platform, and we do not collect it.

Music information is retrieved from Spotify and displayed through the Service. Users’ personal information is not transmitted to Spotify during this process.

6. Your Rights and How to Exercise Them

1. You may request access to, correction of, deletion of, or restriction of processing of your personal information at any time. You may also withdraw your consent.

2. You may directly perform the following actions through the features provided within the Service:

   • Edit your profile information
   • Export a copy of your data
   • Close your account and delete your account information and personal information

3. For any other request, you may contact the Privacy Officer listed in Section 11. We will respond and take appropriate action without undue delay.

7. Deletion of Personal Information

1. We delete personal information without undue delay when the purpose for which it was processed has been fulfilled or when the applicable retention period has expired.
2. Personal information stored electronically is deleted using methods that prevent it from being recovered or reproduced. Stored profile images and other related files are also deleted.

8. Measures to Protect Personal Information

We take the following measures to protect personal information:

1. Secure and encrypted storage of passwords
2. Encryption of data in transit using HTTPS and TLS
3. Restriction and control of access to personal information
4. Measures to prevent automated attacks and bot activity
5. Retention of access records

9. Cookies and Other Automatic Data Collection Technologies

1. We use cookies and local storage to provide features such as maintaining login sessions, saving language and display settings, and storing recent searches.
2. We use bot prevention tools, including Cloudflare Turnstile, to prevent automated attacks and misuse.
3. You may disable cookies through your browser settings. However, doing so may limit certain features of the Service, including login functionality.

10. Personal Information of Children Under 14

Only users aged 14 or older may register for the Service.

We check users’ dates of birth during registration and restrict registration by anyone under the age of 14.

11. Privacy Officer

• Privacy Officer: MinBapE
• Contact: contact@umbyul.com

You may contact the Privacy Officer at the address above regarding any privacy-related questions or concerns arising from your use of the Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in applicable laws or the Service.

When we make changes, we will notify users of the effective date and the details of the changes through the Service.

Supplementary Provision

This Privacy Policy takes effect on July 14, 2026.