Privacy Policy

Last updated: 2026-10-14

1. Data We Collect

We collect only the information needed to operate this student marketplace:

• Account data: nickname, email address, password hash, saved skills (if any), email notification preferences, and account creation and last-login timestamps
• Verification and recovery data: email verification tokens, password reset tokens, and account status
• Listing data: title, category, price, tags, description, condition, status, posting dates, uploaded image files, and optional pickup-place text
• Conversation data: messages between users about listings
• Safety data: reports, moderation notes, and anti-abuse request-throttling records
• Session cookies and IP address-based throttling records used to keep accounts secure

2. Why We Use Your Data

• To create and manage your account
• To verify email ownership before enabling posting and messaging
• To display listings and enable buyer/seller communication
• To send service emails (password reset, verification, notifications)
• To prevent abuse and protect platform security

3. Data Retention

• Automatic listing removal and removal reminders are currently paused. You can remove your listings from My products.
• Account and conversation data are retained until account deletion, unless legal or safety reasons require longer storage
• Security logs are retained only as long as needed for abuse prevention

4. Data Sharing

Listing details, images and pickup places are public, along with the seller's nickname, verification status, account age and listing counts. Saved skills may be used as public listing tags. Choose a public meeting place and avoid posting your home address.

We use Vercel to host the website and store publicly accessible listing images, and Turso to store account, listing, conversation, moderation and encrypted session data. When email delivery is enabled, Resend sends account and marketplace emails, including the recipient address, verification or recovery links and a short message preview for message notifications. We do not sell personal data.

Clicking “Open pickup place on map” sends the pickup-place text to OpenStreetMap as a search query. The map receives this information only when you open the external link. We do not request your device's GPS location.

5. Your Rights

• You can edit your nickname and email and change email notification preferences in My page
• You can delete your account from the Delete account page
• You can request removal or correction of your data by contacting the administrator

6. Contact

For privacy or security requests, contact contact@withok.kr.

Back to gallery