Privacy Policy

Moonbase collects only the information essential to running the community. What we receive is encrypted or pseudonymized for storage, and is never used for advertising or sales or handed to third parties.

1. Information we collect and how we use it

• Sign-up: ID, password and nickname — used for login and managing your own posts. Passwords are never stored in plain text, only as scrypt hashes, and IDs are stored encrypted.
• Activity records: posts, comments, photos, likes, votes, reports and your bio — used for community features and rank (promotion) calculation.
• MARKET deals (only when you use the feature): recipient name, phone, address (or convenience store) and delivery notes — stored encrypted so that only the seller of that deal and the team can see them, and deleted if the order is cancelled.
• Access information: web server access logs (IP address, access time, requested URL, browser info) are kept for security and incident response and deleted automatically after 14 days. The app uses only values transformed with a secret key instead of raw IPs, to block excessive requests and prevent automated sign-ups.
• Access statistics (self-counted): Date of visit, Page Views, Country code determined within the server by IP, Random visitor value created in browser (localStorage mb_vid), If you are logged in, your account will be used in visitor counts for administrators. The screen address you are currently viewing is stored in the server memory only during connection., IP is not saved and daily records are automatically deleted after 400 days. If you click “Reject Visit Statistics”, these statistics will not be sent.

2. Cookies

• Login cookie (mb_sid): keeps you logged in. The server stores only a hash of the token, and it expires when you log out or after the set period (14 days by default).
• Browser storage: language, theme, whether the first-visit intro was shown, and whether you opted out of analytics are stored only in this browser (not sent to the server).
• Google Analytics cookies (_ga, _ga_*): see section 3 below.

3. Google Analytics (visit statistics)

• To improve the site, we load and use Google LLC's Google Analytics 4 through Google Tag Manager.
• Collected items: URL and title of pages visited, previous page (referrer), usage such as time on page and scrolling, browser and device type, screen size, language, approximate region estimated from IP, and a random visitor identifier (cookie). Member information such as name, ID, nickname or post content is not sent.
• Google Analytics 4 does not store IP addresses, and we only view statistics in aggregated form that cannot identify individuals. Data is transferred to and stored on Google's servers (outside Korea, e.g. the US) — recipient: Google LLC, purpose: visit statistics, retention: per the Google Analytics data retention setting.
• Admin console pages are not tracked.
• How to opt out: the "Opt out of visit statistics" button on this page (Google's script is never loaded in this browser), blocking cookies in your browser, or the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). Opting out does not limit your use of the site.
• How Google processes data: policies.google.com/technologies/partner-sites

4. External services

• YouTube videos play via youtube-nocookie.com embeds; when you press play, YouTube (Google) processes information under its own policy.
• The postal code search in MARKET address entry uses Kakao's postal code service and is loaded only when you press that button.
• We do not otherwise provide member information to third parties or outsource its processing.

5. Retention and destruction

• Member information and posts are kept until account deletion (deletion request), and deleted without delay upon request. However, the minimum records needed to handle other members' reports or disputes may be kept until handling is complete.
• Login records (sessions) are deleted automatically when they expire. Web server access logs are deleted automatically after 14 days.

6. Your rights

• You can view and edit your information and delete your account yourself on MY PAGE. When you delete your account, your login ID, password, profile, gallery photos and shipping address are destroyed immediately, and the encryption key share is erased so they cannot be recovered. For other requests to view, correct, delete or stop processing, post on the Q&A BOARD and we will handle them after review.
• Children under 14 cannot sign up; if found, the account is deleted.

7. Contact

• For privacy questions or requests, please post on the Q&A BOARD. The team will check and reply.

Effective date 2026-11-09 · This policy applies from 2026-11-06. Any changes will be announced on this page and in a notice.