Personal Information Processing Policy

This page is translated from the Korean original. If the two versions conflict, the Korean original takes precedence.

딜담다 (hereinafter the “Site”) is an information website that collects and displays store discounts. The operator complies with the Personal Information Protection Act of the Republic of Korea and processes personal information only to the extent necessary to operate the service. Registration is not required to use the Site.

1. Personal Data Processor

Operator's business name (or full name): 딜담다 운영자

Privacy contact: contact@dealdamda.com

2. Data Protection Officer

Officer in charge: Operator of 딜담다

Email: contact@dealdamda.com

3. Personal Information Processed

This site does not offer registration, login, inquiry forms, or payment features. Therefore, there are no screens where users directly enter their name, contact details, address, payment method, or other information.

No error logs are stored on the site's web server. The records actually retained by the operator are limited to the items below.

• Web server access logs — Browser information, referral source (the address of the page viewed immediately before), requested page address, response result, and access time are logged. These logs are used to compile visitor statistics, respond to unauthorized access, and operate the service, and are Automatically deleted after 14 days. IP addresses are retained only with the final digits masked (e.g., 203.0.113.0).
• Store visits (clicks) — The time a user clicks a link to a store, the destination store and offer, the address of the page visited immediately before (referral source), and browser type classification. To distinguish visitors, only the One-way session hash generated at the time of access is used, The original IP address is neither sent anywhere nor stored.
• Page Visit History — The URL of the page you opened (search terms and tracking parameters after the URL are removed), the names of key buttons clicked on that page (Search, View Deals, Ask AI, etc.), visit time, the domain of the site visited immediately before, and browser type classification. This is used only for visit statistics and deleted after 90 days. A one-way hash calculated when you connect is also retained to count daily visitors; this hash is It is generated separately for each date and cannot be combined with a visit on another day, and, and the original IP address is neither transmitted nor stored.
• Visit statistics — Pages viewed and viewing times, referral source, and device and browser information. This information is collected Only with the user's consent, and processing is handled by Google Analytics.

To prevent abuse, we temporarily count the total number of code verification requests across the site, but this count is kept in memory only briefly and is not tracked by individual visitor.

4. Purposes of Processing Personal Information

• Provision of the service — information about stores and offers, and links to the relevant stores
• Affiliate Commission Settlement — Verifying Whether the Visit Was Made Through This Site
• Abuse prevention — block abnormally large numbers of requests sent at once
• Usage statistics — Aggregating the most-used benefits to improve the service

5. Retention and Use Period of Personal Information

The operator retains records only for as long as necessary to fulfill the processing purposes stated above and destroys them once those purposes have been fulfilled. However, if retention is required by law, the applicable retention period will be followed.

6. Disposal of Personal Information

Records are destroyed immediately once their processing purpose has been fulfilled or their retention period has expired. Electronic records are erased using methods that prevent recovery.

7. 제3자에 대한 개인정보 제공

이용자의 개인정보를 운영자가 제3자에게 넘기는 일은 없습니다. 단, 법령상 제출할 의무가 있는 경우에는 해당 절차를 따릅니다.

8. Outsourcing of Personal Information Processing

To the extent necessary to operate the service, the operator outsources processing tasks as follows.

• Google LLC — Google Analytics — Entrusted task: Visitor analytics / Data processed: Cookies, pages viewed, referral source, and device and browser information

The processor may not use personal information for any purpose other than the entrusted tasks and may process it only in accordance with the operator's instructions and the terms of the contract.

9. Overseas Transfer of Personal Information

The operator transfers personal information overseas as follows.

• Google LLC · Destination country: United States · Data transferred: Cookies, pages visited, referral source, and device and browser information · Purpose: Visitor analytics · Retention period: As specified in Google's Privacy Policy

Data is transferred over an encrypted network. You may refuse overseas transfers by selecting “Accept only when necessary” in the notice at the bottom of the screen, which will disable analytics. This will not affect your use of the site in any way.

10. Installation and Operation of Devices That Automatically Collect Personal Data and How to Refuse Their Use

We use Google Analytics on the site to monitor visit statistics. This tool stores cookies in your browser to distinguish between visitors.

No tracking takes place until consent is given. On your first visit, a selection notice appears at the bottom of the screen. Analytics cookies are not stored until you click “Accept all.” If you select “Accept only when necessary” or make no selection, you can use the site with measurement disabled.

Your selections are stored in your browser, so this notice will appear again if you delete the site data. You may also Block or delete in your browser settings cookies if you wish. Google's handling of data is governed by its Personal Information Processing Policy.

Links to stores may contain a technical identifier used to confirm that the visit originated through this site and to settle commissions. This value is used only to distinguish each visit, and Users’ names, contact details, and email addresses are not included here.

11. Rights and Obligations of Data Subjects and How to Exercise Them

As provided by applicable laws, users may request access to, correction or deletion of, suspension of processing of their personal information, and withdrawal of consent. Send a request to contact@dealdamda.com, and we will process it promptly.

However, if information such as click records remains only in a form processed with a one-way hash that cannot be linked to any individual, we may be unable to process a request for access or correction because there is no way to verify that the requester is the data subject.

12. Processing Information of Children Under 14

This service is not intended for children under 14, and we do not knowingly collect personal information from children who require consent from a legal guardian.

13. Measures to Safeguard Personal Data

• We do not retain access logs or error logs generated by the web server.
• IP addresses are not stored in their original form and are used only as irreversible one-way hash values.
• The public site only uses the database in read-only mode and does not possess keys capable of decrypting offer codes or affiliate links.
• Benefit codes are stored encrypted rather than in their original form and are not included in the HTML sent on public pages. The code is delivered through a separate request only when the user clicks the button.
• HTTPS encryption is applied to data transmissions.

Although complete security cannot be guaranteed for electronic transmission and storage, the operator continuously reviews and improves safeguards appropriate to the nature of the information handled and the level of risk.

14. How to Seek Remedies for Rights Violations

To report or seek advice about a personal information breach, contact one of the following organizations.

• Personal Information Infringement Report Center: privacy.kisa.or.kr, Tel. 118 (no area code)
• Personal Information Dispute Mediation Committee: kopico.go.kr, Tel. 1833-6972
• Supreme Prosecutors' Office Cyber Investigation Division: spo.go.kr, call 1301 (no area code)
• Korean National Police Agency Cyber Bureau: ecrm.police.go.kr, call 182 (no area code)

15. Affiliate Link Disclosure

If you make a purchase through an affiliate link on this site, the seller may pay the operator a set commission, but the amount you pay will not change. After you leave for the seller's site, its privacy policy applies.

16. YouTube API Services and YouTube Channel Operations

The operator uses YouTube API Services to publish and manage videos on the site's official YouTube channel. This feature is used only for the operator's own channel account. It does not access site users' YouTube or Google accounts, nor does it collect or store their YouTube data.

• When using YouTube, you are subject to YouTube Terms of Service.
• Information processed through YouTube API Services is subject to Google Privacy Policy.
• You can revoke the permissions granted to the operator's channel at any time in Google Account security settings.
• Channel connection keys are stored in encrypted form and are not included on publicly accessible pages.

17. Privacy Policy Revisions

This Privacy Policy takes effect on 2026-09-15. If this policy is revised due to changes in the service or applicable laws, the updated terms will be posted on this page.