개인정보 처리방침 (2026년 10월 19일 시행본)

This English translation is provided for convenience only. If the Korean and English versions differ, the Korean version prevails.

This is the previous Privacy Policy (the version effective October 19, 2026), before the revision of October 20, 2026. The current policy is on the Privacy Policy page.

CoinGaja (the "Site") values users' personal information and complies with Korea's Personal Information Protection Act and other relevant laws.

1. Personal Information Collected and How It Is Collected

• At sign-up: ID, password (stored encrypted), nickname, email address
• When using kimchi premium alerts (Telegram): Telegram chat ID, Telegram display name, alert conditions set by the member
• Information generated automatically while using the Service: IP address, date and time of access, browser information, cookies, usage records (posts and comments written, point history)

2. Purposes of Use

• Identifying members, confirming the intention to sign up, and preventing improper use
• Sending a verification code by email to confirm that the email address entered at sign-up belongs to the user
• Providing services such as boards and points, responding to inquiries and delivering notices
• Sending alert messages requested by members, such as kimchi premium alerts
• Analyzing usage statistics to improve the Service

3. Retention and Use Period

When a member requests to withdraw, the sign-up information is kept for 30 days from the date of withdrawal to prevent improper use and is then destroyed without delay. However, the ID and nickname are not destroyed and are kept to prevent anyone from signing up with the same ID or nickname and posing as the withdrawn member. Telegram link information is deleted immediately when the link is removed or when /stop is sent to the bot.

Posts and comments are not deleted automatically when a member withdraws, and the nickname shown on them also remains. Please delete any posts and comments you want removed yourself before withdrawing. Posts that have comments and comments that have replies cannot be deleted by their authors, so please ask the operator to delete them.

Site visit records (IP address, date and time of access, browser information) are kept for 3 months and server access logs for 14 days, and are then deleted. Private messages and popular search word records (including IP addresses) are deleted after 180 days, which means received and sent private messages are also deleted automatically after 180 days. Records of access blocked for security (IP addresses) are kept for 4 weeks. Posts and comments are saved together with the IP address used to write them; for withdrawn members, these IP addresses are deleted 3 months after the date of withdrawal. In addition, where retention is required by law, the information is kept for that period.

4. Provision to Third Parties and Outsourcing

In principle, the Site does not provide users' personal information to outside parties; the only exception is a request from an investigative agency based on law.

To provide the Service, the Site outsources the processing of personal information as follows. If the outsourced work or the contractor changes, this will be announced in this Policy without delay.

• Contractor: Amazon Web Services Korea LLC / Outsourced work: sending emails such as sign-up verification codes and password recovery (Amazon SES, Seoul region)
• Contractor: Amazon Web Services Korea LLC / Outsourced work: running the Site's servers and storing its data (Amazon Lightsail, Seoul region)

Alert messages are sent through the Telegram messenger service, and in that case the content of the alerts passes through Telegram's servers.

5. Cookies and Advertising

The Site uses cookies to keep users logged in and for usage statistics. Users can refuse to store cookies in their browser settings, but some features may be limited. Third-party advertisements such as Google AdSense may be shown on the Site, and advertisers may use cookies to show personalized ads. Personalized ads can be turned off in Google's ad settings.

The Site uses Google Analytics to analyze visit statistics. Google Analytics collects usage information through cookies, such as the pages visited, time spent, device and browser type and approximate location, and the Site only looks at this information in statistical form that cannot directly identify individuals.

• Recipient: Google LLC (USA)
• Items transferred: cookie-based visit information (pages visited, time of use, device and browser information, approximate location)
• Purpose: analysis of visit statistics and improvement of the Service
• Retention period: kept for the data retention period set in Google Analytics (up to 14 months) and then deleted
• How to refuse: block cookies in your browser settings or install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), and the information will not be collected.

6. Users' Rights

Users may view and correct their personal information at any time, and may withdraw their consent to its collection and use by withdrawing their membership.

7. Security Measures

Passwords are stored encrypted in a way that cannot be decrypted, and the number of people who can access personal information is kept to a minimum.

8. Person in Charge of Privacy and Inquiries

• Person in charge of privacy: CoinGaja Operations Team (email: coingaja.verify@gmail.com)

Inquiries and complaints about personal information are received through the email above, the Site's "Q&A" board or a private message to the operator, and will be answered without delay.

9. Changes to This Policy

When this Policy changes, notice will be given on the Notices board from 7 days before it takes effect.

Effective date: September 21, 2026
Revised: September 24, 2026 (added information on Google Analytics visit statistics)
Revised: October 1, 2026 (added information on sign-up email verification)
Revised: October 10, 2026 (clarified the sentence on keeping the information of withdrawn members)
Revised: October 19, 2026 (clarified the information of withdrawn members and their posts and comments, added the retention periods of access records, information on outsourced processing and the person in charge of privacy)