Mecus — Privacy Policy

Effective date: June 11, 2026

In accordance with the Personal Information Protection Act, Mecus explains the purposes, items, retention periods, third-party provision and processing consignment, and user rights regarding personal data, as set out below. This policy applies to the app, website, payments, the billboard, the Boss Party Finder (BETA), the Discord community, and screen sharing (BETA).

Controller information: Trade name Mecus · Representative / Data Protection Officer Noh Gyu-beom · Business Registration No. 112-31-67822 · E-commerce registration: exempt (simplified taxpayer) · Address 104-902, 76-8 Daeho-gil, Naju-si, Jeollanam-do, South Korea · Phone +82-70-8080-0503 · Email cartilage0bone@gmail.com · Support: in-app inquiry or official Discord.

1. Personal data items processed

Category	Items	Purpose
Account	Firebase UID, Discord UID, Discord display name, in-app nickname, Pro expiry date, held billboard passes/coupons and their expiry, login-bonus coupon grant time/slot (the Discord email is provided by Discord at login but is not stored as account information)	Login, account identification, Pro entitlement, nickname display, Discord profile linking, delivery of consumable benefits
Security session	Session ID, app signature/verification value, device identifier hash (HWID), browser/graphics-based fingerprint, Windows account identifier hash, access IP	One-account-one-device policy, payment/abuse prevention, account protection, dispute response
Payment	Transaction number, product name, quantity, amount, payment status, payment time, payment identifier and approval/cancellation notifications from the payment service provider (PSP), terms version/hash, consent time, access IP, device/account identifier hashes, and an identifier used for verification and fraud response in web payments (Discord email or UID)	Pro pass activation, billboard pass grant, payment confirmation, refund/cancellation handling, e-commerce record retention
Billboard	Author UID, display nickname, display tier, message content, request time, Discord UID	Billboard display, Discord linking on nickname click, response to inappropriate content
Boss Party Finder (BETA)	Firebase UID, Discord UID, Discord display name, and public character information entered by the user or refreshed via the NEXON Open API (nickname, server, job, level, combat power, guild, character image), plus conversion stats and boss multipliers based on the public Maplescouter service, source links, the Maplescouter source-refresh time where included in the response, recruitment posts, applications, approve/reject/close status, and create/update times	Posting recruitment listings, handling applications/approvals/rejections, member verification, Discord contact linking, abuse prevention and dispute response
Screen sharing (BETA)	Room code, participant nickname, login status, Pro entitlement, temporary peer ID, host status, join/leave/kick status, WebRTC offer/answer/candidate signaling, and network metadata required for the P2P connection	Login-based room creation/joining, free/Pro participant limits, P2P connection, room management, abuse prevention
Inquiries/reports	Inquiry content, attachments, account identifier, contact, handling history	Customer support, error checking, dispute response

2. Purposes of processing

Member identification, login, Pro entitlement checks, billboard pass/coupon management
Payment confirmation, refunds, fraud prevention, consent and dispute evidence
Provision of features such as the billboard, Boss Party Finder, screen sharing, and Discord linking
Security, incident analysis, abuse prevention, and service-quality improvement

3. Retention and use period

Account data: deleted or anonymized on withdrawal. Minimal records needed for abuse/dispute response may be stored separately.
Payment and transaction records: retained for the period required by applicable laws on e-commerce, consumer protection, and tax/accounting.
Consent and security records: retained for the period needed for dispute response and abuse prevention.
Character/conversion display data based on the NEXON Open API and Maplescouter is refreshed when the user looks it up again; API-based figures older than 30 days may not be shown as-is, to comply with policy.
Maplescouter-based lookups occur only when the user requests a profile refresh, and a refresh cooldown may apply on client and server to protect the external service and prevent misuse.
Billboard displays: automatically disappear about 12 hours after being shown, after which they are deleted or minimized for retention purposes. Report/dispute records may be retained as needed.

4. Third-party provision and processing consignment

Discord: login and community linking
NEXON Open API: lookup of public MapleStory character information
Maplescouter: lookup of public conversion-stat and boss-multiplier results based on a MapleStory nickname entered by the user
The payment service provider (PSP): payment processing, approval/cancellation notifications, refund/dispute handling
Firebase/Google Cloud: authentication, database, hosting, server functions
Cloudflare: security, proxy, Workers, bot defense
GitHub: app release distribution and update files
Data may be provided, to the extent necessary, in response to lawful requests from investigative or dispute-resolution authorities.

5. Possibility of overseas transfer

External services such as Firebase, Cloudflare, Discord, GitHub, the payment service provider (PSP), the NEXON Open API, and Maplescouter may use overseas servers.
Mecus uses these services to the extent needed for service provision, security, payment, and distribution, and reviews each service's security policy and terms.

6. Notes on screen sharing

Screen sharing transmits a screen chosen by the user to other participants. Before sharing, users must check for exposure of personal data, messengers, payment information, account information, and sensitive screens.
Creating and joining screen-share rooms is available only to Discord-logged-in members; a free member's room allows up to 2 participants and a Pro member's room up to 6.
During the WebRTC connection, network metadata needed for the P2P connection may be exposed to participants or infrastructure.

7. External links

Clicking an external link may open an external page; personal data collected on that page is governed by that external service's own privacy policy.

8. User rights

Users may request access to, correction of, deletion of, suspension of processing of, and withdrawal of consent for their personal data.
On withdrawal, in-app benefits may not be recoverable, and records needed for payment/refund/dispute handling may be stored separately under applicable law.

9. Security measures

Plaintext secrets are not included in source code or public documents.
Core decisions such as payment, entitlements, passes, Pro time, nicknames, and the billboard are performed on the server.
Security logs and consent records may be stored separately to prevent tampering and support dispute response.

In case of any discrepancy, the Korean-language version of this policy prevails for customers in South Korea.

Contact: in-app inquiry or official Discord.