Mecus — Privacy Policy

Version 2 · Effective date: July 2, 2026

In accordance with the Personal Information Protection Act, Mecus explains the purposes, items, retention periods, third-party provision and processing consignment, and user rights regarding personal data, as set out below. This policy applies to the app, website, payments, Mecus Credits, the Boss Party Finder (BETA), the Maple Scheduler (BETA), the Discord community, and screen sharing (BETA).

Controller information: Trade name Mecus · Representative / Data Protection Officer Noh Gyu-beom · Business Registration No. 112-31-67822 · E-commerce registration: exempt (simplified taxpayer) · Address 104-902, 76-8 Daeho-gil, Naju-si, Jeollanam-do, South Korea · Phone +82-70-8080-0503 · Email cartilage0bone@gmail.com · Support: in-app inquiry or official Discord.

1. Personal data items processed

Category	Items	Purpose
Account	Firebase UID, Discord UID, Discord display name, in-app nickname, Pro expiry date, Mecus Credits balance and coupon quantity/expiry (the Discord email is provided by Discord at login but is not stored as account information)	Login, account identification, Pro entitlement, nickname display, Discord profile linking, delivery of consumable benefits
Security session	Session ID, app signature/verification value, device identifier hash (HWID), browser/graphics-based fingerprint, Windows account identifier hash, access IP	One-account-one-device policy, payment/abuse prevention, account protection, dispute response
Payment	Transaction number, product name, quantity, amount, payment status, payment time, payment identifier and approval/cancellation notifications from Paddle (the payment processor and Merchant of Record), terms version/hash, consent time, access IP, device/account identifier hashes, and an identifier used for verification and fraud response in web payments (Discord email or UID)	Pro pass activation, Mecus Credits grant, payment confirmation, refund/cancellation handling, e-commerce record retention
Mecus Credits / notifications	Author UID, display nickname, message content, credit spend/balance history, free-chat daily-use count and reset date (freeChatUsed), request time, Discord UID, the member's own sent-notification history (approx. 7 days), operator reply content and time	Delivery of in-app features, credit deduction/settlement, enforcing the daily free-chat limit, Discord linking on nickname click (deep link), public notification display (approx. 12 hours), providing and delivering operator replies, letting members review their own sent history, response to inappropriate content
Boss Party Finder (BETA)	Firebase UID, Discord UID, Discord display name, and public character information entered by the user or refreshed via the NEXON Open API (nickname, server, job, level, combat power, guild, character image), plus conversion stats and boss multipliers based on the public Maplescouter service, source links, the Maplescouter source-refresh time where included in the response, recruitment posts, applications, approve/reject/close status, and create/update times	Posting recruitment listings, handling applications/approvals/rejections, member verification, Discord contact linking, abuse prevention and dispute response
Maple Scheduler (BETA)	NEXON Open API key (stored on the server encrypted with AES-256-GCM), per-character boss/daily/weekly content-progress status (registration/completion flags, progress counts)	Automatic scheduler synchronization and progress display · Retention: until API-key deregistration or membership withdrawal (deleted immediately upon deregistration)
Screen sharing (BETA)	Room code, participant nickname, login status, Pro entitlement, temporary peer ID, host status, join/leave/kick status, WebRTC offer/answer/candidate signaling, and network metadata required for the P2P connection	Login-based room creation/joining, free/Pro participant limits, P2P connection, room management, abuse prevention
Inquiries/reports	Inquiry content, attachments, account identifier, contact, handling history	Customer support, error checking, dispute response

2. Purposes of processing

Member identification, login, Pro entitlement checks, Mecus Credits management
Payment confirmation, refunds, fraud prevention, consent and dispute evidence
Provision of features such as the Boss Party Finder, screen sharing, and Discord linking
Security, incident analysis, abuse prevention, and service-quality improvement

3. Retention and use period

Account data: deleted or anonymized on withdrawal. Minimal records needed for abuse/dispute response may be stored separately.
Payment and transaction records: retained for the period required by applicable laws on e-commerce, consumer protection, and tax/accounting.
Consent and security records: retained for the period needed for dispute response and abuse prevention.
Character/conversion display data based on the NEXON Open API and Maplescouter is refreshed when the user looks it up again; API-based figures older than 30 days may not be shown as-is, to comply with policy.
Maplescouter-based lookups occur only when the user requests a profile refresh, and a refresh cooldown may apply on client and server to protect the external service and prevent misuse.
Mecus Credits and in-app feature usage records: retained for the period needed for settlement, abuse prevention, and dispute response, then deleted or minimized in line with the retention purpose. Report/dispute records may be retained for the necessary period.
Maple Scheduler (BETA) NEXON Open API key and content-progress data: retained until API-key deregistration or membership withdrawal, and deleted immediately upon deregistration.

4. Third-party provision and processing consignment

Discord: login and community linking
NEXON Open API: lookup of public MapleStory character information
Maplescouter: lookup of public conversion-stat and boss-multiplier results based on a MapleStory nickname entered by the user
Paddle (Paddle.com Market Ltd), the payment processor and Merchant of Record: payment processing, tax handling, approval/cancellation notifications, refund/dispute handling
Firebase/Google Cloud: authentication, database, hosting, server functions
Cloudflare: security, proxy, Workers, bot defense
GitHub: app release distribution and update files
Data may be provided, to the extent necessary, in response to lawful requests from investigative or dispute-resolution authorities.

5. Possibility of overseas transfer

External services such as Firebase, Cloudflare, Discord, GitHub, Paddle (the payment processor and Merchant of Record), the NEXON Open API, and Maplescouter may use overseas servers.
Mecus uses these services to the extent needed for service provision, security, payment, and distribution, and reviews each service's security policy and terms.

6. Notes on screen sharing

Screen sharing transmits a screen chosen by the user to other participants. Before sharing, users must check for exposure of personal data, messengers, payment information, account information, and sensitive screens.
Creating and joining screen-share rooms is available only to Discord-logged-in members; a free member's room allows up to 2 participants and a Pro member's room up to 6.
During the WebRTC connection, network metadata needed for the P2P connection may be exposed to participants or infrastructure.

7. External links

Clicking an external link may open an external page; personal data collected on that page is governed by that external service's own privacy policy.

8. User rights

Users may request access to, correction of, deletion of, suspension of processing of, and withdrawal of consent for their personal data.
On withdrawal, in-app benefits may not be recoverable, and records needed for payment/refund/dispute handling may be stored separately under applicable law.

9. Security measures

Plaintext secrets are not included in source code or public documents.
Core decisions such as payment, entitlements, the Pro pass, Pro time, Mecus Credits, and nicknames are performed on the server.
Security logs and consent records may be stored separately to prevent tampering and support dispute response.

In case of any discrepancy, the Korean-language version of this policy prevails for customers in South Korea.

Contact: in-app inquiry or official Discord.