Privacy Policy

1. Introduction

DECODED ("we", "us", or "our") operates decoded.style (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our website and related services.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

We may collect the following types of information:

• Account information — When you sign in via third-party providers (such as Google, Apple, or Kakao), we receive information made available by that provider, which may include your name, email address, and profile image.
• Profile information — Information you choose to provide on your profile, such as a display name, username, or avatar.
• Usage and behavioral data — When you are signed in, we may collect information about how you interact with the Service, such as pages viewed, items clicked, searches, saves, and other in-app actions, to improve discovery and personalization.
• Virtual try-on data — If you use virtual try-on features, we may process photos you upload, subject to your explicit consent where required.
• Technical data — Browser type, device information, IP address, and similar data collected automatically when you access the Service.
• Communications — If you contact us by email, we collect the information you provide in your message.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate users and manage accounts
• Personalize content and improve recommendations
• Analyze usage patterns and improve product performance
• Process virtual try-on requests you initiate
• Respond to inquiries and provide support
• Protect against fraud, abuse, and security incidents
• Comply with legal obligations

4. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences (such as theme settings), and support core site functionality.

Session cookies are used for authentication through our identity provider. Local storage may be used for non-sensitive preferences on your device.

You can control cookies through your browser settings. Disabling cookies may limit certain features of the Service, including sign-in.

5. Third-Party Services

We rely on trusted third-party providers to operate the Service. These may include:

• Supabase — authentication and database hosting
• Vercel — website hosting and delivery
• Cloudflare R2 — image and media storage
• OAuth providers — Google, Apple, and Kakao for sign-in
• Affiliate and retail partners — including Rakuten and other networks when you follow outbound product links

These providers process data according to their own privacy policies. We encourage you to review their policies when you interact with their services.

6. Affiliate Links

Some links on the Service are affiliate links. When you click those links and interact with a retailer, that retailer (and its affiliate network) may collect information about your visit in accordance with their own privacy practices.

For more information, see our Affiliate Disclosure.

7. How We Share Information

We do not sell your personal information. We may share information:

• With service providers who assist us in operating the Service, under appropriate confidentiality obligations
• When required by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of DECODED, our users, or others
• In connection with a merger, acquisition, or sale of assets, with notice where required by law

8. Data Retention

We retain personal information for as long as necessary to provide the Service, fulfill the purposes described in this policy, and comply with legal obligations. When data is no longer needed, we take reasonable steps to delete or anonymize it.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, or to withdraw consent where processing is consent-based.

You may update certain profile information in your account settings. To sign out, use the logout option in the Service. To request access or deletion of your data, contact us at the email below.

10. Data Security

We implement reasonable technical and organizational measures designed to protect your information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. International Users

DECODED is operated from South Korea. If you access the Service from outside South Korea, your information may be transferred to, stored, and processed in South Korea or other countries where our service providers operate, which may have different data protection laws than your jurisdiction.

12. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: