Website Privacy Policy · Effective 2026-10-23

Website Privacy Policy

Zenumaik Co., Ltd. (the "Company") operates the ChapterN website and processes personal information under Korea's Personal Information Protection Act. This Policy covers website browsing, web reading, launch-notification requests, website analytics and advertising tracking. App registration, reading records, payments and advertising measurement are covered by the App Privacy Policy.

Acknowledging this Policy does not constitute consent to all processing. We obtain separate consent where required.

1. Personal Information We Process

Browsing and web reading do not require sign-in. Reading position and choices are temporarily stored in browser session storage; that stored state itself is not sent to Company servers. Analytics events are sent separately as listed above. Section 10 explains cookies and temporary storage.

2. Purposes and Legal Bases

Launch notifications are optional. Declining consent to collect and use request information or receive marketing emails prevents a notification request, but you can still browse and read on the website. Advertising performance measurement and ad-delivery optimization rely on legitimate interests, and you can refuse them at any time using the methods in Section 10. Launch-notification email consent is separate and is not treated as consent to advertising measurement.

3. AI Training and Automated Decisions

The Company does not use website users' personal information to train generative AI models or send it to external generative AI during reading. The website does not make automated decisions based on personal information that significantly affect users' rights or obligations.

4. Third-Party Disclosure and Service Providers

We disclose personal information to third parties only with consent or another legal basis. Before responding to a court or investigative authority, we verify the legal basis and scope and provide only the minimum necessary information. We entrust the following operations to providers and use contracts and oversight to ensure secure processing.

Information reaches advertising providers in web advertising measurement in two ways.

• Direct collection through advertising tags: Google, Meta, and TikTok directly collect the web advertising measurement information in Section 1 through advertising tags on web pages. This is each provider's own processing; Section 10 explains its purposes and how to limit it.
• Provision by the Company: For the advertising performance measurement and ad-delivery optimization in Section 2, the Company provides usage information from Google Analytics, which is linked with Google Ads, to Google as follows.

5. International Transfers

For outsourced processing and storage necessary to enter into or perform a contract, we apply disclosure under Article 28-8(1)(3)(a) of Korea's Personal Information Protection Act. For transfers arising from advertising providers' direct collection through web advertising tags and from the Company's provision of Google Analytics usage information, the Company discloses the matters listed in Article 28-8(2) (the information transferred; the country, timing, and method; the recipient and its contact; the purpose and retention period; and how to refuse, the procedure, and its effect) in the table and refusal information below. Transfer grounds are assessed separately from the collection and use grounds in Section 2.

The Company stores launch-notification requests in Google Cloud's Seoul region in the Republic of Korea. See Google's processing facility locations for its global infrastructure.

The transfer to Meta Platforms Ireland Limited (Ireland) relies on the equivalence recognition under Article 28-8(1)(5) of Korea's Personal Information Protection Act.

You can request refusal or suspension of a transfer through admin@zenumaik.com. Refusing processing essential to a requested feature may prevent us from providing it; we explain the relevant impact. Refusing collection by advertising tags does not prevent browsing. We apply safeguards such as encryption and access restrictions to international transfers.

6. Retention Periods

We promptly delete personal information when its purpose is achieved or its retention period ends.

• Security and incident-response access logs: up to 92 days. Service access records subject to the Communications Secrets Protection Act: three months
• GA4 user-level analytics records: up to 14 months. Web analytics cookies: up to 13 months from storage
• Web launch-notification request information: until the earliest of consent withdrawal, 12 months from the request or completion of delivery processing
• General inquiries: up to one year after closure. Consumer complaint or dispute records subject to e-commerce retention duties: three years; display and advertising records: six months
• Operational backups managed by the Company: up to 14 days

Marketing information follows the periods in the Marketing Communications Consent. Minimum consent, withdrawal and delivery records needed for legal compliance and disputes may be kept for up to one year, or another period required by law. Statistics that no longer identify individuals may be retained separately. Section 10 links to advertising providers' retention and management policies for information they collect directly.

7. Deletion Methods

Electronic files are deleted using methods that make recovery difficult. Statutory records are kept separately with restricted access and deleted when their retention period ends. Backups are used only for recovery, and previously received deletion requests are reapplied when data is restored.

8. Your Rights and How to Exercise Them

You may request access, correction, deletion, suspension of processing and withdrawal of consent. Requests may also be made by a legal representative or authorized agent. Where provided by law, you may exercise rights concerning data portability or automated decisions.

• Marketing withdrawal: the unsubscribe link in a launch email or admin@zenumaik.com.
• Other requests: admin@zenumaik.com.

We may request the minimum information needed to verify that the requester is the individual concerned or a lawful representative. For representatives, we verify the authorization or legal-representative relationship. Unnecessary personal information may be redacted or replaced with alternative evidence. Requests and supporting information are used to handle the relevant rights request.

Access, correction, deletion, suspension, and other requests are handled under the conditions and deadlines prescribed by applicable law. Requests may be limited in whole or part where the law permits, including statutory retention duties or protection of another person's life, physical safety, property, or other rights. Suspension may also be limited as permitted by law where it would prevent contract performance and the user has not clearly expressed an intention to terminate the contract. If a request is limited or refused, we explain the grounds and reasons; you may object through the same contact channel.

We do not impose unjustified disadvantages for refusing optional consent or exercising your rights. However, stopping processing strictly necessary for a feature, such as notification delivery, may prevent us from providing that feature; we explain the impact where applicable. Withdrawal of marketing consent is handled separately from requests concerning service analytics or advertising measurement.

9. Launch-Notification Request Age

Launch-notification requests are available to people aged 15 or older, or 18 or older on the Indonesian-language page. We ask for confirmation of meeting the minimum age and do not collect a date of birth. We do not offer a guardian-consent request process for people below the minimum age.

10. Automatic Collection and Web Advertising

Cookies and Browser Storage

The website uses cookies and browser storage for the following purposes.

You can delete or block cookies and storage through your browser's site-data and cookie settings. You can still browse with them blocked, although some settings, such as the selected language, may not be remembered.

Web Advertising Measurement

We use Google, Meta and TikTok advertising tags on web pages to measure advertising results and to deliver ChapterN ads to people likely to be interested. Through these tags and cookies, each provider directly collects the web advertising measurement information listed in Section 1, uses it for advertising measurement and ad-delivery optimization, and may link it with account or device information it holds. Meta and TikTok may also use this information for personalized advertising under their own policies. Under Section 4, the Company provides Google Analytics usage information to Google for advertising measurement and ad-delivery optimization, and does not allow Google to use information from its advertising tags or Google Analytics for personalized advertising. We do not provide launch-notification email addresses, Member IDs or phone numbers to advertising providers.

Each provider's policies and your settings govern its processing and retention. See the Google Privacy Policy, Meta Privacy Policy and TikTok Privacy Policy.

Ways to limit collection and personalized advertising

• You can delete or block cookies and use tracking protection in your browser's privacy and site-data settings.
• If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we do not run the web advertising tags.
• You can also manage Meta and TikTok personalized advertising in each account's ad settings. Turning off personalized advertising does not necessarily stop all collection of measurement information.
• Send refusal, suspension and other requests to admin@zenumaik.com. Refusing collection by advertising tags does not prevent browsing content.

App advertising measurement is described in the App Privacy Policy.

11. Security Measures

We limit access to personal information to people who need it for their duties and apply necessary safeguards, including access controls, encryption, access-log management, and security updates. If a personal information breach occurs, we notify users and competent authorities as required by law.

12. Privacy Officer and Contact

• Company: Zenumaik Co., Ltd. (주식회사 제누마이크)
• Representative, privacy officer, and access-request contact: Hyesu Jeon (전혜수)
• Address: Unit K381, Room 703, 7F, Academy Plaza, 9 Gangnamseo-ro, Giheung-gu, Yongin-si, Gyeonggi-do, Republic of Korea (Gugal-dong)
• Telephone: +82-10-2597-3423
• Email: admin@zenumaik.com

For Korean privacy complaints, contact the Privacy Infringement Report Center at 118. For mediation, contact the Personal Information Dispute Mediation Committee at 1833-6972.

13. Policy Changes

When this Policy changes, we announce the effective date and key changes. Processing that requires new consent begins only after that consent is obtained.

Effective Date

This Policy takes effect on October 23, 2026.