Privacy Policy
2026-10-06 · 2026-10-11
Google login information
Google login requests the openid, email, and profile scopes. The authentication response may include a unique identifier, email, name, and photo URL. Capsule Talk stores the verified unique identifier for account linking and login. We do not automatically save or publish your Google name, email, or photo URL as your Capsule Talk profile. We do not access your Google password, email contents, contacts, or Drive files. We do not sell Google account information or use it for ad targeting. Storage and deletion of identifiers and the exercise of rights follow the policy below.
Required and optional sign-up information
Basic profile: name, occupation, self-entered age, photo, gender. The product app and web register and edit the basic profile of the same account. Sign-up and getting ready to publish to friends: login identifier, nationality, date of birth, required consent records. Optional: country of residence, city at sign-up. You can sign up without entering a country of residence. Nationality is used to check the adult standard and eligible audience. Gender is used for friend-introduction conditions, and you may also choose the same gender. Self-entered nationality and date of birth are not proof of actual identity or age verification.
Information we collect
Login: verified unique identifier from Apple/Google. Basic profile: name, occupation, self-entered age, gender, photo. Getting ready to publish to friends: nationality, city, date of birth, languages, interests, introduction. Self-entered age is stored separately from date of birth and external age verification results. Use: consent version, introductions, greetings, chats, blocks, reports, sessions, payment verification records. Operations: administrator action history and the minimum records related to service security and outages. ID images and document numbers are not stored on Capsule Talk servers.
Purposes of processing and minimal collection
We use information for adult eligibility checks, profile review, applying introduction conditions, mutual-consent chats, entitlement verification, abuse prevention, report handling, and customer support. We do not collect precise GPS location or contacts by default. Profile photos are reduced in size and metadata such as EXIF is removed at upload.
Separate consent for sensitive information
Gender conditions define the range for finding friends and do not indicate sexual orientation. Free-text input may include sensitive information, so we obtain the related separate consent when preparing to publish. Do not enter unnecessary health, religion, resident registration numbers, or exact addresses. If you do not consent to required processing, use of introduction features is limited.
Profile publication and chats
Profiles you consented to publish are shown to adult users in Korea and Japan who match each other's introduction conditions. Your date of birth and login identifier are not disclosed to others. After blocking, pausing publication, or withdrawal, new introductions stop. Chats are accessible only to the participants, and operators may check them to a minimal extent when needed to investigate a report.
Consent to use photos offline
The offline photo gacha is optional participation. Purpose: printing and producing photos, composing capsules, selling and distributing in Korea and Japan, managing participation and withdrawal, and handling complaints. Items: photos you consented to participate with, and consent version, time, participation scope, and suspension records. If we put information other than the photo on physical items, such as name, occupation, age, gender, or profile-connection information, we explain the specific items and scope of disclosure separately and obtain consent. We do not convert basic profile registration, online publication, or consent to the terms into offline participation consent. Retention and use: during the participation period you consented to, and upon withdrawal, leaving, or achieving the purpose, we stop new use and destroy without delay. For separate retention based on law, we separate only the minimum necessary records. Quantities are decided by the company within the notified scope, and the same photo may be used in multiple copies. You may refuse or withdraw consent, and only offline participation is limited.
Scope disclosed to recipients of physical items
Before participation, we explain the actual country of operation, stores or events, the scope of recipients such as adult buyers and receivers, the disclosed items, purpose of use, retention period, and limits if you refuse. We distribute only after you separately consent to that provision and any needed cross-border transfer. Phone numbers, emails, addresses, dates of birth, and login identifiers are not disclosed on physical items. Recipients may use friend-introduction information only for personal verification and may not repost, copy and distribute, track identity, or force contact. The company cannot remotely delete physical items already delivered. New use by the company and its processors stops immediately upon withdrawal, and we specifically explain the scope that cannot be recalled and follow-up measures.
Outsourcing of printing, packaging, and operations, and vendor changes
The vendor for printing, packaging, and offline operations is currently undecided. We do not send photos to an undecided vendor. Before actual outsourcing, we post the vendor name, outsourced tasks, country of processing, and retention and disposal criteria in this policy and in the participation notice. We allow only printing, packaging, delivery, and on-site operations under the company's instructions, and prohibit independent use such as their own advertising, separate sale, or AI training. We deliver only the minimum files securely, and when work ends or is suspended we confirm file deletion, inventory isolation, and disposal results. Vendors may change, and we update the outsourcing status before processing. If matters requiring consent change, such as purpose, disclosure scope, or cross-border transfer, we process the changed handling only after additional notice and consent as required by law. We do not use outsourcing as grounds for independent third-party provision.
Physical operations and cross-border transfer in Korea and Japan
Photos may be used in physical gacha in Korea or Japan within the scope consented to. When files are sent to printers or operators in Japan or physical items are delivered to buyers or recipients abroad, we also check whether it is a cross-border transfer. Before processing, we specifically explain the transferred items, country, timing, and method, the recipient's name, contact, purpose, and retention period, and the way to refuse and the limits on offline participation. We transfer only after securing an applicable legal basis such as separate consent. We do not send files to un-notified vendors based on a general notice of Korea and Japan. We currently do not carry out cross-border transfers for offline purposes.
Age checks and external age verification
Eligible age is checked with the date of birth entered at sign-up. We do not collect ID documents or facial verification materials. If we introduce external age verification under operating policy, we will first explain the provider, processing country, document types, retention period, and separate consent. We do not send documents to the candidate provider Didit without consent. Profiles are introduced only for members who agreed to publication.
Photo storage and delivery outsourcing
Processor: Amazon Web Services (AWS). Original photos are stored privately in the Amazon S3 Seoul region. CloudFront may temporarily cache and deliver images from overseas edge locations, including Korea and Japan. We process images and request IPs needed to store and deliver photos. After checking permissions, we issue only URLs valid for 60 seconds. We do not use public buckets or permanent public photo URLs. When an account is deleted, we request deletion of the originals and track the result.
Retention and deletion
On withdrawal, sessions are revoked immediately and access to profile and photos stops. Original photos are cleaned up by a deletion job, with retries on error. Photo URLs already issued expire after at most 60 seconds. The CDN cache may persist for up to 24 hours, but expired URLs cannot be accessed and no new URL is issued. Profiles and written messages are deleted from the service database. The minimum records needed for responding to fraudulent payments, statutory retention, and disputes are restricted in access and deleted when the purpose ends. You can request correction, deletion, and withdrawal of consent in Settings or through customer support.
Stopping and recalling physical items, and record retention
Upon receipt of a suspension, withdrawal, or leaving request, we immediately block new exposure, print orders, transmission, sale, and distribution instructions. We cancel in-progress work by processors and isolate, recall, or destroy inventory we can control. There may be time gaps for photos already delivered or processes that cannot be stopped. We explain the results of measures, the reasons for what cannot be recalled, and alternative measures. We do not let files continue to be used because they were already sent to a printer. We manage print, quantity, shipment, and withdrawal times and vendor action results, and separately retain only the minimum records for which there is a lawful basis for consent evidence and dispute response. We do not use them for uniform permanent retention or resale after withdrawal. We report the result of requests within the time limits of applicable law, and where time is unavoidably needed, we explain the reason, expected timing, and how to object.
Security and advertising
We apply HTTPS, hashed session tokens, administrator permissions, access restrictions, signature verification, and prevention of duplicate retries. Third-party ads load only after administrator settings and any needed consent. We disclose the ad provider's actual operator and processing information after verifying it. Stopping ads does not remove chat or purchase restoration entitlements.
Inquiries and changes
Operator: Microfactory Privacy officer: Seokho Heo Contact: contact@microcephalus7.dev Effective date and current consent version: 2026-10-06 We will complete any unsettled contracts and statutory notices before real introductions and paid operation.