EFFECTIVE 2026-07-15 · VERSION 2026-07-15
Privacy Policy!
Dad's Ad is a community for making ads nobody asked for and laughing together. We process only the information needed to run that community, and we do not sell personal information.
Service operator
- Business name
- 베라체인
- Representative
- 유도훈
- Business registration no.
- 618-05-23847
- Business address
- 부산광역시 남구 용소로13번길 16, 7층 709호
- Support
- verachain02@gmail.com
- Website
- dadsad.com
A public phone number and mail-order business registration number will be added after confirmation.
1. Controller and privacy officer
베라체인, represented by 유도훈, is the controller of Dad's Ad. The privacy officer is 유도훈. Use the email below for access, correction, deletion, restriction, objection, consent withdrawal, portability, or transfer questions.
Rights-request channel: verachain02@gmail.com
2. Information, purposes, and legal bases
- Account and authentication
- Email, nickname, @ID, locale/time zone, adult attestation, and legal acceptances — signup, login, recovery, and account security
- Community
- Profile, ad video/thumbnail/title/tags/target, comments, reactions, and follows — publishing, search, and interaction
- Rights and safety
- Target claims, work email, submitted evidence, reports, blocks, and enforcement history — rights verification, abuse prevention, and disputes
- Inquiries
- Advertiser or brand name, work email, website, budget band, messages, and private conversation — receiving and answering requests
- Technical data
- IP-derived security/rate-limit data, browser/device data, errors, access records, and one-way session hashes — security, reliability, and improvement
- Discovery signals
- Impressions, opens, not-interested, reactions, and creation starts — rotating tags, targets, and creators. They are not used for decisions with legal or similarly significant effects
Our bases are performance of the service contract, consent, legitimate interests in a safe community, and compliance with legal obligations. Optional fields may be left blank, although the related feature may not work. Dad's Ad does not receive card details entered on an external seller or nonprofit site.
3. Public information and disclosures
Nicknames, @IDs, public profiles, published ads and comments, and aggregate reaction counts may be visible on the internet. Private brand threads, reports, evidence, email addresses, and raw discovery records are not public. We do not sell personal information or disclose it to behavioural-advertising brokers. We disclose only when you direct us, law requires it, or it is necessary to protect life or safety.
4. Processors and international transfers
Using our global infrastructure may transfer data over encrypted networks to the processors below. Transfers occur continuously when the relevant feature is used. Refusing an essential transfer may prevent us from providing account, video, or email features; you may stop using the service and request deletion at any time.
| Processor and country | Purpose and data | Timing, method, and retention |
|---|---|---|
| Supabase Pte. Ltd. · Singapore and subprocessor locations (primary database: Seoul) | Authentication, database, and backups / account, content, rights, inquiry, and operations data | Encrypted transfer when features are used / contract term and deletion process; routine backups currently rotate within 7 days |
| Vercel Inc. · United States and global edge | Web hosting, CDN, and server execution / request data, public content, and technical logs | Encrypted transfer when the site is used / contract term and provider log policy |
| Cloudflare Inc. · United States and global network | Stream video processing/playback and Turnstile abuse prevention / video and metadata, IP and browser-integrity signals | Encrypted transfer on upload, playback, or verification / until video deletion is processed; security signals follow provider policy |
| Resend Inc. · United States and email delivery network | Authentication and recovery email / address, message, and delivery metadata | Encrypted transfer when email is sent / sent-email data 30 days; service data up to 90 days after contract termination |
| Functional Software, Inc. (Sentry) · EU data region and subprocessor locations | Error and performance monitoring / scrubbed error messages, stacks, routes, device/runtime context, and technical identifiers | Encrypted transfer when an error occurs / contract term and provider retention or deletion settings |
Processor safeguards: Supabase DPA · Vercel DPA · Cloudflare DPA · Resend Privacy · Sentry DPA
5. Retention and deletion
| Information | Period |
|---|---|
| Account and profile | For the account lifetime; public profile and direct identifiers are disabled or anonymized immediately after account deletion |
| Published ads and Stream video | While published; creator deletion removes public access immediately and queues external video deletion; a dispute or legal hold extends retention |
| Raw discovery impressions and actions | Automatically deleted after 90 days |
| Advertiser inquiries | While handled, then 180 days after CLOSED |
| Target claims and evidence | PENDING, REJECTED, or REVOKED: 180 days after submission/decision; VERIFIED: validity period plus 180 days |
| Closed private brand threads | 180 days after DECLINED, WITHDRAWN, or CLOSED; BLOCKED or reported threads at least one year; longer while a report or dispute remains |
| Video and brand-inquiry reports | While handled, then one year after final action or dismissal; longer during a dispute |
| Non-financial admin audit logs | One year. Payment, accounting, legal acceptance, and dispute records are excluded from this automatic deletion job |
| API rate-limit identifier | 48 hours after last update |
At the end of a period, we delete the record or remove its identifiers so it cannot reasonably be restored. Backup copies disappear as the backup cycle rotates and are not restored to ordinary service. If law requires longer retention, records are segregated and access-restricted. Where applicable, Korean statutory periods such as five years for contract/payment records and three years for consumer complaints and disputes apply.
6. Your rights and how to exercise them
You or an authorised representative may request access, correction, deletion, restriction, objection, consent withdrawal, a copy of data, or an explanation of discovery signals. Use the account deletion control or the rights email. We may verify identity through a login or reply address to prevent abuse, and will explain the result or a lawful limitation within the applicable deadline. We do not discriminate against anyone for making a privacy request.
7. Security, cookies, and storage
We use HTTPS, least privilege, row-level access controls, admin MFA, secret separation, rate limits, and audit records. Cookies or local storage support sessions, language, security, and essential features; we do not use third-party behavioural-ad cookies. No system is perfectly secure. If an incident is confirmed, we will investigate, contain it, and give notices required by law.
8. Age, complaints, and changes
The service is not directed to anyone under 18. Tell us promptly if you believe a minor's information was collected by mistake. Material changes will be announced in the service before they take effect, with the prior version and effective date identified.
Korean residents may also contact the Privacy Infringement Report Center at 118 (privacy.kisa.or.kr), the Personal Information Dispute Mediation Committee at 1833-6972 (kopico.go.kr), or the National Police cybercrime service at 182 (ecrm.police.go.kr).