Privacy Policy

The Service processes personal information for the purposes below. Personal information is not used for any purpose other than those stated, and if a purpose changes, we will take the necessary measures, such as obtaining separate consent under Article 18 of PIPA.

1. Providing shooting and editing features: displaying the camera feed, capturing still frames, compositing filters and frames, previewing and downloading results
2. Providing auto retouch: retouching based on facial landmark coordinates (processed only on your device)
3. Service improvement: quality improvement through analysis of anonymized usage statistics (Google Analytics)
4. Handling user feedback: responding to inquiries using feedback and environment information you send voluntarily

1. Information processed with your consent

2. Information processed without consent and its legal basis

3. Information processed only on your device

Captured photos, facial landmark coordinates and results being edited are processed only in your web browser’s memory and are never sent to an external server. The face-detection model (TensorFlow.js) runs only on your device, and coordinates are discarded as soon as retouching is applied.

Note: the Service does not require sign-up and does not collect names, email addresses or account information. It operates no backend server or database.

The Service does not keep personal information in persistent storage such as localStorage, sessionStorage or IndexedDB. Result files you save yourself exist only on your device, and you are responsible for managing them.

In principle, the Service processes personal information only within the scope of the purposes stated in Article 1 and does not process it beyond that scope or provide it to third parties without the data subject’s prior consent, except in the following cases.

• Where the data subject has given prior consent
• Where required by specific provisions of law or unavoidable to comply with a legal obligation

To provide the Service smoothly, we outsource the following personal information processing tasks.

The Service transfers personal information abroad as follows.

Details of how Google LLC and Discord Inc. handle personal information are available in each company’s privacy policy.

1. In-browser data: discarded automatically on leaving or reloading the page.
2. Server data: the Service does not store personal information on any server.
3. Google Analytics data: destroyed automatically under Google’s data retention policy.
4. Feedback data: deleted after handling is complete.

1. Withdrawing camera access: you can deny or withdraw camera permission at any time in your browser settings. Without permission, only the capture feature is limited; access to the Service itself is not restricted.
2. Suspension of processing: because the Service stores no personal information, there is no separate procedure for access, correction or deletion — closing the page ends all processing.
3. Opting out of statistics: you can opt out of Google Analytics collection using the methods in Article 10.
4. Feedback inquiries: requests to delete feedback you have sent can be made through the contact in Article 13.

Pursuant to Article 29 of PIPA, the Service takes the following technical and administrative measures to ensure security.

1. Client-side processing: photos and face data are processed only in your browser and never sent outside.
2. Encryption in transit: communication with external services (Google Analytics, Discord) uses HTTPS (TLS) encryption.
3. Data minimization: only the minimum information needed to provide the Service is processed, and no persistent storage is used.

The Service automatically collects cookie-based, anonymized usage statistics through Google Analytics 4. You can refuse collection in the following ways.

• Block cookies or delete existing cookies in your browser settings
• Install the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout)
• Enable your browser’s tracking prevention feature

1. The auto retouch feature uses facial landmark coordinates, but all processing takes place only on your device and coordinates are discarded immediately; the Service does not collect, store or transmit biometric information such as face data.
2. The Service does not process unique identifiers under Article 24 of PIPA (resident registration numbers, passport numbers, driver’s license numbers, alien registration numbers).

The Service does not separately collect personal information from children under 14 and, having no sign-up process, does not verify age. Because all photo processing happens only on the user’s device, legal guardians are asked to supervise children’s use of camera permissions.

The Service designates the following Privacy Officer to take overall responsibility for personal information processing and to handle complaints and remedies for data subjects.

• Officer: POCUTFREE operator
• Contact: the "Send feedback" feature at the bottom of the Service

To seek remedies for infringement of personal information, data subjects may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, and similar bodies in Korea.

This Privacy Policy applies from its effective date. If content is added, deleted or amended due to changes in laws, policies or security technology, we will give notice on this page at least 7 days before the changes take effect.