Privacy Policy
Effective Date: November 5, 2026
View previous version · Effective Date: October 5, 2026
onlytems (hereinafter the "Operator") complies with the Personal Information Protection Act and other applicable laws, and establishes and discloses the following Privacy Policy to protect the personal information of users of the onlytems service (domain: onlytems.com, hereinafter the "Service").
1. Purposes of Personal Information Processing
The Operator processes personal information for the following purposes and shall not use it for any other purpose:
· Member authentication and provision of membership-based Service (Battle.net account login).
· Member identification, nickname display, and provision of information between trading parties.
· Registration, search, and brokerage of game item trade information, and provision of review/rating features.
· Operation of in-service activity features such as Mana, member tier, and attendance.
· Prevention of fraudulent use (price manipulation, false trades, repeated listing, etc.) and securing the stability of Service operations.
· Handling inquiries and complaints, and delivering announcements.
· Statistical analysis of Service usage and Service improvement.
· Advertising (including personalized advertising).
2. Items of Personal Information Collected and Collection Methods
The Operator collects the following items for the provision of the Service:
· Battle.net account information: Battle Tag, Battle.net account identifier (collected during Battle.net login).
· Member-entered information: nickname, display name, languages used (native and additional), country (collected during the in-service registration step).
· Profile information: profile image (avatar) URL (when entered by the member).
· Service activity information: member tier, Mana balance, experience points, trade ratings/reviews.
· Trade posts: listing information, seller notes, offer history, and reviews.
· Community posts: the text of posts and comments, and attached images (when written or uploaded by the member).
· Uploaded images: game screenshots uploaded by members for item information recognition (OCR).
· Notification information: the device token used to deliver push notifications (collected when the member consents to receiving notifications).
In addition, during use of the Service, access logs, IP address information, device/browser information, Service usage/error records, and authentication tokens / user identifiers stored in cookies and browser storage are automatically generated and collected; cookies and behavioral information are also automatically collected through advertising and analytics services (Google Analytics, Google AdSense).
The advertising service (Google AdSense) is provided only on the website; the mobile app does not display advertising and does not collect information for advertising purposes.
Collection methods: provided by the game operator during the Battle.net OAuth authentication process; entered, registered, or uploaded directly by the member on the Service; or automatically collected through cookies, browser storage, and analytics/advertising tools.
The Operator does not collect sensitive information defined in Article 23 of the Personal Information Protection Act (such as beliefs, political views, health, and sexual life), unique identifiers defined in Article 24 of the same Act (such as resident registration numbers or passport numbers), or financial information such as bank accounts or credit cards.
3. Personal Information of Children Under 14
This Service is not intended for children under the age of 14, and the Operator does not knowingly collect personal information of children under 14. If the Operator becomes aware that personal information of a child under 14 has been collected, it shall destroy such information without delay.
4. Retention and Use Period of Personal Information
1. The Operator retains and uses members' personal information from the date of registration until termination of the usage agreement (membership withdrawal), and shall destroy the personal information without delay upon withdrawal.
2. However, information for which retention is required by applicable laws shall be retained for the period prescribed by such laws and then destroyed.
3. Images uploaded by members for item information recognition (OCR) are used only for the recognition process and are not separately retained after processing.
4. The retention period of cookies and behavioral information collected through analytics/advertising services follows the policies of the respective service providers (such as Google).
5. Provision of Personal Information to Third Parties
1. The Operator does not provide members' personal information to third parties beyond the scope of the processing purposes.
2. However, exceptions apply when the member has given prior consent, when there is a specific provision in applicable laws, or when investigative agencies request information in accordance with legal procedures.
3. Due to the nature of trades between members, member information necessary for the trade (such as nickname, rating, and Battle Tag) may be displayed to the counterparty during the trade process. This is for the essential operation of the brokerage Service.
6. Outsourcing of Personal Information Processing
For smooth Service provision, the Operator outsources personal information processing tasks or uses external services as follows:
· Blizzard Entertainment (Battle.net): member authentication (OAuth login).
· Google LLC (Firebase Hosting): Service website hosting and content delivery.
· Google LLC (Google Analytics): Service usage statistical analysis.
· Google LLC (Google AdSense): advertising and personalized advertising.
· Google LLC (Google Fonts): heading font delivery (processes the IP address and browser information when the fonts are downloaded).
· Google LLC (Firebase Cloud Messaging): push notification delivery (processes the device token and notification content of members who have agreed to receive notifications).
· Channel Corporation (Channel Talk): customer inquiry and support handling (processes the member identifier and display name during consultation).
Item information recognition (OCR) is processed by Google LLC (Gemini), which extracts text from the image, via the server operated by the Operator. Uploaded images are screenshots of in-game item screens and are not intended to contain personal information; members should not upload images containing personal information, and uploaded images are used solely for OCR text extraction.
7. Cookies, Automatic Collection Tools, and Behavioral Information
1. Use of cookies and browser storage: The Operator uses cookies and browser storage (localStorage, sessionStorage) to maintain the member's login state and provide convenience of Service use. Members may refuse cookie storage through browser settings; however, in such cases, certain Service uses including login may be restricted.
2. Google Analytics: The Service uses Google Analytics for statistical analysis of usage, during which page view records, device/browser information, and similar data are collected through cookies. Members may opt out via the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
3. Google AdSense (personalized advertising): The Service displays advertisements through Google AdSense, and Google and its partners may use cookies to collect and use behavioral information such as members' visit records to the Service for personalized advertising. Members may opt out of personalized advertising or change settings at Google Ads Settings (adssettings.google.com).
4. The Operator does not process behavioral information in combination with members' sensitive information.
8. Transfer of Personal Information Abroad
1. The Service uses services of overseas operators such as Google and Blizzard, so some of members' personal information may be processed overseas. The Operator transfers personal information overseas as described below and discloses the matters required by Article 28-8(2) of the Personal Information Protection Act. Of these, transfers for hosting and member authentication are made to the extent necessary to provide the Service (performance of the usage agreement).
2. Google LLC (contact: privacy inquiry form at support.google.com/policies/contact/general_privacy_form): hosting data, IP address and browser information, cookies/behavioral information, and usage records are transferred to countries hosting Google data centers (such as the United States) over the network each time the Service is used, and used for hosting, statistical analysis, advertising, and font delivery. In addition, images uploaded for item information recognition (OCR) are transferred over the network when uploaded, and the device token and notification content of members who have agreed to receive notifications are transferred over the network when a notification is sent; they are used for item information recognition and push notification delivery, respectively. The retention period follows Google policies.
3. Blizzard Entertainment (contact: DPO@blizzard.com): Battle.net account authentication information is transferred to countries such as the United States over the network at Battle.net login, and used for member authentication. The retention period follows Blizzard policies.
4. Members who do not wish their personal information to be transferred overseas may refuse the transfer by sending a request to supportonlytems@gmail.com, and the Operator shall process such requests within the period prescribed by applicable laws. However, transfers for hosting (Google LLC) and member authentication (Blizzard Entertainment) are essential to providing the Service, so refusing them restricts use of the Service, including sign-up and login. Cookie collection for statistical analysis and personalized advertising may be refused as described in "7. Cookies, Automatic Collection Tools, and Behavioral Information", and the heading font (Google Fonts) may be refused by blocking connections to fonts.googleapis.com and fonts.gstatic.com with a browser extension or similar tool, item information recognition (OCR) by not uploading images, and push notifications by turning notifications off in the settings screen or device settings; the Service remains available even if these are refused (headings are then displayed in the default font).
9. Destruction of Personal Information
1. When the retention period of personal information has elapsed or the processing purpose has been achieved, the Operator shall destroy the relevant personal information without delay.
2. Electronic file-form information shall be deleted by technical means that prevent recovery or reproduction, and paper documents shall be shredded or incinerated.
10. Rights of Data Subjects and Legal Representatives and How to Exercise Them
1. Members may at any time request access to, correction of, deletion of, or suspension of processing of their personal information.
2. Such rights may be exercised through the in-service settings or by emailing supportonlytems@gmail.com, and the Operator shall process such requests within the period prescribed by applicable laws.
3. Members may terminate the usage agreement through membership withdrawal and request deletion of their personal information.
11. Measures to Secure Personal Information
To secure personal information, the Operator implements measures such as access control and management of important information including authentication tokens, access privilege management for personal information processing systems, encryption of personal information transmission channels, and minimization and management of personnel handling personal information.
12. Personal Information Protection Officer
The Operator designates the Personal Information Protection Officer below to take overall responsibility for personal information processing operations and to handle complaints and remedy from members regarding personal information processing.
· Personal Information Protection Officer: onlytems
· Contact: supportonlytems@gmail.com
Members may contact the address above for all inquiries, complaints, and remedy matters regarding personal information protection that arise during Service use.
13. Remedies for Rights Infringement
Members may apply for dispute resolution or consultation to the following agencies to seek remedy for personal information infringement:
· Personal Information Dispute Mediation Committee: 1833-6972 (no area code) / www.kopico.go.kr
· Personal Information Infringement Reporting Center (KISA): 118 (no area code) / privacy.kisa.or.kr
· Cyber Investigation Division, Supreme Prosecutors' Office: 1301 (no area code) / www.spo.go.kr
· Cyber Investigation Bureau, National Police Agency: 182 (no area code) / ecrm.police.go.kr
14. Changes to the Privacy Policy
This Privacy Policy is effective from October 5, 2026. If the contents are changed due to changes in laws, policies, or the Service, the changes shall be announced through the Service screen at least 7 days before the effective date.
Announcement date: September 28, 2026 / Effective date: October 5, 2026.
onlytems (hereinafter the "Operator") complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and establishes and discloses the following Privacy Policy to protect the personal information of users of the onlytems service (domain: onlytems.com, hereinafter the "Service").
1. Purposes of Personal Information Processing
The Operator processes personal information for the following purposes and shall not use it for any other purpose:
· Member authentication and provision of membership-based Service (Battle.net account login).
· Member identification, nickname display, and provision of information between trading parties.
· Registration, search, and brokerage of game item trade information, and provision of review/rating features.
· Operation of in-service activity features such as Mana, member tier, and attendance.
· Prevention of fraudulent use (price manipulation, false trades, repeated listing, etc.) and securing the stability of Service operations.
· Handling inquiries and complaints, and delivering announcements.
· Statistical analysis of Service usage and Service improvement.
· Advertising (including personalized advertising).
2. Items of Personal Information Collected and Collection Methods
The Operator collects the following items for the provision of the Service:
· Battle.net account information: Battle Tag, Battle.net account identifier (collected during Battle.net login).
· Member-entered information: nickname, display name, languages used (native and additional) (collected during the in-service registration step and on the settings screen).
· Profile information: profile image (avatar) URL (when entered by the member).
· Service activity information: member tier, Mana balance, experience points, attendance records, trade ratings/reviews, and the time of the last login and last access.
· Trade posts: listing information, seller notes, offer history, and reviews.
· Community posts: the text of posts and comments, and attached images (when written or uploaded by the member).
· Uploaded images: game screenshots uploaded by members for item information recognition (OCR).
· Block and report information: the list of members the member has blocked and the block reason (if entered), and reports filed by the member or filed about the member.
· Notification information: in-service notification records, and the device token used to deliver push notifications (collected when the member consents to receiving notifications).
In addition, during use of the Service, access logs (IP address, the country estimated from the IP address, member identifier and nickname, access time and requested path, and app version), device/browser information, Service usage/error records, and authentication tokens / user identifiers stored in cookies and browser storage are automatically generated and collected; cookies and behavioral information are also automatically collected through advertising and analytics services (Google Analytics, Google AdSense).
The advertising service (Google AdSense) is provided only on the website; the mobile app does not display advertising and does not collect information for advertising purposes.
Collection methods: provided by the game operator during the Battle.net OAuth authentication process; entered, registered, or uploaded directly by the member on the Service; or automatically collected through cookies, browser storage, and analytics/advertising tools.
The Operator does not collect sensitive information defined in Article 23 of the Personal Information Protection Act of the Republic of Korea (such as beliefs, political views, health, and sexual life), unique identifiers defined in Article 24 of the same Act (such as resident registration numbers or passport numbers), or financial information such as bank accounts or credit cards.
3. Personal Information of Children Under 14
This Service is not intended for children under the age of 14, and the Operator does not knowingly collect personal information of children under 14. If the Operator becomes aware that personal information of a child under 14 has been collected, it shall destroy such information without delay.
4. Retention and Use Period of Personal Information
1. The Operator retains and uses members' personal information from the date of registration until termination of the usage agreement (membership withdrawal), and shall destroy the personal information without delay upon withdrawal. However, the information described in the following paragraphs is processed for the purposes and periods stated in each paragraph.
2. Information for which retention is required by applicable laws shall be retained for the period prescribed by such laws and then destroyed.
3. Re-registration limit: to limit re-registration immediately after withdrawal, the Operator converts the Battle.net account identifier at withdrawal into a form that cannot be restored to the original value, retains it for 24 hours after withdrawal, and then destroys it. However, for an account that is suspended or has unresolved reports, the Operator retains the converted identifier and the suspension and report records for 180 days after withdrawal so that the suspension and reports continue to apply if the member registers again. The Battle Tag is not retained.
4. Trade records: completed trade records and the trade reviews written by the member are retained after withdrawal in a form that does not identify the member (the author is changed to "Deleted account" and the link to the member's information is removed), to preserve the counterparty's trade history and rating. Trades, listings, and offers in progress are cancelled upon withdrawal, and a cancellation notice is sent to the counterparty.
5. Community posts: posts, comments, and attached images deleted by the member are destroyed without delay upon deletion, and upon withdrawal the posts, comments, and attached images written by the member are also destroyed. Hidden posts keep their attached images while they are hidden (the images are destroyed when the Operator or the author deletes the post, or upon withdrawal).
6. Access records: access logs (the items listed in "2. Items of Personal Information Collected and Collection Methods") are retained for 30 days from creation for incident response and prevention of fraudulent use and then deleted automatically, regardless of membership withdrawal.
7. Incomplete registration: if a member logs in with Battle.net but does not complete the registration step (agreeing to the Terms), the Battle Tag and Battle.net account identifier received at login are destroyed after 30 days.
8. Images uploaded by members for item information recognition (OCR) are used only for the recognition process and are not separately retained after processing.
9. The retention period of cookies and behavioral information collected through analytics/advertising services follows the policies of the respective service providers (such as Google).
5. Provision of Personal Information to Third Parties
1. The Operator does not provide members' personal information to third parties beyond the scope of the processing purposes.
2. However, exceptions apply when the member has given prior consent, when there is a specific provision in applicable laws, or when investigative agencies request information in accordance with legal procedures.
3. Due to the nature of trades between members, member information necessary for the trade (such as nickname, rating, and Battle Tag) may be displayed to the counterparty during the trade process. This is for the essential operation of the brokerage Service.
6. Outsourcing of Personal Information Processing
For smooth Service provision, the Operator outsources personal information processing tasks or uses external services as follows:
· Blizzard Entertainment (Battle.net): member authentication (OAuth login).
· Google LLC (Firebase Hosting): Service website hosting and content delivery.
· Google LLC (Google Analytics): Service usage statistical analysis.
· Google LLC (Google AdSense): advertising and personalized advertising.
· Google LLC (Google Fonts): heading font delivery (processes the IP address and browser information when the fonts are downloaded).
· Google LLC (Firebase Cloud Messaging): push notification delivery (processes the device token and notification content of members who have agreed to receive notifications).
· Channel Corporation (Channel Talk): customer inquiry and support handling (the support widget is loaded on each screen of the website, and for logged-in members the member identifier and display name are sent to Channel Talk when a screen is opened; the widget is not loaded in the mobile app).
Item information recognition (OCR) is processed by Google LLC (Gemini), which extracts text from the image, via the server operated by the Operator. Uploaded images are screenshots of in-game item screens and are not intended to contain personal information; members should not upload images containing personal information, and uploaded images are used solely for OCR text extraction.
7. Cookies, Automatic Collection Tools, and Behavioral Information
1. Use of cookies and browser storage: The Operator uses cookies and browser storage (localStorage, sessionStorage) to maintain the member's login state and provide convenience of Service use. Members may refuse cookie storage through browser settings; however, in such cases, certain Service uses including login may be restricted.
2. Google Analytics: The Service uses Google Analytics on the website and in the mobile app for statistical analysis of usage, during which screen view records, device/browser information, and similar data are collected through cookies or app storage. Users may refuse collection on a device by turning off "Usage statistics" on the settings screen or on this Privacy Policy screen (in the mobile app, from version 1.3.2), and on the website may also opt out via the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
3. Google AdSense (personalized advertising): The Service displays advertisements through Google AdSense, and Google and its partners may use cookies to collect and use behavioral information such as members' visit records to the Service for personalized advertising. Members may opt out of personalized advertising or change settings at Google Ads Settings (adssettings.google.com).
4. The Operator does not process behavioral information in combination with members' sensitive information.
5. Support widget: the website loads the Channel Talk widget for customer support, and the widget provider uses cookies and browser storage to connect support sessions.
Usage statisticsOn
This applies only to this device (browser). Turn it off separately on each of your other devices.
8. Transfer of Personal Information Abroad
1. The Service uses services of overseas operators such as Google and Blizzard, so some of members' personal information may be processed overseas. The Operator transfers personal information overseas as described below and discloses the matters required by Article 28-8(2) of the Personal Information Protection Act of the Republic of Korea. Of these, transfers for hosting and member authentication are made to the extent necessary to provide the Service (performance of the usage agreement).
2. Google LLC (contact: privacy inquiry form at support.google.com/policies/contact/general_privacy_form): hosting data, IP address and browser information, cookies/behavioral information, and usage records are transferred to countries hosting Google data centers (such as the United States) over the network each time the Service is used, and used for hosting, statistical analysis, advertising, and font delivery. In addition, images uploaded for item information recognition (OCR) are transferred over the network when uploaded, and the device token and notification content of members who have agreed to receive notifications are transferred over the network when a notification is sent; they are used for item information recognition and push notification delivery, respectively. The retention period follows Google policies.
3. Blizzard Entertainment (contact: DPO@blizzard.com): Battle.net account authentication information is transferred to countries such as the United States over the network at Battle.net login, and used for member authentication. The retention period follows Blizzard policies.
4. Members who do not wish their personal information to be transferred overseas may refuse the transfer by sending a request to supportonlytems@gmail.com, and the Operator shall process such requests within the period prescribed by applicable laws. However, transfers for hosting (Google LLC) and member authentication (Blizzard Entertainment) are essential to providing the Service, so refusing them restricts use of the Service, including sign-up and login. Cookie collection for statistical analysis and personalized advertising may be refused as described in "7. Cookies, Automatic Collection Tools, and Behavioral Information", and the heading font (Google Fonts) may be refused by blocking connections to fonts.googleapis.com and fonts.gstatic.com with a browser extension or similar tool, item information recognition (OCR) by not uploading images, and push notifications by turning notifications off in the settings screen or device settings; the Service remains available even if these are refused (headings are then displayed in the default font).
9. Destruction of Personal Information
1. When the retention period of personal information has elapsed or the processing purpose has been achieved, the Operator shall destroy the relevant personal information without delay.
2. Electronic file-form information shall be deleted by technical means that prevent recovery or reproduction, and paper documents shall be shredded or incinerated.
10. Rights of Data Subjects and Legal Representatives and How to Exercise Them
1. Members may at any time request access to, correction of, deletion of, or suspension of processing of their personal information.
2. Such rights may be exercised through the in-service settings or by emailing supportonlytems@gmail.com, and the Operator shall process such requests within the period prescribed by applicable laws.
3. Members may terminate the usage agreement through membership withdrawal and request deletion of their personal information.
11. Measures to Secure Personal Information
To secure personal information, the Operator implements measures such as access control and management of important information including authentication tokens, access privilege management for personal information processing systems, encryption of personal information transmission channels, and minimization and management of personnel handling personal information.
12. Personal Information Protection Officer
The Operator designates the Personal Information Protection Officer below to take overall responsibility for personal information processing operations and to handle complaints and remedy from members regarding personal information processing.
· Personal Information Protection Officer: onlytems
· Contact: supportonlytems@gmail.com
Members may contact the address above for all inquiries, complaints, and remedy matters regarding personal information protection that arise during Service use.
13. Remedies for Rights Infringement
Members may apply for dispute resolution or consultation to the following agencies to seek remedy for personal information infringement:
· Personal Information Dispute Mediation Committee: 1833-6972 (no area code) / www.kopico.go.kr
· Personal Information Infringement Reporting Center (KISA): 118 (no area code) / privacy.kisa.or.kr
· Cyber Investigation Division, Supreme Prosecutors' Office: 1301 (no area code) / www.spo.go.kr
· Cyber Investigation Bureau, National Police Agency: 182 (no area code) / ecrm.police.go.kr
14. Changes to the Privacy Policy
This Privacy Policy is effective from November 5, 2026. If the contents are changed due to changes in laws, policies, or the Service, the changes shall be announced through the Service screen at least 7 days before the effective date.
Announcement date: October 29, 2026 / Effective date: November 5, 2026.