Revision of 2026-09-16
Current versionThe Korean version now writes the data controller's name as its registered trade name throughout; the English version continues to use the brand name LeanLog. Collected items, purposes, and retention periods are unchanged.
View the full previous text (2026-09-03)Revision of 2026-09-03
Added the buyer's name or display name and the IP address used at card registration to the items shared with Toss Payments Co., Ltd., the domestic payment processor. The name appears in the merchant dashboard and in the payment-history email Toss Payments sends to the buyer. It is passed to Toss Payments when that card is charged, for payment fraud detection, and 'payment fraud detection' was added to the purposes accordingly. The IP address was already among the collected items (device and security information); other collected items and retention periods are unchanged.
8. Subprocessors and cross-border transfers
| Before | After |
|---|---|
| Toss Payments Co., Ltd. | Republic of Korea (domestic processing — no cross-border transfer) | Sent or received through the payment integration during domestic checkout, card registration (auto-renewal), recurring charges, cancellations, and refunds | Email, order number and payment identifiers, customer identifier (customerKey), card issuer and partially masked card number, payment status and amount, cancellation/refund reason. SKIMTUBE does not store full card numbers or CVCs | Domestic payment processing, auto-renewal (recurring charges), cancellations and refunds, payment dispute response | For the retention periods required by e-commerce, tax, and accounting law. In-app payment records follow this policy's retention periods, and Toss Payments' own retention follows its policy and legal obligations | Users may refuse. However, domestic payments, subscriptions, and refunds may be unavailable | Toss Payments privacy policy: https://pages.tosspayments.com/terms/homepage/privacy/policy | Toss Payments Co., Ltd. | Republic of Korea (domestic processing — no cross-border transfer) | Sent or received through the payment integration during domestic checkout, card registration (auto-renewal), recurring charges, cancellations, and refunds | Email, name or display name (used in the merchant dashboard and in the payment-history email Toss Payments sends to the buyer), order number and payment identifiers, customer identifier (customerKey), card issuer and partially masked card number, payment status and amount, cancellation/refund reason, the IP address used at card registration (for fraud detection — passed to Toss Payments when that card is charged). SKIMTUBE does not store full card numbers or CVCs | Domestic payment processing, auto-renewal (recurring charges), cancellations and refunds, payment dispute response, payment fraud detection | For the retention periods required by e-commerce, tax, and accounting law. In-app payment records follow this policy's retention periods, and Toss Payments' own retention follows its policy and legal obligations | Users may refuse. However, domestic payments, subscriptions, and refunds may be unavailable | Toss Payments privacy policy: https://pages.tosspayments.com/terms/homepage/privacy/policy |
Revision of 2026-08-27
Named Dodo Payments as the provider that processes overseas (USD) payments and listed it in the external processors table with its processing locations, the items transferred, and a link to its privacy policy. Dodo Payments and the operator are independent data controllers for their respective processing activities. The policy now also states that card details and the full billing address are entered on the Dodo Payments checkout and collected by Dodo Payments. Collected items and retention periods are unchanged.
8. Subprocessors and cross-border transfers
| Before | After |
|---|---|
| Payments made in the Republic of Korea are processed by Toss Payments Co., Ltd. as a payment gateway (PG), and its processing is governed by its own privacy policy (https://pages.tosspayments.com/terms/homepage/privacy/policy). Where an overseas payment provider processes buyer and payment information as the Merchant of Record, that provider and LeanLog (Wonjung Choi) each act as independent data controllers for their respective processing activities. The overseas payment provider is still to be determined; once it is selected, its name and privacy notice link will be reflected in this policy. | Payments made in the Republic of Korea are processed by Toss Payments Co., Ltd. as a payment gateway (PG), and its processing is governed by its own privacy policy (https://pages.tosspayments.com/terms/homepage/privacy/policy). Overseas payments (USD) are processed by Dodo Payments as the Merchant of Record; to the extent Dodo Payments processes buyer and payment information, Dodo Payments and LeanLog (Wonjung Choi) each act as independent data controllers for their respective processing activities. Dodo Payments' processing is governed by its own privacy policy (https://dodopayments.com/privacy-policy). |
| Overseas payment provider (to be determined) | Countries or regions processed by the overseas payment provider and payment networks. Once the provider is selected, the specific countries and regions will be reflected in this policy | For international (USD) payments, sent or received through payment integrations during checkout, subscription creation/renewal/cancellation, customer portal sessions, refunds, payment notices, and payment-method management | Email, customer/address/subscription/transaction/payment-method identifiers, payment status, refund reason, and information needed for receipts and tax handling. SKIMTUBE does not directly store full card numbers or CVCs | Payments, subscription management, refunds, receipts and tax handling, payment-method management, and payment dispute response | For the period needed for e-commerce, tax, accounting, and dispute response. In-app payment records follow this policy's retention periods, and provider-side retention follows that provider's policy and legal obligations | Users may refuse. However, payments, subscriptions, customer portal, refunds, and saved payment-method management may be limited | Overseas payment provider privacy notice: to be published once the provider is selected | Dodo Payments (Merchant of Record for overseas payments — the companies that operate together under the Dodo Payments trade name, including Dodo Payments Inc (United States)) | The United States and other countries where the Dodo Payments group companies and their processors and payment networks run their infrastructure. The Dodo Payments privacy policy does not name specific countries; it states that processors located anywhere in the world may be used and that Standard Contractual Clauses are applied to transfers out of the UK/EEA | For international (USD) payments, sent or received through payment integrations during checkout, subscription creation/renewal/cancellation, customer portal sessions, refunds, payment notices, and payment-method management | Email, name or display name, billing country, customer/subscription/transaction/payment-method identifiers, payment status, refund reason, and information needed for receipts and tax handling. Card details and the full billing address (city, postal code, and so on) are entered by you on the Dodo Payments checkout and collected by Dodo Payments; SKIMTUBE does not store full card numbers or CVCs | Payments, subscription management, refunds, receipts and tax handling, payment-method management, and payment dispute response | For the period needed for e-commerce, tax, accounting, and dispute response. In-app payment records follow this policy's retention periods, and Dodo Payments' own retention follows its policy and legal obligations | Users may refuse. However, overseas payments, subscriptions, the customer portal, refunds, and saved payment-method management may be limited | Dodo Payments privacy policy: https://dodopayments.com/privacy-policy · Buyer Terms: https://dodopayments.com/legal/buyer-terms |
Revision of 2026-08-25
Added Toss Payments Co., Ltd. to the external processors table as the domestic payment processor (processed in Korea, no cross-border transfer). Statements about an overseas Merchant-of-Record provider now apply only to international payments; that provider is still to be determined. Collected items and retention periods are unchanged.
8. Subprocessors and cross-border transfers
| Before | After |
|---|---|
| Where the payment provider processes buyer and payment information as the Merchant of Record, that provider and LeanLog (Wonjung Choi) each act as independent data controllers for their respective processing activities. The provider's processing is governed by its own privacy notice. The payment provider is still to be determined; once it is selected, its name and privacy notice link will be reflected in this policy. | Payments made in the Republic of Korea are processed by Toss Payments Co., Ltd. as a payment gateway (PG), and its processing is governed by its own privacy policy (https://pages.tosspayments.com/terms/homepage/privacy/policy). Where an overseas payment provider processes buyer and payment information as the Merchant of Record, that provider and LeanLog (Wonjung Choi) each act as independent data controllers for their respective processing activities. The overseas payment provider is still to be determined; once it is selected, its name and privacy notice link will be reflected in this policy. |
| Payment provider (to be determined) | Countries or regions processed by the payment provider and payment networks. Once the provider is selected, the specific countries and regions will be reflected in this policy | Sent or received through payment integrations during checkout, subscription creation/renewal/cancellation, customer portal sessions, refunds, payment notices, and payment-method management | Email, customer/address/subscription/transaction/payment-method identifiers, payment status, refund reason, and information needed for receipts and tax handling. SKIMTUBE does not directly store full card numbers or CVCs | Payments, subscription management, refunds, receipts and tax handling, payment-method management, and payment dispute response | For the period needed for e-commerce, tax, accounting, and dispute response. In-app payment records follow this policy's retention periods, and provider-side retention follows that provider's policy and legal obligations | Users may refuse. However, payments, subscriptions, customer portal, refunds, and saved payment-method management may be limited | Payment provider privacy notice: to be published once the provider is selected | Toss Payments Co., Ltd. | Republic of Korea (domestic processing — no cross-border transfer) | Sent or received through the payment integration during domestic checkout, card registration (auto-renewal), recurring charges, cancellations, and refunds | Email, order number and payment identifiers, customer identifier (customerKey), card issuer and partially masked card number, payment status and amount, cancellation/refund reason. SKIMTUBE does not store full card numbers or CVCs | Domestic payment processing, auto-renewal (recurring charges), cancellations and refunds, payment dispute response | For the retention periods required by e-commerce, tax, and accounting law. In-app payment records follow this policy's retention periods, and Toss Payments' own retention follows its policy and legal obligations | Users may refuse. However, domestic payments, subscriptions, and refunds may be unavailable | Toss Payments privacy policy: https://pages.tosspayments.com/terms/homepage/privacy/policy |
| Overseas payment provider (to be determined) | Countries or regions processed by the overseas payment provider and payment networks. Once the provider is selected, the specific countries and regions will be reflected in this policy | For international (USD) payments, sent or received through payment integrations during checkout, subscription creation/renewal/cancellation, customer portal sessions, refunds, payment notices, and payment-method management | Email, customer/address/subscription/transaction/payment-method identifiers, payment status, refund reason, and information needed for receipts and tax handling. SKIMTUBE does not directly store full card numbers or CVCs | Payments, subscription management, refunds, receipts and tax handling, payment-method management, and payment dispute response | For the period needed for e-commerce, tax, accounting, and dispute response. In-app payment records follow this policy's retention periods, and provider-side retention follows that provider's policy and legal obligations | Users may refuse. However, payments, subscriptions, customer portal, refunds, and saved payment-method management may be limited | Overseas payment provider privacy notice: to be published once the provider is selected |
Revision of 2026-08-13
This is the version currently in effect. Comparison tables for earlier revisions are not provided.
This is the first version tracked in the revision history.