SeoulDrop (seouldrop.shop) collects only the personal information needed to run the purchase-proxy and forwarding service.
Your email address, name, shipping and customs address, phone number provided at signup or in Account settings, purchase requests and order history, and payment details shared with PayPal (for PayPal transactions) to process payment (we never store card numbers ourselves). We also collect attribution information and website usage statistics as described in the cookies and analytics section below.
To process and ship your orders, prepare customs declarations, process payment, send order status updates (email/SMS), provide customer support, and understand aggregate usage to improve the service. We also use this information to measure marketing effectiveness.
If you verify a phone number, we use it to send verification codes and order status notifications. These are transactional messages — your number is never sold or shared for marketing purposes. You can opt out anytime by replying STOP.
We share data only with the vendors needed to run the service — PayPal (for PayPal transactions) for payment, our shipping carriers, Resend for email delivery, and Twilio for SMS delivery. We don't sell your data to third parties for marketing. We also share relevant data with Vercel for website usage analytics.
We retain your account and order records for as long as your account is active, and afterward for as long as tax and accounting rules require. The 30-day period for sd_utm is the browser cookie's expiry period. First-touch information stored on the server follows the purchase-request record's retention and deletion rules; cookie expiry does not trigger its deletion. Vercel's visitor-identification hash resets daily. Its guaranteed analytics reporting window is 1, 12 or 24 months depending on the plan; Vercel states that data may be stored for longer.
You can ask to view, correct, or delete your account data at any time: message us.
To understand which channels lead to purchase requests and measure marketing effectiveness, we store the first available attribution information: UTM source, medium, campaign and content, and the referring site's domain. This attribution record does not include the referring site's full URL or search terms. The sd_utm browser cookie is set to expire after 30 days; valid existing attribution is not overwritten by later visits. When you create a purchase request, this information may also be stored in its server-side record. That record can be linked to your account and purchase request, so it is separate from anonymous visitor statistics. Deleting or expiring the cookie does not delete information already stored on the server.
We use Web Analytics provided by Vercel to improve the site and measure marketing effectiveness. It analyzes aggregate statistics about visits to public pages, including visit time, pages and routes, referral sources and filtered UTM parameters, approximate location such as country, device type, operating system and browser. Web Analytics itself does not use cookies; it distinguishes visitors using a daily hash generated from incoming requests. We configure it to exclude authentication, administration and private transaction routes and filter sensitive URL values. We restrict names, email addresses, account identifiers and transaction identifiers from being sent as analytics data.
Vercel analytics privacy documentation · Vercel analytics retention and reporting window
This policy may be updated as we learn more from operating the service. Questions? Message us anytime.