Privacy policy

To process orders and shipping we collect your name, email, phone number and shipping address. Payment data is handled directly by the payment gateway; we never store card numbers.

Access logs and device information (browser, IP) may be collected automatically to operate the service.

Order processing and delivery, customer support, fraud prevention (including the 1-per-customer check on limited items), and legal obligations.

Under the Korean e-commerce act: contract and withdrawal records 5 years, payment records 5 years, customer dispute records 3 years — then deleted.

Processing is entrusted, strictly as needed, to carriers (CJ Logistics and others), payment gateways, and cloud infrastructure (Vercel, Railway). No other third-party sharing except as required by law.

We use cookies and browser storage (localStorage) to remember your site settings and to understand how the site is used. A cookie is a small text file that a website sends to your browser and that is stored on your device.

1) Site settings (required to provide the service): language (NEXT_LOCALE), currency (mir_currency), colour theme (theme), cart (cart_id, mir_cart_count), login session and your analytics choice (mir_consent). Kept for up to 1 year; the cart for 30 days; the login session until you sign out or it expires.

2) Audience measurement (optional): we use Google Analytics 4 (Google LLC) and Naver Analytics (Naver Corporation) to collect anonymous statistics — number of visits, pages viewed, referrers, device and browser type. IP addresses are anonymised and the statistics are never used to identify you. Google Analytics cookies (_ga, _ga_*) last up to 2 years and the collected event data is deleted automatically after 14 months. The retention of Naver Analytics cookies follows Naver's privacy policy.

3) Advertising: we do not use cookies for targeted advertising or retargeting. Should advertising cookies ever be introduced, this policy will be updated first and your consent will be requested.

4) How to refuse: audience measurement is not mandatory and you may refuse it at any time. You can block or delete cookies in your browser settings (Chrome: Settings › Privacy and security › Cookies / Safari: Settings › Privacy / Edge: Settings › Cookies and site permissions), and you can change or withdraw your analytics consent at any time via “Cookie settings” in the page footer. Visitors from the European Economic Area and the United Kingdom are asked for consent on their first visit. Blocking cookies may limit some features such as the cart or sign-in.

5) Transfers outside Korea: audience measurement involves the following transfer of personal data abroad. Recipient: Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, https://policies.google.com/privacy). Country: United States. When and how: sent over the network when a page is viewed. Data: anonymised IP address, browser and device information, pages viewed, time of visit, referrer, cookie identifier. Purpose: site usage statistics. Retention: 14 months. Legal basis: notice under Article 28-8(1)(3) of the Korean Personal Information Protection Act (processing entrusted for the performance of the service contract). Naver Analytics is processed by Naver Corporation in the Republic of Korea and is not transferred abroad. You may refuse the transfer as described in 4); refusing has no effect on your ability to purchase or use the service.

You may request access, correction, deletion or suspension of processing of your data at any time: contact@mirtcg.com

Data protection officer: Haejin Kim (contact@mirtcg.com, +82 70-4010-4083 / +82 10-6600-7476)