Privacy Policy

1. Information We Collect

We only collect what a feature needs to work. Here is what each part of the site collects.

a. Your account

• If you sign in with Google, we receive your Google profile name, email address, and profile picture.
• If you sign up with an email and password, we store your email address and a hashed version of your password (never the password itself).
• If you sign in with a magic link, we store your email address and a short-lived, single-use sign-in token.
• The nickname you choose, and any optional profile details you add (skin type, skin goal, time zone).
• Messages you send to the team (contact form / My messages): your message, email and account, kept so we can reply and keep a record.

b. Community content (public)

Anything you post in the community is public and visible to anyone on the internet, including people who are not signed in:

• Posts, comments, replies, face-off votes and product reviews you write, including any images you upload with them.
• The members you follow and your face-off votes may be shown to other members (for example in the Following feed). Your likes and bookmarks are private to you; only like counts are public.
• Your public profile: nickname, profile picture, and — if you switch them on — your skin-profile card and your shared routine.

Please do not post your own or anyone else's private information (addresses, phone numbers, medical records) in the community.

c. Tester programme

When you apply to test products, we collect:

• Your first name, the email address on your account, and (optionally) a social media handle.
• Shipping details: recipient name, street address, city, state or province, postal code, country, and phone number. For testers in Brazil only, and only if you give it: your CPF, because Brazilian customs require it on every international parcel.
• Your age range, skin type, skin concerns, K-beauty familiarity, product interests, and how often you can take part.
• The reviews, scores and photos you submit after testing a product.

How tester data is shared — this is exactly what you agree to on the application and review forms:

• Shipping details (name, address, phone, email where a courier or customs form requires it, and for Brazil your CPF) go to the participating brand solely so it can ship your parcel. We do not give brands your contact details for marketing or to contact you directly. Before a round is confirmed, a brand sees only your country, city and skin type.
• Your review, scores and photos go to CYoung and to the brand whose product you tested. For rounds confirmed on or after October 27, 2026, the review, scores and photos are also published on the product's page under your nickname, with your country and skin type, always marked as a product you received free, and the brand may quote them. Photos may show only the product. A separate note you write “for the brand only” is never published. You can ask us to remove a published review at any time.
• For rounds confirmed before October 27, 2026, public or marketing use of your review happens only if you tick the optional box on the review form. If you do, CYoung and the brand may publish the review and photos under your first name only, always marked as a product you received free. You can withdraw that permission at any time by contacting us, and we will take it down.
• Notes our team keeps about a round are internal and are never shared with brands or other members.

d. Skin log

• Daily entries you record: scores, notes, tags, concerns, and up to three photos a day.
• Skin log entries are private by default. An entry becomes visible to other members only if you choose to share it, and photos are included only if you additionally choose to share photos for that entry.
• If you turn on daily reminders, we store your reminder preference, time zone, and — for push notifications — the browser subscription needed to deliver them.

e. Shop orders

• Payments are processed by PayPal. We never see or store your card number or PayPal password.
• After PayPal confirms a payment we receive and store the buyer name, buyer email, shipping address, items and amount, so we can fulfil, track and support the order.
• For products sold on behalf of a partner brand, the shipping details go to that brand so it can dispatch the order.

f. Classes

• Booking requests submitted through our Classes page: your name, email address, class type, number of participants, preferred dates and times, and any message you include. We use these to confirm and schedule your class.
• If a session is scheduled through a third-party scheduling tool such as Calendly, that tool's own privacy policy also applies.

g. Emails and notifications

• Transactional emails — sign-in links, order and booking confirmations, tester round updates, shipping and customs notices, replies and mentions. These are part of using the service.
• Newsletter and notification emails — sent only if you opted in. Every one carries an unsubscribe link, and unsubscribing stops them immediately. Bounced addresses are suppressed automatically.
• Push notifications — only on devices where you switched them on; you can turn them off in your browser's notification settings at any time.

h. Usage and activity data

• When you are signed in we record the date you were last active and which days you visited, to power activity badges, weekly community highlights, and to match active testers with rounds.
• Standard server logs (IP address, browser type, pages requested) used for security, rate limiting and troubleshooting.
• Analytics and advertising data collected through cookies — described in section 4.
• Messages you send us through the contact page or by email.

2. How We Use Your Information

• To run your account and show your public profile and content to the community.
• To match you with tester rounds, ship products to you, and pass your review to the brand.
• To process shop orders and class bookings and send you their confirmations.
• To send emails and notifications you have signed up for.
• To keep the site safe: rate limiting, abuse prevention, handling reports and blocks between members.
• To understand how the site is used and improve it, and to show ads on blog articles (section 4).

3. Who We Share It With

We do not sell your personal information. We share it only with:

• Partner brands — shipping details for tester rounds and consignment orders, and your tester review, under the rules in section 1c.
• PayPal — to take payment for shop orders.
• Google — for Google sign-in, Google Analytics and Google AdSense (section 4).
• Infrastructure providers that host the site, store data and deliver email on our behalf (Vercel, Supabase and Amazon Web Services). They process data only to provide those services to us.
• Authorities, where the law requires it.

Each of these third parties handles data under its own privacy policy.

4. Advertising, Analytics and Cookies

Advertising (Google AdSense)

We show ads from Google AdSense on our blog articles. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info/choices and, in the EU, at www.youronlinechoices.eu.

Analytics (Google Analytics 4)

We use Google Analytics 4 to understand which pages are read and how visitors move through the site. Google Analytics uses cookies to collect information such as pages visited, approximate location, device and browser type. Google explains how it uses data from sites that use its services at policies.google.com/technologies/partner-sites. You can prevent Google Analytics from collecting your data by installing the Google Analytics opt-out browser add-on.

How consent works

• Visitors in the European Economic Area, the United Kingdom and Switzerland see Google's consent message when they arrive. Advertising and analytics cookies stay off until you accept; you can decline or manage your choices in that message.
• Visitors elsewhere see our cookie bar. Choosing "Decline" switches off analytics and keeps ad units off; your choice is saved in your browser so we do not ask again.
• You can also block or delete cookies in your browser settings at any time. Blocking cookies does not affect signing in or using the site.

Cookies we set ourselves

We set a session cookie to keep you signed in, and we store your cookie choice, your region check (for the current session only) and small interface preferences in your browser's storage. None of these are used for advertising.

5. Data Retention and Security

• Account and community data is kept for as long as your account exists. When you ask us to delete your account (section 6), we remove your profile and personal details, and your posts and comments are removed or anonymised.
• Tester shipping details are kept while you are in the programme so we do not have to ask for them each round. Withdrawing from the programme or deleting your account ends their use.
• Order and booking records are kept as long as needed for fulfilment, returns, and our legal and accounting obligations.
• Server logs and rate-limit records are short-lived.

Data is stored on managed cloud infrastructure with encryption in transit, and access is restricted to what each feature needs. However, no method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal information, to object to certain processing, and to withdraw a consent you have given. Whatever your location, you can always:

• Edit your profile, nickname, skin details and visibility switches from your profile page.
• Update your tester application, including your shipping details, from the Testers page.
• Unsubscribe from newsletters and notifications with the link in any email, and turn off push notifications in your browser.
• Withdraw permission for public use of a tester review at any time — we will take it down.

To request a copy of your data or to delete your account and data, send a message through our contact page or email cyoung@cyounginyou.com from the address on your account. We will confirm your identity and respond within 30 days. Some records (for example completed orders) may be retained where the law requires it.

7. International Transfers and Children

CYoung operates from Seoul, South Korea, and our members and testers are in many countries. Your data may be stored and processed in Korea, the United States and other countries where our providers operate. We rely on our providers' standard safeguards for these transfers.

The site is not directed at children. If you are under the age at which you can consent to online services in your country, please do not create an account or apply to the tester programme; we do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised date, and we will tell you by email or a site notice if a change materially affects how your data is used.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: cyoung@cyounginyou.com or via our contact page.