Privacy Policy
Last updated: July 27, 2026
Effective date: July 27, 2026
PixelPal is provided by D2WO and is based in the Republic of Korea.
Overview
D2WO (the "Company") establishes and discloses this Privacy Policy in accordance with applicable personal information protection laws to protect users' personal information and to handle related complaints promptly and smoothly.
This Policy applies to the PixelPal website (pixelpal.d2wolab.com) and the browser extension (collectively, the "Service").
Service name and branding
The official name of the Service is PixelPal. The Service is provided by D2WO, and this name matches the app name shown on the Google OAuth consent screen (PixelPal).
PixelPal's app logo and icons use a mint-colored pixel octopus mascot that uniquely identifies the Company's brand. The app name and logo do not include any Google product names, Google trademarks, or Google product icons.
Any Google logo or wording on the sign-in screen is solely for the Google social sign-in button and is not the PixelPal app logo.
Personal information we collect
Required account information
- Email address (collected via Google social sign-in)
- Profile name
- Profile image
Information collected or stored while using the Service
- Bookmark data (URL, title, folder, notes, etc.)
- Scrap/highlight data (selected text, source URL, tags, folders, etc.)
- Snippet data (expansion text, triggers, folders, etc.)
- Synced account settings and folder/tag structures
Information stored locally on your device/browser
- Screenshot images and edits (local storage such as IndexedDB)
- Character (octopus) display and behavior settings
- Per-site extension behavior settings
- Login, language, theme, and other preference settings
Data stored only locally is generally not transmitted to the Company's servers. However, if you use sync features, the relevant items may be stored on the server.
Automatically collected information
- IP address
- Access timestamps
- Service usage logs
- Device information (browser type, OS, etc.)
- Cookies and similar technologies
Purposes of processing
The Company processes personal information for the following purposes:
- User identification and account management via Google social sign-in
- Providing core features such as bookmarks, scraps, and snippets, and syncing across devices
- Providing extension features such as the pixel character companion, screenshots, and the side panel
- Service improvement, error analysis, and new feature development
- Responding to customer inquiries and delivering notices
Processing related to the browser extension
The PixelPal extension may request browser permissions (storage, tabs, scripting, side panel, context menus, clipboard, favicon, etc.) to provide the Service.
- When you run scrap, bookmark, or snippet actions, the page URL and selected text may be processed.
- Screenshot features capture only screens you request, and results are stored locally on your device by default.
- Character overlays and selection toolbars operate on webpages within the scope you allow.
- The Company does not continuously collect the full content of webpages that you have not explicitly saved or synced.
Retention period
The Company processes and retains personal information within the retention period required by law or agreed to when the information was collected.
- Upon account deletion: destroyed without delay (except where retention is required by law)
- Service usage records: 3 years (under the Act on the Consumer Protection in Electronic Commerce, etc.)
- Access logs: 3 months (under the Protection of Communications Secrets Act)
Destruction of personal information
When personal information becomes unnecessary due to expiry of the retention period or achievement of the processing purpose, the Company destroys it without delay.
- Electronic files: securely deleted so they cannot be recovered or restored
- Other records: shredded or incinerated
- Deletion is completed within a scheduled system timeframe
Provision to third parties
The Company does not provide users' personal information to third parties in principle, except in the following cases:
- When the user has given prior consent
- When required by law
Entrustment of processing
To provide the Service, the Company entrusts personal information processing as follows:
- Entrusted parties: cloud infrastructure and database service providers
- Entrusted work: storage of account and sync data, authentication, and service operations
- The Company includes confidentiality and compliance obligations in entrustment contracts and supervises the processors accordingly
Your rights
As a data subject, you may exercise the following rights:
- Request access to personal information
- Request correction of errors
- Request deletion
- Request suspension of processing
You may exercise these rights by emailing d2wolab@d2wo.com or through Service settings. The Company will respond without undue delay.
Security measures
The Company takes the following measures to safeguard personal information:
- Encryption of personal information
- Technical measures against hacking and similar threats
- Access restrictions on personal information
- Authentication session and API access controls
Cookies
The Company uses cookies to provide a stable Service.
- What cookies are: small pieces of information a website sends to your browser
- Purpose: maintaining login sessions and storing preferences such as language and theme
- How to refuse: you may refuse cookies in browser settings, but some features such as sign-in may be limited
Privacy officer
The Company designates a privacy officer to oversee personal information processing and handle related complaints and remedies.
Privacy Officer
Email: d2wolab@d2wo.com
You may contact the privacy officer regarding any personal information inquiries, complaints, or remedies arising from use of the Service.
Changes to this Privacy Policy
This Privacy Policy applies from the effective date. If the Policy is amended, added to, or corrected, the Company will notify users at least 7 days before the changes take effect through in-Service notice or this page.