Frequenoir is operated by Layered Diary.

Frequenoir Privacy Policy

Version: v1.2 · Effective date: October 13, 2026 · Last updated: October 13, 2026

This Privacy Policy explains how Layered Diary, operating the Frequenoir service ("Frequenoir," "we," "us," or "our"), handles personal information when you browse our website, listen to music, optionally register for a pre-launch notice and discount code, create or use an account, purchase or download music, use a shared listening link, or contact us.

1. Controller and Contact Details

Privacy Officer: SHIN SAETBYEOL

2. Information We Process

We process only information reasonably needed for the service you use.

Website and audio use

• IP address, browser and device information, request time, referring page, requested URL, and security/error logs;
• search terms and technical interaction data generated by the website or hosting/CDN infrastructure; and
• session-only selections, project queues, playback state, and cart-preview state stored in your browser.

Pre-launch registration

You may browse the preview site and listen to music without registering. If you choose to register for a launch notice and first-order discount code, we process only the registration information needed for that request:

• email address, request type (site_launch or album_launch), source page, and the relevant Album ID for an album registration;
• the server-recorded registration and international-transfer consent time, consent scopes and versions, offer version, and privacy-policy version;
• the email address in the matched Shopify Customer and limited prelaunch-* tags that identify the registration environment, site or Album ID interest, and single discount eligibility;
• a server-secret email fingerprint, Shopify Customer reference, registration purpose, Album ID where applicable, consent evidence, notification status, and one discount-eligibility record per email in the EU-jurisdiction Cloudflare D1 ledger; and
• issuance, delivery, redemption, withdrawal, and deletion status when those later lifecycle steps occur.

We do not use this registration as consent for newsletters, new-release recommendations, or unrelated advertising. Those communications require a separate choice.

Orders, payment, and digital delivery

• name, email address, telephone number, company name, and billing details provided at checkout;
• order number and date, product, track/album code, price, currency, payment/refund status, and transaction identifiers;
• License Holder and governing license version recorded in the order confirmation;
• download-link, delivery, access-count, fulfillment, IP/device, and fraud-prevention records; and
• immediate-delivery acknowledgement, including its version and time, where collected.

We do not intend to receive or store full payment-card details directly. Payment information is handled by Shopify and the selected payment provider under their own security and legal obligations.

Accounts and support

• Shopify customer-account identifiers and login-related information when a customer chooses to create or use an account; guest checkout remains available;
• name, email, order number, track code, affected-content URL, correspondence, and attachments voluntarily provided to support; and
• details needed to review a Custom License request, such as organization, intended use, platform, territory, audience, and release plan.

Do not send passwords, full payment-card numbers, government identifiers, or unrelated sensitive information through support channels.

3. Purposes and Legal Grounds

• Service operation and security: operate the website and audio service, maintain security and availability, prevent fraud/abuse, and diagnose errors;
• Pre-launch registration: validate and deduplicate a voluntary registration, associate the requested source or Album ID, maintain one discount eligibility per normalized email, and send only the requested licensing-launch notice, store or album link, and first-order discount code;
• Contract performance: process carts, orders, payments, accounts, licenses, refunds, delivery, and related contractual steps;
• Legal obligations: meet tax, accounting, consumer-protection, record-retention, and other legal requirements;
• Customer requests and support: handle support, rights-related, privacy, refund, and Custom License inquiries;
• Legal claims: establish, exercise, or defend claims and resolve disputes; and
• Marketing: send marketing communications only where any consent required by law has been obtained.

Where consent is required for a specific activity, we will request it separately. Withdrawal applies to future processing and does not affect processing lawfully carried out before withdrawal.

4. Retention and Deletion

• Pre-launch registration records: until the requested launch notification is successfully sent or consent is withdrawn, then deleted without undue delay from the active D1 ledger, direct customer link, and applicable Shopify pre-launch tags. A failed delivery may remain in a limited retry state until resolved or withdrawn. Provider backups and security logs may take additional time to cycle out under documented schedules;
• Delivered discount code: no code is created at registration. If a code is later created and delivered when purchasing opens, it is kept without an email or customer restriction only until 30 days after issuance;
• Contract, payment, supply, and cancellation records: 5 years;
• Consumer complaint and dispute records: 3 years;
• Display and advertising records: 6 months;
• Order and license records: as long as reasonably necessary to evidence the existence, scope, and License Holder of the applicable license and to establish, exercise, or defend legal claims, subject to statutory retention requirements;
• Support correspondence: 3 years after the matter closes, unless a longer period is required for an active dispute;
• Technical security and delivery logs: according to documented provider/account settings and only as long as necessary for service, security, fraud-prevention, or claims purposes; and
• Browser session storage: until the browser session or relevant local storage is cleared.
• When the applicable retention period expires or the purpose of processing has been achieved, personal information will be deleted without undue delay unless continued retention is required or permitted by applicable law.
• Electronic records are securely deleted using methods intended to prevent recovery or reconstruction, and paper records, if any, are shredded or otherwise securely destroyed. Where information is retained separately because of a legal obligation, access to that information is restricted and it is used only for the applicable legal purpose.
• Processor backups may take additional time to cycle out in accordance with documented backup and retention schedules.

5. Service Providers and International Processing

5.1 Processing on our behalf and independent payment services

PayPal applies its own privacy notice to payment-account and transaction processing. Eximbay and Toss Payments are not active at the date of this draft and are not listed as current recipients. This Policy will be updated before any additional payment provider is activated.

5.2 International transfer details

Personal information may be transferred outside the Republic of Korea where necessary to provide the requested service, perform a contract with you, or process a payment. Where the transfer constitutes overseas processing or storage necessary for the conclusion or performance of a contract with you, the transfer is made in accordance with Article 28-8(1)(3) of the Korean Personal Information Protection Act, based on the disclosure of the information required by law in this Privacy Policy.

Where an international transfer is necessary to provide a requested service, complete a purchase, deliver digital content, process a selected payment method, or respond to a request, Frequenoir may be unable to provide the relevant service without that transfer.

Where applicable law gives you a right to refuse or object to a particular international transfer, you may exercise that right by contacting us at hello@frequenoir.com. Refusing a necessary transfer may prevent use of the relevant account, purchase, payment, delivery, or support function. Where a reasonably available alternative payment method or service does not require the same transfer, you may choose that alternative.

Rights concerning personal information independently controlled by PayPal may also be exercised directly with PayPal in accordance with its applicable privacy notice.

5.3 Pre-launch registration / 프리런치 등록

Pre-launch registration is optional and is subject to a separate, unchecked international-transfer consent. Browsing and music listening remain available without that consent. If you choose to submit the registration, the following limited transfer flow applies. The implementation-status note below states whether registration processing is active in the environment you are viewing.

Current implementation status: The local pre-launch pages are a UI prototype. The Worker endpoint, D1 registration ledger and Shopify customer upsert are not active in this project, and submitting the prototype does not transmit or save an email. Production collection remains on HOLD until the D1 location/jurisdiction, Worker fields, Shopify mapping, deletion procedure and this disclosure are verified against the deployed system.

6. Cookies and Browser Storage

The website uses browser storage for selections, project queues, playback continuity, and cart-preview state. Shopify and other production providers may use cookies or similar technologies for checkout, account security, fraud prevention, preferences, and legally permitted analytics.

Non-essential analytics or advertising cookies will not be activated until an applicable notice and consent mechanism is configured. You can clear browser storage and cookies through your browser, but doing so may reset selections, carts, account sessions, or preferences.

7. Your Rights

Subject to applicable law, you may request access, correction, deletion, or suspension of processing and may withdraw consent where processing is based on consent. You may also exercise additional rights available under applicable law, including objection, restriction, portability, and information concerning disclosures and international transfers.

Send requests to hello@frequenoir.com. We may request information reasonably necessary to verify identity and protect customer records. Certain information may be retained or continue to be processed where required or permitted by law, including to establish, exercise, or defend legal claims.

8. Children

Frequenoir is not directed to children under 14 and does not knowingly collect their personal information without consent of a legal representative where required by law. If you believe a child has provided information improperly, contact us.

9. Security

We apply reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information, including access restriction, provider controls, secure transmission where supported, update management, and incident response. No internet transmission or storage method is completely secure.

10. Third-Party Links and Shared Listening Links

The service may link to third-party services. Their practices are governed by their own notices. A shared listening link may be accessible to anyone who receives it; do not place personal or confidential information in a shareable URL.

11. Changes to this Policy

We may update this Policy when the service, providers, or law changes. We will post the updated version and effective date and provide additional notice when required. Material changes will be announced before they take effect where required.

12. Contact and Complaints

For privacy questions or rights requests, contact hello@frequenoir.com or the Privacy Officer at the address above. You may also contact the Personal Information Protection Commission or another competent authority where you live.