research-2026-10-01-v4
Tester interest privacy notice
Operator: CASTLE FIVE. This notice applies to product-specific interest registration for THE DIAL and LIP DIAL. It does not confirm a purchase or trial participation.
Registration is currently closed.
Optional visit measurement is currently off.
Collection and purpose
Email, product choice, broad region, past-use and interest responses, optional tip/body design choices and presentation order, confirmation of age 19+, consent version/time and processing history are used for tester-interest management and scheduling. This form does not collect face images, phone numbers, birth dates or health information. Registration is not marketing consent.
Retention and withdrawal
Registration data is retained for up to 6 months from registration. Participation withdrawal is recorded as an application status and is distinct from personal-data erasure. You may refuse consent, but cannot register without it. Contact us below to request access, correction, deletion or withdrawal. Changing an application status alone does not delete personal data; the operator must execute the retention and deletion procedure.
Display order and device choices
Home always shows THE DIAL first and LIP DIAL second. No new display-order cookie is stored; the retired c5_order cookie expires when you visit. Optional measurement requires operational activation and separate consent.
Tip/body choices and presentation order are held temporarily in this tab's sessionStorage . Choosing alone does not send them to the server; they are sent only with registration submitted with privacy consent. Close the tab or clear site data to remove these temporary choices. On-screen tone and intensity settings are not saved as registration responses.
Optional visit measurement
Measurement requires operational activation and separate consent in the tab. It measures display order, product exploration, screen-study, interest-button and registration steps; it does not transmit study settings, photos or answers as analytics. A tab identifier is held in sessionStorage; the server stores a daily HMAC value, not linked to email. Route, language, product, event, display order and time are retained for up to 90 days; raw IP, full URLs and search terms are not stored in analytics. When enabled, you can withdraw using the measurement control.
When registration is active, Cloudflare Turnstile checks for bots. Request limits use an IP-derived HMAC security value; token reuse prevention uses a separate-purpose HMAC value. The collection database stores neither raw IP nor raw token, and these security values are not linked to email or application data. Values are valid for 10 minutes. Scheduled cleanup targets deletion within 24 hours after expiry; physical deletion is not immediate and may be delayed if cleanup fails.
To prevent erased data from reappearing after restoration, a separate erasure record retains only the registration identifier, deletion time and reason for up to 90 days, without email or responses. It is used only for deletion replay.
Service processing and contact
Planned providers are Vercel for hosting, Neon for database and Cloudflare for bot checks. Registration stays closed until processing regions, processor/cross-border disclosures and contract review are resolved.
Privacy officer: 대표 정성오
[email protected]