한국어 | English
DrumPen Privacy Policy
DrumPen (drumpen.com, the "Service") is operated by ETS Corporation (이티에스 주식회사, the "Company"). We handle your personal information in accordance with the Personal Information Protection Act of the Republic of Korea and other applicable laws, as described below. If the Korean version and this translation differ, the Korean version prevails.
1. Summary
| Topic | Details |
|---|---|
| Using DrumPen without signing in | Your songs stay in your browser and are never sent to our servers. We only collect anonymous visit statistics. |
| Using DrumPen with an account | We store your email address, account details, and songs on our servers so you can use them on other devices. |
| Sharing with third parties | We don't share your information. |
| Marketing emails | Sent only if you opt in separately. You can unsubscribe at any time. |
| Contact | support@drumpen.com |
2. Information we collect and how
| Category | Items | How |
|---|---|---|
| Email sign-up | Email address, password (stored with one-way encryption that cannot be reversed) | Sign-up form |
| Google sign-up | Email address, name, and profile picture URL from your Google account | Received from Google when you sign in |
| Sign-up and consent records | Date you confirmed you are 14 or older, date and version of the Terms and Privacy Policy you agreed to, marketing opt-in and opt-out status and dates, date of any account deletion request, display language | Sign-up and "Finish signing up" screens, account menu |
| Songs (when signed in) | Song title, notes, structure, lyrics, memos, notation and print settings, saved and modified dates, whether a song is in the trash | Saved automatically as you work |
| Collected automatically | Access time, IP address, browser and device information, sign-in history (time, IP address, and browser of each sign-in) | Generated as you use the Service |
| Anonymous visit statistics | Pages visited, approximate country, browser and device type, referrer | Vercel Web Analytics (no cookies; cannot identify you) |
| Support requests | Your email address and message | When you write to support@drumpen.com |
- We do not collect sensitive information, national ID numbers, or payment information. If we introduce paid features, we will update this policy beforehand.
3. Why we use it
- To create, identify, and sign in to your account, manage it, and keep out users under 14
- To save your songs on our servers and load them on multiple devices (cloud storage and sync)
- To send service notices (changes to these policies, service changes or shutdown, advance notice of paid plans, etc.). These are not marketing messages and may be sent regardless of your marketing preference.
- To answer support requests, prevent misuse, and respond to security incidents
- To improve the Service using statistics that cannot identify you
- To send marketing emails (new features, paid plans and pricing) — only if you opt in
4. How long we keep it
| Data | Retention |
|---|---|
| Account details and songs | Until you delete your account. When you request deletion, you are signed out on all devices right away and can no longer use the Service. You can cancel the request by signing in again within 7 days; after 7 days we delete your data without delay. |
| Songs in the trash | Deleted automatically after 30 days |
| Marketing consent records | Until you withdraw consent or delete your account |
| Support emails | 1 year after the request is resolved |
| Sign-in history | Deleted automatically after 3 months (Protection of Communications Secrets Act) |
- Electronic files are deleted so they cannot be recovered. We do not keep paper records.
- To guard against data loss, our database provider (Supabase) creates encrypted backups automatically every day and keeps them for 7 days before deleting them, so deleted information disappears from backups within 7 days at the latest.
5. Sharing with third parties
We do not share your personal information with third parties, except where required by law or requested by investigative authorities following legal procedures.
6. Service providers and international transfers
We use the following providers to run the Service, and some process data outside Korea. These transfers are necessary to provide the Service you signed up for and are disclosed in this policy under Article 28-8(1)(3) of the Personal Information Protection Act.
| Recipient (contact) | Purpose | Data | Country / location | When and how | Retention |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. (privacy@supabase.com) | Authentication, database (accounts, songs, and sign-in history) | Account, consent, and song data from section 2; sign-in history | Data stored in South Korea (Seoul); may be accessed from abroad for operations and maintenance | Whenever you sign up or use the Service, over encrypted connections | Same as section 4 |
| Plus Five Five, Inc. (Resend) (support@resend.com) | Sending authentication emails (sign-up confirmation, password reset), service notices, and marketing emails | Email address, email content | Japan (Tokyo), United States | When an email is sent, over encrypted connections | Per the provider's retention policy (minimized in our settings) |
| Vercel Inc. (privacy@vercel.com) | Website hosting, anonymous visit statistics | IP address, browser information, access logs | United States and worldwide (served from the nearest location) | When you visit, over encrypted connections | Per the provider's log retention policy |
| Namecheap, Inc. (dpo@namecheap.com) | Forwarding mail sent to support@drumpen.com | Sender's email address, message | United States | When you send us an email | Not stored (forwarded immediately) |
| Google LLC (https://support.google.com/policies) | Storing and replying to support emails (Gmail) | Sender's email address, message | United States | When we receive your email | Same as support emails in section 4 |
- If you don't want your data transferred abroad, you can use DrumPen without signing in (songs stay in your browser) or delete your account. Without an account you can't use cloud storage or features that require signing in, such as exporting and printing. Website hosting (Vercel) is required to use the Service and cannot be declined.
- When you sign in with Google, you sign in to Google (Google LLC) directly and we receive the items listed in section 2 from Google. Google's handling of your data is governed by Google's privacy policy.
- We will update this policy if our providers or their roles change.
7. Your rights
- You can access, correct, or delete your personal information, ask us to stop processing it, or withdraw your consent at any time.
- How: use the account menu in the app (sign out, download all my songs, marketing email settings, delete account) or email support@drumpen.com. We handle requests without delay within the period required by law and let you know the result.
- A legal representative or someone you authorize may also make requests on your behalf. We may ask for proof of authorization.
8. Children under 14
DrumPen does not accept sign-ups from children under 14. You confirm you are 14 or older when signing up. If we learn that we have collected information from a child under 14, we delete it without delay.
9. Marketing emails
- We send marketing emails only to users who separately opted in on the sign-up screen or in the account menu. Not opting in does not limit your use of the Service.
- Each marketing email is marked "(Ad)" in the subject line and includes the sender (DrumPen, ETS Corporation) and how to unsubscribe.
- To unsubscribe: use the link in the email (no sign-in required), the account menu, or email support@drumpen.com. It's free. We confirm opt-ins, opt-outs, and withdrawals within 14 days.
- Every 2 years from the date you opted in, we ask whether you want to keep receiving marketing emails.
10. Browser storage and automatic collection
- DrumPen does not use cookies. It uses browser storage (localStorage, sessionStorage, IndexedDB) instead.
- Sign-in: with "Stay signed in" on, your sign-in is kept in localStorage; with it off, in sessionStorage, which is cleared when you close the browser.
- Songs and settings: songs are kept in IndexedDB; settings such as theme, language, drum sounds, and whether you've seen tips are kept in localStorage.
- You can clear or block site data in your browser settings, but your songs may be deleted or you may be signed out. Save important songs with File > Save to keep a .drumpen file.
- Anonymous visit statistics (Vercel Web Analytics) work without cookies and do not store information that can identify you.
11. How we protect your information
- Passwords are stored with one-way encryption that cannot be reversed.
- All connections are encrypted (HTTPS).
- Row-level access control in the database lets each user access only their own data.
- Admin accounts are used only by the privacy officer and protected with two-step verification.
- Only public access keys are included in the browser; secret admin keys are never included in browser code.
12. Privacy officer
| Name | Dong Cheol Han (한동철), Head of Information |
| Contact | support@drumpen.com |
Please send privacy questions, complaints, or requests for remedies to the address above. We will respond and handle them without delay.
13. Remedies
For advice or dispute resolution regarding privacy violations, you can contact the following Korean authorities:
- Personal Information Dispute Mediation Committee: +82-1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
14. Changes to this policy
We will announce changes in the Service and on this page at least 7 days before they take effect. For changes that significantly affect your rights (new data items, sharing with third parties, new international transfers, etc.), we will give at least 30 days' notice and ask for consent again where required.
- Data controller: ETS Corporation (이티에스 주식회사) · CEO Kyu Jin Park (박규진) · Business registration no. 525-81-00022 · 3F 3071-1, 95 Misagangbyeondong-ro, Hanam-si, Gyeonggi-do, Republic of Korea
- Previous version: "Privacy notice" of September 29, 2026 (before accounts, when songs were stored only in your browser)
View in another language: 한국어 · Terms of Service · User Guide · Back to DrumPen
ETS Corporation · CEO Kyu Jin Park · Business registration no. 525-81-00022 · 3F 3071-1, 95 Misagangbyeondong-ro, Hanam-si, Gyeonggi-do, Republic of Korea · support@drumpen.com