What we hold, and what never leaves your phone.

The person responsible for everything on this page is Youjin Jung, an individual trading as Scelto in the Republic of Korea. No company, no data-protection department. Ask anything, or ask for your data to be deleted, at support@sceltokbeauty.com, and it reaches them directly.

Five things (six only if you opt in on the health screen, and one more only when you choose to keep shelf notes) and nothing else:

• Your email address: only once you reserve a place on the waitlist. You can run the analysis and read your result without giving it to us.
• Your analysis answers, minus the health screen: how your skin behaves, your two concerns, the texture you prefer, your budget, the Seoul districts you plan to shop, your travel month, your age range, and how familiar you already are with K-beauty.
• The skin profile we derive from them: the segment name, your budget converted to won, and a single yes/no flag saying the plan should be built conservatively.
• The health categories you ticked, only with your separate consent: the health screen carries its own consent checkbox, apart from the email consent. Agree and we store just the category names you selected (for example “rosacea”) and the time you agreed, so your plan can exclude exactly the ingredients that matter for them. If you would rather not share, untick those boxes. Nothing from that screen is sent, and the analysis continues without it.
• Your shelf notes, only if you write them: on your account page you can mark what you actually bought and how it went: a bought checkmark, a three-way verdict, and an optional note in your own words. The note is stored encrypted, it is never shown to anyone else or published anywhere, and we use it to sharpen your own future plans. Delete it any time by clearing the field, or ask us to erase all of it.
• Pseudonymous usage events: page views and how far through the analysis people get, tagged with a random session id your browser generates. We set no cookies for tracking, and no third-party tracking scripts run on this site.

One thing rides along with that last item. To prevent abuse, we also store a salted one-way hash of your IP address with these events. We cannot recover your address from it, we never store the address itself, and we use it only to refuse traffic that is hammering the site. That is why the events are pseudonymous rather than anonymous, and we would rather say so than round the claim up.

One screen of the analysis asks about pregnancy and breastfeeding, skin conditions, prescription treatments, recent or planned skin procedures, and ingredient allergies. By default, those answers are never transmitted: they are held in your browser, used there to shape the result on your screen, and discarded when you close the tab. The only thing that travels is the yes/no conservative flag above, with no reason attached to it.

The one exception is the separate opt-in described above, and it is as narrow as we could make it: category names, the consent time, and, if you named ingredients you react to, the ingredient names your browser was able to match. The sentence you typed into that field never leaves your browser: it is read on your device against a list of ingredient names, and only the names that matched are sent. Anything that matched nothing stays with you, and we are told only how many such entries there were, so your plan can admit what it could not read. Beyond that one sanctioned shape, the server refuses any submission that carries the health answers at all, rather than accepting it and stripping them out.

• To send you the skin read you asked for.
• To tell you when we open, and to honour the launch price we promised you.
• To improve the service: which questions people abandon, which segments people fall into, whether a page is worth keeping.
• For anonymised, aggregated statistics: which kinds of skin look at which kinds of product. Numbers, never a person or an address.

Consent: the checkbox beside the email field. Without it there is no row: the API refuses the submission rather than saving it and asking later. You can withdraw consent whenever you like, and withdrawing it does not undo anything that was lawful before you did.

Until you unsubscribe or ask us to delete it. There is no fixed expiry and no archive kept afterwards. When the row goes, the answers and the derived profile go with it.

To stop the emails, or to have everything we hold about you deleted, reply to any email we send you, or write to support@sceltokbeauty.com, and say so. We delete the address, the answers and the profile built from them, and close the sign-in account that held them. Nothing left behind.

Ask us what we hold and we will tell you, in the same way. These are your rights under Korean personal-information law and, if you are in the EU or UK, under the GDPR.

If you tick “Remind me when these run out” on your shelf, we may send you up to one email a week about the products you marked as bought, never anything about your skin or health. Every one of them carries a one-click link to stop them, and unticking the box on your shelf stops them too.

Four companies process data on our instructions, and no one else does. None of them is a Korean company, though the database itself runs on servers in Seoul, so your stored answers stay in Korea, while serving the site and delivering email happen abroad. Korean law asks us to name them here, and we do:

• Supabase Pte. Ltd (privacy@supabase.io): the database host. Stores the rows: your email address, your analysis answers, the profile derived from them, and, only with the health-screen consent, the categories you ticked, the time you agreed, and the ingredient names your browser matched. It holds them until you ask us to delete them. The servers are in Seoul; the company is incorporated in Singapore.
• Vercel Inc. (privacy@vercel.com): the site host. Serves these pages and receives your submission on its way through, so it sees your IP address in the request itself; what reaches the database is only the hash. It processes from the United States, and keeps request logs only.
• Plus Five Five, Inc., doing business as Resend (privacy@resend.com): the email service. Delivers our mail, so it handles your address and the message we send you. Nothing from the health screen is in that message. It processes from the United States, and holds the address for as long as the sending record exists.
• Amplitude, Inc. (privacy@amplitude.com): product analytics. Counts which pages were opened, when a visit starts and ends, and which link or advert you arrived from, against a random id kept in your browser, and records how the public pages are used (scrolls, taps, the path through the site) so we can see where the site is unclear. On those same public pages it also logs the text of what you click: a headline, a button, a price. That is our copy, not yours, and it is switched off by address on the questionnaire, your plan, your account pages and the admin tool, where the words on screen would be yours. The questionnaire, your plan, your account pages and anything you type are not recorded: those screens are blocked from the recording at the source, not hidden afterwards, so nothing you tick about your skin or health is in it. If a page is opened with ?scelto_test=1, which nothing on the site links to, a scelto_test_run cookie marks that browser as one of our own verification runs for twelve hours, and everything it does is excluded from our figures rather than counted as a visitor. It is not told your name or your email address. It processes from the United States.

All of it travels over encrypted connections, at the moment you load a page and at the moment you submit. If you would rather no foreign company handled your data, we cannot run the service for you. There is no path through it that avoids them. Reply to any email from us and we will delete what we hold; that is the whole of the refusal, and the effect is that we keep nothing further and send you nothing.

We advertise, and we need to know which advertisement brought someone who actually wanted a plan. One pixel from Meta does that, and it runs only if you press Accept on the banner: decline and the script is never fetched at all, which is a different thing from loading it and telling it to behave. Korean law treats this as a transfer abroad and asks us to publish these facts, so here they are:

• Who receives it: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California, United States (dpo@meta.com). If you are in the EU or the UK, the same pixel reports to Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
• What is sent: the address of the page you are on, the fact that you reached one of four steps (a page opened, a plan finished, a checkout started, a purchase completed), the amount of that purchase, and the identifiers Meta keeps in your browser. Nothing else. No questionnaire answer, no product name, no email address and no phone number: the feature that would hash and send an address is switched off, and on the questionnaire, your plan, your account pages and the admin tool the pixel is permitted to send the bare name of the step and nothing beside it.
• Where it goes, and when: to the United States, or to Ireland if you are in the EU or the UK, at the moment the page loads or the step happens, over an encrypted connection from your browser straight to Meta. It does not pass through our server.
• What it is for: measuring and improving our own advertising, and nothing else. Not building a profile of you for anyone else, and not letting a brand reach you: that is the same rule as the section below.
• How long it is kept: Meta holds it under its own policy, which we do not control and will not paraphrase into a number we cannot keep. What we control is the consent, and that lasts twelve months on your device before the question is asked again.
• How to refuse, and how to change your mind: press Decline. Afterwards, press “Ad measurement” at the foot of any page and the banner comes back, so a yes can become a no on the next page you read. Refusing costs you nothing: the site, the questionnaire and the plan behave identically, and nothing is withheld for it.

The analytics in the section above are not part of this question. They measure our own pages, they are never told your name or your address, and they run under the same consent as the rest of this page. The banner asks about one thing only, a third party’s advertising cookie set for a third party’s purpose, because that is the one thing a yes or a no should actually decide.

We do not sell, rent or trade your data. We do not buy data about you elsewhere and join it to what you told us. We do advertise, and the one advertising pixel we carry is the Meta one described above, and it is never told what you answered. Brands cannot pay to reach you through us. That is the same rule that governs how we are paid.

The service is young and this page will move with it. The date at the top is the honest one. If a change materially affects what we do with data you already gave us, we will email you rather than quietly edit this page.