Privacy and Cookies

This website, vanitaslab.com, is run by Vanitas Lab (Representative: Siwoo Lee; Business Registration No. 417-26-37291; Republic of Korea). We are the controller of the personal information described here.

Questions about privacy go to contact@vanitaslab.com.

When you send an inquiry. Your name, work email, company and role (optional), what you write about your project, and whether you would like to sign an NDA first; and, added automatically, the country your request came from (worked out by our host from your IP address; we do not store the address itself) and your browser's user-agent string.

When you review a film with us. In a client review room you can leave notes on a moment or a range of the film. We keep each note, its timecode, the display name you type (or "Anonymous"), and anything you add to it: a drawing over the frame, suggested new wording for a subtitle line, or a voice recording.

When you work with us in a project workspace. Each client project has a password-protected workspace. We keep the requests, replies and decisions posted there, the files your team uploads (decks, data, references) and the documents we share (quotes, contracts, invoices). For our own records we also keep your team's contact details and your company's registration details.

When you email us. Whatever you choose to send.

When you visit any page. Our hosting provider processes your IP address, the time and the address of each request to deliver the page and keep the site secure. We do not use these records to profile anyone.

When a password is entered wrongly. To stop repeated guessing we count wrong passwords for about 15 minutes, keyed to a scrambled form of the IP address (never the address itself), and delete the count when it expires or the next sign-in succeeds.

We do not use analytics or advertising tools, tracking pixels or social plug-ins, and we never sell or rent personal information.

• To reply to your inquiry, prepare a proposal or quote, and sign and perform a contract with you.
• To run film reviews and project workspaces with clients and act on their feedback.
• To keep the site secure and to block spam (the inquiry form uses a hidden field and a timing check, not a third-party CAPTCHA).

For visitors in the EU or UK, our legal bases are steps taken at your request before entering a contract, performance of a contract, and our legitimate interest in running a secure business website.

• Inquiries and emails: up to three years after our last correspondence, then deleted.
• Review notes, voice recordings, workspace posts and uploaded files: for the length of the project and up to one year after final delivery (or the end of update support), then deleted. Your source material is deleted sooner at your request.
• Contracts, quotes and invoices: as long as Korean tax and commercial law requires, generally five years.

You can ask us to delete your information sooner, unless the law requires us to keep it.

We use the providers below to run the site and our email. Each processes information only on our instructions. Because they are based in the United States, using them involves transferring personal information outside Korea.

Voice notes and live transcription. When you record a voice note, your browser may type your words into the note as you speak. That transcription is done by your browser's own speech service (for example Google in Chrome, Apple in Safari) under its own privacy terms; we receive only the recording and the text you post.

If you do not want your information transferred, please do not use the inquiry form, review rooms or workspace; tell us and we will find another way to work with you.

We use only what is strictly necessary for the site to work. We set no advertising or analytics cookies, so there is no cookie banner.

You can block or delete these in your browser settings. Review rooms that need a password will then ask for it again.

You can ask to see, correct or delete your personal information, or to stop us using it, by writing to contact@vanitaslab.com. We reply within ten days. If you are in the EU or UK you also have the right to data portability and to complain to your local data protection authority.

The site is served only over HTTPS. Inquiries, review notes and workspace files sit in private storage that only we and your project's password holders can open; sessions use signed cookies; uploads and downloads go through short-lived signed links; and films are streamed with downloads turned off.

This site is meant for businesses. We do not knowingly collect information from anyone under 14.

Privacy officer: Siwoo Lee, Representative · contact@vanitaslab.com

In Korea you can also contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr), the KISA Privacy Infringement Report Center (118, privacy.kisa.or.kr), the Supreme Prosecutors' Office cybercrime unit (1301) or the Korean National Police Agency cyber bureau (182, ecrm.police.go.kr).

If we change how we handle personal information, we will update this page and its effective date. This version takes effect on 28 October 2026.