Privacy Notice
What this site stores, who else touches it, and where in the world it goes.
Who is responsible
Operator: [사업자 정보 확정 필요] — company name, representative, business registration number, mail-order sales registration number, address, and contact email.
Privacy officer: [개인정보 보호책임자 확정 필요]. Korean law requires a named person here, not a department.
Effective date: [시행일 확정 필요].
What is stored, exactly
This section is written from the database schema rather than from a template, so it can be checked against the software.
When you buy something
An order record holds order_ref (the reference shown to you),
sku, lang (which language edition), price_minor and
currency (the price at the moment of the order), status, the payment
provider's paypal_order_id and paypal_capture_id,
buyer_email — the address the payment provider passes to us, which you never type
here — the time you agreed that downloading ends the refund window, and timestamps for creation,
payment, and refund.
It also stores your ip address and ua (browser
identification string). We are naming these because they are personal data and most notices quietly
omit them.
When you download
A download record holds a one-way hash of the link token, an expiry time, a download
counter, and the last_ip that used it. Links last 30 minutes and allow up to 5 downloads.
The token itself is stored only as a hash, so nobody — including us — can read a live link out of the
database.
To stop abuse
A short log of ip, the kind of request, and the time, used to rate-limit
repeated attempts.
If you create an account
Not connected yet. When it is: your email address, a one-way hash of your password (never the password), whether you signed in with Google, your referral code, and which orders belong to you. This section must be rewritten at that point rather than left as a promise.
Who else processes it, and where
All four are outside Korea. Using this site means your data crosses a border.
- Cloudflare
- Hosting, database, and file storage. Sees every request, including your IP address. Overseas.
- PayPal
- Payment. Holds the card details — we never see them — and passes us the email address on the payment. Overseas.
- Resend
- Sending email. Will see your address and the message. Not connected yet. Overseas.
- Sign-in, if you choose it. And, already today, the web fonts on every page of this site — which means your browser contacts Google and reveals your IP address before you agree to anything. Overseas.
Legal basis for the cross-border transfer: [국외 이전 근거 확정 필요].
How long it is kept
[보관 기간 확정 필요]. This is deliberately blank: no deletion job exists in the software yet, so any number written here would be a claim nobody is keeping. Paid orders will need to be retained for tax and refund records regardless of account deletion.
Cookies
This site sets no cookies today. It stores one item in your browser's local storage —
kbl_lang, which remembers whether you chose English or Japanese. That never leaves your
device. Signing in will require a session cookie; this section changes when it does.
What you can ask for
You can ask what is held about you, ask for it to be corrected, ask for it to be deleted, and withdraw consent. Send that to the contact address above once it exists.
If an order has been paid, deleting your account will not delete the order record — see retention.
Children
This site is not built for children and does not knowingly collect their data.