Privacy Policy
This privacy policy draft is tailored to the current Toolkits implementation, including Google OAuth sign-in, account-based saved items, browser storage, upload-based conversion tools, Google tag-based measurement, Google AdSense, and Kakao AdFit advertising. Replace the controller name, contact details, and effective date before publishing.
Controller
Toolkits operator [replace with legal name]
Core integrations
Google Sign-In, Google Tag Manager / Analytics, Google AdSense, Kakao AdFit
Upload handling
Temporary processing only, with auto-cleanup after completion
Contents
1. Personal data items and purposes of processing
The company processes only the minimum personal data necessary to provide the service.
- Google sign-in and account management: Google account identifier (sub), email address, name, profile image, and login time are processed for user authentication, account linking, and member-only features.
- Member settings and saved features: locale, unit-system preference, card-density preference, ad-personalization preference value, favorite tools, recent tools, presets, scenarios, templates, projects, and comparison sets may be stored to provide cross-device account features.
- Browser-side convenience storage: theme, locale, local settings, recent tools, favorite tools, and temporary tool state may be stored in browser storage for convenience.
- Fortune-style report inputs: birth date, birth time where required by the specific tool, lunar/solar choice, and leap-month flag may be processed only to generate the requested report response and local convenience state.
- Tojeong report inputs: birth date, lunar/solar choice, leap-month flag, and target year are used for deterministic upper/middle/lower gwae calculation. Birth time is not used. If optional modern interpretation is enabled, only structured calculation context is used for explanatory copy generation.
- Upload-based tools: uploaded files, generated files, file names, format metadata, conversion options, and timestamps may be processed temporarily to complete the requested conversion task.
- Automatically generated data: IP address, browser and device information, visit time, referrer, page URL, event logs, and ad impression/click information may be processed for service operation, security, analytics, and advertising.
2. Personal data of children under 14
The service is not designed primarily for children under 14, and the company does not intentionally collect personal data from children under 14 without appropriate legal basis.
3. Retention period
- Member profile information: until account deletion.
- Member settings, favorites, recents, and saved items: until account deletion or until the user deletes the item directly.
- Browser-side local settings and convenience storage: until deleted by the user through browser storage controls.
- Fortune-style report inputs: not retained permanently on the server by default; browser-side convenience storage remains until deleted by the user or overwritten.
- Tojeong report browser storage: off by default. When enabled by the user, the birth-date form is stored in localStorage with a 30-day expiry and can be cleared from the tool screen.
- Temporary uploaded files and generated files: deleted after download, page exit cleanup, or automatic cleanup. Residual temporary files are cleaned up within up to 10 minutes.
- If the law requires retention, the company retains the relevant information for the required statutory period.
4. Destruction procedures and methods
- Electronic files are deleted using methods that reduce the likelihood of recovery or reuse.
- Database records are deleted through queries, overwrite procedures, or equivalent measures.
- Paper output, if any, is destroyed by shredding or incineration.
5. Provision to third parties
The company does not provide personal data to third parties in principle. Exceptions apply only where the user has consented, the law requires it, or urgent protection of life, body, or property is necessary under applicable law.
6. Entrustment of processing
The service currently does not separately disclose a dedicated outsourced processor that handles the member database on behalf of the company. However, external services such as Google and Kakao may process information within the scope of their own services when their login, analytics, or advertising products are used.
7. Overseas transfer of personal data
| Item | Description |
|---|---|
| Legal basis | Article 28-8(1)3 of the Personal Information Protection Act, where processing is necessary to provide a user-requested login function |
| Recipient | Google LLC |
| Country | United States and other countries where Google services operate |
| Transferred items | Google account identifier (sub), email address, name, profile image, login request/response information |
| Timing and method | Transferred through encrypted network communication when the user chooses Google sign-in |
| Purpose | Authentication, account linking, and sign-in service provision |
| Retention and use period | Until account deletion or the end of the relevant linked service relationship |
| How to refuse and effect | Users may choose not to use Google sign-in. Public tools remain available, but member-only storage features may be unavailable. |
8. Security measures
- Minimum collection and least-privilege processing
- Separated management of secrets and major configuration values
- Encrypted transmission such as HTTPS
- No raw Tojeong birth date logging in the calculation or optional interpretation routes by design
- Account deletion and item deletion controls
- Automatic cleanup of temporary upload data
- Encrypted at-rest temporary storage for certain features, including the image conversion workflow
9. Automatic collection devices such as cookies and how to refuse them
The service may use cookies and browser storage such as localStorage for sign-in state, locale, theme, preferences, recent tools, favorites, and tool convenience features.
The Tojeong report stores birth-date input in browser storage only when the user explicitly enables the 30-day save option.
Users may block or delete cookies through browser settings and may clear browser storage through site-data deletion features. Some features, such as sign-in persistence or saved preferences, may not work properly when such storage is blocked.
- Chrome: Settings > Privacy and security > Third-party cookies / Clear browsing data
- Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
- Private or incognito browsing may limit some storage behavior
10. Behavioral information collected by third parties
| Device or tag | Type | Collector | Items | Purpose | How to refuse |
|---|---|---|---|---|---|
| Google Tag Manager / Google tag / Google Analytics | JavaScript, cookies | Google LLC | Visited pages, URL, referrer, browser and device information, IP address, event logs, visit history | Website analytics, service improvement, tag operation, and performance measurement | Block cookies in the browser, clear site data, or use browser tracking protection settings |
| Google AdSense | JavaScript, cookies, advertising technologies | Google LLC | Visited pages, browser and device information, IP address, ad impressions, clicks, and related measurement data | Ad delivery, ad performance measurement, and Google ad optimization | Block cookies in the browser, clear site data, or use Google ad settings and browser tracking protection settings |
| Kakao AdFit | JavaScript, cookies, advertising technologies | Kakao Corp. | Visit and usage history, browser and device information, IP address, ad impression and click information | Ad delivery, ad measurement, and ad optimization under Kakao policies | Block cookies in the browser, clear site data, or use Kakao ad controls at https://info.ds.kakao.com/optout.do |
11. Rights of users and how to exercise them
Requests may be made through account settings, browser storage deletion, or the contact point below. The company will respond without undue delay unless a legal exception applies.
- Request access to personal data
- Request correction or deletion
- Request suspension of processing where legally available
- Withdraw consent where applicable
- Request account deletion and removal of saved member data
12. Uploaded files and generated outputs
- Uploaded files and generated outputs are handled temporarily to complete the requested image or document conversion task.
- Cleanup is attempted after page exit, explicit cleanup requests, and download completion.
- Residual temporary files are automatically cleaned up within up to 10 minutes.
- Some upload workflows, including image conversion, apply encryption while files are temporarily stored.
- Users should avoid uploading files that contain unnecessary sensitive or high-risk personal data.
13. Privacy officer and contact point
- Controller / operator: [Replace with legal name or business name]
- Privacy contact email: [Replace with a working email address]
- Support page or contact form: [Replace with actual contact URL if available]
14. Methods of remedy for infringement of rights
- KISA Privacy 침해신고센터: https://privacy.kisa.or.kr
- Personal Information Protection Commission / privacy portal: https://www.privacy.go.kr
- Korean National Police Agency cybercrime reporting: https://ecrm.police.go.kr
15. Changes to this privacy policy
The company may revise this policy as the service, integrations, analytics, advertising setup, or applicable law changes. Material changes will be posted on this page before they take effect where required.