Privacy Policy
Effective: November 1, 2026
This English version is provided for convenience only. If it differs from the Korean version, the Korean version is legally binding.
Raon Community (the "Operator") complies with the Korean Personal Information Protection Act and related laws, and sets out this Privacy Policy to process users' personal information safely.
1. Purposes of processing personal information
The Operator processes personal information only for the following purposes and takes the necessary steps, such as asking for consent in advance, if the purposes change.
① Member management: identifying members, signing in, confirming the intent to join, confirming age (14 or over), sending notices, resetting passwords
② Providing the Service: boards, comments and votes, calculating fortune and saju reading results
③ Running the Service safely: preventing abuse, handling reports, restricting use, responding to disputes
④ Advertising and statistics: usage statistics to improve the Service, displaying advertisements
2. Personal information we process
The Operator does not collect unique identifiers such as resident registration numbers, real names or mobile phone numbers, or any sensitive information.
| Category | Items | How collected |
|---|---|---|
| Sign-up (required) | Username, nickname, password (stored encrypted), email address, date and time of consent to the Terms and privacy | Sign-up page |
| Generated while using the Service | IP address, access time, usage records, report and sanction records | Generated automatically while you use the Service |
| Automatic collection | Cookies, browser type, operating system, device type | Collected automatically through your browser |
| Saju reading (optional) | Date of birth, time of birth, solar or lunar calendar, gender | Used only for the calculation as you enter it; not stored |
3. Processing and retention periods
Where the law requires longer retention, we keep the information for that period.
| Item | Retention period |
|---|---|
| Member information | Until you withdraw (deleted immediately on withdrawal) |
| Access logs (IP, access time, etc.) | 3 months |
| Report and sanction records | 1 year after the case is closed (to prevent repeat abuse and handle disputes) |
| Saju reading input | Not stored |
4. Destruction of personal information
① Personal information is destroyed without delay once its retention period ends or its purpose has been achieved.
② Electronic files are deleted in a way that cannot be recovered; paper documents are shredded or incinerated.
③ Posts written by a member are not deleted on withdrawal; the author information is erased and they are shown as by a 'Former member'.
5. Provision to third parties
The Operator does not provide users' personal information to third parties, except when the user has consented or when investigative agencies request it through lawful procedures under the law.
6. Outsourcing of processing
The Operator outsources personal information processing as follows to provide the Service.
| Processor | Outsourced work |
|---|---|
| Supabase Inc. | Member authentication, database and image storage |
| Vercel Inc. | Web hosting and visit statistics (cookie-free Web Analytics) |
| Cloudflare, Inc. | Network security and content delivery |
| Anthropic, PBC | Automated post review (harmful content classification) and summaries |
| Google LLC | Advertising (AdSense) and visit statistics |
| Email delivery provider (to be selected) | Sending sign-up verification and password reset emails |
7. International transfers
The Operator transfers personal information abroad as follows to carry out the outsourced work. Transfers take place over the network when you use the Service. If you do not want your information transferred abroad, you can refuse by withdrawing your membership, but you will then not be able to use the Service.
| Recipient (contact) | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| Supabase Inc. (privacy@supabase.io) | Stored in the Republic of Korea (Seoul region); managed from the United States | Member information, posts, images | Authentication and storage | Until you withdraw or the outsourcing contract ends |
| Vercel Inc. (privacy@vercel.com) | United States and others | IP address, request logs | Web hosting | Until the outsourcing contract ends |
| Cloudflare, Inc. | Data centers worldwide | IP address, request logs | Security and delivery | Until the outsourcing contract ends |
| Anthropic, PBC | United States | Content of posts and comments | Harmful content classification, summaries | As set by the provider's policy after processing |
| Google LLC | United States | Cookies, device information, visit history | Advertising, statistics | As set by Google's policy |
8. Your rights and how to exercise them
① You may at any time ask to access, correct, delete or stop the processing of your personal information.
② You can change your nickname or withdraw yourself from the 'My info' page; other requests can be sent by email to the privacy officer and are handled without delay.
③ You may make requests through a representative, in which case a document proving the delegation is required.
9. Children under 14
The Operator does not accept sign-ups from children under 14 and does not collect their personal information.
10. Security measures
① Administrative: keeping the number of people handling personal information to a minimum, separating administrator privileges
② Technical: one-way encrypted password storage, row-level access control in the database, encrypted connections end to end (HTTPS), keeping access logs
③ Physical: using security-certified cloud data centers
11. Cookies
① The Operator uses cookies to keep you signed in and to collect visit statistics.
② You can refuse or delete cookies in your browser settings. If you refuse sign-in cookies, you cannot use features that require signing in.
12. Behavioral information and personalized ads
① Google AdSense ads may appear in the Service, and Google may use cookies to collect behavioral information such as your visit history and show ads matched to your interests.
② You can turn off personalized ads in Google Ad Settings (adssettings.google.com) or block cookies in your browser.
③ The Operator does not target personalized ads at users known to be under 14.
13. Privacy officer
Name: Raon Operator · Position: Operator · Email: poix11234@gmail.com
Questions, complaints and requests for remedies about personal information can be sent to the privacy officer, who will respond and handle them without delay.
14. Remedies for infringement
To seek remedies for an infringement of personal information, you can apply for dispute resolution or counseling at the following Korean agencies.
Personal Information Dispute Mediation Committee 1833-6972 (www.kopico.go.kr) · Personal Information Infringement Report Center 118 (privacy.kisa.or.kr) · Supreme Prosecutors' Office 1301 (www.spo.go.kr) · Korean National Police Agency 182 (ecrm.police.go.kr)
15. Changes to this Privacy Policy
This Privacy Policy applies from November 1, 2026. Any additions, deletions or changes are announced on the notice board at least 7 days before they take effect.