Privacy Policy

⚠️ This translation is provided for reference only. The Korean original is the legally binding version.

https://www.findlatlng.org/ (the "Website") processes personal data lawfully and manages it securely in accordance with the Personal Information Protection Act (PIPA) of Korea and other relevant laws, in order to protect the freedoms and rights of data subjects. Pursuant to Article 30 of PIPA, the Website hereby establishes and discloses the following Privacy Policy to inform data subjects of the procedures and standards for processing personal data and to enable prompt and effective handling of related grievances.

1. Purposes of Processing Personal Data

The Website processes personal data for the following purposes. The personal data being processed will not be used for any purpose other than those stated below, and any change in purpose will only occur with the data subject's prior consent.

1. Operation and management of the bulletin board
- To block and manage posts that are obscene, hateful, commercial, or unlawful.

2. Processing and Retention Period of Personal Data

In principle, personal data is destroyed without delay once the purpose of collection and use has been achieved. However, where retention is required by applicable laws, the data is retained for the period prescribed.

3. Items of Personal Data Processed

The items of personal data processed are as follows.

- IP address

4. Provision of Personal Data to Third Parties

The Website does not, in principle, provide users' personal data to external parties, except in the following cases:

- Where the user has given prior consent
- Where required by law, or where an investigative authority makes a lawful request in accordance with prescribed procedures for investigative purposes

5. Entrustment of Personal Data Processing

1. The Website uses third-party services to analyze service-usage statistics and improve user experience, and entrusts personal data processing to the parties listed below.

2. The Website permits the advertising service providers listed below to collect online behavioral information through analytics tools embedded in the service, for the purpose of delivering personalized advertising to users.

Trustee	Entrusted Tasks	Information Entrusted	Retention and Use Period
Google LLC	Visitor traffic analysis, statistics, and ad personalization (Google Signals data)	IP address, visit time, browser and device information, advertising identifiers, etc.	Per Google Analytics data retention policy
Microsoft Corporation	User behavior analysis (heatmaps, session replay, click patterns)	IP address, visit time, behavioral data such as clicks/scroll/mouse movement (personal identifiers masked)	Per Microsoft Clarity data retention policy (default 1 year)

6. Cross-Border Transfer of Personal Data

1. The Website entrusts part of its personal data processing to the following overseas providers.

2. Where overseas cloud services (e.g., Pipedrive) are used for business operations, the Website thoroughly reviews the provider's information security and privacy compliance posture before adoption, and the cloud provider cannot access customer personal data of the Website.

Recipient	Destination Country	Privacy Contact	Transfer Timing	Transfer Method	Personal Data Transferred	Purpose of Use	Retention and Use Period
Google LLC	United States	googlekrsupport@google.com	Upon service use	Network transfer	IP address, visit time, browser and device information, advertising identifiers	Visitor traffic analysis, statistics, and ad personalization	Per Google Analytics data retention policy
Microsoft Corporation	United States	privacy@microsoft.com	Upon service use	Network transfer	IP address, visit time, behavioral data such as clicks/scroll/mouse movement	User behavior analysis (heatmaps, session replay)	Per Microsoft Clarity data retention policy

7. Procedures and Methods for Destruction of Personal Data

The procedures and methods for destroying personal data are as follows.

- Destruction procedure: Once the purpose has been achieved, the information entered by users is moved to a separate database (or to a separate physical file in the case of paper) and stored for a defined period in accordance with internal policies and relevant laws, after which it is destroyed.
- Destruction method: Information in electronic file form is deleted using technical methods that prevent the records from being reproduced.

8. Rights and Obligations of Users and Legal Representatives, and How to Exercise Them

Users may at any time view or modify their registered personal data, and may also request its deletion.

9. Measures to Ensure the Security of Personal Data

Measures taken to ensure the security of personal data are as follows.

- Administrative measures: Establishing and implementing an internal management plan
- Technical measures: Access control for personal data, encryption of unique identifiers, installation of security software, etc.
- Physical measures: Access control to locations where personal data is stored, use of locks, etc.

10. Installation, Operation, and Refusal of Automatic Personal Data Collection Devices

The Website operates "cookies," "Google Analytics (including Google Signals data collection)," "Microsoft Clarity," and "Google AdSense," which periodically store and retrieve data subjects' information. For ad personalization, Google Signals data (anonymous aggregated data such as age, gender, and interests) may be collected and used.

1. Purpose of cookie operation
- Cookies are operated to understand the data subject's website visits, usage patterns, and audience scale, and to provide optimized information to data subjects. The Website may only use information collected via "Google Analytics" and "Microsoft Clarity" to improve the site. The Website does not combine information collected through these tools with personally identifiable information obtained through other channels. "Google Analytics" installs persistent cookies in the web browser to identify users, but those cookies are used only by Google. "Microsoft Clarity" installs cookies for behavior analytics (clicks, scroll, mouse movement, etc.) and session replay video; input field text is automatically masked, and the data is used only by Microsoft. With Google Signals enabled, anonymous aggregated data (age range, gender, interests) may be processed for ad personalization. The scope of Google's use or disclosure of information collected via "Google Analytics" is limited by the Google Analytics Terms of Service and Google's Privacy Policy. The scope of Microsoft's use or disclosure of information collected via "Clarity" is limited by the Microsoft Clarity Terms of Use and Microsoft's Privacy Statement.
- How to opt out of Google Signals: Data subjects can disable ad personalization in their Google Account at "Ad personalization settings" (https://myadcenter.google.com/).
- How to opt out of Microsoft Clarity: Enable your browser's tracking-prevention mode, or opt out via the privacy settings of your Microsoft Account (https://account.microsoft.com/privacy).

2. How to set, check, or refuse cookies

Data subjects have the right to choose whether cookies are installed.
By configuring options in your web browser, you may allow all cookies, be prompted before each cookie is stored, or refuse all cookies. However, if you refuse cookie installation, you may experience inconvenience while using the service.
- How to configure cookies

Browser	How to configure
Chrome	Top right of browser > Customize and control > Settings > Privacy and security > Clear browsing data
Safari	Settings > Safari > Clear History and Website Data
Firefox	Top right of browser > Settings > Privacy & Security > Cookies and Site Data > Clear Data > select Cookies and Site Data & Cached Web Content > Clear
Naver Whale	Top right of browser > three-dot icon > Settings > Privacy > Clear browsing data > Clear data
Microsoft Edge	Top right of browser > three-dot icon > Settings > Privacy & Services > Clear browsing data > choose what to clear > Clear now

If you choose to refuse cookie storage, you may experience inconvenience using the service (e.g., features requiring login may not work).
To opt out of web analytics, install the Google Analytics Opt-out Add-on (https://tools.google.com/dlpage/gaoptout).

11. Privacy Officer

1. The Website designates the following Privacy Officer to take overall responsibility for matters concerning the processing of personal data, and to handle complaints and remedies for data subjects in connection with such processing.
- ▶ Privacy Officer
  - Email : sungboklove@gmail.com
2. Users may contact the Privacy Officer with any questions, complaints, or requests for remedy related to personal data protection that arise while using the Website's services. The Website will respond to and handle data subjects' inquiries without delay.

12. Requests to Access Personal Data

Pursuant to Article 35 of the Personal Information Protection Act, data subjects may submit requests to access their personal data via the email address below. The Website will make every effort to respond promptly to such requests.

▶ Reception and handling of access requests
- Email : sungboklove@gmail.com

13. Remedies for Infringement of Rights

Data subjects may contact the following organizations for remedy, counseling, or other assistance regarding infringement of personal data rights.

<The organizations listed below are independent of the Website. Please contact them if you are not satisfied with the Website's own complaint handling and remedy outcomes, or if you need more detailed assistance.>

▶ Personal Information Infringement Report Center (operated by KISA)
- - Function: Reporting personal data infringements, counseling requests
- - Website: privacy.kisa.or.kr
- - Phone: 118 (no area code)
- - Address: 3F, 9 Jinheung-gil, Naju-si, Jeollanam-do, 58324, Republic of Korea
▶ Personal Information Dispute Mediation Committee
- - Function: Personal data dispute mediation, collective dispute mediation (civil resolution)
- - Website: www.kopico.go.kr
- - Phone: 1833-6972 (no area code)
- - Address: 4F, Government Complex Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171
▶ Supreme Prosecutors' Office Cybercrime Investigation Unit: 02-3480-3573 (www.spo.go.kr)
▶ National Police Agency Cyber Bureau: 182 (http://cyberbureau.police.go.kr)

14. Notice Obligations

This Privacy Policy was established on December 2, 2024. Where additions, deletions, or amendments to its contents are required due to changes in government policy or security technology, general changes will be announced at least 7 days in advance, and material changes will be announced at least 30 days in advance.

Date of revision (notice): May 1, 2026 (added entrustment to Microsoft Clarity, added use of Google Signals data, corrected the fact that Google Tag Manager is not used, removed AceCounter (NHN ACE) from entrusted processors due to discontinuation)

Date of announcement: December 2, 2024

Effective date: June 1, 2026 (after a 30-day prior notice period)