Privacy Policy

1. Purpose of Processing Personal Information

Pinfast (hereinafter referred to as "the Company") processes personal information for the following purposes. The personal information being processed shall not be used for any purposes other than the following, and if the purpose of use is changed, necessary measures such as obtaining separate consent will be implemented.

• Member registration and management
• Service provision and operation
• Identity verification and authentication
• Service improvement and statistical analysis
• Responding to customer inquiries and delivering notices

2. Personal Information Collected

The Company collects the following personal information:

Required Items

• Email address (collected through Google OAuth)
• Username
• Google profile information (name, etc.)
• PIN — stored only as a one-way hash; the original value is never retained
• Google OAuth authentication tokens (to maintain the login integration)

Automatically Collected Items

• Service usage records
• Access logs
• Cookie and session information
• IP address
• Visit statistics (page paths visited, referrer, browser and device type) — collected with a self-hosted analytics tool (Umami) operated by the Company, without cookies and without identifying individuals. Personal address (username) paths are not recorded.

3. Retention and Use Period of Personal Information

The Company processes and retains personal information within the retention and use period prescribed by law or agreed upon when collecting personal information from the data subject.

Member Information

• Retention period: Until membership withdrawal
• Deletion method: Complete deletion within 30 days after a withdrawal request is received

Node and File Data

• When the validity period set by the user (3 or 24 hours) expires, the node is moved to an archived state
• Archived data is permanently deleted 3 days after archiving
• Users may delete their nodes at any time, and deletion takes effect immediately

Retention by Law

• Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)

4. Consignment and Overseas Processing of Personal Information

The Company entrusts the following personal information processing tasks to provide the Service smoothly.

Personal information is stored on servers located in the Republic of Korea (AWS Seoul region) on cloud infrastructure operated by Supabase Inc. However, as the trustee is a foreign corporation (United States), personal information may be processed remotely from abroad in the course of service operation and incident response.

5. Destruction of Personal Information

The Company destroys personal information without delay when it becomes unnecessary, such as upon the expiration of the retention period or when the purpose of processing is achieved.

Destruction Procedure

• Information entered by users is stored for a certain period according to internal policies and other related laws after the purpose is achieved, and then destroyed.
• Such personal information shall not be used for any other purposes unless required by law.

Destruction Method

• Personal information in electronic file format is deleted using technical methods that make the records unrecoverable.

6. Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may exercise the following rights related to personal information protection against the Company at any time:

• Request for access to personal information
• Request for correction if there are errors
• Request for deletion
• Request for suspension of processing

Rights may be exercised by email (jiwoonesoft+contact@gmail.com), and the Company will take action without delay after identity verification. Membership withdrawal requests are also received at the same email address, and personal information is completely deleted within 30 days of receipt.

7. Installation, Operation, and Refusal of Automatic Collection Devices such as Cookies

The Company uses cookies and browser storage (localStorage) to provide personalized services, such as maintaining login sessions and saving language preferences.

• Purpose of use: maintaining login status, saving user preferences such as language
• How to refuse: users may refuse or delete the storage of cookies and site data through their web browser settings.
• If storage of cookies is refused, some services such as login may be limited.
• Visit statistics are collected without cookies or browser storage.

8. Measures to Ensure the Security of Personal Information

The Company is taking the following measures to ensure the security of personal information:

• Managerial measures: establishment and implementation of an internal management plan, regular inspections
• Technical measures: access control management for personal information processing systems, installation of access control systems, one-way encryption of authentication information (PIN), installation of security programs
• Physical measures: physical access control at the cloud provider’s data centers

9. Personal Information Protection Officer

The Company has designated a Personal Information Protection Officer who is responsible for the overall handling of personal information and for handling complaints from data subjects and providing remedies for damages related to the processing of personal information, as follows.

• Name: Jae Beom Kim
• Email: jiwoonesoft+contact@gmail.com

Data subjects may contact the Personal Information Protection Officer for all inquiries, complaints, and damage relief related to personal information protection that arise while using the Service.

10. Changes to the Privacy Policy

This Privacy Policy shall apply from the effective date, and if there are any additions, deletions, or amendments in accordance with laws and policies, notice will be given through announcements at least 7 days prior to the implementation of the changes.

11. Personal Information of Children Under 14 Years of Age

The Company does not collect personal information from children under the age of 14. Children under the age of 14 may not use the Service.