Draft pending professional review — This English translation is provided for convenience. The Korean original is the governing version; if the two differ, the Korean version prevails.
Privacy Policy
"Pungdeung (Sky Lanterns)" is used without logging in and handles as little personally identifying information as possible.
1. What is processed
| Purpose | Data | Where and how long |
|---|---|---|
| Basic use | Anonymous token (random id and seed), number of lanterns floated today | Your browser (localStorage). The server keeps only the anonymous id in memory while you are connected |
| Wish text | The wish you write | Stored only on your device. Never sent to the server, and never part of any payment, order or item |
| Payment (when buying lantern styles) | Order number, item, amount, payment status, payment key (paymentKey), approval/cancellation time | Service database. Kept for 5 years as required by Korean e-commerce law, then deleted |
| Payment-method details | Card number, bank account, etc. | Not stored by the Service. Handled by the payment processor (Toss Payments) under its own policy |
| Purchase recovery | Hash of the recovery code | Service database. The code itself is not stored |
| Access logs | IP address | Not recorded. Server logs keep only error reasons, room names and counts |
| Usage statistics | Non-identifying totals only: daily visits (the browser only says "first visit today"), peak concurrent visitors, lanterns floated, shared-release participants, visits per country (country code only) | Service storage (daily totals). No IP, token or device data is stored alongside. Totals may be used in sponsorship materials |
2. Purposes
Continuity on the same device (nickname, lantern styles); payment, delivery and refunds of paid lantern styles; purchase recovery.
3. Third parties and processors
The order number and amount are passed to Toss Payments, Inc. to process payment; payment-method details are collected and processed directly by Toss Payments. The Service runs on Cloudflare infrastructure (Workers, Durable Objects, D1).
4. Your rights
Clearing your browser storage deletes your token and wish text. To access, correct or delete payment records, contact us via the ⓘ panel with your order number (records with a legal retention duty are deleted when that period ends).
5. Privacy officer
Shown in the ⓘ panel together with the business information.