This English version is a reference translation provided for your convenience. If there is any discrepancy between this translation and the Korean original, the Korean version prevails.
The Daelim University BlueSky Team (the “Team”) operates CleanBreath (the “Service”) and, in accordance with Article 30 of Korea’s Personal Information Protection Act, explains below how it processes users’ personal information.
The Service can be used without signing up or logging in. We do not collect names, phone numbers, email addresses or accounts (IDs and passwords).
1. Purposes of Processing Personal Information
The Team processes personal information only for the following purposes and will notify you in advance if these purposes change.
- Receiving feedback and improving the Service
- Receiving area registration requests, publishing them on the board, and adding them to the map based on voting results
- Checking to prevent duplicate votes on the same request from the same browser
- Reviewing access logs to keep the Service stable, investigate errors and prevent misuse
2. Personal Information Processed
| Category | Items | How it is collected |
|---|---|---|
| Information entered by users | Feedback: title, content, time submitted | Entered directly in the feedback form |
| Information entered by users | Area registration requests: address, building name, location coordinates (latitude and longitude), area type, area boundary coordinates, time registered | Entered directly on the area registration screen or selected on the map |
| Automatically collected information | Vote records: browser token (random value), the request voted on, vote value (Correct / Incorrect) | Sent when you vote on the board |
| Automatically collected information | Access logs: IP address, access time, User-Agent (browser and device information) | Automatically recorded by web servers and network equipment when you access the Service |
| Device storage information | localStorage: browser token, whether you have acknowledged the usage notice / IndexedDB: a copy of the map area data | Stored only on your device (nothing is sent to the server except the browser token sent when you vote) |
- We do not collect the current location of your device (such as GPS). The coordinates entered when registering an area are the location of the area being registered.
- We do not process sensitive information or unique identification information.
- The content of area registration requests and their vote counts are made public on the board for anyone to see.
- Please do not enter personal information such as your name or contact details in free-text fields such as the feedback title and content or the building name.
3. Processing and Retention Periods
| Item | Retention period |
|---|---|
| Feedback content | Destroyed one year after receipt |
| Area registration requests (address, coordinates, building name, area type, etc.) | If approved and added to the map, kept as public map data for as long as the Service operates; requests that are not approved are destroyed six months after registration |
| Vote records (browser token and vote value) | Destroyed together with the registration request when it is approved or destroyed |
| Web server access logs (IP address, access time, User-Agent) | Three months (with reference to the three-month log retention period in the Enforcement Decree of the Protection of Communications Secrets Act) |
| Device storage data (localStorage and IndexedDB) | Until you delete your browser data (stored only on your device) |
A registration request is added to the map automatically at 3 a.m. (Korea time) every day once it collects 20 or more “Correct” votes, at which point the request and its vote records are deleted.
4. Procedures and Methods for Destroying Personal Information
- Personal information is destroyed without delay once its retention period ends or its processing purpose has been achieved.
- Information in electronic form is deleted from databases and log files in a way that cannot be recovered.
- We do not process personal information in paper documents.
- Device storage data is erased immediately when you delete site data in your browser settings.
5. Provision of Personal Information to Third Parties
The Team does not provide personal information to third parties, except where permitted under Articles 17 and 18 of the Personal Information Protection Act, such as where specifically required by law.
6. Outsourcing and Overseas Transfer of Personal Information
Outsourcing of processing
To provide the Service, the Team entrusts personal information processing tasks to the following infrastructure providers.
| Processor | Outsourced task | Location |
|---|---|---|
| Vercel Inc. | Website hosting and delivery | United States |
| Cloudflare, Inc. | Network security and content delivery (CDN) | United States |
| Amazon Web Services | API server operation (cloud infrastructure) | Republic of Korea (Seoul Region) |
Map service
The map screen loads map scripts and images directly from NAVER Cloud Platform Maps, operated by NAVER Cloud. Because your browser connects to NAVER servers in this process, access information such as your IP address is passed to NAVER, and the coordinates of a location you select on the map on the area registration screen are sent to NAVER for address conversion. This information is processed in accordance with the NAVER privacy policy.
Overseas transfer
In accordance with Article 28-8 of the Personal Information Protection Act, we disclose the personal information transferred overseas as follows.
| Recipient | Destination country | Items transferred | When and how | Purpose | Retention period |
|---|---|---|---|---|---|
| Vercel Inc.Privacy policy | United States | Access logs (IP address, access time, User-Agent), page request information | Transmitted over the network when you use the Service | Providing the website | Until the purpose of outsourcing is achieved (access logs within the retention period in Section 3) |
| Cloudflare, Inc.Privacy policy | United States | Access logs (IP address, access time, User-Agent), API request data (feedback, area registration requests and votes) | Transmitted over the network when you use the Service | Network security and traffic delivery | Until the purpose of outsourcing is achieved (access logs within the retention period in Section 3) |
If you do not want your personal information transferred overseas, you can stop using the Service. Because the Service is provided only through the infrastructure above, you cannot use the Service if you refuse the transfer.
7. Rights and Obligations of Data Subjects and How to Exercise Them
- You may at any time request access to, correction or deletion of, or suspension of processing of your personal information. You may also make these requests through a legal representative or an authorized agent.
- Please send your request through GitHub Issues or the feedback feature on the home screen. GitHub Issues is visible to everyone, so do not include personal information there.
- Because there are no accounts, we have no way to verify your identity. Please include information that identifies the post in question (such as the request number in the board detail page address, or the feedback title and time submitted). We will process your request on that basis.
- You can delete the browser token and device storage data yourself in your browser settings.
- You must not enter other people’s personal information, and any problem caused by entering incorrect information is the responsibility of the user who entered it.
8. Installation, Operation and Refusal of Automatic Collection Tools
The Team does not use cookies or analytics tools for advertising or behavioral analysis. Instead, the following information is stored in your browser storage for Service features.
| Storage | Name | Content and purpose |
|---|---|---|
| localStorage | cleanbreath_client_token | A random browser token. Prevents duplicate votes on the same request. |
| localStorage | cleanbreath-disclaimer-accepted | Whether you have acknowledged the usage notice. Keeps the notice from appearing repeatedly. |
| IndexedDB | cleanbreath-cache | A copy of no-smoking zone, smoking area and apartment complex data, and when it was last updated. Used to load the map quickly. |
- The browser token is created the first time you vote and is sent to the server only when you vote. Other data is not sent to the server.
- You can delete site data or block storage in your browser settings. If you do, some features such as voting may not work properly.
9. Measures to Ensure the Security of Personal Information
- Minimal collection: we do not collect information that directly identifies individuals, and we process only the information the Service needs.
- Encryption in transit: communication with the Service and API is encrypted with HTTPS.
- Network security: Cloudflare network security services are applied in front of the API server.
10. Chief Privacy Officer
To oversee personal information processing and handle related inquiries and complaints, we have designated a chief privacy officer as follows.
- Chief privacy officer: Daelim University BlueSky Team
- Contact: GitHub Issues or the feedback feature on the home screen
11. Remedies for Infringement of Rights
If you need to report or seek advice about an infringement of your personal information, you can contact the organizations below (services are mainly in Korean).
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Personal Information Infringement Report Center: 118 (no area code), privacy.kisa.or.kr
- Supreme Prosecutors’ Office: 1301 (no area code), www.spo.go.kr
- Korean National Police Agency: 182 (no area code), ecrm.police.go.kr
12. Changes to This Privacy Policy
This privacy policy takes effect on . If it changes, we will announce the changes on this page at least seven days before they take effect.
Related: About CleanBreath
Effective date: