The Fuk (the "Service") values users' personal information and complies with applicable privacy laws, including the Personal Information Protection Act of Korea. This Policy describes the information the Service collects, the purposes of processing, retention periods, third-party disclosure, and users' rights.
1. Personal Information We Collect
| Category | Information | When collected |
|---|---|---|
| Registration (email) | Email address, password (one-way hash), country, display name, and handle (@id) | At registration |
| Registration (Google) | Google account email and optional profile image | During OAuth authentication |
| Creating content | Author identifier, content, attached images, and creation time | When creating a post or comment |
| Partial IP for anonymous content | First two octets of an IPv4 address (for example, 184.171) or part of an IPv6 address, used for display and to identify the same author | When creating an anonymous post or comment |
| Collected automatically | Connection IP, cookies, browser type, device information, and access time | While using the Service |
184.171) appear on the content. The full IP address is not disclosed publicly. The same identifier is used only when the same author comments again on the same post.
2. Purposes of Processing
- Registration, identity verification, and account management
- Providing core features such as posts, comments, and reactions
- Identifying authors of anonymous content using the first two IP octets
- Preventing misuse and malicious content and handling reports
- Analyzing access and improving the Service
3. Retention and Use Periods
- Account information: Deleted without delay when the member withdraws, unless applicable law requires retention for a specified period
- Posts and comments: The author identifier is anonymized or deleted when the member withdraws. Content quoted or answered in another user's post may remain in anonymized form to preserve the Service record
- Access logs and IP information: Up to 3 months under Korea's Protection of Communications Secrets Act
4. Third-Party Disclosure and Processing Providers
As a rule, the Service does not provide users' personal information to third parties. The Service does, however, engage the following providers for certain processing activities.
| Provider | Services | Processing location |
|---|---|---|
| Supabase Inc. | Database hosting and user authentication | United States |
| Cloudflare, Inc. | CDN, DDoS protection, and serverless function execution | United States and other global locations |
| Google LLC | OAuth login | United States |
Personal information may be provided to investigative or other authorities only when requested through lawful procedures under applicable law.
5. Cookies and Local Storage
The Service uses cookies and local storage to maintain login sessions and save preferences.
6. User Rights
- Users may request access to, correction or deletion of, or suspension of processing of their personal information
- Members may delete their account directly through [Profile → Settings]
- Other requests may be submitted through the contact information at the bottom of this Policy
7. Security Measures
- One-way password hashing
- HTTPS communications
- Limited administrator access
- Logging of access to key systems
8. Privacy Contact
For questions about personal information, please use the Contact page.
9. Changes to This Policy
Changes to this Policy will be announced at least 7 days before they take effect, or 30 days before they take effect if they are unfavorable to users.