Privacy Policy

Effective October 7, 2026

유령일기(ghostdiary) (the “Company”) complies with the Personal Information Protection Act of the Republic of Korea and related laws. We publish this Privacy Policy to protect your personal information and to handle related concerns promptly. This English version is a translation for convenience; if it differs from the Korean version, the Korean version prevails.

1. Purposes of processing

We process personal information only for the purposes below. If a purpose changes, we will take the steps required by law.

  • Responding to inquiries: receiving email inquiries, checking facts, replying and reporting results
  • Operating and securing the website: keeping the website available and preventing abnormal access or misuse

2. Information we process and how we collect it

We do not collect personal information through sign-up or forms on this website. We process personal information only in the following cases.

  • When you email us: your email address, the content of your inquiry, and anything you choose to include (such as your name, organization or phone number)
  • Automatically when you visit: IP address, browser and device information, and time of access

3. Retention period

  • Inquiries: 3 years after the inquiry is resolved
  • Website access logs: according to the retention policy of our hosting provider (Cloudflare)

Where another law requires us to keep information longer, we keep it for the period that law specifies.

4. Provision to third parties

We process personal information only within the purposes in Section 1 and do not provide it to third parties, except with your consent or where permitted by law under Articles 17 and 18 of the Personal Information Protection Act.

5. Outsourcing and overseas transfer

We outsource the following work. Because these providers’ servers are located outside Korea, personal information is transferred overseas.

Google LLC

Work
Sending, receiving and storing business email (Google Workspace); delivering website fonts (Google Fonts)
Countries
United States and other countries where Google operates data centers
When and how
Transmitted over the network when email is sent or received and when you visit the website
Information
Email address, inquiry content and details included in emails; IP address and browser information of website visitors
Retention
Until the period in Section 3 ends or the outsourcing contract ends
Contact
See the Google Privacy Policy

Cloudflare, Inc.

Work
Website hosting, content delivery and security
Countries
United States and other countries where Cloudflare operates data centers
When and how
Transmitted over the network when you visit the website
Information
IP address, browser and device information, and time of access
Retention
According to Cloudflare’s retention policy
Contact
[email protected] (Cloudflare Privacy Policy)

You may refuse the overseas transfer of your personal information. To do so, email [email protected] and we will promptly delete your emails and inquiry records. Because email support and the website itself rely on the outsourcing above, refusing may limit our ability to answer inquiries and your use of the website.

6. Destruction

We destroy personal information without delay once the retention period ends or the purpose has been fulfilled.

  • Procedure: information to be destroyed is identified and destroyed with the approval of the privacy officer.
  • Method: electronic files are permanently deleted so they cannot be recovered; paper documents are shredded or incinerated.

7. Your rights and how to exercise them

  • You may at any time request access to, correction or deletion of, or suspension of processing of your personal information.
  • Send your request by email to the privacy officer in Section 10. We will act on it and let you know the result within 10 days of receiving it.
  • You may exercise these rights through a legal representative or an authorized agent, who must submit a power of attorney.
  • Deletion cannot be requested where another law requires the information to be collected, and a request to suspend processing may be refused as permitted by law.

8. Security measures

  • Administrative: keeping the number of people who handle personal information to a minimum
  • Technical: two-step verification on business accounts, access control, and encryption in transit (HTTPS)

9. Cookies

We do not use cookies to identify, track or advertise to visitors. Our hosting provider (Cloudflare) may set strictly necessary cookies to block malicious traffic. You can refuse cookies in your browser settings, which may limit some use of the website.

10. Privacy officer

The following person is responsible for personal information processing and for handling related complaints and remedies.

Name
Yoonjik Cho
Title
Representative
Contact
[email protected]

11. Remedies

To seek a remedy for an infringement of your personal information, you may contact the following Korean agencies for dispute resolution or advice.

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
  • Korean National Police Agency: 182 (ecrm.police.go.kr)

12. Changes to this policy

This Privacy Policy applies from October 7, 2026. If we add, remove or change anything, we will post a notice on the website at least 7 days before the change takes effect.