Hanpan

Privacy Policy

The operator of Hanpan (the "Service") establishes and discloses the following privacy policy to protect users' personal information under the Personal Information Protection Act of the Republic of Korea. This policy applies to Hanpan.

1. Collection items, purpose, and retention period

Purpose Items Retention Period
Service analytics and improvement Pseudonymized region, access history, page and feature usage, device and browser information, and masked screen interactions Google Analytics: 14 months; Microsoft Clarity: 30 days for standard playback and up to 9 months for heatmaps and labeled or favorited sessions

2. Provision of personal information to third parties

The service operator provides personal information to third parties as follows.

Google Analytics

Purpose Items Retention Period
Usage analytics Pseudonymized region, access history, content usage history, etc. 14 months

Microsoft Clarity

Purpose Items Retention Period
Usability analysis through user-flow measurement, heatmaps, and session playback Page and feature usage, device and browser information, and masked click, scroll, and other screen interactions 30 days for standard playback; up to 9 months for heatmaps and labeled or favorited sessions

Code editors, submitted source, logs, authentication and recovery inputs, profile identifiers, and private results are explicitly masked or excluded from session playback.

3. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

The service operator uses "cookies" for essential functions such as login and for service-usage analytics. Cookies are small text files sent to the user's browser by the server that operates the site.

Analytics cookies activate Google Analytics and Microsoft Clarity only after the user grants consent. Advertising personalization and custom per-user identifiers are not used.

Users can allow or reject analytics cookies through the cookie prompt shown on the first visit and through Cookie settings in the site footer. Stored cookies can also be deleted or blocked in browser settings.

Rejecting analytics cookies does not affect login or core service use. Blocking essential cookies in the browser can limit features that require login.

4. Destruction procedure and method

Personal information is destroyed without delay once the retention period has elapsed or the purpose has been achieved.

  • Paper: shredding/incineration
  • Electronic files: deletion using an irreversible method

5. Limitation on use and provision

The service operator does not use or provide personal information beyond the notified scope, except when required by law.

6. Rights of users and how to exercise them

Users may request access, correction, or deletion of personal information at any time. Requests can be made via email to the person in charge below.

7. Measures to secure personal information

The service operator takes technical and administrative measures such as encryption, access control, and security programs to protect personal information.

8. Privacy officer