Privacy policy

Personal information collected now

The free public edition in operation has not opened login, sign-up or alert requests. It does not take names, email addresses or phone numbers; only the view mode and language settings are stored on your device. However, when you open a page, Cloudflare's visit statistics tool collects visit statistics such as the page path and browser type, and Cloudflare, which delivers the site, processes your IP address in transit. See “Visit statistics tool” and “Entrusted processing and transfer of personal data abroad” below.

Scope

This policy applies to this screen (desk) and the account features on it. The KakaoTalk AlimTalk briefing service is a separate surface that collects a mobile phone number as a required item and is covered by a separate policy. The two surfaces collect different items.

When KakaoTalk report sending opens, a phone number and separate consent to receive notifications will be requested. Before that, this policy will be revised to announce the items collected, the sending vendor (outsourced processing) and the retention period.

Items collected once login opens

• Email address — to identify the account. No password is kept.
• Email address — paid-plan waitlist registration (optional).
• Consent records — the item, whether consent was given, the document version and the time of change.
• Watchlist codes and saved screener conditions (optional).
• Alert rules — the name the user gave them, whether a daily briefing is on, and the delivery time (optional).
• Delivery channel settings, whether delivery is paused, and the time a cancellation was received (optional).

Items not collected

• Mobile phone number — because delivery is not open, the server refuses the “test delivery” field in settings without reading the request.
• Payment methods such as card numbers or bank accounts — payment is not open.
• Passwords or real-name identity verification data.
• Advertising identifiers or tracking tools for advertising.
• Recording or storing access IP addresses — the desk application server does not record or store them. Cloudflare, which delivers the site, does process them in transit (see “Entrusted processing and transfer of personal data abroad”).

Retention and destruction

At present this service does not store the items above in a persistent database. They are held only in server memory and disappear when the server restarts or a new version is deployed. No separate backup is made. If persistent storage is introduced, this policy will first be revised and announced, and only then applied.

Receiving a cancellation pauses delivery and records the time it was received; it does not delete the watchlist or the settings (so they can be restored when delivery resumes).

Visit statistics tool (Cloudflare Web Analytics)

On the live site, Cloudflare automatically inserts a visit statistics script (Cloudflare Web Analytics) in transit. The script is loaded from static.cloudflareinsights.com and sends its measurements to this site's /cdn-cgi/rum path. It is used to understand visit volume per page and page loading performance, and it collects the following:

• Path of the page viewed and the referrer (previous page address, without the query string)
• Browser, operating system and device type; country of access
• Page loading performance metrics (LCP, INP, CLS, TTFB) and the selectors of page elements related to performance

This tool does not use cookies, local storage or device fingerprinting. Visitors' IP addresses are processed at a nearby Cloudflare data center and then discarded.

Retention: raw measurements are kept for 7 days; after that, only aggregates of a roughly 10% sample remain. Aggregates can be viewed for up to 6 months (per Cloudflare's documentation).

How to refuse: if you block the script from static.cloudflareinsights.com in your browser (for example with a content-blocking extension), nothing is collected. Blocking it does not limit your use of the service.

Entrusted processing and transfer of personal data abroad

This site is delivered through Cloudflare (Cloudflare Tunnel). Visit statistics and site delivery are entrusted to Cloudflare, Inc. (entrusted processing), and in the process information is processed and stored outside Korea.

• Recipient (entrusted party): Cloudflare, Inc. — privacy contact [email protected]
• Countries: the United States and other countries where Cloudflare data centers are located. Storage is mainly in the United States and the European Economic Area (EEA); where processing happens in transit depends on the network path of each visit.
• When and how: sent over HTTPS each time you open a page.
• Items: those listed under “Visit statistics tool” above, and access IP addresses during site delivery.
• Purpose: understanding visit statistics and page loading performance; delivering the site.
• Retention and use period: for visit statistics, as described under “Retention” above. Processing during site delivery follows Cloudflare's customer Data Processing Addendum (DPA).
• How to refuse and its effect: visit statistics are not transferred if you block them as described above, and your use of the service is not limited. Processing during site delivery is the path by which this site is reached, so refusing it means the site cannot be opened.

Sharing with third parties

Personal data is not currently shared with third parties. The processing entrusted to Cloudflare is entrusted processing, not sharing with a third party, and is described above under “Entrusted processing and transfer of personal data abroad”. Delivery agents and payment agents are closed features, so no personal data is passed to them. This policy will be revised and announced in advance at the point those features open.

Information stored on the user's device

• Session cookie desk_session — a random identifier that contains no email address. Scripts cannot read it, and it is deleted on sign-out.
• Display density setting — stored only in the browser and not sent to the server.
• Language cookie (sentinel.lang) — holds only the chosen language code.

No cookies are used for advertising or analytics.

User rights

Consent items can be viewed and withdrawn item by item on the settings screen, and marketing consent is kept separate from consent to receive alerts. Watchlist entries, saved screeners and alert rules can be deleted directly on screen.

Security measures

• Accounts have no password, and the server stores no credentials.
• The session cookie blocks script access and restricts cross-site sending.
• Every input is validated on the server against format, an allow list and a length limit.
• Email addresses and mobile phone numbers are not left in the server logs.
• Delivery and payment credentials are not placed in this service's runtime environment.

Revision history

2026-10-09 · version 1.2 draft · discloses the visit statistics tool (Cloudflare Web Analytics) and the entrusted processing and transfer abroad to Cloudflare, and corrects the statement that no third-party analytics tool is used — not yet legally reviewed

2026-10-08 · version 1.1 draft · states what is collected now (nothing), the planned KakaoTalk report items and the language cookie — not yet legally reviewed

2026-08-22 · version 1.0 · established