Website Privacy Policy

This policy applies to the website of JUNIXION ("we", "us") at www.junixion.com. How the Nalbom app handles personal information is covered by the Nalbom Privacy Policy. This English version is a translation of the Korean version; if the two differ, the Korean version applies. The invite and D-day web link pages the Nalbom app sends (www.junixion.com/nalbom/c and /nalbom/d, and their English and Japanese versions under /nalbom/en/… and /nalbom/ja/…) are also covered by the Nalbom Privacy Policy.

1. Information we collect

• When you visit the site: access logs (IP address, time of access, the address requested, and browser information), recorded automatically by our hosting provider (Vercel) to serve the site and protect it from outages and attacks.
• When you email us: the email address and content you write in your message. It is not stored on the site's server; it reaches our mailbox through your own email app.
• Site performance metrics (Vercel Speed Insights, only while the site is open to everyone): the page address (with anything after ? or # removed), load-time values, network type, browser, operating system and device type, and country (estimated from the IP address). They use no cookies and are not used for advertising.
• Site visit statistics (Vercel Web Analytics, from November 14, 2026, only while the site is open to everyone): the page address viewed (with anything after ? or # removed), the referring site, country and region (estimated from the IP address), browser, operating system and device type, and the time. They use no cookies, tell repeat visits apart only with a value discarded after 24 hours, are viewed only as totals that can't identify anyone, and are not used for advertising. Nalbom invite and D-day link pages and the sign-in notice page send none.
• While parts of the site are private and a collaborator signs in with a password: we place an access cookie that only records that you signed in (see section 5). To briefly block too many wrong passwords, we keep the IP address and count of failed attempts only in server memory and delete them after 10 minutes. They also disappear sooner if the server restarts, and we never save or download them.

We don't process any personal information on the basis of consent. All of the above is processed without consent on these legal bases under Korea's Personal Information Protection Act:

• Inquiry emails: needed to answer your request (Article 15(1)(4))
• Access logs, the access cookie, and sign-in attempt IPs: needed to provide and secure the site, where our legitimate interest clearly outweighs your rights (Article 15(1)(4) and (6))
• Performance metrics and visit statistics: our legitimate interest in improving the site (Article 15(1)(6))

2. How we use it

To answer your questions, to serve the site and respond to outages and attacks, to check the site's performance and visit statistics and improve the site, and, while parts of the site are private, to confirm access and prevent password guessing. We do not use it for anything else.

3. Retention and deletion

• Launch notification sign-ups we received earlier were all destroyed on October 16, 2026, when we stopped taking them.
• If you ask us to delete your information, we delete it without delay (within 10 days of your request).
• Inquiry emails are destroyed after we have answered them. However, under Korea's Act on Consumer Protection in Electronic Commerce, refund (withdrawal) requests for app purchases are kept for 5 years and other consumer complaints or disputes for 3 years, then destroyed.
• Access logs, performance metrics, and visit statistics are deleted automatically by Vercel at the end of the retention period in section 6.
• When a retention period ends or the purpose is fulfilled, we destroy the information without delay (within 5 days). Electronic files are deleted so they cannot be recovered, and we keep no paper records.

4. Sharing and service providers

We do not sell or give your personal information to third parties. We entrust processing to the following company to run the site.

• Vercel Inc. — website hosting, access logs, performance metrics, and visit statistics

5. Cookies and browser storage, and how to refuse them

• junixion_access (cookie): records that a collaborator signed in during the private period. It contains nothing that identifies you, such as a name or email, and is removed when you sign out or close the browser (it may remain if your browser restores previous tabs).
• theme (browser storage): the display mode you chose (light or dark). It is removed when you choose the device setting.
• langHintClosed (browser storage): records that you closed the bar suggesting another language.
• Browser storage values are never sent to our server, and the cookie is used only to confirm sign-in. We use no advertising or tracking cookies.
• How to refuse: you can block or delete cookies and site data in your browser settings (Chrome: Settings › Privacy and security › Third-party cookies / Site data; Safari: Settings › Privacy; Edge: Settings › Cookies and site permissions).
• If you block cookies, collaborators can't sign in during the private period. If you block browser storage, the site just won't remember your display mode and language bar; everything else works.

6. Overseas transfer of personal information

• Legal basis: entrusted processing and storage needed to provide the site (the service under our Terms of Use), disclosed in this policy (Korea's Personal Information Protection Act, Article 28-8(1)(3)(a))
• Recipient: Vercel Inc.
• Recipient's privacy contact: privacy@vercel.com
• Countries: the United States and other countries where Vercel operates (the site's server runs in Seoul, but access logs, performance metrics, and visit statistics are stored and managed on Vercel's systems abroad, and Vercel staff may access them to run its services)
• Items: access logs (IP address, time of access, the address requested, and browser information), performance metrics, and visit statistics
• When and how: when you visit the site, sent over an encrypted connection (HTTPS)
• Purpose and retention: to host the site and check its performance and visit statistics. The data is deleted automatically after the retention period set by the Vercel plan we use. We don't extend that period or download and keep the data. Ask us and we'll tell you the current period.
• Your right to refuse and its effect: this processing is necessary to provide the site, so it happens when you visit. If you do not want it, you can stop using the site; you can still email us without it.

7. Your rights and how to use them

You may ask at any time to access, correct, or delete your personal information, or to stop its processing. Email us at the contact below and we will handle your request without delay after checking it. To confirm it is you, please send the request from the email address you used with us. A legal representative or someone you authorize can also exercise these rights by sending a letter of authorization.

For advice or to report an infringement, you can contact the Korean Personal Information Infringement Report Center (개인정보침해신고센터, privacy.kisa.or.kr, 118 from within Korea), the Personal Information Dispute Mediation Committee (개인정보분쟁조정위원회, kopico.go.kr, 1833-6972 from within Korea), the Supreme Prosecutors' Office (대검찰청, www.spo.go.kr, 1301 from within Korea), or the Korean National Police Agency (경찰청, ecrm.police.go.kr, 182 from within Korea).

8. Children under 14

We do not knowingly collect personal information from children under 14 through the site. If you are under 14, please contact us together with a parent or guardian.

9. How we keep it safe

• Encryption in transit (HTTPS)
• Only one person, our representative, can access personal information
• Service keys are kept only on the server and never exposed to the browser
• If a personal information breach occurs, we will notify you without delay and take the necessary steps as required by law.

10. Privacy officer and contact

• Name: Junyeong Song
• Title: Representative (Privacy Officer)
• Email: privacy@junixion.com

Send any privacy questions, complaints, or requests for relief to the contact above and we will reply promptly.

11. Users in Japan

Under Japan's Act on the Protection of Personal Information: we (JUNIXION, representative Junyeong Song, 201, 159 Jayang-ro, Gwangjin-gu, Seoul, Republic of Korea) entrust the access logs, performance metrics, and visit statistics in section 6 to Vercel Inc. in the United States under a data processing agreement that requires measures equivalent to those under that Act. On request, we will tell you about those measures and how we check them. We handle personal information in the Republic of Korea and our provider does so in the United States; we take the measures in section 9 after checking each country's data protection system. You can request disclosure, correction, deletion, and the like by email to the contact in section 10, free of charge.

12. Changes to this policy

When this policy changes, we record the effective date and the change history on this page.

If we add items we collect or make a change that works against you, we will post a notice on the site before that processing begins. If advance notice isn't possible, for example because of a change in the law or a security incident, we will post it as soon as we make the change.

Effective date of this version: November 14, 2026 (first effective September 28, 2026)

Change history

• 2026-09-28 — First version (using the site and launch notification sign-ups)
• 2026-09-29 — Privacy officer's email changed to our company domain address (privacy@junixion.com)
• 2026-10-03 — Scope: a pointer to the Nalbom app privacy policy added (no change to how information is handled)
• 2026-10-07 — The name of an app in preparation replaced with a general description (no change to how information is handled)
• 2026-10-16 — We stopped taking launch notification sign-ups and destroyed all sign-up information received; the related items collected, marketing consent, and service providers (Resend, Telegram) removed
• 2026-11-02 — Opened the site to everyone, so removed private-preview access requests and the access cookie, along with the related items collected, purpose, service provider, and overseas transfer (Supabase); no requests had been stored. English version published
• 2026-11-03 — Stopped using visit statistics (Vercel Web Analytics); site statistics now cover performance metrics (Speed Insights) only. Section 6: phone numbers for the Korean reporting bodies written as dialed from within Korea (118, 1833-6972)
• 2026-11-05 — While parts of the site are private again: the access cookie for collaborator sign-in and IP addresses kept in server memory for up to 10 minutes to limit sign-in attempts added; Sentry, which the website does not use, removed from service providers and overseas transfers; the Nalbom invite and D-day web link pages noted as covered by the Nalbom Privacy Policy, and Vercel's retention period made clearer
• 2026-11-05 — Scope: added the English and Japanese versions of the Nalbom web link pages (/nalbom/en/…, /nalbom/ja/…); no change to processing
• 2026-11-06 — Legal review: added the legal bases for processing without consent (Article 15), access logs (Vercel), cookies and browser storage and how to refuse them (new section 5), the legal basis, countries, and retention for overseas transfer, retention of refund (withdrawal) requests for 5 years and consumer-dispute inquiries for 3 years, destruction procedure, more remedy bodies and representatives, children under 14, a section for users in Japan, and how changes are announced with the effective date; corrected the performance-metrics items and made sign-in attempt IPs delete after 10 minutes
• 2026-11-13 — Sections 1, 2, 3, 4, and 6: added site visit statistics (Vercel Web Analytics) — no cookies; page viewed, referring site, country, and device type seen only as totals; Nalbom link and sign-in pages excluded; collected from November 14, 2026 (announced before processing starts, as section 12 requires)