Privacy
Last updated: 2026-04-27 · Version 3.0
1. Overview
bal.pe.kr ("Service") is a portfolio of free in-browser micro tools operated by an individual ("Operator"). This Privacy Policy explains what limited information we observe, what we do not collect, the third-party processors we rely on, and the rights granted to users under Korea’s Personal Information Protection Act (PIPA), the EU GDPR, and the California CCPA. By using the Service, you agree to this policy.
2. What we collect (and what we do NOT collect)
We do not collect personally identifiable information (PII) such as name, phone number, address, resident registration number, payment information, or any account credential. All calculation, document generation, judgment, and OCR tools run entirely in your browser; inputs never leave your device.
- Anonymous analytics events (page URL, referrer, screen size, country region) collected via Google Analytics 4 with IP anonymization enabled.
- Naver Webmaster aggregate visit counts (referer, search keyword) for SEO measurement.
- Browser-set language preference cookie (`bal_lang` = `ko` | `en`).
- Standard server access logs at the CDN layer (Amazon CloudFront): timestamp, IP, request URL, user-agent. Logs are retained 30 days for security and abuse investigation only.
3. Purpose & legal basis
| Item | Purpose | Legal basis (PIPA / GDPR) |
|---|---|---|
| Anonymous analytics | Measure visit count, popular tools, drop-off points | Legitimate interest (GDPR Art. 6(1)(f)) / consent for non-essential cookies |
| Language cookie | Remember KR / EN preference | Strictly necessary cookie |
| Server access logs | Security, abuse / DDoS investigation | Legitimate interest |
| AdSense ad serving | Display contextual / interest-based ads | Consent (collected via the AdSense / Funding Choices banner where required) |
4. Retention period
- Anonymous analytics events: Google Analytics 4 default of 14 months.
- Language cookie: 12 months from last update (rolling).
- CDN access logs: 30 days then auto-deleted by AWS lifecycle policy.
- Personal data: zero — no PII is ever written to a database controlled by the Operator.
5. Third-party processors (PIPA: 처리위탁)
The Service relies on the following third parties. Each processor handles data under its own published privacy commitments and the Operator has no ability to read raw user inputs.
| Processor | Role | Region |
|---|---|---|
| Google LLC — Google Analytics 4 | Anonymous web analytics | US / EU (depending on user) |
| Google LLC — AdSense | Ad delivery + measurement | US / global |
| Naver Cloud — Naver Webmaster | Aggregate visit measurement (KR) | Korea |
| Amazon Web Services (AWS) — S3, CloudFront, Route 53, ACM | Static hosting + CDN + TLS + DNS | US (control plane) / global PoP |
| GitHub Inc. | Source code hosting (no user data) | US |
6. Cookies
The Service uses the minimum cookies required to function and the analytics / advertising cookies described above. You can disable any of them in your browser at any time without losing site functionality (only the language preference must be set on each visit).
- `bal_lang` — language preference (KR / EN). First-party, 12 months.
- Google Analytics 4 cookies (`_ga`, `_ga_*`) — anonymous visit identifier. Up to 2 years.
- Google AdSense cookies (`__gads`, `__gpi`) — ad frequency capping and interest signaling, governed by AdSense policy.
7. Cross-border transfer
Because hosting is done on AWS CloudFront and analytics on Google, anonymized event data may be transferred to and processed in the United States and other regions where these providers operate. Standard Contractual Clauses (SCCs) and AWS / Google compliance certifications cover this transfer.
8. Your rights
Although bal.pe.kr does not collect PII, you still have the following rights under PIPA, GDPR, and CCPA:
- Right to access — request confirmation of any data tied to you (typically: none).
- Right to rectification / erasure — request correction or deletion of any data.
- Right to object — opt out of analytics (browser do-not-track + Google Analytics opt-out add-on) or personalized ads (https://adssettings.google.com).
- Right to portability — receive any data in a machine-readable form.
- Right to lodge a complaint — Korea PIPC (privacy.go.kr), EU national DPA, or CA Attorney General.
9. Children’s privacy
The Service is intended for users 14 or older (Korea) / 16 or older (EU) / 13 or older (US). Younger users should use the tools only with a parent or legal guardian. No knowingly collected data of children is processed.
10. Privacy officer
Operator: jkRaccoon (individual). Contact for any privacy request: comsamo84@gmail.com — typically responded to within 24–72 hours. The same address serves as the formal Privacy Officer / Data Protection Contact for PIPA, GDPR, and CCPA inquiries.
11. GDPR & CCPA addendum
EU / EEA / UK residents: the Operator acts as a data controller for the limited analytics data described above; the legal basis is legitimate interest with opt-out, or consent where required. California residents: bal.pe.kr does not "sell" personal information as defined by CCPA. To exercise GDPR or CCPA rights, contact the email in §10.
12. Third-party links & subdomains
Tool subdomains (e.g., pogalwage.bal.pe.kr) and external destinations (statutes, government portals, marketplace help centers) are linked throughout the Service. Their privacy practices are governed by their own policies; the Operator is not responsible for those.
13. Changes to this policy
This policy may be revised; the latest version is always at /privacy. Material changes (new third-party processor, new data category) will be announced on the homepage at least 7 days before they take effect.
14. Change log
- 2026-04-27 — v3.0 added: GDPR / CCPA addendum, processor table, retention table, formal privacy officer.
- 2025-10-12 — v2.0 added: bilingual KR / EN, AdSense cookie disclosure.
- 2024-04-01 — v1.0 initial publication.