- What we collect
- Your report (reason, details, good-faith confirmation, and an optional related link), your name and email (optional), and a value made irreversibly from the IP address you send from (we don't store the IP address itself; this value is deleted after a day and used only to prevent abuse of the form)
- Why
- To handle your report and tell you the outcome
- How long
- One year after we finish handling it
- Your choice
- You can report without a name or email. Without an email, though, we can't tell you the outcome.
- Where it's processed
- Your report, name and email are kept on our servers in Seoul, South Korea.
- Transfer outside Korea
- When you send the form, a request log (time of the request, IP address, requested address, and device and browser details) is sent over the network to Vercel (US — to serve the website, fix outages and keep it secure; deleted after up to 1 day). The form goes through our web server, so the request log at Supabase (US and Singapore — to run the servers, fix outages and keep them secure; deleted after 7 days) holds our web server's address, not yours. Every request to our servers creates this log, so the only way to avoid it is not to use the form. If you leave an email, the outcome email is sent through Google Workspace (US and elsewhere — to answer your report; deleted 1 year after we finish handling it). The recipients' contact details are in section 6 of the Privacy Policy.