Privacy Policy

This policy explains what personal information is processed when you visit arbiter’s website, why, and the choices you have. It covers this website only. It does not cover any product or service that Arbiter has not yet released; those will carry their own notice at launch.

1. Who is responsible

Arbiter (아비터) is a business registered in the Republic of Korea by Dayeon Kang (강다연), business registration number 414-01-72904. For any privacy question you can reach the operator directly at dayeon603@gmail.com.

Registered business address: 경기도 용인시 처인구 삼가로58번길 17-12, 사무실동 1층 (삼가동).

Under Korea’s Personal Information Protection Act (PIPA), the person responsible for personal information at 아비터 (Arbiter) is the operator, Dayeon Kang (강다연), acting as the personal-information protection officer (개인정보 보호책임자). You can reach the officer at dayeon603@gmail.com.

2. What this site collects

This is a static, informational website. It has no accounts, no sign-up, and no forms that submit data to us. In ordinary use we do not ask you for any personal information. Two narrow exceptions apply:

• Technical delivery data. The site is served through our hosting and content-delivery provider, Cloudflare, Inc.. To deliver and protect the site, that provider automatically processes standard request data, including your IP address, browser type and version, the page requested, and the date and time. Under the GDPR an IP address can be personal data, so we name it here explicitly.
• Email you choose to send. Contact links on this site open your own email client addressed to the operator. If you email us, we receive your address, your message, and anything you include in it. We use a standard email provider (Google) to receive that mail.

We do not use advertising trackers, we do not build profiles, and we do not sell or rent personal information to anyone.

3. Cookies

This site sets no advertising or analytics cookies of its own. Our hosting provider may set a small number of strictly necessary cookies to keep the site secure and running (for example, to tell automated attacks apart from real visitors). These are essential to delivering the site and cannot be switched off from within it. If we later add privacy-friendly, cookieless usage measurement, this section will be updated before it goes live.

4. Why we process it, and our legal basis

• To deliver and secure the website — technical delivery data. Legal basis: our legitimate interest in operating a safe, functioning site (GDPR Art. 6(1)(f)).
• To answer you — the email you send us. Legal basis: taking steps at your request and our legitimate interest in replying (GDPR Art. 6(1)(b)/(f)).

5. Who else sees it

We keep the list of parties short and name them:

• Cloudflare, Inc. — hosting and content delivery. Processes request data to serve and protect the site.
• Google — email delivery, if you choose to email us.

We disclose information beyond these only where the law requires it, such as a valid legal request from a competent authority.

6. International transfers

Our hosting and email providers are US-based and operate globally, so processing may occur outside Republic of Korea, including in the United States. Where personal data of individuals in the European Economic Area or the United Kingdom is transferred, that transfer relies on the providers’ own approved safeguards, such as the EU-US Data Privacy Framework and Standard Contractual Clauses.

7. How long we keep it

Provider request logs are retained only for the short periods those providers apply for security and diagnostics. Emails you send us are kept only as long as needed to handle your enquiry and any follow-up, then deleted.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information, to object to processing, and to data portability. In the Republic of Korea these rights are provided under the Personal Information Protection Act (PIPA); in the EEA and UK, under the GDPR. To exercise any of them, email dayeon603@gmail.com and we will respond within the period the applicable law requires.

9. Children

This site is not directed to children and does not knowingly collect their personal information.

10. Security

The site is served over encrypted connections (HTTPS) and behind our provider’s security layer. No method of transmission over the internet is perfectly secure, but we take reasonable measures appropriate to a site of this kind.

11. Changes to this policy

If this policy changes, the new version will be posted here with an updated effective date. Material changes will be summarized at the top.

12. Contact and complaints

Questions or requests: dayeon603@gmail.com. If you are in Korea and believe your rights have not been respected, you may also contact the Personal Information Protection Commission (PIPC). If you are in the EEA or UK, you may lodge a complaint with your local data-protection supervisory authority.