Privacy

Optional analytics and privacy

The North Korean resettlement category and its detail pages are excluded from optional analytics. Viewing information does not infer origin or identity or create a personal audience profile.

Organization requests are stored separately from resident surveys and statistics. The contact email is private to the owner and used for verification, corrections and removal. After 90 days, email and unpublished requests are removed on the next daily cleanup or administrator read. Published information remains until withdrawn or removed. Abuse prevention uses a daily keyed IP hash, email limit hashes and a duplicate-check hash. Raw IPs are not stored in the requests database; limit hashes expire after 24 hours and are removed at the next cleanup.

Optional analytics helps improve guidance used by WITHIN visitors. It is not a representative survey of Wonju residents. English use does not establish nationality; child-related views do not establish age.

Optional behaviour statistics are recorded only after consent, which lasts up to 30 days and can be withdrawn in the footer. Sending a resident survey does not consent to behaviour tracking. Linking a neighbourhood is a separate choice for future actions in this tab only. Reloading, withdrawing or resetting clears the neighbourhood. Earlier actions are not linked and no individual browsing history is created.

Resident responses are aggregated by Korea date, the support recipient’s neighbourhood, requested support, barriers and any selected category or service. Application/use status is self-reported, not verified by an institution. We do not request names, contacts, street addresses or diagnoses. Combinations of neighbourhood and other answers can reveal a person, so we do not promise complete anonymity.

Comments are detached from neighbourhoods, services and structured answers, visible only to the administrator and retained for 90 days. Some phone, email and identity-number patterns are masked automatically, but not all personal information can be detected. The administrator can redact, review or delete comments. Keep the deletion code shown after submission to delete your comment. Individual contributions cannot be separated from aggregate counts. Retention periods are product settings, not claimed statutory requirements.

Stored fields are the Korea calendar day, allowed action type, public service/category identifiers, selected support region and counts. The selected region describes searched program coverage, not residence. Requests include a random action number; its hash prevents duplicate counts for 24 hours and is deleted on the next collection or daily cleanup after expiry. It does not identify visitors or link actions.

The dataset does not store names, contact details, search text, full URLs, IPs, precise location, referrers, device information, nationality, birth dates, schools, addresses, disability or immigration details. There are no visitor profiles, advertising trackers, session replay or transfers to analytics, translation or AI vendors. Protection/reporting routes and their links, safety-filter results and free-text search pages are excluded.

Daily aggregates have a default retention of 12 months; the current setting is 12 months. Scheduled deletion and collection/report reads remove older counts. Cells below five and totals containing them are suppressed; resident response totals and sibling choices in the same daily neighbourhood/service/category bucket are also suppressed. Other cells are rounded down daily to multiples of five. Exports use the same rules.

Only the owner verified through Google and an authenticated server session can read statistics or exports. Owner sign-in uses a Google account identifier and verified email; Google also processes the sign-in. Owner sessions last up to eight hours. Public browsing requires no account.

Hosting and security providers may process IPs, request paths and times in operational logs. Analytics exclusion does not automatically erase hosting logs. The site disables referrer transmission and adds no request-body or browsing-path logs. The operator must separately check the actual Netlify account's log access/retention and database backup retention before enabling collection.

Analytics operator display: 위드인(WITHIN). Privacy contact: jay0303lee@gmail.com.

Feedback or corrections can be emailed to jay0303lee@gmail.com. You send email yourself through your email app and provider. Do not send sensitive personal or child-protection details. Child personal-data collection and guardian verification are not provided. Urgent guidance is available without consent or an account.