Privacy

Privacy Policy

Effective: August 10, 2026

Operator and contact

This personal portfolio is operated by Sungjoon Lee. To request access, correction, deletion, restriction, withdrawal of consent, or help with any privacy matter, use the contact page.

Information, purposes, and retention

Information	Purpose	Retention
Name, email, and enquiry	Deliver and answer an enquiry	Until the enquiry is resolved or deletion is requested; Web3Forms policy allows retention for up to three years
Chatbot question and limited context	Generate an AI response	Not stored in the site database; removed from browser memory on refresh
Hashed IP rate-limit key	Prevent chatbot abuse	About one minute
Visited pages and general device/browser data	Consented usage analytics	Under Google Analytics settings and policy
Error details, a screen replay of the failure, general device data, and approximate city-level location	Error diagnosis and fixes for consenting visitors	Sentry Developer plan · 30 days

Hosting, security, and error handling may also temporarily create standard provider logs containing an IP address, request time, path, and user agent.

Language, cookies, and local storage

At the unprefixed root URL, the site reads Accept-Language to suggest Korean or English. The raw header is not separately stored.

Name	Purpose	Type and duration
`ap-lang-pref-v1`	Remember an explicit language choice	Functional first-party cookie · 30 days
`ap-lang:v1`	Remember an explicit language choice	localStorage · until you clear it
`ap-theme:v1`	Remember the light or dark appearance you chose	localStorage · until you clear it
`ap-consent:v3`	Remember separate analytics and error-reporting choices	localStorage · 180 days
`_ga`, `_ga_*`	Measure consented visits and retain analytics state	Optional analytics cookies · up to two years under Google defaults
`ap-contact-draft:v1`	Transfer a chatbot contact draft to the contact form after the visitor presses the continue button	sessionStorage · deleted as soon as the contact page reads it, 10 minutes at most
`sentryReplaySession`	Identify a consented error replay session	sessionStorage · removed when the tab closes

The language cookie is created only after a menu choice and is not combined with analytics identifiers. Analytics and error-reporting storage is created only after permission. Change the choice in Privacy & cookie settings in the footer or clear site storage in the browser.

External processing and international transfers

The features below may transmit information to provider servers outside the visitor’s country. Processing regions and retention depend on provider terms, account settings, and deployment configuration.

International transfers for optional features

Recipient and contact	Information	Country, timing, and method	Purpose and retention	How to refuse and effect
Google LLC · privacy contact form	Visited pages, events, and general device/browser information	United States · when an event occurs · HTTPS	Usage analytics · event data for 14 months	Turn off Visitor analytics in settings; site features remain available
Sentry, Inc. · privacy@sentry.io	Error details, recording around an error, general device/browser data, and approximate city-level location	the United States · when an error occurs · HTTPS through a same-origin tunnel	Error diagnosis and fixes · 30 days	Turn off Error reporting in settings; site features remain available
OpenAI, L.L.C. and/or Google LLC · OpenAI · Google	Error title, type, message, code stack locations, deployment environment and release	United States · when an error alert fires · HTTPS	Severity triage and suggested fixes · kept in this site's database until the purpose ends or deletion is requested	Turn off Error reporting in settings to stop browser errors; server errors are processed regardless of consent
Discord Inc. · privacy@discord.com	Error details and location, environment, release, and the AI verdict	United States · when an error alert fires · HTTPS	Operator alerts · until deleted from the channel	Turn off Error reporting in settings to stop browser errors; server errors are processed regardless of consent

Provider	Information	Purpose
Vercel	Request and service logs	Hosting, security, and error handling
Web3Forms, hCaptcha	Enquiry, captcha token, and request information	Enquiry delivery and spam prevention
Google Analytics	Consented visit and device data	Site usage analytics
OpenAI and/or Google Gemini	Chatbot question and limited context	AI response generation
Sentry	Error details and screen replays from consenting visitors; server error logs	Error diagnosis and fixes
OpenAI and/or Google Gemini	Error summary (title, type, message, code stack locations, environment, release)	Severity triage and suggested fixes
Discord	Error summary and the AI verdict	Operator error alerts
Upstash	SHA-256 hashed IP key and aggregate count	Chatbot rate limiting

OpenAI requests set store: false to disable application-state storage. OpenAI and Google may still retain limited abuse-monitoring logs under their policies and account settings. Google Signals and advertising personalisation are disabled. Do not submit sensitive personal information through the form or chatbot.

Browser error reporting and screen replay start only after permission, and replays mask typed input and the chatbot conversation area. Server error logs are recorded regardless of consent to keep the service working, but only after removing credentials, cookies, request bodies, and visitor identifiers.

To triage the severity of an error alert and suggest a fix, an error summary is sent once more to an AI provider. That summary is limited to the error title, type, message, code stack locations, deployment environment, and release. It excludes the visited URL, request headers, request bodies, screen replays, location, and visitor identifiers. The same fields and the verdict go to a Discord channel to alert the operator, and are recorded in this site's database.

See the official data terms from Web3Forms, Google Analytics, OpenAI API, Gemini API, and Sentry for provider-specific details.

Deletion, rights, and changes

Information controlled by the site is deleted without undue delay when its purpose ends or a valid deletion request is received. Browser storage can be deleted directly by the visitor. Information already transmitted to a provider follows that provider’s process and any legal retention duty.

You will not be unfairly disadvantaged for exercising privacy rights. If services, purposes, or retention change, this document and its effective date will be updated together.