Breakfast, Every Day ("this site") establishes and discloses this Privacy Policy under Article 30 of Korea's Personal Information Protection Act, to protect visitors' personal information and to handle related complaints promptly.
Purpose of Processing
- Site traffic analysis and service improvement (Google Analytics)
- Understanding on-screen usage patterns (Microsoft Clarity)
- Serving personalized advertising (Google AdSense)
- Preventing multiple same-day entries in the "Hall of Fame" vote
If the purpose of collection changes, we will take the necessary steps, including obtaining separate consent in advance.
Items Collected
- Cookies, IP address, browser/device information, and usage behavior such as pages visited and clicks (collected automatically by the analytics and advertising services above)
- When you take part in the "Hall of Fame" vote, your IP address is combined with the round ID and date and hashed (SHA-256, one-way encryption), and only that hashed value is processed temporarily to prevent multiple votes on the same day. The raw IP address is never stored.
- This site does not collect personal information such as name or contact details through account registration, sign-in, or payment, since none of those exist here.
Note that preferences such as language setting and recipe ingredient-checklist state are stored only in your browser (localStorage) and are never transmitted to or stored by the site operator.
Retention Period
- Information collected by Google Analytics, Microsoft Clarity, and Google AdSense: handled per each service's own policy; the site operator does not separately retain it.
- Hashed IP used for vote deduplication: automatically deleted after 48 hours (using Cloudflare Workers KV's expiration feature)
- Vote tallies (aggregate counts): kept indefinitely to display "Hall of Fame" rankings, since they are numbers that cannot identify any individual.
Destruction Procedure
Information processed as electronic files is deleted using methods that make recovery impossible. The hashed IP used for vote deduplication is automatically deleted after 48 hours by Cloudflare Workers KV's built-in expiration (TTL) feature, with no separate action required.
Third-Party Disclosure
This site does not provide personal information to third parties, except where the data subject has consented or the law specifically requires it.
Outsourced Processing
This site collects and processes information through the services below. Details on how each service handles personal information are available at its own linked policy.
Overseas Transfer
GitHub, Cloudflare, Google, and Microsoft (listed in Section 6) operate servers overseas, so collected information may be processed on servers abroad in accordance with each company's own policy. Specifics such as the recipient, destination country, timing and method of transfer, and retention period follow each service's own published privacy policy (linked in Section 6).
Your Rights and How to Exercise Them
You may request to view, correct, delete, or suspend processing of your personal information at any time by contacting the Data Protection Officer listed in Section 11, and we will act on it without delay. However, since this site has no account registration and the operator does not identify or retain personal information about individual visitors, exercising rights over information collected independently by services such as Google or Microsoft may require following those services' own procedures.
Security Measures
- Encryption in transit: HTTPS across the entire site
- Vote deduplication uses only a hashed value; the raw IP address is never stored
- No account registration means no identifiable personal information, such as name or contact details, is collected or stored in the first place
Automatic Collection Devices (Cookies) — Installation, Operation, and Opt-Out
This site uses cookies for traffic analysis (Google Analytics), on-screen usage analysis (Microsoft Clarity), and personalized advertising (Google AdSense). You can refuse cookies in your browser settings, though this may limit some features. If you'd prefer not to see personalized ads from Google, you can opt out at Google Ads Settings.
Data Protection Officer
For privacy-related inquiries, please contact us via Instagram (@how.about.breakfast) DM.
Needs confirmation: Korea's Personal Information Protection Act requires naming the Data Protection Officer and providing an email (or phone number). Please let us know a name and email we can publish beyond the Instagram DM channel.Remedies for Rights Infringement
If you need to report or consult about a personal information infringement, you may contact the following (Korean) institutions.
- Personal Information Dispute Mediation Committee — 1833-6972 (privacy.kisa.or.kr)
- Privacy Violation Report Center — 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office Cyber Crime Investigation Division — 1301 (www.spo.go.kr)
- National Police Agency Cyber Bureau — 182 (ecrm.police.go.kr)
Changes to This Policy
This Privacy Policy takes effect on 2026.09.25. Any additions, deletions, or amendments will be announced on this page at least 7 days before they take effect.