Privacy Policy
Effective 2026-11-01
This policy explains how NEXTALK (the “Service”) collects, uses and protects your personal information.
1. What we collect
| When | Data | Why |
|---|---|---|
| Sign-up (required) | Email, password (stored only as a one-way hash), nickname, confirmation that you are 14 or older, time of consent | Account, login, posting, abuse prevention |
| Sign-up (optional) | Interests, email newsletter preference | Board recommendations, community news |
| Automatically | IP address, access time, cookies, browser details, referral source (previous page, UTM parameters) | Security, abuse prevention, service improvement, traffic statistics |
| Contact form | Name, email, message | Replying to you |
2. How long we keep it
We keep your account data while your account is active. When you delete your account, your personal data is immediately moved to a separate encrypted store, kept for 30 days to handle abuse and disputes, and then permanently deleted. Only administrators can access it during that period, and every access is logged.
Your posts and comments remain after you leave and show the author as “Former member”. Delete any post you want removed before deleting your account.
Contact messages are kept for one year after they are resolved.
3. Sharing
We do not sell or share your personal information with third parties, except where required by law.
4. Service providers and international transfers
We use a cloud hosting provider to run our servers and database, Cloudflare, Inc. (USA) to deliver and protect web traffic, and, when enabled by the operator, Google LLC (USA) for Google Analytics and Google AdSense. These providers receive only what is needed to perform their service (for example IP address, cookies and device details).
For visitors in the EEA, the UK and Switzerland, advertising consent is collected through Google’s own consent message where it is enabled. You can also opt out via Google Ad Settings and the Google Analytics opt-out add-on.
5. Cookies
We use cookies to keep you logged in, protect forms and remember your language. You can block cookies in your browser, but logged-in features will not work.
6. Anonymous posting
Members can post as “Anonymous”. Other users cannot see who wrote it, but administrators can, to enforce the rules and respond to legal requests.
7. Your rights
You can view and correct your data, withdraw optional consent, and delete your account yourself in “My account”. Depending on where you live (for example under the GDPR or CCPA) you may also have the right to access, port, restrict or object to processing. Contact us to exercise them; we respond without undue delay.
8. Security
- Passwords are hashed with Argon2.
- Data of deleted accounts is encrypted with AES-256 while retained.
- All traffic uses HTTPS.
- Administrator access to personal data is logged.
- Login and posting are rate limited.
9. Children
The Service is not intended for children under 14 and we do not knowingly accept their sign-ups.
10. Contact
Privacy contact: 써봄 운영팀
Email: Contact page
11. Changes
We will announce changes to this policy on the Service at least 7 days before they take effect.