Privacy Policy

Last updated: 21 October 2026 This policy explains what personal data yunalog.net (“yunalog”, “I”, “me”) collects, why, how long it is kept and what rights you have. I wrote it to describe what the site actually does, not what a template says sites usually do.

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is: Eunhye Yoon 22, Gyeongsu-daero 976beon-gil, Suwon-si, Gyeonggi-do, Republic of Korea Email: hello@yunalog.net I run yunalog on my own. There is no data protection officer, and you can write to me directly about anything in this policy.

2. What I collect, and why

2.1 Reading the site

When you open a page, the web server receives technical data your browser sends anyway: IP address, browser and device type, the page requested and the time. The hosting provider (Hostinger International Ltd., Cyprus; servers in Indonesia) processes this to deliver the site and keep it secure. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

2.2 Analytics — only with your consent

If you click Accept analytics in the cookie banner, Google Analytics 4 (Google Ireland Ltd.) measures which pages are read and how visitors arrive. If you click Reject, or make no choice, Google tags run in consent mode with analytics storage denied. No analytics cookies are set, but the Google tag still loads and may send Google cookieless signals (such as page address, browser type and IP address, which Google says it does not store) that it uses for aggregate modelling. If you later withdraw consent, the site deletes the Google Analytics cookies it can reach. Advertising signals are always denied. The site shows no ads. Legal basis: your consent (Art. 6(1)(a) GDPR, and the ePrivacy rules on cookies). You can change your mind at any time with Cookie settings in the footer.

2.3 Newsletter

When you subscribe I store your email address, your name if you give it, the time you agreed, the exact consent wording you saw, and a one-way hash of your IP address (used only to fight abuse; it cannot be turned back into the address). Every email has an unsubscribe link. Legal basis: your consent (Art. 6(1)(a) GDPR).

2.4 Contact form

When you write to me I store your name, email address, the topic, your message and the same hashed IP, so I can answer and keep a record of the conversation. Legal basis: your request (Art. 6(1)(b) GDPR) and, for spam control, legitimate interest (Art. 6(1)(f)).

2.5 Partner application

If you apply to work with me as an independent RIMAN planner, I store what you enter: name, email, country, an optional messenger handle, occupation, relevant experience, the time you can commit, whether you are already registered with RIMAN, how you found me and your message, plus the hashed IP and the time you agreed. I use this only to decide whether we are a good fit and to talk with you about it. Your data goes to RIMAN only if you decide to register, and only what registration requires. Legal basis: steps taken at your request before any agreement (Art. 6(1)(b) GDPR).

2.6 Spam protection

The forms use Cloudflare Turnstile (Cloudflare, Inc.) to tell people from bots. Turnstile processes technical data about your browser and connection when a form loads. The site also counts submissions per hashed IP address for one hour to block floods. Legal basis: legitimate interest in protecting the forms from abuse (Art. 6(1)(f) GDPR).

2.7 Comments

If you leave a comment, WordPress stores your name, email, any website you enter, the comment and your IP address. Your email address may be sent to Gravatar (Automattic Inc.) to show a profile picture if you have one. Legal basis: legitimate interest in running a comment section (Art. 6(1)(f) GDPR).

3. Cookies

Cookie Purpose Lifetime Needs consent
yuna_consent Remembers your cookie choice 180 days No (essential)
pll_language Remembers your language 1 year No (essential)
Cloudflare Turnstile Bot check on forms Session No (security)
_ga, _ga_* Google Analytics up to 2 years Yes
After 180 days the banner asks again.

4. Who receives your data

  • Hosting: Hostinger International Ltd. (Cyprus) — stores the site and the database.
  • Email delivery: Brevo (Sendinblue SAS, France) sends confirmation and reply emails.
  • Newsletter: when the newsletter is sent through Kit (ConvertKit LLC, USA), your email address and name are stored there as well.
  • Analytics: Google Ireland Ltd. / Google LLC, only with consent.
  • Spam protection: Cloudflare, Inc.
  • Fonts: the site loads fonts from Google Fonts, which receives your IP address.
  • RIMAN: only if you choose to register as a planner.
I do not sell personal data and do not share it for advertising.

5. Transfers outside the EU

Google, Cloudflare and Kit are US companies, the site’s servers are in Indonesia, and I operate yunalog from the Republic of Korea.
  • Republic of Korea: the European Commission has recognised Korea as providing an adequate level of protection (adequacy decision of 17 December 2021).
  • United States: transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the Commission’s Standard Contractual Clauses.
  • Indonesia (hosting): transfers rely on the Standard Contractual Clauses in Hostinger’s data processing agreement.

6. How long I keep it

  • Newsletter: until you unsubscribe, then deleted within 30 days.
  • Contact messages: 24 months after the last message.
  • Partner applications: 24 months after our last contact, or until you ask me to delete them. If you register, RIMAN’s own policy applies to your planner account.
  • Comments: as long as the comment is published.

7. Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw any consent at any time without affecting what happened before. Write to hello@yunalog.net and I will answer within one month. You may also complain to a data protection authority, in particular the one where you live, for example the AEPD (Spain), your Land authority (Germany), the CNIL (France), the Garante (Italy) or the ANSPDCP (Romania).

8. Children

yunalog is not directed at anyone under 16, and partner applications are only for adults.

9. Changes

When this policy changes I will update the date at the top. If a change affects what you agreed to, I will ask again.