Privacy Policy
MyIPInfo (the "Service") establishes and discloses this Privacy Policy under Article 30 of the Personal Information Protection Act (PIPA) of the Republic of Korea and other applicable laws to protect the personal information of data subjects and to handle related complaints promptly and effectively. The Service does not actively collect identifiable personal data such as registration, login, or payment information; it processes only the minimum information automatically generated to deliver and protect the Service.
Article 1 (General Provisions)
This Privacy Policy applies to the IP and domain lookup service operated by the MyIPInfo operator (the "Operator"). The Operator places the rights of data subjects as the highest priority and complies with applicable laws including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Protection of Communications Secrets Act. This Policy takes effect on the effective date and any amendments will be announced through the Service.
Article 2 (Items of Personal Information Processed)
The Operator does not collect personal information through registration or active input. The following information may be automatically collected and processed in the course of providing the Service.
Connection information: client IP address, access time, browser information, access path
Lookup information: the IP addresses or domains entered by users for lookup, and the resulting responses
Browser environment: browser language preference
Automatic collection technologies: a session cookie for concurrent user counting, and browser local storage for storing language preference
Error and security logs: server logs used for troubleshooting and detection of abnormal access
Article 3 (Purposes of Processing Personal Information)
The Operator processes the collected information only for the following purposes. Should the purposes change, the Operator will take separate measures as required by Article 18 of PIPA.
Service delivery: generating and returning IP/domain lookup results
Service operation statistics: page views and traffic analysis
Service protection: blocking automated bulk requests and malicious traffic, detecting unauthorized access
Troubleshooting: error tracking, latency root-cause analysis, monitoring availability of external data providers
Service quality improvement: optimizing response performance by analyzing frequently looked-up items
Article 4 (Retention and Use Period)
The Operator destroys personal information without delay once the purpose of processing is achieved. However, where retention is required by law or reasonably necessary for operations, information is retained as follows.
Access logs (client IP, access time, browser information): 6 months (basis: Article 15-2 of the Protection of Communications Secrets Act and Article 41 of its Enforcement Decree)
Server operation logs (error and security logs): retained for 6 months and then sequentially deleted
IP/domain lookup result cache: retained for a short period to improve response performance and then automatically deleted
Session cookie for concurrent user counting: automatically deleted when the browser session ends (not separately retained)
Browser local storage for language preference: stored on the user device until the user deletes it (not transmitted to the server)
Article 5 (Provision of Personal Information to Third Parties)
The Operator does not provide personal information to third parties as a general rule. Exceptions apply only in the following cases.
When separate consent is obtained from the data subject
When provision is unavoidable to comply with legal obligations or specific provisions of law
When investigative authorities request information through procedures and methods prescribed by law for investigative purposes
When information is provided in a form that cannot identify a specific individual for purposes such as statistics, academic research, or market research
Article 6 (Outsourcing of Personal Information Processing)
The Operator does not currently outsource the processing of personal information of data subjects to any external party. Should outsourcing arise in the future, the Operator will, in accordance with Article 26 of PIPA, disclose in advance through this Policy the fact of outsourcing, the outsourcee, the scope of outsourced tasks, and the outsourcing period, and will specify security measures in the contract.
Article 7 (External Data Providers)
To generate IP/domain lookup results, the Operator uses the following public external data sources. This does not constitute outsourcing of processing under Article 26 of PIPA.
| Provider | Purpose |
|---|---|
| Korea Internet & Security Agency (KISA) / KRNIC | Lookup of registry information for domestic IPs and domains |
| RDAP (registry standard protocol) | Lookup of registry information for domains, IPs, and AS numbers |
Article 8 (Overseas Transfer of Personal Information)
The Operator does not transfer personal information of data subjects overseas.
Article 9 (Rights and Obligations of Data Subjects and How to Exercise Them)
Pursuant to Articles 35 through 37 of PIPA, the data subject may exercise the following rights against the Operator at any time.
Right to request access to personal information
Right to request correction of errors
Right to request deletion (except where collection is mandated by other laws)
Right to request suspension of processing
Rights may be exercised by emailing the Data Protection Officer designated in this Policy. The Operator will verify the requester as the data subject or a duly authorized representative and act without delay. For minors under the age of 14, legal representatives may exercise these rights.
Article 10 (Procedure and Method of Destroying Personal Information)
The Operator destroys personal information without delay once the retention period has expired or the processing purpose has been achieved.
Procedure: Information that has reached the end of its retention period is classified for destruction and destroyed automatically in accordance with the Operator's policy.
Method: Information stored in electronic form is deleted using technical methods that prevent recovery.
Article 11 (Installation, Operation, and Refusal of Automatic Collection Technologies)
The Operator uses the following automatic collection technologies for concurrent user counting and language preference persistence. The Service does not install advertising, tracking, or behavioral cookies or pixels.
Session cookie: used to count concurrent users; automatically deleted when the browser session ends. It is a random identifier and contains no personal identifiers.
Browser local storage: stores the language selected by the user on the user device.
How to refuse cookies: Chrome — Settings → Privacy and security → Cookies / Edge — Settings → Cookies and site permissions / Safari — Preferences → Privacy → Block cookies / Firefox — Settings → Privacy & Security → Cookies.
Article 12 (Measures to Ensure the Security of Personal Information)
Pursuant to Article 29 of PIPA, the Operator implements the following security measures.
Encryption in transit: all external communication is encrypted to maintain a secure connection.
Access control and least privilege: access to systems that handle personal information is restricted to the minimum necessary, and the administrative area is protected by a separate authentication procedure.
Request rate limiting: automated abnormal requests are detected and blocked automatically to protect service availability.
Security log monitoring: security logs are retained and reviewed for a defined period to detect abnormal access patterns.
Database protection: system areas that may contain personal information are shielded from external exposure.
Periodic security review: security configurations and operating policies are periodically reviewed and improved in light of external threat trends.
Article 13 (Behavioral Information)
The Service does not process behavioral information for advertising, tracking, or personalized analytics purposes.
Article 14 (Data Protection Officer)
The Operator designates the Data Protection Officer below to take overall responsibility for handling personal information and to address complaints and remedy damages related to personal information processing.
Title: MyIPInfo Operator
Contact: itmaster.root@gmail.com
Responsibilities: overall personal information protection, handling of data subject rights requests, response to personal information incidents, drafting and revising this Policy
Data subjects may contact the Operator at the address above for any inquiries, complaints, or remedy requests related to personal information protection that arise during use of the Service. The Operator will respond and act without delay.
Article 15 (Remedies for Infringement of Rights)
Data subjects may apply to the following authorities for dispute resolution or consultation regarding personal information infringement. These authorities are independent of the Operator. If you are not satisfied with the Operator's own complaint handling or remedy outcome, or if you require more detailed assistance, please contact the authorities below.
| Authority | Phone | Website |
|---|---|---|
| Personal Information Dispute Mediation Committee | +82-1833-6972 | https://www.kopico.go.kr |
| Personal Information Infringement Report Center (KISA) | +82-118 | https://privacy.kisa.or.kr |
| Supreme Prosecutors' Office, Cybercrime Investigation Division | +82-1301 | https://www.spo.go.kr |
| National Police Agency, Cyber Investigation Bureau | +82-182 | https://ecrm.cyber.go.kr |
Article 16 (Changes to This Privacy Policy)
This Privacy Policy takes effect on the effective date. If items, purposes, or other content are added, deleted, or amended due to changes in laws or policy, the Operator will announce changes through the Service at least 7 days before the effective date. For material changes that significantly affect the rights of data subjects (such as changes to the items collected or purposes of use), notice will be given 30 days in advance, and consent may be sought again if necessary.