Privacy notice
This site is a personal portfolio operated by Dohoon Cho. Most of its pages are visible only to people who hold a per-recipient access key that I have issued to them by email or another personal channel.
What is logged
When you open a gated page (any project or blog post marked private), the server stores a single row containing:
- the recipient identifier tied to your access key,
- the page slug,
- a timestamp (UTC, second precision),
- a one-way HMAC of your IP address — not the IP itself,
- your country code (from Cloudflare's
CF-IPCountryheader), - your
User-Agentstring, truncated to 256 characters, - the HTTP
Refererheader if present, truncated to 256 characters.
Public pages (the landing page, /blog, public blog posts,
this notice) are not logged at the application layer. Cloudflare may
collect aggregate analytics under its own policies.
Retention
Access events are kept for up to 12 months and then deleted. Recipient records (name, email, company, notes that you sent me) are kept for as long as the access remains useful; on request I will delete them sooner.
Where the data lives
The site is hosted on Cloudflare infrastructure in the United States.
Your requests
To request deletion of your records, to revoke your access key, or to ask any question about what is logged, email [email protected]. I will respond within 10 days.
Korean residents (PIPA)
If you are a resident of South Korea, the personal information controller is Dohoon Cho ([email protected]). The categories above are the entirety of personal data collected. A Korean-language version of this notice is available on request.