Crayon Shelf Privacy Policy
Effective 2026-10-03
In one line
Crayon Shelf does not receive personal information such as names, emails or phone numbers on its server. Your child's name and shelf are stored only in your browser. We use Google Analytics and Cloudflare Web Analytics for visit statistics and never send anything about your child.
Spotted a typo or a translation that doesn't read quite right? Let us know at mail@hyunsu.co.kr — we'll gladly take a look and fix it.
1. Child's name, age, shelf and reading records
The name (nickname), age group, tag color, books on the shelf and reading records you enter in the grown-ups' screen are stored only in your browser's storage (localStorage). They are never sent to our server or anywhere else, and the operator cannot see them. Delete them any time with “Clear everything on this device” or by clearing site data. The display language you choose there (Korean, English or Japanese) is also stored only in that same storage and is never sent to our server.
2. Children under 14
The Service shows books for children but does not collect personal information from anyone, children included, so there is no guardian-consent process. If we ever add a feature that receives children's details, we will update this policy and set up the required consent first.
3. Visit statistics (Google Analytics)
We use Google Analytics 4 to see which books are read. Collected: the page address (no child details), the book and page number opened, whether it was read to the end, how pages were turned, browser and device type, rough location (country or city) and time of visit. Analytics cookies (such as _ga) are stored in your browser for this.
Not sent: your child's name, age, tag color, shelf or reading records, or your name or contact details. Turned off: ad personalization signals, Google signals (cross-device tracking) and user IDs. The identifier in the analytics cookie is used only to run the Service (to see which books are read); ad signals and Google signals are turned off so that it is not used for advertising or to contact anyone. Google Analytics does not store IP addresses. The grown-ups' screen loads no statistics. Data is deleted automatically after 14 months.
How to opt out: press “Turn off statistics in this browser” on this page and Google Analytics will no longer load in this browser. You may also block cookies in your browser settings or use Google's opt-out add-on. Turning it off doesn't change how the Service works.
How Google uses information it receives from sites that use Google Analytics is explained in How Google uses information from sites or apps that use our services.
4. Aggregate visit statistics (Cloudflare Web Analytics)
We use Cloudflare Web Analytics to see whether the site loads well and which pages are slow. When a page opens, the browser sends Cloudflare: the address (path) of the page, the address of the page you came from (referrer), the browser, operating system and device type, and performance figures such as how long the page took to load. The country is estimated from the IP address, and Cloudflare states that it does not store the IP address.
Not used: cookies, browser storage (such as localStorage), identifiers that tell visitors apart, or device fingerprinting. Information kept on this device — a child's name, age, name-tag color, shelf or reading history — is not sent. The operator only sees aggregate numbers that cannot identify anyone (visits per page, visits per country, loading speed) and uses them only to improve the service and check for outages. Nothing is collected on the parent-mode screens or preview screens.
How to refuse: a browser's tracking protection or an ad or tracker blocker may stop it from being sent. "Turn off statistics in this browser" below applies to Google Analytics only. Blocking it makes no difference to using the service.
5. “Send feedback on this book”
When you send feedback we receive only the book, page number, chosen kind and, when you leave a note, the text you write (up to 300 characters). We don't take names or contact details — please don't write them. Feedback is deleted automatically after 90 days. Contact us to delete it sooner.
6. Server access logs
To run the Service safely, access logs (IP address, requested address, time, browser type) are kept on the server. They are used only to check failures and attacks and are deleted automatically after 14 days.
7. Transfers abroad and outside processing
Visit statistics are processed by Google Analytics of Google LLC (USA) — the items in section 3, kept for 14 months.
Aggregate visit statistics are processed by Cloudflare Web Analytics of Cloudflare, Inc. (USA) (the items in section 4). They are sent over the Cloudflare network each time a page opens, and are kept for the period set by Cloudflare's policy.
Every request to the site passes through the network of Cloudflare, Inc. (USA). In that process your IP address and request details (address, time, browser type) are processed to block attacks and deliver pages.
The operator makes the pictures with an image-generation service, and none of your information is sent in that process.
Turn off statistics in this browser
Send visit statistics
8. Privacy officer
Crayon Shelf operator · mail@hyunsu.co.kr
9. When this policy changes
We update this page and the effective date. If we start collecting more information, we try to post a notice 7 days ahead.
10. Getting help with a privacy problem
If you need advice or a remedy for a privacy problem, besides contacting the operator you can ask these Korean agencies for help.
- 개인정보분쟁조정위원회 (Personal Information Dispute Mediation Committee, Korea) 1833-6972 (www.kopico.go.kr)
- 개인정보침해신고센터 (Personal Information Infringement Report Center, Korea) 118 (privacy.kisa.or.kr)
- 대검찰청 (Supreme Prosecutors' Office, Korea) 1301 (www.spo.go.kr)
- 경찰청 (Korean National Police Agency) 182 (ecrm.police.go.kr)
11. Backup copies
We back up the database in case of failure, and keep backup copies for up to 14 days. Information you delete stays in those copies for that period and disappears as newer copies replace them. Copies are used only for recovery and are not opened for any other purpose.
12. How we keep it safe
Only the operator can access personal information, every connection is encrypted (HTTPS), and secrets such as passwords are stored encrypted. Personal information is deleted automatically once its retention period ends.
13. Your rights
You can ask at any time to see, correct or delete your personal information, or to stop its processing. Send the request to the privacy officer's email and we will reply within 10 days after checking it. A legal guardian of a child under 14 can make the same requests.
14. Visitors from abroad
Visitors from the European Economic Area, the United Kingdom and Switzerland start with Google Analytics cookies turned off. In that case only cookieless aggregate signals are sent to Google Analytics.