Privacy policy

Effective: 2026-04-28 · Last revised: 2026-04-28

In short: FastFind does not upload files stored on a Member's PC to the cloud. Files exist only on the Member's PC; the relay server merely forwards search and download requests and does not store file contents.

1. Personal data we collect

Item	When collected	Purpose
Email address	Sign up	Sign-in identification, sending notices
Password (hashed)	Sign up	Identity verification (stored as a bcrypt hash)
Username (subdomain)	Sign up	Identifying username.fastfind.kr connections
Access IP	On sign-in or enquiry	Security and abuse prevention
Device information (PC MAC address, router type)	On relay connection	Providing extras such as Wake-on-LAN (optional)
Review URL and text	When a review is submitted	Verifying Pro Lifetime entitlement
Enquiry content	When contacting support	Handling and reply records

2. What we do not collect

The contents of files on a Member's PC (even during remote search and download, the relay server only forwards traffic and no file data is stored)
Sensitive data such as national ID numbers, real names or phone numbers

3. Retention and use period

Member information: destroyed immediately on account closure
Access logs and IP: deleted automatically after 90 days
Enquiry records: kept for one year after the reply and then destroyed (for service quality analysis)
Where retention is required by law, kept for the required period

4. Third-party provision and processing

As a rule the Company does not provide your personal data to third parties. Processing is entrusted to the following infrastructure providers:

Processor	Scope of processing
Cloudflare, Inc.	DNS management
Let's Encrypt (ISRG)	SSL certificate issuance

5. Destruction procedure and method

Electronic files: permanently deleted by an unrecoverable method (SQL DELETE + WAL checkpoint)
Printed material: shredded or incinerated

6. Your rights

You may exercise the following rights at any time:

Request access to, correction of, or deletion of your personal data
Request that processing be stopped
Close your account (from the account page or by contacting support)

7. Security measures

Passwords: stored as bcrypt (cost=10) hashes
In transit: TLS 1.2+ encryption (Let's Encrypt ECDSA wildcard certificate)
Authentication: JWT expiring in 30 days; connection token (UUID) unique per user
Access logs retained and abnormal traffic monitored

8. Cookies and local storage

An authentication token is stored in the browser's localStorage to keep you signed in. It exists only on your device and the server does not access it. You can delete it from your browser settings.

9. Data protection officer

Officer: Operations team
Email: info@youngsam.net
Support: /help#contact

10. Notice of changes

If this policy changes, we will give notice on the site at least seven days before the effective date. You can check the history of changes from the "Last revised" date at the top of this page.