Privacy policy

Effective: 2026-04-28 · Last revised: 2026-09-14 (website visit analytics added)

In short: FastFind does not upload files stored on a Member's PC to the cloud. Files exist only on the Member's PC; the relay server merely forwards search and download requests and does not store file contents.

1. Personal data we collect

Item	When collected	Purpose
Email address	Sign up	Sign-in identification, sending notices
Password (hashed)	Sign up	Identity verification (stored as a bcrypt hash)
Username (subdomain)	Sign up	Identifying username.fastfind.kr connections
Access IP	On sign-in or enquiry	Security and abuse prevention
Device information (PC MAC address, router type)	On relay connection	Providing extras such as Wake-on-LAN (optional)
Review URL and text	When a review is submitted	Verifying Pro Lifetime entitlement
Enquiry content	When contacting support	Handling and reply records
Visit records (pages opened, referrer, time spent, links clicked, browser and device type, IP address)	On visiting the website	Working out which explanations help, so the pages can be improved

2. What we do not collect

The contents of files on a Member's PC (even during remote search and download, the relay server only forwards traffic and no file data is stored)
Sensitive data such as national ID numbers, real names or phone numbers
What you type into fields on the website (ID, password, search terms and so on) — visit records keep only the text on the buttons and links you click, and we never look at what you typed
Activity on other sites — we do not use advertising trackers (third-party analytics tools such as Google Analytics)

3. Retention and use period

Member information: destroyed immediately on account closure
Access logs and IP: deleted automatically after 90 days
Website visit records: deleted automatically after 180 days
Enquiry records: kept for one year after the reply and then destroyed (for service quality analysis)
Where retention is required by law, kept for the required period

4. Third-party provision and processing

As a rule the Company does not provide your personal data to third parties. Processing is entrusted to the following infrastructure providers:

Processor	Scope of processing
Cloudflare, Inc.	DNS management
Let's Encrypt (ISRG)	SSL certificate issuance

5. Destruction procedure and method

Electronic files: permanently deleted by an unrecoverable method (SQL DELETE + WAL checkpoint)
Printed material: shredded or incinerated

6. Your rights

You may exercise the following rights at any time:

Request access to, correction of, or deletion of your personal data
Request that processing be stopped
Close your account (from the account page or by contacting support)

7. Security measures

Passwords: stored as bcrypt (cost=10) hashes
In transit: TLS 1.2+ encryption (Let's Encrypt ECDSA wildcard certificate)
Authentication: JWT expiring in 30 days; connection token (UUID) unique per user
Access logs retained and abnormal traffic monitored

8. Cookies and local storage

An authentication token is stored in the browser's localStorage to keep you signed in. It exists only on your device and the server does not access it. You can delete it from your browser settings.

We do not use cookies for visit analytics. Only a temporary value that tells one visit apart is kept in sessionStorage, and it disappears when you close the browser tab. On the server we store only a hash made by mixing that value, your IP and your browser with a random value that changes every day, so after a day we cannot tell whether it is the same person, and the IP cannot be recovered from it.

If your browser’s Do Not Track setting is turned on, we do not collect visit records. Blocking /track.js with an ad-blocking extension makes no difference to using the site.

9. Data protection officer

Officer: Operations team
Email: info@youngsam.net
Support: /help#contact

10. Notice of changes

If this policy changes, we will give notice on the site at least seven days before the effective date. You can check the history of changes from the "Last revised" date at the top of this page.