Privacy Policy
Last updated: November 4, 2026
⚠️ Notice on current implementation status:
- Published posts (title, body, images, author display name) are actually stored in our server database (Firestore).
- We support three sign-in methods: (1) Firebase Anonymous authentication, (2) email/password sign-up, and (3) linking a Google account. When you sign up with email/password, Firebase sends a verification link email, and your password is encrypted and stored by Firebase Authentication — the company (AdEngine-X) cannot view it in plain text.
- The creator ad-revenue-share (payout) feature is currently under policy and operational review and is not available. Payout requests submitted in the past (including PayPal email and bank account details) are not deleted and remain stored on our servers (Firestore); our staff review and process them manually, in order. Credit purchases are processed directly by our payment processor (Toss Payments) — we never store your card number or other payment credentials on our servers. We only store the order ID, payment amount, number of credits purchased, and payment status.
1. Personal Information We Collect
Information AdEngine-X currently actually collects and processes includes:
- Account identifier (Firebase UID): used to link published posts to your account.
- Email address: stored by Firebase Authentication when you sign up or sign in with email/password or a Google account, used only for login verification and identity confirmation on the account settings screen (e.g., password changes).
- Nickname (optional): can be set on the account settings screen; once set, it can be shown as your author display name instead of your email address on published posts.
- Phone number (optional): can be freely entered as text on the account settings screen (not verified via SMS) and is stored on our server (Firestore) as reference information.
- Author display name, and the title, body, and attached images of published posts: stored on our server (Firestore) when a post is published.
- IP address: used only for temporary in-memory counting for spam and rate-limit prevention; never stored in a database.
The following fields, when entered on the payout request screen, are stored on our servers (Firestore) and used to review and process your request (manual transfer by our staff): PayPal email address, receiving bank account number and account holder name. This is not connected to any automated payment or transfer system — actual transfers are handled manually after our staff reviews the request.
2. Purpose of Collection and Use
- Providing AI-powered multilingual content generation and storage/retrieval of published posts
- Identity verification for email/password accounts (login, and re-authentication for password/nickname/phone number changes) and email verification
- Preventing service abuse such as click fraud and excessive requests (rate limiting)
- (Currently not accepting new submissions) Processing previously submitted creator ad-revenue-share payout requests — handled manually by our staff after review (not an automated payment system).
3. Global Privacy Compliance (GDPR & CCPA)
Users may request deletion of their own published posts at any time (via the delete button in the post list), which removes the corresponding post data stored in Firestore. If you wish to have your account information — such as your email address, nickname, or phone number — deleted or disclosed, please email hi@adengine-x.com from the email address you registered with, and we will review and process your request. You may likewise request access to or deletion of the usage records described in Sections 5–7 below. Should real-name registration or payment features be added in the future, this policy will be updated accordingly.
4. Third-Party Advertising (Google, Coupang Partners) and Cookies
This site may use Google AdSense to display advertisements. Third-party vendors, including Google, may use cookies, web beacons, and IP addresses to serve ads based on a user's visits to this site and other websites, and to measure ad performance. Users can manage or opt out of personalized advertising via Google's ad settings, linked below. For information on how Google uses data collected from partner sites, see Google's partner sites data usage policy, also linked below. Some Korean-language posts on this site may also contain Coupang Partners affiliate banners or product links; such posts carry a notice that the site receives a commission as part of the Coupang Partners program. Coupang Corp., as a third-party advertiser, may use cookies and similar technologies when a banner is shown or clicked to identify whether the user visits or purchases on Coupang within 24 hours. This site does not pass any personal information about the user to Coupang in that process (only a post identifier).
5. Collection of Service Usage Records (Access & Usage Statistics)
AdEngine-X collects and analyzes the following usage records to improve service quality, respond to errors, prevent abuse, and manage per-feature operating costs.
What we collect:
- Per-article reading totals (scroll depth and active time, not linked to individuals), and the "Helpful / Not quite" reaction with its reason at the end of an article (stored per account, changeable at any time)
- Access timestamps, session identifiers (randomly generated values), and visited page paths
- Actual active time (usage time measured only while the screen is visible and you are interacting with it)
- Classified referral information (e.g., search engine name, social network name, campaign name, referring domain — full URLs and raw search queries are never stored)
- Type of feature used, execution counts, success/failure, and processing time (e.g., daily-life tool runs, AI article/image generation counts, external public-data lookups)
- Estimated costs of AI and external API usage (for operating cost management)
- Browser language and device type (mobile/PC level only)
- Bori personalization data on the “Walk with Bori” screens: the five answers of the 30-second survey (values 0–1) and personality/fortune test scores (numbers only) are stored only in this device’s browser. For members, only the bond score with Bori (counts such as pets, photos and visits) is saved to the account (boriBond) and can be erased anytime with “Erase Bori’s memory”. Requests for Bori’s short AI remark send only trait levels (high/mid/low) and scene types, never free text, and nothing is stored. Counts of motions Bori wanted to do are kept as aggregates not linked to any person.
What we do NOT collect (prohibited from storage):
- Directly identifying information such as email address, name, or phone number (never included in analytics records)
- Full IP addresses (not stored, except for temporary in-memory processing for spam prevention)
- Full URLs of referring pages or URL query strings (including raw search queries)
- Login tokens and passwords
- Raw text of prompts entered into AI features, and raw search queries
- Copies of article or comment bodies
Separation of accounts and analytics records: our analytics storage does not store your account identifier (UID) directly; instead, we use a separate analytics identifier derived on the server via one-way encryption (HMAC). In admin screens, personally identifying information (such as email addresses) is masked by default.
6. Cookies, Similar Technologies, and Web Analytics Tools
- We use cookies and browser storage (such as localStorage) to keep you signed in, remember language settings, and display policy change notices.
- We use our own collection tools to understand service usage statistics, and may use Google Analytics (GA4) and NAVER Analytics for overall traffic-source analysis. We do not send directly identifying information such as email addresses to these tools.
- To improve usability, we use Microsoft Clarity on the magazine (public article pages). Clarity records usage behavior such as page navigation, scrolling, and clicks, and shows it as session replays and heatmaps. Text typed into input fields, and the contents of the sign-in window and comment box, are masked and not recorded. Clarity is not used on member-only screens (the Studio). The collected information is processed by Microsoft Corporation (USA); see the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement) for details.
- You can refuse cookie storage in your browser settings. Doing so does not restrict basic service use such as reading articles; only some convenience features (automatic sign-in, remembered region settings, etc.) may stop working.
- Collection for statistics and analytics purposes is optional and consent-based; you can decline it via the cookie notice at the bottom of the site. Minimal records for service security and abuse prevention (such as request rate limiting) are processed without consent on the basis of legitimate interest.
7. Retention Periods for Personal Information and Usage Records
| Data | Retention period |
|---|---|
| Detailed usage records (raw events such as page views and feature runs) | 90 days |
| Per-user daily usage summaries | 13 months |
| Aggregate statistics that cannot identify individuals | 25 months |
| Records of administrator/operator system access and personal-data viewing | 1 year or longer |
| Administrator permission change records | 3 years |
| System incident records | 2 years |
| Account information and created content | Until account deletion or a deletion request |
- When you delete your account, the link between your analytics identifier and your account is severed (anonymized).
- All administrator viewing, exporting, and permission changes involving personal information are separately audit-logged and retained for the periods in the table above.
8. BoriTalk (In-site Messenger)
- Only if you agree to "Get PC and AI help" in the inquiry room, your text is sent to an external AI (Google) to organize the details. Photos and files are not sent, and you can ask for a person at any time. Values that look like passwords or card numbers in inquiry rooms are hidden before saving.
- "Remote help" is a guide for members helping each other. BoriTalk does not make the remote connection or store screens or work details. The remote tool is subject to Google's Chrome Remote Desktop terms. Use it only with people you know; you are responsible for what you share and for the results. Screens shared on a call from the team in your support room are not stored either.
- We store the messages (text, photos and files) you send on BoriTalk, when they were sent, who the conversation is with (the member list for group chats), read times and unread counts, so that conversations continue and the other person can be notified.
- Photos and files are kept in a private, non-public storage bucket (Google Cloud Storage) and are shown only to conversation members through temporary links valid for one hour. They are deleted automatically 90 days after upload. Executable files are not accepted.
- One-to-one and group conversations between members are protected by security rules so that even our team cannot read them. Conversations with our team (the “AdEngine-X Team” room) are read by operators in order to reply.
- If you report a message, only a copy of that single message (content, sender, time) and your reason are sent to our team, who may then hide that message.
- To prevent spam and harassment, links and files cannot be sent until the other person replies, you can start new conversations with up to 20 people a day, and banned words are filtered. Member-to-member conversations are never sent to external AI moderation services (a call-recording summary a member asks for follows the calls item below).
- We store your block list, your settings for accepting new conversations from strangers, showing yourself in the member list and showing your online status, the members you added as friends, and per-room mute, pin and alert-sound choices. Only you can view or change them.
- While BoriTalk is open, we save your last-seen time every minute so the member list can show “Online” or “5 min ago”. If you turn off “Show my online status”, other members cannot see it.
- If you allow others to find you by email, a one-way value derived from your email is stored so members who have that email in their contacts can find, call and message you. Your email is never shown to them, and you can turn this off at any time. Emails entered in Find friends from contacts are compared as values converted in your browser and are not stored; only the members found stay in your friends list.
- We never store or record the audio and video of voice and video calls ourselves. However, if a participant presses “Record”, audio only is recorded on that person’s device and kept in private storage only they can open, then deleted automatically after 90 days. While recording, every participant sees a notice and hears a tone, and recording stops at once if another participant presses “I don’t want this recorded”. If the person who recorded presses “Summarize” and confirms, that file (including the other person’s voice) is sent to Google (Gemini) for transcription and summary, and the copy at Google is deleted right after processing. To connect a call, it may pass through Cloudflare relay servers (which may be located abroad). The start and end time, participants and duration of a call are kept in the room as a line such as “📞 Voice call · 3 min”.
- Open rooms can be joined by anyone. Their name, description and member count appear in a public list, and members who join can see that room’s conversation.
- Display settings such as fonts, dark mode and unsent drafts are stored only on that device (browser) and are not sent to our servers. A font you choose for a message is saved with the message so the recipient sees it too.
- If you turn on phone or PC notifications, we store that device’s notification registration token, the device type (phone or PC), when you turned it on, and which notification types you want. Notifications are delivered through Google Firebase Cloud Messaging, and conversations between members are never included in the notification text. When you turn notifications off or revoke the permission on your device, we delete the token.
- When you search in a room's “Map”, your search words are sent to Google, and the map image of the place you pick is stored in public storage. Your current location (GPS) is never read. A “Contact” card holds only the BoriTalk name, never an email or phone number.
- When you press “Spelling” or “Translate”, only that text is sent to Google (Gemini) for processing, and the result is not stored. Text you do not press it on is never sent.
- Unsent drafts are stored on the server so you can continue on another device, and only you can see them. They are cleared when you send or delete them and discarded after 30 days.
- If “Auto-delete” is turned on in a room, messages and attachments sent after that are deleted from the server once the chosen period has passed (up to 5 minutes late). Copies or screenshots made by recipients, reply quotes in other messages, and copies kept to handle reports are not deleted.
- If you tap “Bori summary” in a room menu, up to 60 recent messages you can see in that room (including other participants’ messages and nicknames, but not photos, files or hidden messages) are sent to Google (Gemini) to be summarized. The result is not stored and only you see it.
- If you use “Connect my AI”, the AI you connected (an external server you run) receives the text you write in that bot’s own room. Conversations in other rooms are not passed on.
- If you subscribe to a magazine channel, we store the topics you follow and when you last read them. Unsubscribing removes them.
- If you turn on Boricon "AI suggestions" (asked once, only with your consent), the text you are typing and the last 3 messages in that room are sent to Google Gemini to turn them into meaning vectors (numbers) and pick matching Boricons. The text is not stored and, as a paid API, is not used for Google's training. You can turn it off under More.
- Conversations are kept until you delete your account or ask us to delete them (hi@adengine-x.com). Data is stored in Google Firebase (Firestore).
9. Chatting with Bori the Mascot (BoriBot)
- What you type to BoriBot (the chat with our mascot Bori) in the magazine, BoriTalk, or blog widgets, together with the last few messages in that window (up to 6), is sent to Google (Gemini) to write a reply. If Google cannot answer, it may be sent to OpenAI instead. Both are called through paid APIs and, under each company's API terms, are not used to train models.
- If you press "Talk with Bori about this result" on a personality or fortune test, or choose "Talk about my recent test" in BoriTalk, a short summary of that result (the computed result, the cards drawn, and any worry you wrote) is sent too. Your raw date of birth is not sent, and test results are kept only on that device (browser).
- Settings for companions you name (for example "Aunt Sunja") — their name, title, personality type, what they call you, and the speech level — are stored on that device (browser). Members who turn on "Keep history" below also have them saved to their account (the same companions on any device). When you talk with a companion, these settings are sent along so a reply can be written.
- By default, BoriBot chats are not stored on our servers or your device and disappear when you close the window. To prevent overuse, we only record a daily usage count based on your IP address (or your account if you are signed in), which resets after a day.
- Keep history (optional): only if a member confirms they are 14 or older and turns it on themselves, messages exchanged with Bori and companions are kept on their account so the conversation can continue on another device. Up to the latest 200 messages per companion are kept, and everything is deleted automatically if BoriBot is not opened for 30 days. Members can delete all of it or turn it off at any time under "Manage" in the chat window; turning it off also deletes the history so far and the companion settings saved to the account. We keep the time it was turned on as a record of consent. Messages that looked like a sign of danger, and the notice shown, are not recorded, and there is no screen for staff to read member chats. Storage is on Google Firebase (Firestore).
- If a message looks like a sign of danger such as self-harm or suicide, it is not sent to AI. Instead we show a fixed notice with Korean helplines (Suicide Prevention 109, Mental Health Crisis 1577-0199, Youth Counseling 1388, 119 and 112). This is not stored either.
- BoriBot is an AI. It does not replace medical, legal, or investment advice, and fortunes and personality tests are for fun only.
10. Business Information
- Company name: AdEngine-X Magazine
- Representative: 이문형
- Business address: 경기도 부천시 원미구 장말로 102