1. Overview and scope
ST Studio (the “Operator”) complies with Korea’s Personal Information Protection Act and other applicable law. This policy applies to program introductions, guide access, free-download guidance, and inquiry handling on the ST Studio website.
The Site does not provide registration, sign-in, payments, or paid sales. If a downloaded program begins processing personal information through automatic updates, error reporting, or another network feature, that processing will first be disclosed on the program page or in a separate policy.
2. Personal information and purposes
| Situation | Information | Purpose | Legal basis |
|---|---|---|---|
| Website access | IP address and request or usage information generated by Firebase Hosting while providing the service | Delivering pages, responding to failures, maintaining security, preventing misuse, and understanding service usage | Article 15(1)4 of Korea's Personal Information Protection Act (providing the website service requested by the user) |
| Email inquiry | Email address, name or nickname entered by the user, inquiry, and attachments | Reviewing and answering inquiries and handling request history and disputes | Article 15(1)4 of Korea's Personal Information Protection Act (responding to an inquiry requested by the user) |
The Operator does not request Korean resident registration numbers, payment data, or sensitive information. Do not include personal information that is unnecessary for an answer in an inquiry.
3. Processing and retention
- Firebase Hosting access information: IP address: several months
- Email inquiry information: Deleted one year after the final response
Firebase states that Hosting may retain IP information for several months. A published value will reflect the actual agreement and current official guidance rather than an arbitrarily shorter period. If a separate legal retention duty applies, or information is needed for a dispute or investigation, it is stored separately until that reason ends and is then deleted.
4. Disclosure to third parties
The Operator currently does not disclose personal information to third parties. The Site does, however, load Google connection code for AdSense site ownership verification and review, without displaying ad units.
5. Processors and overseas transfers
| Processor | Work and information | Countries | Retention |
|---|---|---|---|
| Google LLC (Firebase)https://firebase.google.com/support/privacy/dpo | Website delivery through Firebase Hosting, IP-based security and misuse prevention, and usage reporting | United States and countries where Google or its subprocessors operate facilities | IP address: several months |
| Google LLC (Gmail)https://support.google.com/policies/answer/9581826?hl=en | Transmission and storage of inquiry email addresses, contents, and attachments | United States and countries where Google operates data centers | Deleted one year after the final response |
- Hosting transfer timing and method: Transmitted over an HTTPS network when the Site is accessed
- Legal basis for overseas hosting transfer: Article 28-8(1)3 of Korea's Personal Information Protection Act (processing and storage required to provide the website requested by the user)
- Inquiry transfer timing and method: Transmitted through the email-service network when the user sends an email
- Legal basis for overseas inquiry transfer: Article 28-8(1)3 of Korea's Personal Information Protection Act (email transmission and storage required to respond to the user's inquiry)
You may refuse a transfer by not accessing the Site or not sending an inquiry email. Refusing the hosting transfer prevents use of the Site. Refusing the email transfer does not affect access to program information or guides.
6. External installation, downloads, and security-report services
A program installation button may open Microsoft Store, operated by Microsoft. A direct-download button may open a public file on GitHub Releases, operated by GitHub, Inc. A public executable-scan button may open a VirusTotal file-hash report. When you select one of these links, your browser or Microsoft Store app connects directly to that external service, which then processes access information under its own policy. The Operator does not send inquiry or account information to these services and does not upload your file to VirusTotal on your behalf.
| Service | Information that may be processed | Purpose | Location and retention |
|---|---|---|---|
| Microsoft Store | IP address, browser, device and operating-system data, product interactions, Microsoft account data if signed in, and Store installation, licensing, and update usage | Providing the Store page and app acquisition, installation and updates; license verification; security and misuse prevention; and service improvement | May be processed in countries or regions where Microsoft and its providers operate. Retention varies by information type, user settings, service needs, and legal obligations. |
| GitHub Releases | IP address, browser, device and session identifiers, requested URL and referring page, request time, service interactions, and diagnostic or log data | File delivery and service operation, security and misuse prevention, failure response, and service analytics | May be processed in the user’s region, the United States, and countries where GitHub or its providers operate. Retention varies with purpose and legal obligations. |
| VirusTotal | Service use and interactions, browser and device types and identifiers, cookies and tokens, IP address, and network, system-activity, and performance data | Providing a public file-hash report, operating and securing the service, preventing abuse, and improving the service | May be processed on servers worldwide. Most information is retained for up to 180 days, but security, legal, or compliance needs may require longer retention. |
See the Microsoft Privacy Statement, the GitHub General Privacy Statement, and the Google Cloud SecOps Privacy Notice for details. You can choose a GitHub direct download instead of Microsoft Store, or Microsoft Store instead of GitHub. If you use neither installation or download service, you cannot obtain the program file, but you can still read program information, app policies, and guides. You can skip the VirusTotal link without affecting downloads or other content.
8. Deletion
Information is deleted without delay when its retention period ends or its processing purpose is fulfilled. Electronic files and emails held directly by the Operator are deleted in a manner intended to make recovery difficult. Information held by a processor is managed for deletion under the agreement and that provider’s deletion procedures. Information retained by law is separated from other information.
9. Your rights and how to exercise them
You may request access to or transmission, correction or deletion, suspension of processing, or withdrawal of consent for your personal information. If you or a lawful representative sends a request to the email below, we will verify identity, act within the period required by law, and report the result. If a legal restriction applies, we will explain the reason.
Rights requests and inquiries: ststudio1224@gmail.com
10. Security measures
The Operator applies measures appropriate to the processing scale, including minimizing access, protecting accounts, encrypting data in transit, applying security updates, reviewing retention periods, and maintaining incident-response procedures. Inquiry or advertising features are not activated until the necessary measures and contractual reviews are complete.
11. Privacy officer
- Operator and privacy officer
- ST Studio
12. Remedies
If you object to the Operator’s response or need counseling about a privacy infringement, you may contact:
- Korea Internet & Security Agency Privacy Infringement Report Center: 118 within Korea
- Personal Information Dispute Mediation Committee: +82-1833-6972
13. Changes and revision history
If the law, service, or processing method changes, the change and effective date will be published on this page. A change that materially affects user rights will also be announced prominently on the home page before it takes effect.
- : Added the Microsoft Store installation route and related processing disclosures, and reflected the AdSense site-verification code preparation state.
- : Separated program-specific policies and added disclosures for external GitHub Releases downloads and linked VirusTotal security reports.
- : Expanded Firebase Hosting and inquiry-email processing and overseas-transfer details and clarified the conditions for activating AdSense.
- : Established the first draft of the Privacy Policy.