Article 1: General Provisions
Infira Inc. (hereinafter "Company") values the personal information of members and complies with relevant laws and regulations such as the Personal Information Protection Act. This policy explains what information the Company collects in operating the Codeblic service (hereinafter "Service"), how it is used, and what rights members have.
Article 2: Items and Methods of Personal Information Collection
The Company collects only the minimum information necessary during membership registration and service use.
Items Collected
- Google Account Information (Required): Unique identifier (UID), email address, name (or nickname), profile photo URL provided through Google OAuth integration.
- Service Usage Records (Automatically Collected): IP address, cookies, visit date and time, browser information, device information, usage records.
Collection Methods
- Automatic collection through Google login.
- Server storage of data generated during service use.
Article 3: Purpose of Personal Information Processing
Collected personal information is processed only for the following purposes.
- Member Management: Identity verification, prevention of fraudulent use by malicious members, confirmation of membership intention.
- Service Provision: Project storage and synchronization, website hosting (deployment) and CDN delivery, code execution environment provision.
- Security and Safety: Detection of malicious code (phishing, mining, etc.), system security maintenance, blocking attack traffic.
- Service Improvement: Access frequency analysis, statistical analysis for feature improvement.
Article 4: Retention and Destruction of Personal Information
[ Basic Principle ]
In principle, the Company destroys such information without delay when a member requests withdrawal or when the purpose of personal information collection is achieved.
[ Exceptional Retention (Security Purpose) ]
However, the following information is retained for the specified period to prevent fraudulent use (malicious code distribution, hit-and-run, etc.) according to the Terms of Service and to prepare for legal disputes.
- Fraudulent use records and access logs: 1 year (for cooperation with investigative agencies and prevention of re-registration)
- Metadata (hash values, etc.) of deleted projects: 6 months (for security audit purposes)
[ Exceptional Retention and Non-Destructible Items ]
Source code or data that members voluntarily set to 'public' and that third parties have legally copied will be excluded from deletion even after the original author's withdrawal to guarantee the usage rights of third parties. This is treated as 'information transferred to others' or 'published works' rather than personal information.
[ Dormant Accounts ]
For members who have not logged in for more than 1 year, deployed website data (R2 storage) may be deleted or moved to a separate storage for server resource optimization.
Article 5: Third-Party Provision and Consignment of Personal Information (International Transfer)
The Company consigns personal information processing to specialized companies to provide services, and due to the nature of global services, some data is transferred and stored internationally. Members may refuse international transfer of personal information, but in this case, service subscription and use may be restricted.
| Consignee | Location | Consigned Tasks and Purpose | Transferred Information |
|---|---|---|---|
| Google LLC (Firebase) | USA | Member Authentication (Auth), DB Storage (Firestore) | UID, Email, Profile, Project Data |
| Cloudflare, Inc. | USA | Website Hosting (R2), Security (WAF), API Processing | Uploaded Files, IP Address, Access Logs |
Using the service is considered consent to such international transfers.
Article 6: Cookies and Local Storage Technologies
- Use of Cookies: The Company uses cookies and similar technologies to analyze members' access frequency and visit times, and to maintain secure access (login status). Members can refuse cookie storage through browser settings, but in this case, there may be difficulties in using some services that require login.
- Use of Web Storage and Local Data: The Company comprehensively utilizes client-side storage technologies such as browser web storage (localStorage, sessionStorage, IndexedDB, etc.) (hereinafter "Local Storage") to provide a faster and more stable offline coding environment.
- Storage Purpose: Local project management, temporary storage of code being written, maintaining editor settings (theme, font, etc.).
- Data Location: Data stored in local storage is entirely stored in the browser of the member's device (PC, smartphone, etc.) and is not transmitted to the Company's server.
- Management Responsibility: If local storage data is deleted due to browser cache deletion, device initialization, browser errors, etc., the Company cannot technically recover it, and the responsibility for data preservation lies with the member.
Article 7: Rights of Users and Legal Representatives
- Members can view and modify their personal information at any time and request deletion through membership withdrawal.
- Access permission to the service can be revoked at any time through Google account settings.
Article 8: Protection of Children's Personal Information
This service restricts the registration and use of children under 14 years of age. The Company blocks the registration of children under 14 years of age through an age verification process (based on Google account information, etc.) during the membership registration stage. If it is confirmed that a child under 14 years of age has registered by lying about their age or through fraudulent means, the Company will immediately suspend the account and destroy all collected personal information without delay.
Article 9: Personal Information Protection Responsibility and Notification Obligation
The Company designates a person in charge as follows to take overall responsibility for personal information processing and to handle members' grievances.
- Contact: privacy@codeblic.com
This privacy policy is applied from December 30, 2025. If there are additions, deletions, or modifications to the content, they will be announced through website notices at least 7 days before implementation.