Privacy Policy

1. Information We Collect

We collect information in three ways:

• Information you provide. Email address (newsletter signup), name and message (contact form), comments you post on articles.
• Information collected automatically. IP address, browser type, device type, operating system, referring URL, pages viewed, time on page, and approximate location (derived from IP). Collected via standard server logs and analytics tools.
• Cookies and similar technologies. See Section 4 below.

We do not knowingly collect Social Security numbers, financial account information, government IDs, or other sensitive personal information from readers.

2. How We Use Your Information

• Deliver and improve the editorial product (articles, newsletters, push notifications).
• Send the email newsletter you signed up for (you can unsubscribe at any time).
• Measure audience engagement and content performance in aggregate.
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Comply with applicable law and respond to lawful requests from public authorities.

We do not sell your personal information for monetary consideration. We do not use your data to build advertising profiles outside the Service.

3. How We Share Your Information

We share limited data only with:

• Service providers that operate the Service on our behalf — hosting (Vercel, Amazon Web Services), content management (WordPress.org), email delivery, push notification vendors (e.g. OneSignal), and analytics providers (e.g. Google Analytics 4). These providers are bound to use the data only to provide services to us.
• Legal and safety. When required by law, subpoena, court order, or when necessary to protect rights, property, or safety.
• Business transfers. If HARUDAOL LLC merges with, is acquired by, or sells substantially all assets, your information may transfer to the successor entity, subject to this Policy.

We do not share newsletter email lists with third parties for their own marketing.

4. Cookies and Tracking Technologies

We use first-party and third-party cookies and similar technologies to remember preferences, measure traffic, and deliver core functionality. The main categories are:

• Strictly necessary — required for the site to function (cannot be disabled).
• Analytics — Google Analytics 4 and Vercel Analytics; aggregated traffic measurement.
• Functional — saved bookmark list and font-size preference (stored locally in your browser).

You can control cookies through your browser settings. Disabling cookies may affect site functionality. We honor the Global Privacy Control (GPC) signal where applicable.

5. Your Rights — California (CCPA/CPRA)

California residents have the right to: know what personal information we collect, delete personal information we hold about you, correctinaccurate personal information, opt out of any "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising), and to be free from retaliation for exercising these rights. To submit a request, email info@nyandnj.com with the subject line "CCPA Request." We will verify your identity before responding.

6. Your Rights — EEA / UK (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. You may also lodge a complaint with your local data-protection authority. Our legal basis for processing is your consent (newsletter, comments) and our legitimate interest in operating and improving an editorial product. Contact info@nyandnj.com to exercise these rights.

7. Children's Privacy (COPPA)

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact info@nyandnj.com and we will delete it.

8. Data Retention

We retain personal information only as long as needed for the purposes described above or as required by law. Newsletter subscriptions are retained until you unsubscribe. Server and analytics logs are typically retained for 26 months unless a longer period is required.

9. Data Security

We use industry-standard administrative, technical, and physical safeguards (HTTPS/TLS, access controls, secure hosting). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Transfers

We are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States, which may have data protection laws different from your jurisdiction.

11. Third-Party Links and Content

Articles may include links to third-party sites (including Yonhap News Agency for our English K-Culture coverage). This Policy does not apply to those sites; we encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be highlighted on this page with a revised "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance.

13. Contact Us

Questions or requests regarding this Privacy Policy: