Privacy
Privacy Policy
Effective date: 22 October 2026
1. Scope and contact
Person responsible for privacy: 임채영 (Representative of Studio LCY). Contact: support@lcyworks.com.
This policy explains how Studio LCY (스튜디오 엘씨와이), the operator of LCY Works, handles personal information through this website and email support. It does not describe data processing inside our unreleased apps.
For privacy questions or requests, contact support@lcyworks.com. Our business details are available under Business information.
2. Information you send us
When you email us, we receive your email address, your name if provided, your message and any attachments you choose to include. We use this information to respond to your request and handle related correspondence.
Please send only the information needed for your question. Do not include passwords, payment-card details or unnecessary sensitive information.
3. Website delivery and service providers
Website delivery, support email, browser requests for fonts and email-authentication reports are separate information flows. They are described separately below.
| Service provider and role | Information, purpose and transfer | Location and retention |
|---|---|---|
| Cloudflare, Inc. Cloudflare Pages: website delivery | Processes technical requests to deliver and protect this static website: IP address, requested resource, request time, traffic, routing and browser or system information. Information is transmitted over the network when you request a page or asset. For processing and storage entrusted to Cloudflare that are necessary to deliver the website service you request, the overseas-transfer basis is Article 28-8(1)(3)(a) of the Korean Personal Information Protection Act, with the transfer details disclosed here. This concerns website delivery, not our support-mail contents. | Cloudflare's South Korea Addendum lists the United States, United Kingdom, Singapore, Australia, Germany, Portugal, France, Japan, Canada, Netherlands, United Arab Emirates, India, Mexico, Malaysia and Sweden for Cloudflare and its subsidiaries. This is the provider's disclosed processing-country list, not a statement that every request passes through every country. For information processed on our behalf, its Data Processing Addendum sets retention until the earlier of contract expiry or termination and the time processing is no longer needed for the contractual purposes, followed by deletion or return subject to legal requirements. Cloudflare separately handles its own network and security data under its Privacy Policy. |
| Porkbun LLC Hosted Email: receipt, storage and delivery | Receives and stores support email and forwards an incoming copy to our administrative Gmail mailbox while retaining a Porkbun inbox copy. Information includes sender and recipient addresses, names where supplied, subject, message, attachments and delivery or authentication metadata. Transfers occur over email networks when messages are received or forwarded. We send customer replies using our administrative Gmail mailbox, as described below. For entrusted processing and storage necessary to handle inquiries concerning entry into or performance of our services, the overseas-transfer basis is Article 28-8(1)(3)(a) of the Korean Personal Information Protection Act. This basis is limited to that necessary service-related handling. | United States: Porkbun lists Amazon Web Services there for email hosting, forwarding infrastructure and backups. The separate Gmail destination is described below. Our copies follow section 4. Porkbun's Data Processing Addendum provides for retention while necessary for the permitted purpose or required by law, and deletion or return at termination or on a written customer request, subject to legal retention. Its published 13 October 2026 version specifies 14 days for security-related system and access logs; that is not the retention period for message contents or backups. |
| Google LLC Personal Gmail: forwarded and reply copies | To receive, store and respond to customer inquiries, our administrative personal Gmail mailbox receives messages automatically forwarded from Porkbun when they arrive. The email network transfers the inquirer's email address, name if provided, inquiry contents, attachments they choose to send and mail metadata. Gmail also stores our replies and follow-up messages sent directly to Gmail. We send customer replies from our Gmail address, so a customer's follow-up reply may arrive directly in Gmail. Our published support address remains support@lcyworks.com. For storage necessary to handle inquiries about entering into or performing a product or service relationship with you, including relevant pre-contract questions and customer support, the overseas-transfer basis is Article 28-8(1)(3)(a) of the Korean Personal Information Protection Act, with the transfer details disclosed here. This basis is limited to that necessary service-related handling. This is a personal Gmail service governed by Google's own terms and privacy policy. We do not describe it as a Google Workspace service or apply Workspace terms to this mailbox. | Transfer destination (countries): United States and other countries where Google operates servers. Additional information: Google Privacy Policy. Our copies follow section 4. Google's retention policy explains user-controlled deletion, deletion processing and longer retention for specified legal, security and service-continuity needs. Deleting a mailbox copy does not immediately erase all provider backups. See also Google's Privacy Help Center. |
| Google Fonts Direct browser requests | Your browser requests Inter and Bricolage Grotesque from fonts.googleapis.com and fonts.gstatic.com. Google receives the technical information in those requests, such as the IP address, requested font resource and browser request headers, to serve the fonts. We do not upload support messages or a visitor database to this service. | This direct collection by Google is separate from our forwarding of support email. Google's own Privacy Policy governs its processing. Browser controls can block external font requests, although fonts or layout may then display differently. |
| MxToolbox, Inc. DMARC authentication reports | Our domain requests aggregate authentication reports (RUA) from receiving mail systems. These summarize sending-server IP addresses, domain authentication results and message counts. This is not a forwarding route for ordinary support messages or website visitor requests. Our domain does not request individual-message failure reports (RUF). A reporting address in DNS does not prove that an aggregate report was generated or received. | MxToolbox describes United States processing in its Privacy Policy. For customer data covered by its DPA, the deletion rule is tied to a request, service discontinuation or agreement termination, with legal exceptions; it is not an automatic expiry measured from every report's creation. The applicable privacy requirements depend on the report's actual contents and processing relationship. Aggregate statistics that do not identify a person are distinct from reports containing personal information. |
The website code does not include analytics, advertising or tracking scripts, and does not itself set cookies or use browser storage. Hosting providers may separately process operational and security information as described above. The 3D graphics on the home page are rendered in your browser from files served with this website.
4. How long we keep information
The following policy applies to inquiry and related reply copies in both our Porkbun mailbox and our Gmail mailbox, including copies in Trash or similar recoverable folders under our control.
We keep inquiry information only for as long as needed to answer and resolve the inquiry. Once it is no longer needed, we delete it without undue delay unless applicable law requires us to retain particular records.
Where legal retention is required, we keep only the required records for the required period, separately from information used for other purposes. For records under our control, electronic records are deleted using methods intended to prevent recovery or reproduction. The provider retention and deletion conditions described in section 3 also apply to provider-held records. Backup and security records may remain during the provider's deletion process or where legally required; deletion of our mailbox copies is not a promise of immediate erasure of every backup.
5. Your choices and rights
You may ask to access, correct or delete personal information we hold about you, or restrict its processing, as provided by applicable law. Where processing relies on consent, you may withdraw that consent. An authorised representative may act on your behalf where permitted by law.
Email support@lcyworks.com with the subject “Privacy request”. We may ask for limited information necessary to verify and handle your request. If we cannot fulfil a request, we will explain the reason.
To avoid an overseas website request before it occurs, do not access the website; we cannot deliver this Cloudflare-hosted website without its request processing. To avoid the support-email transfers described in section 3 before they occur, do not send an inquiry through that email channel; email support cannot then be provided through the channel.
You may request cessation of further handling or deletion by contacting the person responsible for privacy in section 1, or by sending a written request to our registered address in Business information. A request sent by email is itself processed through the existing Porkbun and Gmail route before we can read it. A later refusal cannot undo a transfer that has already occurred; we will assess and act on the request subject to applicable legal retention requirements.
6. Protecting information
We restrict access to personal information to what is needed for its handling and use appropriate account and access controls. We keep the information we use proportionate to the purpose for which it is needed.
7. Changes to this policy
We will publish any revised policy on this page with its effective date and provide any additional notice required by applicable law.