Privacy Policy
Effective 2026-10-14. Change history is at the end.
01Scope
This policy applies to arcbyte.app and the products run by Arcbyte Labs ("arcbyte") under it, such as membership.arcbyte.app and chuksong.arcbyte.app.
Each product collects different data. Each product's addendum (/legal/<product>) lists exactly what it collects, and the addendum takes precedence over this policy.
02What we collect
Most products require no account. Names and other information entered for product features are listed in each addendum.
What you type into a product: this differs by product and is listed in each addendum. Some products do not store it on a server at all.
Collected automatically: when you connect, your IP address, device and browser information and the pages you visit are processed. The home page and Membership Break-even do not separately store this access information. Depending on the product, error details, cookies or browser storage and analytics identifiers are added (see section 5 and each addendum for which products use them).
Payments: payments are processed by Creem as seller, and Creem collects the buyer's email, name, country and payment method. We never receive or store card numbers. Creem webhooks may contain the buyer's email, name and country; we do not retain those fields and store only the order ID, amount, status and time, which we use to unlock content and handle refunds.
Support: if you email hello@arcbyte.app, we receive your address, subject line, message and any attachments.
03Why we use it
To provide product features (calculations, generated content, share links)
To confirm payments, handle refunds and answer questions
To prevent abuse and excessive use (for example, daily limits per device or IP)
04How long we keep it
Product inputs and results are kept for the period stated in each addendum, then deleted without delay.
Support emails: email sent to hello@arcbyte.app passes through our email-receiving processor Resend (US) and is forwarded to the operator's mailbox (Kakao Mail). Resend's standard email-data retention period under our plan is 30 days. Backups and legal-retention exceptions follow the provider's security and privacy policies. The support copy in Kakao Mail is kept for one year after resolution and then deleted.
Error logs: The arcbyte.app home page does not store access, execution or error logs. If something goes wrong, the operator checks it in real time only and no record is kept. On Membership Break-even, when a server error occurs, the status code, request method, path without query string and time, together with an error message with addresses, IP addresses and similar details removed, are kept by Cloudflare for up to 7 days. Query strings in request addresses and access information (IP addresses) are not stored. The values you enter are not stored either.
Analytics data: PostHog analytics are currently not collected on the arcbyte.app home page or Membership Break-even. Membership Break-even's anonymous usage counts (Cloudflare, up to three months) are described in its addendum. Retention and deletion of Chuksong's analytics events are described in the Chuksong addendum.
Error data (Sentry): Sentry is not currently used on the arcbyte.app home page or Membership Break-even.
Deleted data cannot be recovered.
05Service providers and international transfers (common providers)
These are providers used across arcbyte. The providers and data involved depend on the product and feature. Support email follows the Resend, Cloudflare Workers and Kakao Mail route described in this policy. Providers used only by one product (for example Chuksong's AI providers and KakaoTalk sharing) are listed in that product's addendum. Fonts on the arcbyte.app home page are served by arcbyte. Your browser does not connect to a separate external font CDN to display them.
Entrusted processing and storage needed to perform our contract with you are transferred abroad on the basis of disclosure in this policy, under Article 28-8(1)3 of the Korean Personal Information Protection Act. Unless stated otherwise, data is sent over an encrypted connection when you use a product.
Cloudflare, Inc. — Role: processor. Data: access information (including IP address), product inputs and results, bot-check results, the records in the table below, support emails (sender address, subject, message, attachments). When/how: sent over the network when you connect or when an email arrives. Recipient/contact: Cloudflare, Inc. (US), https://www.cloudflare.com/privacypolicy/. Purpose: hosting, storage, bot protection, anonymous usage counts (Membership Break-even), handling and forwarding support email. Retention: product data up to the period in each addendum; otherwise as in the table below. Legal basis: Article 28-8(1)3 (processing entrusted to perform the contract). Refusal: you cannot use the product. Processing and storage locations: Cloudflare's general guidance describes processing network metadata for its application services in the United States and Europe (https://www.cloudflare.com/trust-hub/gdpr/). That guidance does not let us establish the individual countries within Europe or the actual processing and storage countries for every function below. arcbyte does not use regional restriction settings. Whether each function stores data, and for how long, is shown below. Items that are not stored are used only while handling the request.
- (1) Request handling (home page and Membership Break-even): processed in countries where Cloudflare operates data centers (list: https://www.cloudflare.com/network/); usually at a data center near you, but no specific country is guaranteed. Not stored by arcbyte; network metadata Cloudflare itself keeps follows the general guidance above.
- (2) Server-error logs: none for the home page. For Membership Break-even, when a server error (5xx) occurs, one line with the status code, request method, path without query string, time and an error message with addresses and IP removed is kept for up to 7 days. Storage location: see the general guidance above (the country for this function has not been established).
- (3) Web analytics (Cloudflare Web Analytics): not currently used on the arcbyte.app home page or Membership Break-even. We will update this policy with the data, retention and locations before using it.
- (4) Anonymous usage counts (Workers Analytics Engine, Membership Break-even): only values that do not identify anyone, kept for up to three months (items listed in the Membership Break-even addendum).
- (5) Support-email forwarding (Cloudflare Workers): the support-forwarding Worker does not retain execution or invocation logs or separately store email subjects, messages or attachments. Support email passes through Resend to Kakao Mail (standard retention and exceptions as in the Resend entry above). To avoid duplicate automatic replies, the sender's email address is stored as a Cloudflare KV key with a 24-hour expiration. KV uses central stores and caches in locations where data is read; we have not yet established the countries in which this address may be processed or stored under our current account.
PostHog, Inc. — Status: PostHog analytics are currently disabled on arcbyte.app and Membership Break-even. Before enabling them, we will disclose the data collected, the bases for processing and international transfers, retention and deletion rules, and opt-out methods, and complete any required steps. Chuksong sends server events only, as described in its addendum. Recipient/contact: PostHog, Inc. (US), https://posthog.com/privacy.
Functional Software, Inc. (Sentry) — Status: not currently used on arcbyte.app or Membership Break-even; we will update this policy before enabling it. When used: role processor; data error reports (without query strings, cookies or referrer) and device and browser information; location United States (sentry.io US region); sent when an error occurs; purpose finding and fixing errors. Retention is stated in the addendum of the product that uses it. Recipient/contact: Functional Software, Inc., https://sentry.io/privacy/.
Plus Five Five, Inc. (Resend) — Role: processor. Data: sender address, subject, message and attachments of emails sent to hello@arcbyte.app. Location: United States. When/how: Resend receives your email and re-sends it; it then passes through Cloudflare Workers to the operator's mailbox (Kakao Mail, below). Recipient/contact: Plus Five Five, Inc., https://resend.com/legal/privacy-policy. Purpose: receiving and re-sending support email. Retention: Resend's standard email-data retention period under our plan is 30 days (https://resend.com/pricing). Backups and legal-retention exceptions follow the provider's security and privacy policies. Legal basis: Article 28-8(1)3 (processing entrusted to answer your inquiry). Refusal: if you do not email us, nothing is transferred.
Creem (Armitage Labs OÜ) — Role: seller and independent controller (not our processor). Creem collects the buyer's email, name, country and payment method directly. Creem webhooks may contain the buyer's email, name and country; we do not retain those fields and store only the order ID, amount, status and time. Location: Estonia. When/how: via API at payment and refund. Recipient/contact: Armitage Labs OÜ, support@creem.io, https://www.creem.io/privacy. Purpose: payment, receipts, refunds. Retention: under Creem's policy, which varies by purpose. Legal basis: performance of the purchase contract. Refusal: if you do not pay, nothing is shared; paid features are unavailable.
Processing entrusted within Korea
Kakao Corp. (Kakao Mail) — Role: processor (in Korea). Data: sender address, subject, message and attachments of emails sent to hello@arcbyte.app. Purpose: final inbox for support email, where the operator reads and replies. Retention: as for support emails in section 4 (one year after the conversation ends). Contact: https://www.kakao.com/policy/privacy
06Your rights
You can ask to see, correct or delete your data, or ask us to stop processing it, at any time.
Email hello@arcbyte.app. We reply within three business days and complete the request within the period required by law (10 days).
For products without accounts, we may need a share link, order ID or the email used for payment to find your data.
07Cookies, browser storage and opting out of analytics
Strictly necessary cookies: cookies required for features. The arcbyte.app home page uses only one, NEXT_LOCALE (ko/en language setting, a session cookie that is removed when you close the browser), and no analytics cookies. Other products list their cookie name, purpose and duration in their addendum. Blocking them stops those features from working.
Optional analytics: the arcbyte.app home page and Membership Break-even currently use no analytics cookies, localStorage or sessionStorage. The home page uses no analytics tools (PostHog, Sentry and Cloudflare Web Analytics are all unused, and their code is not loaded), and Membership Break-even uses only cookieless anonymous usage counts (Cloudflare Workers Analytics Engine). If a product starts using analytics cookies, its addendum will list the cookie name, purpose, duration and how to opt out.
Opting out: the home page and Membership Break-even have no analytics cookies to refuse. Opt-out methods for each product are in its addendum. Chuksong has no browser analytics and sends server events only (Chuksong addendum, section 3).
08Children
arcbyte products are not directed at children under 14. Products with a higher age requirement say so in their addendum (for example, in Chuksong both the person creating a song and the recipient must be 19 or older).
09Security
All traffic is encrypted with HTTPS.
Admin access is limited to the people who need it.
Result links use addresses that are hard to guess.
10Privacy officer
Privacy officer: Dongjun Lee (Representative)
Contact: hello@arcbyte.app
Operator: Arcbyte Labs, 401, 49 Wangsan-ro 33-gil, Dongdaemun-gu, Seoul, Republic of Korea. Business registration no. 628-09-02925 (simplified taxpayer)
To report a privacy violation or seek mediation in Korea: Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 in Korea), Personal Information Dispute Mediation Committee (www.kopico.go.kr, +82-1833-6972)
11Changes
We will post changes on this page at least 7 days before they take effect, or 30 days before if the change is unfavorable to you.
Effective date: 2026-10-14
History: 2026-10-14 first version