Reading and search
You can read and search public articles on BOXLOGODEV without an account or sign-in. Google sign-in is optional and lets you post and manage your own comments. Article search and topic filters work on the article list already loaded in your browser. This search feature does not send your search terms to a server or save a search history.
Google sign-in and accounts
Completing Google sign-in for the first time creates an account for commenting. Supabase, our authentication service, may receive your email address, account identifiers and basic profile information such as your name and profile photo from Google. This information and the site's internal account identifier are used to authenticate you, identify comment authors and let you manage your own comments.
Information that keeps you signed in is stored in your browser. The address of the page to return to after sign-in is also stored temporarily in your browser during sign-in. Signing out of this site ends your site sign-in session in that browser.
Public comments and deletion
Comments display your chosen public nickname, the comment text and creation or update times. Your Google account email, name and profile photo are not published with your comments. Visitors can read public nicknames and comments without signing in.
While signed in, authors can edit or delete their own comments. Deleted comments are hidden from the public list. Their content and author association are retained privately in the administrative database to help address repeated posting and abuse.
Information used to serve this site
This website is hosted on Vercel, and its public article data is stored in Supabase and the site archive. Hosting services may process connection information such as your IP address, browser information and requested URL to deliver pages and maintain security. Some notes include a YouTube short. Until you press play, only its preview image is loaded from YouTube's image server; pressing play opens the youtube-nocookie.com player, and Google's YouTube policies apply from then on. Visit statistics are collected with Vercel Web Analytics, which does not use cookies or store information that identifies you, and only reports aggregate figures such as page views, countries and device types. See the Vercel Privacy Policy and Supabase Privacy Policy for details about these providers.
CBO snapshot check report requests
When you request the full report from the SAP custom code (CBO) snapshot check, we process the information below. The scores are calculated in your browser; unless you request the report, your answers are not sent to a server.
Information processed
- Required: your email address, your 12 answers and the scores and grade calculated from them, the page language, the time of the request and the version of the notice you agreed to.
- Optional: company name, and whether you agree to receive marketing information.
- Generated automatically: how you reached the check (a path on this site, a search engine name, or a utm_source value from a fixed list) and an IP hash used to prevent abuse. The full address of another website is not stored.
- IP address: this site’s database does not store your IP address. It stores only a hash made with a secret key (for IPv6, of the first 64 bits) and clears it at the first automatic clean-up (once a day, and whenever a new request arrives) after 2 days have passed. Our hosting provider Vercel processes your IP address while handling the request (see “Information used to serve this site” above).
Purpose
Sending the diagnostic report, answering inquiries you send, and preventing repeat requests from the same address and abuse. Product news is sent only if you agreed to marketing information, and none is being sent at present.
Scope of use
Only the operator views requests, in the Supabase dashboard. They are not used for any other purpose and, apart from the cases listed under “Processors and transfers abroad” below, are not moved to or shared with any other company or work tool.
Retention and destruction
Requests are kept for 1 year from the request date and are then deleted from the database by an automatic clean-up. If you ask us to delete your request, we delete it without delay.
Destruction means deleting the request from the database. The Supabase Free plan this site uses has no automatic backups the operator can restore, so no copy the operator could bring back remains after deletion. If a plan change adds backups, their retention will be stated here.
Report and reply emails kept in the operator’s mailbox (Gmail) are also deleted once 1 year has passed since the request.
Security safeguards
- Requests can be stored only through a gate that requires a token known only to the server, and no API key, including the public key, can read or change the table directly.
- Data in transit is encrypted with HTTPS.
- Secrets are kept only in the deployment environment; the code and the database do not hold them in plain form.
- Only the operator’s account can view requests.
Your right to refuse
If you do not agree to the required items, you can still see your results on screen; you only cannot request the report. Agreeing to marketing information is optional and does not affect the report request.
Processors and transfers abroad
We use the services below to process report requests. Information is transferred to their servers at the times shown in the table.
| Recipient (privacy contact) | Country | Information | Purpose | When and how | Retention |
|---|---|---|---|---|---|
| Vercel Inc. (privacy@vercel.com) | United States | The whole request and connection information such as your IP address | Hosting and handling the request (servers in the eastern United States) | With each request, over HTTPS | While the request is handled; access logs are kept by Vercel for the minimum period needed to meet its legal and contractual obligations and similar needs (Vercel Privacy Policy) |
| Supabase Pte. Ltd. (privacy@supabase.com) | Singapore company; data stored in South Korea (Seoul region) | The request (IP as a hash only) | Database storage | With each request, over HTTPS | 1 year from the request |
| Google LLC (https://support.google.com/policies?p=privpol_privts) | United States | Email address, report and inquiry contents | Sending the report and answering inquiries (Gmail) | Through Gmail, whenever report or reply emails are exchanged | 1 year from the request (the operator deletes them from the mailbox) |
Reports and replies to inquiries are sent from the operator’s Gmail, so your email address and the report or inquiry contents are transferred to Google LLC (United States). Google sign-in and advertising are covered by their own sections on this page. If another mail service is used to send reports, it will be added to this table first.
If you do not want your information transferred abroad, do not request the report; you can still see your results on screen. If you already have, you can ask us to delete it at the contact below, and the report can then no longer be sent.
Google advertising and cookies
This site uses Google AdSense. Third-party advertising providers, including Google, may use cookies to serve ads based on your previous visits to this site or other websites. Advertising cookies allow Google and its partners to provide ads based on your interests.
Learn more about advertising data use and Google's advertising partners in How Google uses information from sites that use its services and Google's ad technology provider information.
Your advertising and cookie choices
You can manage personalized advertising in Google My Ad Center. You can also opt out of interest-based advertising from some third-party companies through the industry advertising choices page. Opting out of personalized advertising does not remove all ads.
Your browser settings allow you to block or delete cookies. Depending on your region, an advertising consent message may appear; you can make your choice using the options it provides. External websites linked here are governed by their own privacy policies.
Operator, privacy officer and your rights
This site is operated by BoxLogoDev.
Privacy officer: BoxLogoDev privacy desk · Contact: choishiam@gmail.com
You can ask for access, correction, deletion or suspension of processing, or withdraw your consent, by writing to the contact above. Writing from the email address you used for the request counts as identity verification. We handle requests without delay and reply with the result.
This contact also covers privacy questions about the rest of the site, including comments and sign-in.
For privacy infringement, you can seek advice or file a report with the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr) or the Personal Information Infringement Report Center (118 from within Korea, privacy.kisa.or.kr).