Privacy Policy
Policube values the privacy of its users and complies with applicable privacy and data protection laws. This Privacy Policy explains what information is collected, used, stored, and deleted when users use Policube, and what rights users have regarding their information.
This Privacy Policy is effective as of June 6, 2026.
1. Data Controller
The data controller of Policube is as follows.
| Item | Details |
|---|---|
| Service name | Policube |
| Operator | Nacre Inc. |
| Privacy Officer | Eun-suk So, Chief Executive Officer |
| business@nacre.co.kr |
2. Purposes of Processing Personal Information
Policube processes personal information or service usage information for the following purposes.
Providing the political orientation assessment service
- Policube calculates users’ scores across key axes, including economy, culture, power, and social scope, based on their responses to assessment questions, and provides one of 16 political type results.
- Policube calculates additional information related to belief intensity and uses it to interpret assessment results.
- Policube creates a result page so that users can view or share their results.
Improving service quality and conducting statistical analysis
- Policube analyzes response distributions by question, score distributions by axis, type distributions, and response trends by country.
- Policube reviews whether questions are balanced, whether the result calculation method is appropriate, and whether type descriptions are accurate.
- Policube may use the information for service improvement, question improvement, result interpretation improvement, statistical analysis, and research.
Providing advertisements and monetizing the service
- Policube may use third-party advertising services such as Google AdSense to operate the free service and provide content.
- In the course of providing advertisements, Google and third-party advertising providers may use cookies, advertising identifiers, access information, device information, or similar data.
- Policube does not directly provide or sell users’ question responses, political orientation results, or 16-type results to advertisers.
- Policube does not target advertisements for specific political parties, candidates, political organizations, political campaigns, or election-related matters based on users’ assessment results.
Ensuring security and stable service operation
- Policube detects and responds to abnormal access, malicious requests, service failures, and misuse.
- Policube processes technical logs necessary for server and database operation.
Responding to user inquiries and rights requests
- Policube responds to requests for access, correction, deletion, suspension of processing, and withdrawal of consent.
- Policube handles inquiries, reports, and complaints related to the use of the service.
3. Categories of Personal Information Processed
Policube does not, in principle, collect directly identifiable personal information such as names, email addresses, phone numbers, resident registration numbers, or precise addresses.
However, Policube may process the following information to provide the service, store results, enable sharing features, improve service quality, and maintain security.
| Category | Items |
|---|---|
| Assessment usage information | Responses to individual questions, scores by axis, economy, culture, power, and social scope axis results, belief intensity result, 16-type political orientation result, result interpretation information |
| Temporary identification information | Random UUID, result page identifier, result identifier included in a shareable URL |
| Country information | Country of access, country directly selected by the user, country information inferred from IP address or similar technical information |
| Technical information | Access date and time, requested URL, browser information, device information, operating system information, IP address, server logs, error logs, security event logs |
| Cookies and similar technology information | Cookie information for session maintenance or usability improvement, access information for service statistics analysis, advertising cookies for third-party advertising services such as Google AdSense, advertising identifiers, and information related to ad impressions, clicks, and interactions |
Policube does not, in principle, collect directly identifiable information such as names, email addresses, or phone numbers in connection with assessment results. However, if a user contacts Policube by email, Policube may process the user’s email address and inquiry details to the extent necessary to respond to the inquiry.
4. Processing of Sensitive Information
Policube is a political orientation assessment service. Therefore, users’ responses and assessment results may be used to infer their political views, policy preferences, social values, or political orientation.
Under applicable privacy laws, information related to political opinions may be classified as sensitive information. Accordingly, Policube treats assessment responses and result information with a high level of care, comparable to sensitive information.
Sensitive information or information treated as sensitive information that Policube may process includes the following.
- Responses to questions concerning politics, economy, society, culture, and power
- Scores by axis
- 16-type political orientation result
- Belief intensity result
- Result interpretation information
Policube processes the above information only for the following purposes.
- Providing assessment results to users
- Improving service quality, improving questions, conducting statistical analysis, and conducting research
- Ensuring security and service stability
Policube does not use users’ assessment responses, political orientation results, or type results for advertising targeting, political party or candidate promotion, election campaigns, political campaigns, individual political profiling, or data sales.
5. Retention and Use Period of Personal Information
Policube retains personal information or service usage information only for the period necessary to achieve the purposes of processing. When the processing purpose has been achieved or the retention period has expired, Policube deletes the relevant information without undue delay.
| Information | Retention period and purpose of use |
|---|---|
| Assessment responses and result data | Retention period: Up to 3 years from the date of collection / Purpose of use: Providing assessment results, maintaining result pages, improving service quality, statistical analysis, and research |
| Random UUID and result identifiers | Retention period: Up to 3 years from the date of collection / Purpose of use: Distinguishing result data, retrieving result pages, enabling sharing features, and preventing duplicate analysis |
| Country information | Retention period: Up to 3 years from the date of collection / Purpose of use: Analyzing response trends by country, improving service quality, statistical analysis, and research |
| Server access logs and technical logs | Retention period: Up to 1 year from the date of collection / Purpose of use: Security, failure response, and service stability |
| User inquiry records | Retention period: Up to 3 years from the date the inquiry is resolved / Purpose of use: Responding to inquiries, handling disputes, and maintaining records of rights requests |
| Anonymized statistical data | Retention period: May be retained indefinitely / Purpose of use: Service improvement, research, and statistical analysis |
If retention is required under applicable laws, Policube may retain the relevant information for the period required by those laws.
6. Use for Research and Service Quality Improvement
Policube may analyze users’ assessment responses and result data to improve service quality and assessment questions.
The analysis may include the following information.
- Responses to individual questions
- Scores by axis
- 16-type political orientation result
- Belief intensity result
- Country information
- Random UUID
Policube follows the principles below when using information for research and service quality improvement.
- Policube does not collect directly identifiable information such as names, email addresses, or phone numbers in connection with assessment data.
- Policube uses random UUIDs for user identification.
- Policube may process country information to analyze trends by country.
- Policube applies pseudonymization or anonymization so that specific individuals cannot be identified.
- Analysis results are used only for improving questions, improving type descriptions, improving result calculation methods, improving service quality, statistical analysis, and research.
- Policube does not track or sell individual users’ political orientation.
Use for research and service quality improvement may be separated from processing that is necessary to provide assessment results, and Policube may obtain separate optional consent where necessary. Users may use the assessment service even if they do not consent to the use of their data for research and service quality improvement.
7. Provision of Personal Information to Third Parties
Policube does not, in principle, provide users’ personal information to third parties.
However, Policube may provide personal information in the following cases.
- When the user has given prior explicit consent
- When required by law
- When a law enforcement agency, court, supervisory authority, or other public authority makes a request through lawful procedures
Policube does not sell or provide users’ assessment responses, political orientation results, or type results to advertisers, political parties, political organizations, election-related organizations, data brokers, or similar third parties.
8. Outsourcing of Personal Information Processing
Policube may outsource certain personal information processing tasks to external service providers to provide a stable service.
| Item | Details |
|---|---|
| Processor | Vercel Inc. |
| Outsourced tasks | Website hosting, deployment, serverless function execution, access log processing, and failure response |
| Information processed | Access logs, request information, browser and device information, IP address, and technical information |
| Retention and use period | Until the end of the outsourcing agreement or the achievement of the processing purpose |
| Item | Details |
|---|---|
| Processor | Supabase Inc. |
| Outsourced tasks | Database storage, backend functionality, data management, and security functionality |
| Information processed | Assessment responses, result data, random UUID, country information, result identifiers, and technical information |
| Retention and use period | Until the end of the outsourcing agreement or the achievement of the processing purpose |
| Item | Details |
|---|---|
| External advertising service provider | Google LLC or Google Ireland Limited |
| Service used | Google AdSense |
| Processing tasks | Processing ad requests, serving advertisements, measuring ad performance, preventing invalid clicks and advertising fraud, and providing personalized or non-personalized advertisements |
| Information processed | Cookies, advertising identifiers, IP address, browser and device information, access information, and information related to ad impressions, clicks, and interactions |
| Retention and use period | For the period specified in Google’s Privacy Policy and advertising service policies, or until the processing purpose is achieved |
If the scope of outsourced tasks or the service providers change, Policube will disclose such changes through this Privacy Policy.
9. Cross-Border Transfer or Overseas Processing of Personal Information
Policube operates the service using Vercel, Supabase, and Google AdSense. Accordingly, personal information or service usage information may be processed or stored outside the user’s country during service operation.
| Item | Details |
|---|---|
| Recipient or processor | Vercel Inc. |
| Country of transfer or processing | United States and other countries where Vercel operates infrastructure |
| Date and method of transfer | Transmitted through the network when the user uses the service |
| Transferred information | Access logs, request information, browser and device information, IP address, and technical information |
| Purpose of use | Website hosting, serverless function execution, security, and failure response |
| Retention and use period | Until the achievement of the processing purpose or the end of the outsourcing agreement |
| Item | Details |
|---|---|
| Recipient or processor | Supabase Inc. |
| Country of transfer or processing | United States and other countries where Supabase operates infrastructure |
| Date and method of transfer | Transmitted through the network when the user uses the service |
| Transferred information | Assessment responses, result data, random UUID, country information, result identifiers, and technical information |
| Purpose of use | Database storage, result retrieval, service operation, and security management |
| Retention and use period | Until the achievement of the processing purpose or the end of the outsourcing agreement |
| Item | Details |
|---|---|
| Recipient or processor | Google LLC or Google Ireland Limited |
| Country of transfer or processing | United States, Ireland, and other countries where Google operates infrastructure |
| Date and method of transfer | Transmitted through the network when an ad request, ad display, or ad interaction occurs through Google AdSense |
| Transferred information | Cookies, advertising identifiers, IP address, browser and device information, access information, and information related to ad impressions, clicks, and interactions |
| Purpose of use | Serving advertisements, measuring ad performance, providing personalized or non-personalized advertisements, and preventing invalid clicks and advertising fraud |
| Retention and use period | For the period specified in Google’s Privacy Policy and advertising service policies, or until the processing purpose is achieved |
Policube implements necessary safeguards in accordance with applicable laws when cross-border transfer or overseas processing occurs.
10. Destruction of Personal Information
When the retention period expires or the processing purpose has been achieved, Policube deletes the relevant personal information without undue delay.
- Electronic files are deleted in a secure manner so that they cannot be restored or reproduced.
- Information stored in the database is deleted from the Supabase database or anonymized so that individuals cannot be identified.
- Statistical data used for service improvement and research may be retained after being anonymized so that specific individuals cannot be identified.
11. User Rights and How to Exercise Them
Users may exercise the following rights regarding their personal information at any time.
- Request access to personal information
- Request correction of personal information
- Request deletion of personal information
- Request suspension of personal information processing
- Withdraw consent to personal information processing
Users may exercise these rights by contacting Policube at the following email address.
| Item | Details |
|---|---|
| business@nacre.co.kr |
Policube does not, in principle, collect directly identifiable information such as names, email addresses, or phone numbers in connection with assessment results. Therefore, if a user does not provide information that can identify the relevant data, such as the result page URL, random UUID, result identifier, or inquiry date and time, it may be difficult for Policube to identify or delete the individual data.
When Policube receives a user’s rights request, Policube will take action without undue delay in accordance with applicable laws. However, the request may be restricted if retention is required by law, if it may infringe the rights and interests of other users, or if it is technically difficult to identify the relevant data.
12. Processing of Children’s Personal Information
Policube does not, in principle, provide its service to children under the age of 14.
If a child under the age of 14 wishes to use the service, consent from a legal representative may be required. Policube does not knowingly collect personal information from children under the age of 14.
If Policube becomes aware that personal information of a child under the age of 14 has been collected without the consent of a legal representative, Policube will delete the information or take necessary measures without undue delay.
13. Use of Cookies and Similar Technologies
Policube may use cookies or similar technologies to provide the service, improve usability, conduct statistical analysis, maintain security, and provide advertisements.
Cookies are small information files stored in the user’s browser. Cookies and similar technologies may be used to maintain the user’s access status, check the service usage environment, analyze errors and security events, serve advertisements, and measure advertising performance.
Policube may use Google AdSense, and Google and its partners may use cookies to serve advertisements based on users’ visits to Policube or other websites.
Google’s use of advertising cookies enables Google and its partners to serve advertisements to users based on their visits to Policube or other sites on the Internet.
Users may refuse or delete cookies through their browser settings. However, if cookies are blocked, some service features may not function properly, and the way advertisements are displayed or consent management functions operate may be affected.
For users in regions where separate consent is required, such as the European Economic Area (EEA), the United Kingdom, or Switzerland, Policube may request consent related to advertising cookies and personalized advertisements through a Google-certified Consent Management Platform (CMP) or a similar method.
14. Use of Google AdSense and Other Advertising Services
Policube may use third-party advertising services such as Google AdSense to operate the free service, provide content, and cover service maintenance costs.
In the course of providing advertisements through Google AdSense, Google and third-party advertising providers may process cookies, advertising identifiers, IP address, browser and device information, access information, and information related to ad impressions, clicks, and interactions.
Third-party advertising providers, including Google, may serve advertisements based on users’ visits to Policube or other websites. Google’s use of advertising cookies may be used by Google and its partners to serve advertisements based on users’ site visit information.
Users may manage or limit personalized advertisements through Google’s advertising settings page or through their browser’s cookie settings.
Policube does not directly provide or sell users’ question responses, scores by axis, political orientation results, 16-type results, or belief intensity results to Google, advertisers, political parties, political organizations, election-related organizations, or data brokers.
Policube does not target advertisements for specific political parties, candidates, political organizations, political campaigns, or election-related matters based on users’ political orientation assessment results.
The privacy practices of advertising service providers and methods for managing personalized advertisements may be checked through the relevant advertising service provider’s policies and settings pages.
15. Security Measures
Policube takes the following measures to securely process personal information.
| Category | Measures |
|---|---|
| Administrative measures | Minimization of access rights to personal information, restriction of personal information processing purposes and scope, restriction of access to response data treated as sensitive information, establishment of internal standards for personal information processing |
| Technical measures | Use of HTTPS, management of database access rights, application of access control features such as Supabase Row Level Security, management of administrator account security, monitoring of abnormal requests and error logs, management of database security settings |
| Physical measures | Use of physical security measures provided by cloud service providers such as Vercel and Supabase |
16. Installation, Operation, and Refusal of Automatic Data Collection Tools
Policube may install and operate automatic data collection tools such as cookies to check users’ access environment, ensure service stability, analyze usage statistics, provide advertisements, and measure advertising performance.
Users may refuse the storage of cookies through their browser settings.
| Browser | Settings path |
|---|---|
| Chrome | Settings > Privacy and security > Third-party cookies |
| Safari | Settings > Privacy > Block cookies |
| Edge | Settings > Cookies and site permissions |
If cookies are refused, some service features, advertisement display, advertising consent management, or personalized advertisement delivery may be limited.
17. Privacy Officer
Policube designates a Privacy Officer to oversee personal information processing and respond to user inquiries, complaints, and requests for remedies.
| Item | Details |
|---|---|
| Privacy Officer | Eun-suk So, Chief Executive Officer |
| Affiliation and position | Chief Executive Officer, Nacre Inc. |
| business@nacre.co.kr |
Users may contact the Privacy Officer regarding any privacy-related inquiries, complaints, or requests for remedies arising from the use of Policube. Policube will respond to and process such inquiries without undue delay.
18. Remedies for Infringement of Rights
Users may contact the following institutions for reporting or consultation regarding privacy infringement.
- Personal Information Infringement Report Center
- Personal Information Dispute Mediation Committee
- Cybercrime-related division of the Supreme Prosecutors’ Office
- Cybercrime-related division of the National Police Agency
19. Changes to this Privacy Policy
This Privacy Policy may be amended due to changes in applicable laws, service contents, personal information processing methods, processors, or overseas processing methods.
If this Privacy Policy is amended, Policube will notify users of the changes and the effective date through the service screen or notices.