개인정보처리방침

1. 소개

ccshare.cc("우리", "당사" 또는 "우리를")는 귀하의 개인정보 보호에 최선을 다하고 있습니다. 본 개인정보처리방침은 귀하가 당사 서비스를 사용할 때 귀하에 대한 정보를 수집, 사용 및 공유하는 방법을 설명합니다.

Data Controller: Insomnia Inc., Business Registration Number: 362-81-00644, located at 14F, 23 Boramae-ro 5-gil, Dongjak-gu, Seoul, Republic of Korea.

By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and processing of your information as described herein.

2. 수집하는 정보

2.1 Personal Information You Provide Directly

We collect information you voluntarily provide when using our Service:

• Account Information: Email address, username, password (hashed), profile information
• Content Data: Claude Code sessions, prompts, code snippets, file changes, descriptions, and notes you choose to share
• Communication Data: Comments, likes, and other interactions with shared content
• API Data: API keys for CLI integration (encrypted at rest)
• Support Data: Information provided when contacting support

자동으로 수집되는 정보

When you use our Service, we automatically collect:

• Log Data: IP address, browser type and version, pages visited, time and date of visit, time spent on pages
• Device Information: Operating system, device type, unique device identifiers
• Usage Data: Features used, sharing patterns, search queries, click data
• Performance Data: Page load times, errors, API response times

2.3 Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences

3. 정보 사용 방법

3.1 Purposes of Processing

We process your personal information for the following purposes:

• Service Provision: To create and manage your account, enable sharing of Claude Code sessions, provide API access
• Communication: To send service-related notifications, respond to inquiries, provide technical support
• Improvement: To analyze usage patterns, improve features, develop new functionality
• Security: To detect and prevent fraud, abuse, unauthorized access, and other security incidents
• Legal Compliance: To comply with legal obligations, respond to legal requests, protect our rights
• Analytics: To generate aggregated statistics about Service usage (anonymized)

3.2 Legal Basis for Processing (GDPR)

We process your personal information based on:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Improving our Service, preventing fraud, ensuring security
• Legal Obligations: Complying with applicable laws and regulations
• Consent: Where you have provided explicit consent for specific processing

4. 정보 공유 방법

당사는 귀하의 개인정보를 판매하지 않습니다. 다음과 같은 경우에 귀하의 정보를 공유할 수 있습니다:

4.1 Public Content

When you choose to make a share public, the following information becomes publicly accessible:

• Your username and profile information
• The shared Claude Code session content
• Comments and interactions on the share
• Timestamp and metadata of the share

4.2 Third-Party Service Providers

We work with trusted service providers who assist us in operating our Service:

• Infrastructure: Cloud hosting providers (data stored in secure data centers)
• Analytics: Usage analytics services (anonymized data only)
• Communication: Email service providers for transactional emails
• Security: Security monitoring and threat detection services

All service providers are contractually obligated to protect your information and use it only for providing their services to us.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Court orders, subpoenas, or other legal processes
• Government or regulatory requests
• To protect our rights, privacy, safety, or property
• To prevent or investigate fraud or security issues

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

5. 데이터 보존

5.1 Retention Periods

We retain your information for different periods depending on the type of data:

• Account Data: As long as your account is active plus 30 days after deletion request
• Content Data: Public shares: indefinitely unless deleted by you. Private shares: as long as account is active
• Log Data: 90 days for security and debugging purposes
• Analytics Data: 2 years in anonymized form
• Legal Records: As required by applicable laws (typically 3-5 years)

5.2 Account Deletion

When you delete your account:

• Your personal information is immediately marked for deletion
• Data is permanently deleted within 30 days
• Some information may be retained in backups for up to 90 days
• Anonymized data used for analytics may be retained

Note: Public shares may remain accessible if they have been copied or archived by other users before deletion.

6. 보안

6.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: TLS/SSL encryption for data in transit, AES-256 encryption for sensitive data at rest
• Access Control: Role-based access control, multi-factor authentication for administrative access
• Infrastructure: Secure cloud infrastructure with regular security audits
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Password Security: Passwords hashed using bcrypt with salt

6.2 Data Breach Response

In the event of a data breach that may affect your personal information:

• We will notify affected users within 72 hours of discovery
• We will provide information about what data was affected
• We will offer guidance on protective measures you can take
• We will notify relevant authorities as required by law

6.3 Your Security Responsibilities

You are responsible for maintaining the security of your account credentials, using strong passwords, and notifying us immediately of any unauthorized access to your account.

7. 귀하의 권리

7.1 Rights Under GDPR (EU Users)

If you are located in the European Economic Area, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing
• Object: Object to processing based on legitimate interests
• Automated Decisions: Not be subject to solely automated decision-making

7.2 Rights Under Korean Privacy Law

Under the Personal Information Protection Act of Korea, you have the right to:

• Be informed about the processing of your personal information
• Access and receive a copy of your personal information
• Request correction, deletion, or suspension of processing
• Withdraw consent at any time
• File complaints with the Personal Information Protection Commission

7.3 How to Exercise Your Rights

To exercise any of these rights:

• Contact us at privacy@ccshare.cc
• Use the account settings to access or delete your data
• We will respond within 30 days of your request

We may need to verify your identity before processing your request to protect your privacy.

8. International Data Transfers

Our servers are located in secure data centers. If you access our Service from outside the Republic of Korea, your information may be transferred to, stored, and processed in Korea.

We ensure appropriate safeguards are in place for international transfers:

• Standard contractual clauses approved by the European Commission
• Ensuring recipients provide adequate data protection
• Encryption of data during transfer

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 16 without parental consent, we will delete that information as quickly as possible.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access through our Service.

9. 방침 변경

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons.

For material changes, we will:

• Post a prominent notice on our Service
• Send an email notification to registered users
• Update the "Last updated" date at the top of this policy

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

10. 문의하기

본 개인정보처리방침에 대해 궁금한 점이 있으시면 다음으로 연락해 주십시오:

Supervisory Authorities

You have the right to lodge a complaint with a supervisory authority:

• Korea: Personal Information Protection Commission (privacy.kisa.or.kr)
• EU: Your local data protection authority

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@ccshare.cc or use the "Do Not Sell My Personal Information" link in the footer.