Privacy policy

01 Who to contact

The WURILUV operator is responsible for the personal information described here. Privacy contact: JEONGWU SEOK (석정우), wuriluv@neo-korea.com. Use the contact form or this email for access, correction, deletion, restriction, consent withdrawal or other privacy questions. We will explain any additional information reasonably needed to verify a request; do not send identity documents or passwords unsolicited.

02 Registration and account information

Current required signup information: username, email address, password and nickname, plus confirmation that you are 18 or older and agreement to the terms and privacy notice. We retain the selected interface language, agreement version, registration and activation records. Passwords are stored as hashes, not in readable form.

We use these details to create and authenticate the account, verify the email address, recover access, send necessary service notices and prevent misuse. A real name, birth date, gender, telephone number, payment information or identity document is not required for current registration. If you decline required account information, we cannot create an account; you can still view public information pages.

03 Information you choose to share

Optional profile information, profile images, biography, interests, groups, posts, replies, activity, messages, friendship relationships, block lists and visibility preferences are processed to provide the features you use. Do not include sensitive information or another person's personal data unless necessary and lawful.

Accounts migrated from the earlier site may still contain voluntarily supplied or previously collected profile information, including birth date, telephone, gender, nationality, region, interests, education or other profile details. These historical records are distinct from the current minimal signup form. You may review, correct or ask us to remove them; birth date and phone fields are restricted in the current profile configuration.

04 Inquiries, reports and their purposes

The contact form collects a name or nickname, reply email, inquiry category, message and confirmation of consent. These are used to respond, handle follow-up and protect the service. A report may contain the reporting account, target account, report text, time and moderation records. Provide only what is necessary; do not submit passwords, financial details, intimate material or identity documents.

Contact messages are sent to wuriluv@neo-korea.com and are not stored as contact submissions in the website database. Email systems may hold the message and delivery records. Member reports are stored privately in the website database for authorised administrators. Declining the contact-form information prevents submission, but does not restrict ordinary membership.

05 Technical information and cookies

Web and security systems process IP addresses, request times, requested URLs, response codes, browser information and relevant login or abuse events for delivery, troubleshooting and security. Form protection uses short-lived nonce/token identifiers and hashed rate-limit keys; contact message bodies are not included in these keys.

Necessary WordPress cookies maintain login sessions. The wuri_lang cookie remembers your selected interface language for up to one year. Cookie duration for authentication depends on the login option. You can clear or block cookies in your browser's privacy settings, but login and language preferences may stop working. The built-in math CAPTCHA is served locally rather than sending a Google reCAPTCHA challenge.

06 Why processing is permitted

We process information necessary to provide the service you request, fulfil applicable legal obligations, and protect legitimate service-security interests where permitted and balanced against your rights. Where consent is required, we request it for the specific purpose; optional information or marketing must not be bundled as a condition of ordinary membership.

We do not use this form to enrol you in marketing. A new purpose, sensitive-data use or a legally required separate consent must be explained before it is introduced. This policy is a notice of processing, not unlimited consent to unrelated uses.

07 What other people can see

Member directories, profiles and community routes require login. Within the community, visibility depends on the feature, field and group settings. Nicknames identify contributions. Recipients can read messages sent to them. Directory hiding removes an account from supported listings; it does not automatically hide every direct profile link, post or group contribution.

Uploads and direct media URLs may be accessible to someone who has the link, and other members can copy or screenshot material. Do not treat the service as confidential storage. Posts you publish outside private areas or copies held by recipients may remain outside our control. We do not sell member profiles or authorise unrelated third-party use through this policy.

08 Service providers and disclosures

The website and database are hosted on the operator's server in Korea. Amazon Web Services (AWS) SMTP infrastructure is used to transmit service and contact email; this involves sender/recipient addresses, message content and delivery information. Delivery also involves the receiving email provider. This processing is separate from public disclosure of your profile.

The current AWS SMTP connection endpoint uses IP ranges assigned to the Japan (Tokyo) region, ap-northeast-1. This identifies the connection route, not every downstream processing or storage location. The detailed AWS rule set, archive/log destinations and their retention settings have not yet been fully verified. We therefore do not claim that all email copies remain in Korea or that every provider copy is automatically deleted after one year. We restrict disclosure to what is needed for the service or a lawful request, and will update this notice as the remaining settings are confirmed. Where applicable law requires additional cross-border-transfer disclosures, safeguards or separate consent, this notice does not replace them. Do not send sensitive material; contact JEONGWU SEOK at wuriluv@neo-korea.com about processing details.

09 Retention periods

Account and optional profile information is kept while the account is active, then deleted or anonymised when no longer needed, subject to documented legal preservation requirements. Community content and recipient-held messages may outlast account closure where needed for conversation continuity or retained by others; ask for removal of identifying content when appropriate.

We retain inquiry records for one year after handling is complete, and report/dispute records for one year after resolution. A documented legal preservation requirement or an ongoing claim may justify retaining the necessary records longer; access is restricted and the need for continued retention is reviewed. The operator uses the completion or resolution date to review and delete expired records in the support mailbox and report system. Contact-form bodies are not stored in the website database; this policy does not mean that mailbox deletion is automated.

Routine Nginx access logs are configured for daily rotation with 14 retained rotations. Security and incident records, including protected recovery backups, may need separate retention while an investigation, recovery or legal obligation remains active. They are restricted from ordinary use and must be reviewed for necessity; we do not describe them as automatically purged on a fixed day. Form replay claims are scheduled for removal after two hours; security rate-limit entries expire on their configured short interval.

10 Deletion and protected backups

When a purpose ends or a valid deletion request is fulfilled, unnecessary information is removed or anonymised from active systems. Information that must be preserved by law is separated or access-restricted and used only for that purpose. Electronic records are deleted with appropriate methods, and paper records, if any, are shredded or otherwise securely destroyed.

Backups are not live member directories. A deletion may not instantly remove a record from every protected backup or a recipient's email system. Any preserved copy must remain restricted, be reviewed and removed when no longer necessary, and not be restored into ordinary use contrary to a completed deletion request.

11 Your choices and rights

You can review and edit available profile fields, adjust directory preferences, block members and request account closure. Contact the privacy officer to request access, correction, deletion, restriction, withdrawal of consent or applicable portability/objection rights. An authorised representative may act with appropriate evidence of authority.

We respond within the period required by applicable law. If a request must be limited for a lawful reason, we explain the reason and available remedies. Withdrawing optional consent does not prevent unrelated service use; deleting essential account data may end the account. Do not send more identity evidence than we request through an appropriate channel.

12 Children and sensitive information

WURILUV is intended for adults aged 18 and over and does not knowingly offer membership to children. If you believe a minor's account or information is present, contact us so we can assess and restrict or remove it as appropriate. An age checkbox and email activation are not comprehensive age verification.

Do not publish health, sexual-life, biometric, identity-document, precise-location or similar sensitive information about yourself or others. Any future feature requiring sensitive information or child-related processing would need a separate legal and safety assessment before launch.

13 Security and incident handling

Current safeguards include HTTPS, password hashing, restricted administrative access, application isolation, login/abuse protection and protected backups. Measures reduce risk but cannot guarantee that a breach or interruption will never occur. We investigate suspected incidents, contain relevant risks and make legally required notifications.

Use a unique password, keep your email account secure, and report suspicious messages or unauthorised access. WURILUV staff will not ask you to send your password through the contact form.

14 Complaints, languages and updates

Start with JEONGWU SEOK (석정우) at wuriluv@neo-korea.com. You may also contact the Korea privacy infringement reporting service (118; privacy.kisa.or.kr), the Personal Information Dispute Mediation Committee (1833-6972; kopico.go.kr), or the relevant authority in your location. Using our contact channel does not waive those rights.

This revision is dated 16 September 2026. Material changes will identify their effective date and be explained on the site, with additional notice or consent where required. English, Japanese, Chinese and Korean versions follow the same structure. Ask us about a translation inconsistency; mandatory legal rights are not reduced by a language choice.