Privacy
Privacy policy
We collect only what delivering the service requires, and destroy it once the retention period ends.
Effective September 6, 2026 — This notice explains what Dongji Communication does with personal information at WPER WordPress Support Center (wper.kr). It describes only what we actually collect and actually send; every item below has something in the code behind it.
Where your data is processed. We are a company based in the Republic of Korea and your information is held on servers there. Some of it also reaches processors in the United States, listed in section 3. If you would rather that did not happen, section 3 explains which choices avoid it.
1. What we collect
1.1 When you apply for work or buy a pass (/apply/, /infraguard/)
- Required — your name, email address, the address of the site concerned, and what kind of server it runs on
- Optional — phone number, and anything you write in the notes field
- How — you type it into the form
1.2 Your progress page account (/my/)
- Created automatically — an account whose username is your email address, a display name, and a first temporary password that is emailed to you and never stored in readable form
1.3 Server credentials (submitted only from inside the progress page)
- What — host, port, account name, password, SSH key, WordPress administrator login, and any note you add
- When — never on the application form. You can submit them only after payment has cleared and only while signed in
- How they are protected — stored encrypted with AES-256-GCM, with the encryption key in a server configuration file rather than the database. Plaintext appears in no admin screen, no web response and no log; our engineers read it through a command-line tool only
1.4 When you contact us
- Required — name, email address, topic, subject, message
- Optional — company name, phone number, the address of the site your question is about
1.5 Collected automatically
- IP address, date and time of the request, browser and operating system, and the path requested — the ordinary web server log
- A session cookie, issued only while you are using the progress page
- A bot-check token — the Cloudflare Turnstile described in section 3
2. What we use it for
- Receiving your application, quoting, and keeping you informed
- Confirming payment and matching bank transfers to orders
- Issuing your progress page account and confirming it is you
- Doing the work you commissioned and delivering the report
- Answering your questions
- Preventing abuse and automated attacks
- Meeting legal obligations and dealing with disputes
3. Who else sees it
We pass the minimum necessary information to the following, and to nobody else.
| Recipient | Why | What is sent | Kept for |
|---|---|---|---|
| PayAction (Republic of Korea) | Matching incoming bank transfers to orders automatically | Order number, amount, depositor name, order date, and optionally phone and email | Per their policy |
| PayPal Holdings, Inc. (United States) | Card and PayPal payments | Order number, amount and currency | Per their policy |
| Cloudflare, Inc. (United States) | Blocking automated bots on public forms (Turnstile) | IP address, browser environment signals | Per their policy |
| Google LLC (United States) | Machine translation — optional. Runs only if you pick a language other than Korean or English | IP address, the page text being translated | Per their policy |
Machine translation is switched on only when you choose one of those languages. If you would rather nothing left our servers, read the site in Korean or English — we wrote both ourselves, so no translation request is made.
You can decline any of this by not using the payment method or feature concerned. Declining the payment processors does mean the paid services are not available to you.
We do not sell your personal information, and we do not share it for advertising. We disclose it to authorities only on a lawful request, and we check that the request is lawful before we do.
4. How long we keep it
Several of these periods are set by Korean law rather than chosen by us; the basis is given alongside each.
| What | Kept for | Why |
|---|---|---|
| Orders and payment records | 5 years | Korean Act on Consumer Protection in Electronic Commerce |
| Contracts and withdrawal-of-offer records | 5 years | Same Act |
| Complaints and dispute records | 3 years | Same Act |
| Server credentials | Destroyed as soon as the work is finished | The moment there is no reason to hold them |
| Applications that were never paid for | 90 days from collection | No contract came into being |
| Messages you send us | 3 years from collection | Dealing with disputes |
| Progress page account | Until you ask us to close it | Providing the service |
| Web server logs and IP addresses | 3 months maximum | Korean Protection of Communications Secrets Act |
Once a period ends we destroy the data without delay: electronic files are deleted so they cannot be recovered, and anything printed is shredded or incinerated.
5. Your choices
- Ask to see, correct, delete your personal information, or to stop us processing it
- Ask us to close your progress page account
- Ask us to destroy submitted credentials immediately — you can do this even mid-engagement, and the work stops when you do
- Withdraw consent — though transaction records we are legally required to keep stay for the statutory period above
Write to the address in section 7, by email or on paper. We act without delay, and within 10 days, and tell you what we did.
6. How we protect it
- Encryption — server credentials are encrypted with AES-256-GCM; passwords are stored in a form that cannot be decrypted; payment gateway credentials are held the same way as the credentials
- In transit — HTTPS across the whole site
- Access control — administrative access kept to a minimum, client accounts blocked from the admin area, and plaintext credentials kept out of screens and logs
- Reduced attack surface — XML-RPC blocked, user enumeration blocked, script execution disabled in the uploads directory, login attempts rate-limited
- Bot protection — automated verification on public forms
7. Contacting us, and complaining
- Company: Dongji Communication
- Email: contact@wper.kr
- Address: #1617, Bldg 1, Western Tower, 24 Jeongbalsan-ro, Ilsandong-gu, Goyang-si, Gyeonggi-do, Republic of Korea
If you are not satisfied with how we handled your personal information, you can take it to the Korean supervisory bodies below. They operate in Korean; if that is difficult, write to us and we will help you file.
- Privacy Infringement Report Centre — privacy.kisa.or.kr / 118 (in Korea)
- Personal Information Dispute Mediation Committee — kopico.go.kr / 1833-6972
- Supreme Prosecutors’ Office, Cybercrime Investigation — spo.go.kr / 1301
- National Police Agency, Cyber Bureau — ecrm.police.go.kr / 182 (in Korea)
8. Changes to this notice
If we add to, remove from or amend this notice we post the change here at least 7 days before it takes effect, and at least 30 days before where it materially affects your rights.
Language. This English text is written for an English-speaking reader rather than translated line by line, and its substance matches the Korean original. Where the two differ, the Korean version prevails.