Privacy Policy
Last updated and effective: October 17, 2026
1. Information we collect
Lifolio (the Service) can be used without an account and does not require directly identifying information such as your name or email address.
When you send feedback, its title and content, an optional reply email, and a hashed IP address used to deter abuse are stored. A city-cost report stores the submitted costs, description, source, and a pseudonymous browser ID, and the report may be public. Do not include personal information in reports.
Optional usage statistics collect feature events and strategy-ranking run information after consent. Calculation requests are processed as needed to provide calculations regardless of the statistics choice.
Our feature-event identifiers use daily and weekly rotating pseudonymous hashes; public rankings do not expose visitor or IP identifiers.
| Item | Purpose | Retention |
|---|---|---|
| Page route, language, device type, pseudonymous visitor/session IDs, and allowlisted feature events | Improve service quality | 13 months |
| ETF allocations, calculation conditions and metrics, entered capital and contribution amounts, and execution information stored after a usage-statistics choice. An IP hash may be used to prevent duplicate runs. | Operate rankings and strategy comparisons; improve data quality | While rankings operate or until a deletion request |
| Feedback title and content, optional email, and IP hash | Reply to and process feedback; deter abuse | Until deletion is requested or the Service ends |
| City-cost reports and votes with a pseudonymous browser ID | Publish reports, prevent duplicates, and improve data quality | Until report deletion is requested or the Service ends |
The 13-month period applies to raw Lifolio usage-statistics records. Ranking runs may include entered amounts, and hashing alone does not make all information fully anonymous. GA4 and advertising retention follow Google settings and policies.
2. Cookies and similar technology
The Service uses cookies, local storage, and session storage for these purposes:
- Functional storage — Saves recent portfolios, language, theme and sharing settings, and pseudonymous city-report/vote IDs. The theme follows your system preference unless you choose one.
- Analytics storage — Lifolio pseudonymous usage statistics run when selected. Visitor IDs rotate after 30 days. GA4 also requires Google transfer consent and a completed disclosure.
Change optional analytics choices through Cookie settings in the footer. You can also block storage in your browser, but some features may not work properly.
Basic statistics without visitor linking
When enabled, basic statistics store daily and hourly counts by page and language, and API request counts, response classes and latency bands. Separately enabled activity collection aggregates analysis starts, completions, partial results, failures, cancellations, visible results, completed saves, initiated downloads and share actions by feature and trigger. These aggregates contain no UUID, IP, IP hash, raw URL, client timestamp or financial input, and do not connect people’s journeys or return visits. Retention is 13 months. Infrastructure processing for request delivery and security is separate.
You can disable basic page and activity reporting separately in the footer cookie settings. Server operation counts remain unlinked operational aggregates. Browser opt-out signals are respected; browser reporting in the EU requires analytics consent.
3. Third-party services
The external services below operate only when configured in the production environment or when you choose the relevant feature. A provider may process information on servers outside your country; consult that provider's public policy for current processing locations, retention terms, and available controls.
GA4 is used only with both usage-statistics and international-transfer consent and a completed disclosure. Google retention is separate from Lifolio’s 13-month policy. How Google uses data from sites that use its services
When advertising messages and regional settings are verified and enabled, Google may use cookies or device information to serve and measure ads. EEA, UK and Switzerland use a Google-certified consent message; US ad requests use restricted data processing. Ads are disabled when the region is unknown. Advertising choices are separate from usage statistics. How Google uses data for advertising
You can turn off personalized ads here: Google Ads Settings
Visitors in the EEA, UK and Switzerland can also change their advertising consent under “Cookie settings” in the footer. Elsewhere, that menu changes only the Lifolio usage statistics choice.
Connects to Kakao servers only after you click a portfolio-sharing button. Kakao Privacy Policy
Used to provide ETF price data. User personal information is not sent to Yahoo Finance.
We use Cloudflare Pages and Web Analytics to deliver and secure the site and measure traffic. Cloudflare may process access time, request path, browser and device details, and network information. Cloudflare Privacy Policy
4. Sharing personal information
Lifolio does not sell collected information. Cloudflare, GA4, AdSense, or Kakao may process information needed to provide the functions described above, and information may also be disclosed when required by law.
5. Your rights
Analytics identifiers are pseudonymized before server storage and are not linked to directly identifying information. Use the in-service feedback feature to request that analytics collection stop or to access, correct, or delete collected information, feedback, or city reports. Information is deleted after the stated retention period.
6. Deletion and security measures
Information is deleted from the service without undue delay when its retention period expires or its purpose is fulfilled. If applicable law requires continued retention, the legal basis and period are confirmed and the information is stored separately. You can delete local and session storage through your browser settings.
The Service applies safeguards appropriate to its processing, including encryption in transit, restricted administrator access, input validation and request limits, and pseudonymization of analytics identifiers.
7. Privacy contact and remedies
Requests to access, correct, delete, or stop processing personal information, and related complaints, can be submitted through the channel below.
- Responsible team: Lifolio Operations
- Channel: choose ‘Question’ in the feedback button at the bottom-right of the screen
If a matter is not resolved through the Service, you may seek privacy-infringement advice or dispute resolution from the following Korean authorities.
8. Changes to this policy
When this policy changes, the effective date and content on this page will be updated. Material changes to your rights or to personal-information processing will be announced separately in the Service a reasonable time in advance.