Last updated: 2026-10-08 · Little Legend Books (https://little-legend-books.pages.dev), operated by KunStudio (쿤스튜디오).
1. What we collect
Usage analytics — we run Google Analytics 4 (measurement ID G-109DQ8DQF0) on this site. It records device and browser type, approximate region (Google Analytics 4 does not log or store IP addresses), pages viewed and interaction events, using cookies and similar identifiers.
Your child’s details, email and shipping address — see “Your child’s details” below.
Payment data — handled by PayPal; we see the order status and order ID. See “Payments and orders” below.
Feedback, referral and share data — see “Feedback, referral and share buttons” below (the referral part runs on page load).
Page fonts — the page loads fonts from Google Fonts, so Google receives your IP address and browser details when the page loads.
Server logs — our host (Cloudflare) keeps standard request logs for security and abuse prevention.
2. Why we use it
We use the data above to see which pages are useful and improve them, to deliver what you bought and to take payment through PayPal, and to keep the site available and secure. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
3. How long we keep it
Event-level analytics data is kept by Google for 2 months (currently the period set on our Google Analytics property) and then deleted automatically; aggregate reports remain. Server logs are kept for a short period by our host. Feedback and referral records are kept until we delete them (see “Feedback, referral and share buttons”). Email you send us is kept only as long as needed to answer you, and then deleted.
Your child’s details
What we collect. To write the storybook you enter your child’s first name, age, gender, two personality traits and a story theme. We do not ask for or accept a photo of your child. The PayPal order we create is described as “Custom storybook for” plus your child’s first name, so PayPal and your receipt show that name.
Where it is stored. When you start checkout, these details are saved in our hosting key-value store with the order, with a 30-day expiry (so an order you start but never pay for is removed after 30 days). After payment we add the email address PayPal returns and, for a printed edition (if offered at checkout), the shipping address PayPal returns, and the record then expires after 90 days. When our fulfilment program later updates that record (for example to mark it delivered) it rewrites it without an expiry, so the record — including your child’s details and your email — can remain after 90 days until we delete it. We delete a record on request; email us the order ID.
Where it is processed. The book is made by our own fulfilment program on a rented always-on server operated by KunStudio (its location is not fixed and is not stated here). It sends your child’s first name, age, gender, traits and story theme to a text-writing provider (OpenAI first; Google Gemini and NVIDIA only as fallbacks) to write the story, and sends image prompts built from the story — which include your child’s first name, age and a gender description — to fal.ai to draw the illustrations. No photo is involved. The finished PDF is kept on that server (we have no deletion schedule for it) and emailed to you through Gmail.
Operator alerts. When an order is paid our server sends the operator a Telegram message with the order ID, product, amount, your child’s name, age, gender, traits and theme, your email and (for a printed edition) the shipping address, so the order can be fulfilled. We also email you a receipt through Gmail.
What we do not do. We do not sell any of it, do not build advertising profiles of children and do not use it to train AI models.
Payments and orders
PayPal takes your payment through PayPal’s own buttons. We never receive or store your card number or PayPal password. PayPal sends us the order status and the payer email, name and shipping details it holds for the order.
Purchase measurement. Once PayPal confirms a payment, our server sends Google Analytics one purchase event with the PayPal order ID, the amount, the currency and the product code, tied to your Google Analytics browser ID if your browser sent one (otherwise to a code derived from the order ID). This event is sent by our server and is not controlled by the cookie banner (where there is one).
Feedback, referral and share buttons
Feedback button. If you use it, the message you write, the optional email address you type, the feedback type, the page you were on, the first 160 characters of your browser’s identification text (User-Agent) and your country are sent to KunStudio’s own feedback endpoint (sajuapp.app, run by us). They are saved in a file in a GitHub Gist controlled by us (GitHub, Inc., United States) that keeps the most recent 500 entries with no other time limit, and the message, page and email are forwarded to the operator in a Telegram message. Do not put anything confidential in the message. To have an entry deleted, email us.
4. Who else processes your data
These providers process data for us. Each entry says what is sent, to which country, why, and how to reach or read the provider.
fal.ai — To generate your images. What is sent: image prompts built from the story, which include your child's first name, age and a gender description (no photo). Country: United States. Contact / policy:support@fal.ai · privacy policy.
OpenAI — To write text for your result (fallback provider). What is sent: your child's first name, age, gender, traits and story theme. Country: United States. Contact / policy:privacy policy.
Google LLC (Gemini API) — To write text for your result. What is sent: your child's first name, age, gender, traits and story theme (fallback). Country: United States. Contact / policy:privacy policy.
NVIDIA — To write the story text (last-resort fallback provider). What is sent: your child's first name, age, gender, traits and story theme (last-resort fallback). Country: United States. Contact / policy:privacy policy.
PayPal — To take payment. What is sent: your payment (PayPal receives it directly from you; we receive the order status). Country: United States and other countries. Contact / policy:privacy policy.
Google LLC (Gmail) — To email you a copy of your results. What is sent: your email address, your receipt and the finished book (PDF). Country: United States. Contact / policy:privacy policy.
Telegram — To alert the operator to paid or failed orders. What is sent: operator alerts that include your child's details, your email and any shipping address (see above). Country: various (Telegram operates data centres worldwide). Contact / policy:privacy policy.
GitHub, Inc. (Gist) — Storage of feedback and referral records. What is sent: feedback messages and the referral ledger kept by KunStudio (see “Feedback, referral and share buttons”). Country: United States. Contact / policy:privacy policy.
Cloudflare, Inc. — Hosting, CDN, security and the storage of our short-lived records. What is sent: every request to this site (IP address, browser, pages) and the data our server functions handle while they run. Country: United States and other countries. Contact / policy:privacy policy.
Google LLC (Google Analytics) — Usage measurement. What is sent: device and browser type, approximate region (Google Analytics 4 does not log or store IP addresses), pages viewed, events, and (for a purchase) order ID, amount and product code. Country: United States. Contact / policy:privacy policy.
Google LLC (Google Fonts) — To serve the page fonts. What is sent: your IP address and browser details when your browser loads the page fonts. Country: United States. Contact / policy:privacy policy.
5. International transfers
KunStudio operates from the Republic of Korea. The providers in section 4 process data outside Korea (mainly in the United States) as shown above. Where required, transfers rely on the safeguards each provider describes in its own privacy policy. Korea (PIPA Article 28-8(1)3): these transfers are entrusted processing and storage that is necessary to carry out our contract with you, which we disclose here. The items, countries, recipients and purposes are the ones listed in section 4; the transfer happens over the internet at the moment you use the feature that needs it (upload, preview, payment, generation or email); the retention period is the one stated for each item above and in each provider’s own policy; and you may refuse the transfer by not using that feature — but the service cannot be provided without it.
6. Your rights
EU / UK (GDPR): you may request access to, correction of, deletion of, or restriction of processing of your personal data, object to processing, and request portability. Where we rely on consent (the cookie banner on this site, which you can reopen by clearing the ks_consent cookie), you may withdraw it at any time. You may also complain to your national supervisory authority.
California (CCPA / CPRA): you have the right to know, delete, correct, and to opt out of the sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of; you may also use your browser’s privacy controls.
Korea (PIPA): you may ask to view, correct, delete or suspend processing of your personal information, and may withdraw consent, by writing to the privacy officer below. We tell you the result within the period set by the Act.
Everyone else: we apply the same handling to all visitors regardless of where you are.
7. Cookies and automatic collection
This site involves analytics cookies set by Google Analytics; the ks_consent cookie that remembers your cookie-banner choice. None of them are required for the pages to work — you can block or delete cookies and local storage in your browser settings and the content will still load.
A cookie banner (Google Consent Mode) asks for your choice. Where it applies, analytics storage stays off until you accept; in some regions it may be on by default and you can switch it off in the banner. The purchase event our server sends after payment (see “Payments and orders”) is not controlled by the banner.
8. Children
This site is not directed at children under 14 (under 16 in the EEA, under 13 in the United States) and we do not knowingly collect their personal information — the storybook is bought by a parent or guardian and the child's details are entered by that adult. If you believe a child has provided us data, write to the address below and we will delete it.
9. Security and destruction of personal information (PIPA Articles 29 and 30)
Our measures: Data is sent over HTTPS; we collect only what the service needs; payment details stay with PayPal; access keys for our services are kept out of the web pages. Records in our hosting key-value store carry an automatic expiry where this policy states a period and are removed by the platform when it passes. Email we receive is deleted when no longer needed. Files at providers and feedback/referral records are deleted when you ask us, as described above.
10. Changes
If this policy changes we update the date at the top of this page. Material changes will also be noted on the home page.
11. Privacy officer and contact
Privacy officer (개인정보 보호책임자): Hong Deokhun (홍덕훈), KunStudio, 070-8018-7832, ghdejr11@gmail.com. We reply within a reasonable time and, where a legal deadline applies, within that deadline.
KunStudio (쿤스튜디오), operated by KunStudio · Representative Hong Deokhun (홍덕훈) · Business Registration No. 552-59-00848 · Mail-order business report No. 제2026-경북경주-0237호 (경주시장, 2026-05-20). 25-52, Jenaemosan-gil, Oedong-eup, Gyeongju-si, Gyeongsangbuk-do, Republic of Korea Tel: 070-8018-7832 (+82-70-8018-7832) · Email: ghdejr11@gmail.com
개인정보 처리방침 요약 (한국 이용자)
1. 처리 목적. 결제 처리, 주문한 결과물의 생성·전달, 환불·문의 응대, 서비스 보안 및 이용 통계. 개인정보를 판매하거나 광고 목적으로 제3자에게 제공하지 않습니다.
2. 처리 항목. Google Analytics 4 이용 통계 · 접속 정보(기기·브라우저·열람 페이지) · PayPal 주문번호·상품·시각 · 자녀의 이름·나이·성별·성격·주제, 이메일, (인쇄판일 경우) 배송지 · (피드백·추천 버튼 사용 시) 메시지·이메일·방문자 식별 해시.
3. 보유 기간. Google Analytics 이용 통계는 2개월(현재 GA 속성 설정) 후 삭제; 주문 기록(자녀 정보)은 결제 시작 시 30일 만료로 저장되고(결제하지 않으면 30일 뒤 삭제), 결제 후에는 이메일·배송지가 더해지며 90일 만료로 갱신되지만 이행기가 다시 갱신하면서 만료가 없어지므로 90일 뒤에도 남을 수 있고 요청 시 삭제; 피드백·추천 기록은 삭제 요청 시까지 보관. 이메일 문의는 응대에 필요한 기간 동안만 보관 후 삭제합니다.
4. 제3자 제공. 이용자의 동의가 있거나 법령에 근거가 있는 경우를 제외하고 제3자에게 제공하지 않습니다.
5. 처리 위탁 및 국외 이전(개인정보보호법 제26조·제28조의8 제1항 제3호). 서비스 제공(계약 이행)을 위해 아래 업체에 처리를 위탁·보관하며, 모두 국외(주로 미국)에서 처리됩니다. 이전 시기·방법은 해당 기능(업로드·미리보기·결제·생성·메일)을 이용하는 시점에 인터넷으로 전송됩니다. 이전을 원하지 않으면 해당 기능을 이용하지 않으시면 되며, 이 경우 서비스를 제공할 수 없습니다.
fal.ai — 이전 항목: 자녀 이름·나이·성별 묘사가 포함된 이미지 프롬프트(사진 없음) / 국가: 미국 / 이용 목적: 이미지 생성 처리 위탁·파일 저장 / 연락처: support@fal.ai (개인정보 처리방침)
OpenAI — 이전 항목: 자녀의 이름·나이·성별·성격·주제 / 국가: 미국 / 이용 목적: 결과물(텍스트) 생성 처리 위탁(예비 업체) / 연락처: 처리방침 참조 (개인정보 처리방침)
Google LLC (Gemini API) — 이전 항목: 자녀의 이름·나이·성별·성격·주제(예비) / 국가: 미국 / 이용 목적: 결과물(텍스트) 생성 처리 위탁 / 연락처: 처리방침 참조 (개인정보 처리방침)
NVIDIA — 이전 항목: 자녀의 이름·나이·성별·성격·주제(최후 예비) / 국가: 미국 / 이용 목적: 동화 텍스트 생성 처리 위탁(최후 예비 업체) / 연락처: 처리방침 참조 (개인정보 처리방침)
PayPal — 이전 항목: 결제 정보(이용자가 PayPal 에 직접 입력, 당사는 주문 상태만 수신) / 국가: 미국 등 / 이용 목적: 결제 처리 / 연락처: 처리방침 참조 (개인정보 처리방침)
Google LLC (Gmail) — 이전 항목: 이메일 주소·영수증·완성된 책(PDF) / 국가: 미국 / 이용 목적: 결과 사본·주문 안내 메일 발송 / 연락처: 처리방침 참조 (개인정보 처리방침)
Telegram — 이전 항목: 자녀 정보·이메일·배송지가 포함된 운영자 알림 / 국가: 여러 국가(텔레그램 데이터센터) / 이용 목적: 유료·실패 주문 운영자 알림 / 연락처: 처리방침 참조 (개인정보 처리방침)
GitHub, Inc. (Gist) — 이전 항목: 당사가 보관하는 피드백 메시지와 추천 원장(“피드백·추천·공유” 참조) / 국가: 미국 / 이용 목적: 피드백·추천 기록 저장 / 연락처: 처리방침 참조 (개인정보 처리방침)
Cloudflare, Inc. — 이전 항목: 이 사이트로 오는 모든 요청(IP 주소·브라우저·페이지)과 서버 함수가 실행 중 처리하는 데이터 / 국가: 미국 등 / 이용 목적: 호스팅·보안·단기 기록 저장 / 연락처: 처리방침 참조 (개인정보 처리방침)
Google LLC (Google Analytics) — 이전 항목: 기기/브라우저·대략적 지역(GA4 는 IP 주소를 기록·저장하지 않음)·열람 페이지·이벤트, 구매 시 주문번호·금액·상품 코드 / 국가: 미국 / 이용 목적: 이용 통계 측정 / 연락처: 처리방침 참조 (개인정보 처리방침)
Google LLC (Google Fonts) — 이전 항목: 브라우저가 글꼴을 불러올 때 IP 주소·브라우저 정보 / 국가: 미국 / 이용 목적: 글꼴 제공 / 연락처: 처리방침 참조 (개인정보 처리방침)
6. 안전성 확보 조치·파기. HTTPS 전송, 필요 최소 수집, 결제 정보는 PayPal 이 보관, 호스팅 저장소 기록은 기간이 있는 항목에 자동 만료를 걸어 삭제합니다. 이메일은 필요 없어지면 삭제하고, 업체·피드백·추천 기록은 요청 시 삭제(업체 파일은 당사가 삭제를 요청)합니다.
7. 정보주체의 권리. 열람·정정·삭제·처리정지 및 동의 철회를 아래 책임자에게 이메일 또는 전화로 요청할 수 있습니다.
8. 자동 수집 장치(쿠키). Google Analytics 쿠키 · 쿠키 동의 선택 쿠키(ks_consent)를 사용할 수 있으며 브라우저 설정에서 거부할 수 있습니다.