Operator Opening Step
Privacy contact Hyeongyu Jang · 2024opennext@gmail.com
Most of YOU’RE NEXT works without login or sign-up. Only the Arena, a Korean-language feature where people compete with their resumes, requires signing up with a Google account. The service collects nothing beyond what is listed below. This policy applies in the same way to every page for all seven countries and regions: South Korea, the United States, Japan, Taiwan, Thailand, Canada and Hong Kong.
| Data | When | Purpose | Kept |
|---|---|---|---|
| University data correction request | When you submit one — school name, the correction, source URL, contact email (optional), anonymous identifier | Checking and correcting the data; replying to the email you gave | Until the review and reply are done, or until you ask for deletion |
| Contact form (bug reports and partnership inquiries) | When you send one from the contact page — your message, your email (optional for a bug report, required for a partnership inquiry), the kind of message and the page language, the path of the screen you were on just before, browser information, the time. To prevent repeated sending: a hash of your network address and the times you sent. The kind of message and how the send ended (accepted, stopped by a check and so on) may also be recorded in usage statistics (Google Analytics 4); your message and email are never sent there | Checking and fixing errors; reviewing partnership inquiries; replying to the email you gave; preventing repeated sending | One year. Messages become eligible for automatic deletion after one year and the repeated-sending record after 2 days. Physical deletion runs asynchronously. |
| Comments | When you post a comment — nickname (optional), text, an anonymous identifier | Showing the comment, letting you delete or report it | Until you delete it |
| Community posts | When you post in “AI vs Humans” — nickname, text, the side you pick (Team AI or Team Human), a related job or major (optional), country (optional), language, anonymous identifier, time | Showing the post (the anonymous identifier is not shown); preventing repeated posts and flooding | Until you delete it. Deleting removes the text and nickname at once; the records needed to handle abuse (anonymous identifier, side, tags, time) are kept while the service operates and deleted on request |
| Community likes and reports | When you like or report a post — whether you liked it, the report reason and details (optional, up to 500 characters), anonymous identifier, time; a record that stops the same request from being processed twice; recent activity times and recent post text used to limit excessive use | Counting likes, reviewing reports, preventing spam and abuse | While the service operates (deleted on request) |
| Job and major requests | When you tap “Can’t find the job? Request it” (or the major version) in search — the text you typed, job or major, UI language, country, date (no anonymous identifier) | Finding and adding missing jobs and majors | Up to 24 months |
| Compare with friends | When you create, join or edit a comparison — nickname, selected job and major identifiers, graduation year (for a major), comparison country, room and participant identifiers, creation/join/update times, and a private hash of your anonymous authentication identifier. Request fingerprints and activity times prevent duplicate creation and excessive use | Comparing results, editing or removing your entries, closing a room you created, and preventing duplicate requests and abuse | The link expires 30 days after room creation. Removing your entries or closing the room clears the affected participant content. Rooms and duplicate-creation records become eligible for automatic deletion after 30 days; rate-limit records do so 30 days after their last update. Physical deletion runs asynchronously. |
| Invite link | When you create an aptitude-test invite link — the creator’s anonymous identifier, number of friends who arrived, UI language, expiry date; for each visitor who arrives through the link, their anonymous identifier and arrival time (so nobody is counted twice) | Showing invite progress | 30 days after issue (deleted after expiry) |
| Arrival statistics | Once per session on first arrival — the referral tag in the link, UI language, type of entry page, hostname of the previous site, date | Counting which channels bring visits | Up to 24 months |
| Result statistics | Once per test in Life Difficulty (editing answers and recalculating sends nothing more) — model version, country of residence, level, 10-point score band, whether it was an example result (no answers, amounts, exact score or nickname are sent; only monthly running totals are kept, no individual record) | Improving the service | Up to 24 months (a month’s totals are deleted automatically after 24 months) |
Who can see a comparison — Anyone with the link can view participants’ nicknames, jobs, majors, graduation years, comparison country, results and join times. Responses also include room and participant identifiers, but never Firebase authentication identifiers or their private hashes. Links can be forwarded, so avoid real names or other information you do not want to share. Access and changes are blocked at 30 days even if physical deletion has not finished. Comparison nicknames, room and participant identifiers, submitted entries and authentication details are not sent to analytics.
Arrival statistics and job or major requests never store your IP address, the exact page path, or a device identifier. The anonymous identifier is a random value created by Firebase Anonymous Authentication; it is not linked to an Arena account or to your name. A comment’s anonymous identifier is not shown on the page, but it is stored with the comment data, which anyone can read, so comments written with the same identifier can be linked. Invite progress (the creator’s anonymous identifier and the number of friends who arrived) can also be read by anyone who knows the invite code. If you enter an email in a university correction request, it is stored with that request together with the anonymous identifier.
Deleted past data — Email addresses collected for fit-test result alerts (until the form was removed on September 19, 2026) and advertising or partnership inquiries (including the emails that forwarded them to the operator) were all deleted on September 26, 2026. We no longer collect or keep fit-test alert emails. Since 12 November 2026 we take partnership inquiries again, through the contact page, and handle them as described in the table above.
The Arena (youre-next.app/ko/arena/) is a Korean-language feature where people compete with their resumes under a nickname assigned automatically instead of their name. You write your resume without logging in and sign in with a Google account at the last step, when you submit it. Arena accounts are not linked to the anonymous identifiers used by other features.
| Data | When | Purpose | Kept |
|---|---|---|---|
| Google account | When you sign in with Google Google account identifier, email address, sign-up and last sign-in times, and what you confirmed at sign-up (that you are 14 or older and were shown this policy) with the time. The name and profile photo address that Google sends at sign-in stay in the sign-in record kept by Firebase, but are never shown on screen or to other users | Verifying it is you; stopping one person from using several accounts and banned accounts from signing up again; checking identity for inquiries and deletion requests | Until you delete your account |
| Resume | When you submit or edit a resume Education (school, degree, major, status, start and graduation month), work history (company, role, start and end month, whether you still work there, duties, results), awards (name, level, month), certificates (name, issuer, month obtained and expiry month), the nickname assigned to you, and when it was submitted and edited. There are no fields for a name, contact details or photo | Building and judging matches; working out scores, tiers and rankings | Until you delete your account |
| Profile settings (optional) | When you fill them in on the account screen Links to Instagram, Threads, X, YouTube, TikTok, LinkedIn, a blog or a website, and whether you accept comments | Showing them on your profile | Until you remove them or delete your account |
| Matches and verdicts | When a match opens and is judged Copies of both resumes as they were for the match, the judges assigned, each judge’s choice for each item and overall, the reason (10–180 characters long), the result, and score and tier changes. If you judge: the verdicts you give, your judge score and grade, and when you confirmed before judging for the first time | Match results and rankings, match reports, judge scores | Until you delete your account (see below for what happens then) |
| Profile comments | When you post a comment or reply on a profile Text (up to 300 characters long), the account that posted it, what it replies to, time | Showing them, letting you delete them, handling reports | Until you delete them or your account |
| Reports and their handling | When you report a comment, a match you are judging or a judge’s reason, or the operator handles a report The reporting account, the reason and details (up to 300 characters for a match report), time, a copy of the reported comment or judge’s reason, or of both resumes in that match (if the report is closed with no action, the copy is deleted when it is handled), and the outcome (kept, deleted or permanent ban) with the time it was handled | Checking reports, carrying out bans, handling appeals | 1 year from handling |
| Ban records | When the operator issues a permanent ban Account identifier, a hash of the email address that cannot be reversed, reason, time. If the banned account submits an appeal: its text (up to 500 characters long), when it was submitted and the outcome of the review with the time it was handled | Stopping banned accounts from signing up again, reviewing appeals | 3 years from the ban (deleted at once if the ban is lifted) |
| Login records | When you sign in or use the Arena’s server functions IP address, browser details, requested address, time | Stopping misuse, security and fixing faults, keeping records the law requires | 3 months |
| Step statistics | When you use the Arena pages The steps you reach and when (entering the Arena, starting a resume, each of education, work history, certificates and awards, the review, sign-in, submitting it, and starting and sending a verdict), the screens you open (such as your resume, match history and rankings), a form step where an input check stopped you, your progress on the judging screen (whether you opened both resumes, started marking and writing a reason, or skipped, reported or left) and which match of the visit it was, the result of signing in, which in-app browser you were using and whether moving to your default browser worked (including when it did not, and whether you copied the link). No resume content, nickname, email address, social media links, verdict content or reason is sent | Seeing where people stop, to improve the pages | Up to 14 months in Google Analytics and our analysis copy of it |
Who can see what
What not to put in a resume: personal information unrelated to the resume fields, such as your name, contact details, photo, national ID number or health information. If it is found, the operator may delete that part or take the resume down.
Automated processing: opponents and judges are assigned, and scores, tiers and rankings calculated, automatically under fixed rules. A comment reported by two different users is hidden automatically until the operator reviews it. Deleting comments and permanent bans are decided by the operator, not by the system.
Before you submit: your resume draft is stored only in this browser (localStorage). In-app browsers such as those in KakaoTalk or Instagram block Google sign-in, so the draft is carried to your phone’s default browser in the part of the address after #. It is removed from the address right after the move and is never sent to our server, usage statistics or the Meta Pixel.
Deleting your account: you can delete your account at any time on the account screen. Your Google account information, resume, profile and comments are deleted at once, and matches in progress are cancelled. In finished matches, the copy of your resume is deleted and your opponent’s record keeps only the result. Verdicts you gave in other matches are unlinked from your account and only the content of each verdict is kept, so those results do not change. Reports, ban records and login records are deleted when their periods in the table end: 1 year after handling for reports, 3 years after the ban for ban records, and 3 months for login records, the period set by Korea’s Protection of Communications Secrets Act.
The full text is in section 2 of the Korean privacy policy.
Language and country, your answers to the Career Quiz, Job Seeker Tier and the AI work skills test, the birth date, birth time and optional name you enter in My Luck Tier, your invite code and prep-guide checklists live in your browser’s localStorage and are not sent to a server. What you enter in the Runway Calculator, Life Difficulty, My Wealth Tier and Quick-Start Jobs is not stored and disappears when you close the page (Life Difficulty sends only the result statistics in section 1). The amount you enter in Expat Gacha goes only into the part of the result address after #, which is not sent to a server. An Arena resume you have not submitted yet is stored in this browser, as described in section 1. When you sign in to the Arena, the Firebase Authentication data that keeps you signed in and a marker showing that you have signed in before are stored in this browser, and they are deleted when you sign out or delete your account. The draft carried over to your default browser, sign-in progress and the markers that make sure each step statistic is sent only once are kept for a short time in storage that is cleared when you close the tab (sessionStorage). Clearing browser data removes what is stored.
Share links can carry results. If you add a name to a My Luck Tier link, whoever receives the link can see it, and a Runway Calculator link puts the job and the number of months in the address. Usage statistics (Google Analytics 4, section 3) can record which pages and results were viewed: for example the job or major and its level on a result page, the prep guide for your top Career Quiz match, your luck tier, the grade and amount band in Expat Gacha, and the address of a page opened from a share link. Your answers, the amounts you enter, your birth date and names are never sent to analytics.
Friend comparisons save your nickname in the browser for reuse and use existing Firebase anonymous authentication to recognise your own participation. Your nickname is also stored on the server when you participate; authentication details are used for authentication and request verification. The service does not save a room list or recently viewed room history in browser storage. Clearing browser data removes the saved nickname and authentication details and may prevent you from directly editing or deleting earlier entries. Simply viewing a comparison link does not create a new anonymous identity.
Google Analytics 4 — uses cookies and identifiers for visit statistics; IP addresses are anonymised before transmission. You can opt out with the Google Analytics opt-out add-on.
Search words that found no result in the job, major, university or region search may be sent to Google Analytics to improve our lists. They are sent with the pseudonymous identifiers described above (such as the cookie identifier) and kept for up to 14 months in Google Analytics and in our analysis copy of it (Google BigQuery). We never send numbers, email addresses, links, words that look like names, addresses or school names, or whole sentences, and nothing typed in the Job Seeker Tier, Life Difficulty, Career Quiz, friend comparison or community features, in the Arena or in the contact form.
Firebase (Google LLC) — hosting, database (Seoul region), anonymous authentication and Google sign-in for the Arena. The data in section 1 is stored there. Apart from what is public — comments (nickname, text, time, anonymous identifier), community posts (nickname, text, side, tags, country, language, time; the anonymous identifier is not public), invite progress, which anyone with the invite code can read, and comparison details, which anyone with the room link can read — access rules allow only the operator to read it. Arena data can be read and written only through server functions, which return only what the Arena part of section 1 lets each person see. Access logs — for requests that call a server function (Cloud Functions), such as sending result statistics or using the community or the Arena, Google Cloud keeps an access log (IP address, browser information, requested address, time) for security and troubleshooting; it is deleted automatically after 30 days. Arena login records are kept for 3 months, as described in section 1. Google Fonts — your browser contacts Google servers to load typefaces.
Kakao (Kakao Corp.) — Korean-language screens only: when a result page with a KakaoTalk share button opens, your browser loads the Kakao SDK from Kakao’s servers (t1.kakaocdn.net) to prepare sharing. If you tap the button, the text, link and preview-image address being shared are sent to Kakao and handled under Kakao’s privacy policy.
These services process data under the Google Privacy Policy, which may involve transfer to Google servers outside your country, including the United States. When you sign in with Google in the Arena, your browser sends Google LLC (Firebase Authentication) your Google account identifier, email address, name, profile photo address and sign-up and sign-in times, for sign-in and identity checks. Unlike the database in the Seoul region, this sign-in data is processed outside South Korea, and it is kept until you delete your account. If you do not sign in with Google, none of it is sent, but you cannot submit a resume.
Meta Pixel (Meta Platforms, Inc.) — We use the Meta Pixel to measure how our Instagram and Facebook ads perform and to show those ads to people likely to be interested in this service. When you open a service page, your browser loads the pixel code from Meta’s servers (connect.facebook.net). When you view a page, see a result, search, share, post a comment or submit a resume in the Arena, it sends Meta the kind of action with the service name and country, the address of the current and the previous page (which can show which job or major result you opened), Meta’s cookie identifiers (_fbp, and _fbc with the ad-click identifier if you arrived from an ad), device and browser information, and your IP address. If your browser is signed in to Instagram or Facebook, Meta may link this information to that account. We do not send search words, result values such as scores, tiers, amounts or birth dates, your answers or writing, resume content, or email addresses, and nothing is sent while the address holds a name, an amount, a result, an invitation code or a resume draft. The pixel is not loaded in browsers set to a European Economic Area, UK or Swiss time zone, in browsers with Global Privacy Control (GPC) turned on, or on this policy and the terms page. Meta processes this data under the Meta Privacy Policy, which may involve transfer to Meta servers outside your country, including the United States. Under some US state laws this may count as “sharing” personal information for cross-context behavioural advertising; you can opt out with the button below or with GPC.
Turning off the Meta Pixel — Press the button below and this site will no longer load the Meta Pixel in this browser and will delete Meta’s cookies (_fbp, _fbc). The choice is stored in this browser, so clearing browser data turns the pixel back on. You can also turn off ads based on your activity on other websites in Meta’s ad preferences.
Ads (Google AdSense) — The ads on this site are served by Google AdSense, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies, including the DoubleClick cookie, enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. Other ad vendors and ad networks certified by Google (Google’s certified vendors) may also serve ads through Google and use cookies when they do. Data may be transferred to the United States and other countries where Google and these partners operate. YOU’RE NEXT does not give Google or any ad partner the data in section 1, such as comments, email addresses or resumes.
Personalised and non-personalised ads — Personalised ads are chosen using your browsing history and interests. If you turn them off or do not consent, you see non-personalised ads instead. These are chosen from the content of the page you are viewing and your general location (for example the city, estimated from your IP address); cookies may still be used to limit how often you see the same ad, to report ad performance in aggregate and to detect click fraud. Learn more about how Google uses cookies in advertising and how Google uses information from sites or apps that use its services.
Turning off personalised ads — You can turn off personalised ads in Google’s My Ad Center. You can opt out of third-party vendors’ use of cookies for personalised advertising at www.aboutads.info and, in Europe, at www.youronlinechoices.eu. You can also block or delete cookies in your browser settings. Whichever you choose, ads still appear, but they are non-personalised.
Consent and changing your choices — Visitors from the European Economic Area, the UK and Switzerland see Google’s consent message, a consent management platform built on the IAB TCF standard, which asks whether advertising cookies and personalised ads may be used. In US states with a consumer privacy law, Google shows a “Do Not Sell or Share My Personal Information” link, where you can opt out of the sale or sharing of your personal information for targeted advertising. You can change your choice at any time with the “Privacy and cookie settings” link or the “Do Not Sell or Share My Personal Information” link that Google shows at the bottom of pages with ads. This Privacy Policy and the Terms of Use load no ad code, so those links do not appear on them. Your choice is stored in your browser; if you clear its data, the message appears again.
Our own banners — When Google does not fill an ad slot or the ad cannot load, the slot may show a YOU’RE NEXT banner for another of our services instead. These banners use no third-party cookies. Whether a banner was shown or clicked, and why the slot was empty (no ad was available, or the ad could not load), may be recorded in usage statistics (Google Analytics 4).
Beyond the public or link-based sharing (including what the Arena shows other users, as described in section 1) and processors described above, and the data sent to the advertising services in section 3 (Google AdSense and the Meta Pixel), data is not sold or shared with third parties, except where required by law. Meta uses the data sent through the Meta Pixel under its own policy to measure and optimise ads.
You can ask to access, correct, delete or restrict processing of your data by emailing 2024opennext@gmail.com; requests are handled within 10 days. Comments and your comparison entries can be deleted directly on the page, and browser-stored data can be cleared in your browser. You can edit your Arena resume and social media links on screen, and deleting your account on the account screen removes your data as described in section 1. If you can no longer sign in, email the address above. Residents of the EU/UK and California have the rights granted by GDPR/UK GDPR and CCPA respectively; use the same address. Choices about advertising cookies and personalised ads can be made in Google’s My Ad Center and, on pages with ads, in Google’s consent message and with its settings links (section 3).
Data past its retention period or purpose is deleted without delay. Expired comparison data is blocked from access and then deleted asynchronously as described in section 1. All traffic is encrypted with HTTPS, the database is protected by rules that block client-side reads of everything except the public data described in section 3, and collection is limited to the minimum listed above. Only the operator handles Arena reports. The database is backed up daily in case of failure, so deleted data can remain in backups for up to 7 days before it is deleted with them.
The service is not directed at children and does not knowingly collect data from anyone under 14 (under 16 in the EU). Such data is deleted when discovered. Only people aged 14 or older can sign up for the Arena, and this is confirmed at sign-up.
The outlook figures on this site — years, dates, scores, salaries, preparation times — are AI estimates that require verification. The official disclosure figures and past time series in the university outlook are observed data, shown with their sources. It is not a prediction, career counselling, or employment or financial advice, and the operator accepts no liability for decisions based on it. Arena verdicts, tiers and rankings reflect the combined preferences of users and have nothing to do with real hiring or admission chances.
Changes are posted on this page with a new effective date. On 14 November 2026, we stopped forwarding partnership inquiries to the operator’s mailbox and removed that passage (inquiries are kept on our server only), and we added what usage statistics record about the Arena and the contact form. On 12 November 2026, we added to section 1 what the contact form (bug reports and partnership inquiries) collects and how long it is kept. On 11 November 2026, we added to section 1 what the Arena (resume battles) collects, who can see it and how long it is kept. The previous version (effective 12 November 2026) is available on request from the contact above.
About · Methodology · Terms of Use · Contact · Privacy Policy
YOU’RE NEXT · Operated by Opening Step · 2024opennext@gmail.com