1. Operator
ACROS is a project mentoring and admissions advisory brand operated by ACROS R&D Inc. (Business Registration No. 830-81-03784), located at 4F, 27 Eonju-ro 159-gil, Gangnam-gu, Seoul. Questions about this policy may be sent to support@acros.org. Personal information protection and related complaints are handled by the ACROS Operations Team at the same address.
2. Information we collect
- Home consultation request on acros.org, contact-only path (direct request, or request from the plan result; the consultation requests on the Admissions Story Integration and AI build session pages use this path), required: a guardian phone number or guardian email address, guardian confirmation, and consent to collection and use. Optional: a note for the mentor, the consultation question chosen on the result screen, the earlier plan answers (grade, interest, stage, time left).
- Home consultation request on acros.org, project-first path, required: current work and the help needed, preferred start time, the child's available time, consultation purpose, a guardian phone number or guardian email address, guardian confirmation, and consent to collection and use. Optional: the earlier plan answers (grade, interest, stage, time left).
- Competition readiness check page consultation form, required: a phone number and consent to collection and use. Optional: parent name, child's grade, email, current school, target competition or field, interests, the competition in preparation or biggest concern, the readiness report attachment (a summary of the four answers and the result), which can be reviewed, edited, or removed on screen. When a parent asks about a specific team or requests a team opening alert, the team name is added to the attached note. The team board consultation form takes the same items.
- Report unlock on the readiness check result screen, required: a phone number and consent to collection and use. Optional: a convenient time for the consultation. It is submitted through the consultation form above, together with the readiness report attachment if one is present there.
- Education company or institution mode of the same consultation form, required: contact person name, organization name, phone number, and consent to collection and use. Optional: email, inquiry details, and anything entered in the notes step. The child's grade is not collected in this mode.
- Project mentoring application form, required: guardian phone number, grade, project stage, preferred start time, guardian confirmation, and consent to collection and use. Optional: topic of interest and consultation details.
- English consultation form, required: a phone number and consent to collection and use. Optional: parent name, student's grade, email, current school, target schools, interests, and biggest concern (no measurement consent option).
- Parents' association founding news signup, shown after the readiness report is unlocked, required: a phone number or email address. This contact is collected separately from consultation requests and used only for news about the association's founding.
- Ask ACROS question box, required: question type and text, a parent or guardian phone number, guardian confirmation, and consent to collection and use. It does not ask for the student's name, school, other identifying information, or attachments as separate fields; please do not enter them in the question either.
- Free online seminar registration form, required: guardian phone number, the child's grade, guardian confirmation, and consent to collection and use. Optional: email address and a question to ask in advance. It does not ask for the child's name or school as separate fields.
- Optional answer on the home and English consultation forms: where you first heard about ACROS (fixed choices; leaving it blank is allowed). We keep it separate from automatic records in your consultation record to understand how you found us, until six months after the consultation ends. This answer is not sent to advertising or visit-analytics services, automated scoring, or notification messages.
- When a home or English consultation request is submitted, we separately retain public page addresses and external referrer domains from existing attribution records. This separate field excludes search text, conversation paths, and URL query parameters. We respect visit-analytics refusal and do not infer a source when records are missing.
- Attribution data: UTM source, medium, campaign, content and term; advertising click identifiers such as gclid and fbclid; first and latest landing path, referrer, referral code, and language.
- Automatically generated data: access time; pages and sections viewed; content, button, and plan-stage selections; consultation form view, start, validation, submission, receipt result, and booking-button clicks; browser, device and screen information; anonymous visitor, 30-minute session, and event identifiers; cookies or similar identifiers; and approximate region inferred from IP address.
This policy applies to the person who enters and submits a form: in the education company or institution mode, the contact person of that organization (not a student); in every other form, the parent or guardian. No form asks for the child's name or contact details as a separate field, and please do not enter them in consultation notes or questions.
Visit analytics (Google Analytics 4), advertising measurement (Meta Pixel), session-flow analytics (Microsoft Clarity) and the ACROS anonymous funnel ledger apply to every visitor to acros.org, whether or not a form is submitted. This automatically generated information is processed without consent, separately from the consent-based form items above; Section 5 lists who processes it, the items and the transfer country, and Section 7 explains how to decline.
3. Why we use it
- To confirm and respond to consultation requests and arrange appointments.
- To receive Ask ACROS questions, check official sources, reply, and connect to a consultation when needed.
- To send news about the parents' association founding, only to those who signed up for it.
- To send the free online seminar access link and schedule information, and to contact registrants about schedule changes, only to those who registered for the seminar.
- To measure which advertisements and content lead to consultation requests.
- To diagnose website errors, understand usage flows, and improve usability.
- To prevent abusive submissions and protect the service.
The ACROS first-party funnel ledger (acros_funnel_events) records page and behavior identifiers only. It does not receive the name, phone number, email address, school, question, or consultation message entered in the consultation forms, the seminar registration form, or the Ask ACROS question box. Those values are also not sent as custom event parameters to Google Analytics 4, Meta Pixel, or Microsoft Clarity. Form fields are masked in Clarity recordings.
4. Retention and deletion
- Consultation information: six months after the consultation ends.
- Free online seminar registration information: six months after the seminar ends.
- Ask ACROS question box information: deleted without delay once the reply and any follow-up are complete. After 180 days from receipt, it is immediately excluded from lookup and consultation handoff and marked for automatic deletion.
- Server-side abuse-limiting identifier for Ask ACROS: generated instead of the raw contact and set to expire after 48 hours. Actual deletion is handled asynchronously by Firestore TTL.
- Attribution data stored in the browser: up to 90 days after first storage, or until the user deletes browser data.
- ACROS anonymous visitor identifiers and funnel events: up to 180 days. A new session identifier is issued after 30 minutes without activity, and unsent browser events are retained for no more than seven days.
- Microsoft Clarity: ordinary session recordings for 30 days; click, heatmap, and labeled session data for up to 13 months.
- Google Analytics 4: according to the data retention setting of the ACROS account. Google Analytics 4 offers a setting of two months or fourteen months, and Google deletes user-level and event-level data after that period.
- Meta Pixel: according to Meta's policy and the retention settings of the ACROS account.
When the applicable period expires or consent is withdrawn, ACROS deletes the information unless a law requires a separate retention period.
5. Systems and service providers
Consultation information and anonymous funnel events are stored separately in systems operated and managed by ACROS using Google Cloud infrastructure. The following services process automatically generated website information:
- Google Analytics 4 · Google LLC: website and conversion analytics.
- Meta Pixel · Meta Platforms affiliates: Meta advertising measurement.
- Microsoft Clarity · Microsoft Corporation: click, scroll, and session-flow analytics.
- Cloudflare Turnstile · Cloudflare, Inc.: prevention of automated abusive submissions. The widget may process technical signals that assess the browser environment and whether a person is interacting.
Google Analytics 4 sends page views (the page address without acquisition parameters or the previous page address), section views and time on section, clicks and application-step events (event names with page and section identifiers) from the public pages of acros.org to Google, together with a cookie identifier, the IP address and browser and device information. Google derives an approximate region from the IP address. Names, phone numbers, email addresses and consultation messages are not sent, and Google signals and ad personalization are turned off. Processor: Google LLC. Purpose: visit and conversion analytics. Items: the events above, cookie identifier, IP address, browser and device information. Transfer country and method: outside Korea (Google servers, including in the United States), sent over a secure connection when a page is accessed. Retention: Section 4. Nothing is sent if you decline in "Visit analytics settings" in Section 7 or in "Analytics settings" at the bottom of each page, or while your browser sends GPC or Do Not Track; in that case the ACROS anonymous funnel ledger does not record your visits and clicks either. Declining does not limit use of the website or the consultation forms.
Meta Pixel sends page-view events (including the visited page address and its acquisition parameters), competition-readiness-check completions (including the result type), consultation-request submissions, and consultation-form exposures (the fact that a consultation form was displayed on screen; only the form identifier and the landing-page marker are included, never any entered values) from ACROS public pages to Meta together with a cookie identifier, IP address, and browser information. It does not send the visitor's name, phone number, email address, or any consultation content to Meta, either in the clear or as a hashed value. Recipient: Meta Platforms affiliates. Purpose: advertising conversion measurement. Items provided: the events above, IP address, browser information, advertising cookie identifiers. Destination and method: outside Korea (Meta's servers), transmitted over a secure connection when the page is accessed. Retention follows Meta's policy. No data is sent when a visitor declines under Section 7 below or signals Global Privacy Control or Do Not Track.
When the server accepts a consultation request (consultation-request submission) and when a visitor completes the competition readiness check (readiness-check completion), the ACROS server also sends the same event to Meta server-side conversion measurement with the same event identifier, so it can be matched with the browser event. Those server events carry only the event itself with advertising cookie identifiers and browser information (plus the IP address for readiness-check completion), never the name, phone number, or email address or a hash of them. Nothing is sent when a visitor declines under Section 7 below or signals Global Privacy Control or Do Not Track.
Information is transmitted over a secure connection when a page is accessed and may be processed on servers outside the visitor's country. Processing locations and retention are governed by each provider's privacy documentation.
6. Your choices and rights
You may request access, correction, deletion, suspension of processing, or withdrawal of consent by emailing support@acros.org. We will handle verified requests without undue delay, subject to applicable law.
Requests about Ask ACROS submissions, replies, and deletion may also be sent to support@acros.org. Including the receipt number shown after submission lets us find the original question.
7. Cookies and similar technologies
Google Analytics 4, Meta Pixel, and Microsoft Clarity may use cookies or similar identifiers. You may delete or block cookies in your browser and limit processing through each provider's privacy controls. Blocking measurement does not prevent use of the consultation form, but analytics and advertising measurement may be less accurate.
You can decline, or allow again, Meta advertising measurement in the "Advertising measurement settings" below. Meta advertising measurement runs until you decline it, and does not run while your browser sends a do-not-track signal (GPC or Do Not Track). The choice is stored in your browser and applies to every page you visit at acros.org. This setting applies only to Meta advertising measurement. Microsoft Clarity can be limited through the browser settings above or the provider's controls below.
Visit analytics settings
Google Analytics 4 uses cookies to collect the pages you visit, clicks and application steps, and sends them to Google. Names, contact details and question text are not included in analytics events. Visit analytics runs until you decline it; you can decline, or allow it again, in the setting below or in "Analytics settings" at the bottom of each page. You can use the website and contact forms after declining, and your choice is stored in this browser. Analytics does not run while your browser sends GPC or Do Not Track, or when the stored choice cannot be read. You can also delete or block cookies in your browser or follow the Google Analytics opt-out information below.
8. Marketing messages
Consent to the consultation form covers replies and scheduling only, and consent to the seminar registration form covers the seminar access link and schedule information only. It is not consent to receive separate promotional messages. ACROS will request separate consent before sending such messages.
9. Security
ACROS uses HTTPS for transmission and limits access to personnel who need the information to handle the consultation.
10. Policy changes
Material changes will be posted on this page with a revised effective date.
- October 20, 2026: added the optional discovery-source answer on home and English consultation forms, its separation from existing automatic attribution, purpose, retention, and excluded destinations.
- October 7, 2026: removed the representative's name from the operator details in Section 1 (including the archived earlier versions). The personal information processed and how it is processed are unchanged.
- October 6, 2026: removed the optional consent on consultation forms to send a hashed phone number or email address to Meta, and stated in Section 5 that names, phone numbers, and email addresses are never sent to Meta, either in the clear or hashed; the consent was removed from the per-form optional items in Section 2, and Section 5 now names the events the ACROS server sends to Meta (consultation-request submission and readiness-check completion) and their items; Section 1 now names the ACROS Operations Team as the department handling personal information protection and complaints.
- October 4, 2026: added the free online seminar registration form's collected items (Section 2), purpose (Section 3) and retention (Section 4), and stated in Section 8 that seminar registration consent is not consent to promotional messages.
- October 1, 2026: Google Analytics no longer asks on the first visit. It collects visits and clicks with cookies, and you can decline it in Section 7 of this policy or in "Analytics settings" at the bottom of each page. A stored refusal and browser do-not-track signals still apply.
- September 28, 2026: restored the Google Analytics allow/decline setting and clarified that Google Analytics starts only after an explicit analytics choice.
- September 23, 2026: added consultation-form exposure to Meta Pixel's transmission scope (form identifier and landing-page marker only, no entered values); the consent model and the opt-out method are unchanged.
- September 20, 2026: the project mentoring application form no longer collects whether paid mentoring is being considered, and the topic of interest and consultation details became optional.
- September 17, 2026: specified Meta Pixel's transmission scope (page views, readiness-check completions, consultation-request submissions), recipient, items, retention, and opt-out method; placed the setting to decline or re-allow Meta advertising measurement in Section 7 of this policy; added an optional consent to send a hashed contact value to Meta for advertising measurement on consultation forms.
- September 11, 2026: added the operator address; described the collected items and data subject of the education company or institution mode; listed the required and optional items of each form as the form has them (home consultation request in both paths, readiness check and team board consultation form and report unlock, project mentoring application form, English consultation form, parents' association news signup); added the Ask ACROS question box, its retention, and Cloudflare Turnstile.
- July 24, 2026: described required email, the first-party funnel ledger, anonymous identifiers and retention, and server conversion measurement boundaries.
Section 5 Meta advertising measurement paragraph of the version effective October 4, 2026
Meta Pixel sends page-view events (including the visited page address and its acquisition parameters), competition-readiness-check completions (including the result type), consultation-request submissions, and consultation-form exposures (the fact that a consultation form was displayed on screen; only the form identifier and the landing-page marker are included, never any entered values) from ACROS public pages to Meta together with a cookie identifier, IP address, and browser information. It does not send the visitor's name, phone number, or email address in the clear, or any consultation content. Only when a person separately consents to advertising measurement in a consultation form does ACROS additionally send a hashed value of the phone number or email address entered, for Meta server-side conversion measurement. Recipient: Meta Platforms affiliates. Purpose: advertising conversion measurement. Items provided: hashed phone number or email address, IP address, browser information, advertising cookie identifiers. Destination and method: outside Korea (Meta's servers), transmitted over a secure connection when the page is accessed. Retention follows Meta's policy. No data is sent when a visitor declines under Section 7 below or signals Global Privacy Control or Do Not Track.
Section 7 visit analytics text of the version effective September 28, 2026
Google Analytics 4 sends page visits, clicks and application steps to Google only after you allow analytics. Names, contact details and question text are not included in analytics events. You can use the website and contact forms without allowing analytics. Your choice is stored in this browser and can be changed here at any time. GPC and Do Not Track signals prevent transmission.
Effective October 20, 2026 · Previous version effective October 7, 2026.