Privacy policy

Who is responsible

The website creator independently operates this personal project and is responsible for the personal information described in this policy.

For privacy questions or requests, email [email protected].

Information this website handles

When you sign in with Google

We receive your Google account identifier, verified email address, display name, and profile image. We use these details to create or locate your account on this website and show your identity on the site. We do not receive your Google password, and we do not store Google access or refresh tokens.

When you use email sign-in

We process your email address and the IP address used to request the sign-in message. The one-time link expires after 15 minutes.

Account and contribution information

If you use member features, we may store information you provide, including your display name, biography, fun fact, avatar, articles, reviews, thoughts, uploaded media, and publication details. Content you choose to publish may be visible to anyone.

Technical information

Our infrastructure providers process ordinary connection information such as IP addresses, browser and device information, request paths, timestamps, and security signals. The application also records request methods, paths, and durations for operation and troubleshooting.

How we use information

• To authenticate you and maintain your account session.
• To provide profiles, member publishing tools, and community content.
• To distinguish official group members from other signed-in visitors.
• To send requested passwordless sign-in emails.
• To prevent abuse, enforce rate limits, troubleshoot failures, and secure the service.
• To respond to privacy, support, and moderation requests.

We do not sell personal information, serve behavioural advertising, or use third-party advertising analytics.

Service providers and international processing

We use a small number of service providers to operate this website. They may process information only as needed to provide their services, meet security and legal requirements, and use their approved subprocessors.

Hosting

The website's application data and uploaded media are hosted by Amazon Web Services in Seoul, South Korea.

Site delivery and protection

Requests pass through Cloudflare's global network whenever you visit. Cloudflare processes connection details, request metadata, security signals, and website traffic in transit to deliver the site and protect it from abuse. Cloudflare states that it primarily stores information in the United States and European Economic Area and may process it in other countries where it operates. This processing is necessary to provide and secure the public website; if you do not want it to occur, please do not use the site.

Email sign-in

When you request an email sign-in link, your email address and the sign-in message are sent over an encrypted connection to Resend (Plus Five Five, Inc.) for delivery. Resend's primary processing takes place in the United States. You can avoid this transfer by not using email sign-in; Google sign-in remains available.

Google sign-in

If you choose Google sign-in, authentication requests and responses are exchanged with Google over encrypted connections. Google may process information in countries where it operates. You can avoid this transfer by using email sign-in instead.

How long information is kept

• Temporary Google sign-in security cookies expire after 10 minutes and are cleared when the callback completes.
• Email sign-in records are removed after the link is used or expires, normally within the following hourly maintenance run.
• Account sessions expire after 30 days. Signed-out, revoked, and expired sessions are removed during hourly maintenance.
• Account and profile information is kept while the account remains open.
• Contributions and uploaded media are kept until they are deleted through the site's tools or handled as part of an account-deletion request.
• Operational and security records are kept only as long as reasonably needed for troubleshooting, abuse prevention, and provider security requirements.

When information is no longer needed, it is deleted or anonymized unless retaining it is required by law or necessary to establish, exercise, or defend legal claims. If an account has published contributions, we will discuss whether those contributions should be deleted or anonymized when processing an account-deletion request.

Essential cookies

This website uses only first-party cookies needed to keep you signed in and to protect the Google sign-in flow. Cloudflare may also set strictly necessary security cookies when responding to suspicious traffic. These cookies are not used for advertising or behavioural tracking.

You can block cookies in your browser and continue browsing public pages, but account sign-in and member features will not work correctly.

Your choices and rights

You may ask to access, correct, delete, or receive a copy of your personal information, withdraw consent where processing relies on consent, or object to or request suspension of processing where applicable. You may also request account deletion. Email [email protected]; we may need to verify that the request concerns your account before acting on it.

You may browse public pages without creating an account. This website is not intended for children under 14, and children under 14 should not create an account or submit personal information.

Google user data

Google data is used only for account authentication and displaying the basic profile information described above. It is not used for advertising, profiling, or unrelated purposes, and it is not shared except with service providers needed to operate the site or where required by law.

This website's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Changes to this policy

We may update this policy when the service or its data practices change. Material changes will be communicated on the site where appropriate.