Privacy policy

1. Operator and scope

Not_Hotplace is operated by Lee Wonjae. This notice applies to map and trip browsing, Google sign-in, saves, reviews, suggestions, the free trial, home-screen installation, visit totals and email support. Contact mythdriveofficial@gmail.com.

Google and Supabase Auth handle sign-in; we do not receive your password. Authenticated users access their own records. The 7-day trial needs no card and does not become an automatic payment. Paid checkout is offered only when production settings and sales preparations are complete, with payment information available before activation.

2. Purposes and information

• Sign-in: authenticated user ID, email, display name, provider, email-verification state and session tokens. Sessions use authentication cookies.
• Account features: user ID, saved places, checkbox reviews and timestamps, suggestions and decisions, and trial start time. Records are stored in Cloudflare D1 and accessed for personal features or necessary administrator review.
• Daily visit totals: Korean-calendar date and total page opens. The visit table contains no visitor ID, account, IP address, URL, search term or location.
• Delivery and security: the hosting provider may process IP addresses, request times and paths, browser/device details and communication information while delivering and securing the service.
• Nearby search: latitude, longitude and accuracy are processed on your device after you request the feature and allow location access.
• Support: reply email, message and the minimum information you provide for handling or verifying your request.

Information is used as needed to provide requested services, handle inquiries, meet privacy obligations and operate safely. Processing requiring separate consent follows that process. Do not send identity documents, government ID numbers, passwords, verification codes or sensitive private information. Unnecessary sensitive information is removed or minimized.

3. Current location

Near me calculates straight-line distances using browser location. Coordinates stay in browser memory and are not sent to our server or database. Ending nearby search, choosing a region or closing the page clears them. You can revoke browser permission and continue browsing by region. Your browser or operating system's location processing follows its provider's policy. Nearby search is available on the Korean map.

4. Retention and deletion

Account records remain during service use; deletion and withdrawal requests are handled after identity verification. You can delete your own review in place details and unsave a place with its save button. Records subject to legal retention are handled on that basis. Authentication sessions follow the provider's expiry and termination policies; signing out or clearing browser data ends the device session.

Daily page-open totals are retained as aggregate operational statistics without identifying fields. Location has no server retention. Support materials are kept until a request is handled, then unnecessary personal information is deleted without delay. For ongoing disputes, only necessary records remain until resolution.

Worker execution-log settings and retention depend on the actual Cloudflare configuration and are separate from provider communication/security processing. The operator must verify those settings and provider retention. Support emails are deleted from Gmail and permanently removed from Trash. Gmail's published 30-day Trash rule is not a retention period from the date an inquiry was received, or a promise about all Google backups.

Electronic records are removed from operational storage; any paper records are shredded or otherwise destroyed. Legal retention grounds, items and periods are disclosed when applicable. Provider recovery copies and backups may not disappear immediately. Deleting D1 service records and deleting an authentication-provider account are separate steps reviewed together for withdrawal requests. Cloudflare documents D1 Time Travel recovery windows of 7 days on free plans and 30 days on paid plans; these are not retention periods for all communication logs.

5. Disclosure and public information

We do not disclose personal information to third parties for advertising sales. Any additional disclosure requires the relevant recipient, purpose, information and retention notice, plus necessary consent or another legal basis. Shared links contain place information, not current coordinates or account information. External maps and source websites apply their own policies after you open them.

6. Providers and international processing

• Supabase Auth: Google authentication, accounts and sessions. Actual project region, retention and deletion scope require verification in the operating account. See Supabase's privacy policy.
• Cloudflare, Inc.: Workers, D1, content delivery, communication and security. Its role depends on the data and applicable contract. Contact: privacyquestions@cloudflare.com. See its data processing addendum and subprocessors.
• Google LLC: Google sign-in and Gmail support messages, storage and replies. Ordinary Gmail terms apply; a Google Workspace-specific processor contract is not assumed. Contact: googlekrsupport@google.com. See Google's privacy policy.

Cloudflare describes the United States and European Economic Area as primary storage locations in its public policy and describes international access and transfers. This does not establish every country used for this service. Google also uses servers in multiple countries. A company's headquarters or a Supabase project region does not define the full processing geography.

Cloudflare processes connection data during network requests and stores D1 records. Google and Supabase process sign-in, accounts and sessions; Gmail transmits and stores messages during sending, receipt and replies. Relevant providers and contacts appear above. Actual subprocessors must be matched to the features used.

Specific destination countries, provider retention/deletion scope, legal basis, required notice or consent, refusal method and consequences remain to be confirmed. Simply visiting the site or sending an email is not treated as separate consent to an international transfer. Unresolved items are not a completed transfer notice or consent procedure.

7. Cookies, preferences and installation

Authentication cookies maintain Google sign-in. Daily visit counting uses no identifying cookie and adds page opens to a total; refreshes and repeat visits count, so this is not a unique-visitor measure. We skip that counting request when the browser sends Do Not Track or Global Privacy Control. Hosting communication and security processing may still occur.

You can inspect, remove or block cookies and site data in browser settings. Blocking authentication cookies can prevent sign-in and account features. The installed web app caches only an offline connection-notice page, not login/API responses or saved/review data. Removing the app or browser data does not close your account.

The Korean/English preference is saved in local storage on your device. It is not a tracking identifier. Change it with the language control or clear the site's browser data.

8. Your rights

You may request access, correction, deletion, restriction of processing or withdrawal of consent. Legal representatives and authorized agents can exercise rights after necessary verification. Email mythdriveofficial@gmail.com with the request type and relevant information. We request only the minimum verification needed, never passwords or verification codes. Requests are handled under applicable law; any restriction or required retention will be explained. Deleting Not_Hotplace records does not close the original Google account.

9. Security and automated processing

The service uses HTTPS, limits operational access and avoids placing secret keys in public source code. Account features verify users on the server, restrict access to personal records and check administrator authorization. We do not currently send personal information to generative AI for place recommendations or operate automated decisions with a significant effect on users. Changes to recommendation processing will be explained when introduced.

10. Privacy officer

Lee Wonjae, Not_Hotplace operator, is responsible for privacy operations, complaints and rights requests. Email mythdriveofficial@gmail.com.

11. Remedies

In Korea, contact the Privacy Infringement Report Center (118) for counseling or the Personal Information Dispute Mediation Committee (1833-6972) for mediation.

12. Changes

Changes to purposes, information, retention, providers or international processing are announced with their effective date. Changes requiring separate consent follow that procedure. The initial effective date is based on actual publication, and subsequent notice history is retained.