Privacy Policy

1. Information we collect and why

Email address: if you log in with email, used only to send login codes and identify your account.

Kakao or Google account ID: if you log in with Kakao or Google, used only to identify your account. We do not receive your name, profile photo or email address.

Content you create: trip plans, conquest records, album photos, favorite works, new-spot notification settings and spots you submit. Used only to provide the features of the service.

Access logs: our service providers (Vercel, Supabase) keep IP addresses, access times and similar data for a limited period for security and incident response.

We do not collect location data or the location metadata in photos (EXIF). Photos are re-rendered on your device before upload, which removes location data.

When you tap "Near me", your current location is read once and used only on your device to sort by distance. It is never stored or sent.

2. Retention and deletion

We keep your data until you delete your account. When you do, your account, records and photos are deleted immediately. Spots you submitted remain as public information, but the link to you is removed.

You can delete album photos at any time.

Deletion procedure and method: when the retention period ends or you delete your account, the data is destroyed without delay. Electronic files are permanently erased so they cannot be recovered. We do not create paper records.

3. Sharing with third parties

We do not share or sell personal data to third parties, except where required by law.

4. Processors and international transfers

We entrust processing to the providers below, all of which are located outside Korea. The timing and method of transfer are the same for all: network transmission over the internet each time you use the service.

Supabase, Inc. — Data transferred: email address, content and photos you create · Destination: data is stored in Seoul, Korea (AWS); administrative access may occur from the United States · Recipient contact: privacy@supabase.com · Purpose: database, login and photo storage · Retention: until you delete your account (destroyed immediately on deletion)

Vercel Inc. — Data transferred: IP address, access time, request details · Destination: United States (requests pass through the nearest Vercel server) · Recipient contact: privacy@vercel.com · Purpose: web hosting, security and incident response · Retention: access logs are deleted automatically after Vercel's retention period

Resend — Data transferred: email address, body of the login code email · Destination: United States · Recipient contact: support@resend.com · Purpose: sending login code emails · Retention: delivery logs are deleted automatically after Resend's retention period

Cloudflare, Inc. — Data transferred: IP address, browser information (bot detection), map file requests · Destination: United States (requests pass through the nearest Cloudflare server) · Recipient contact: privacyquestions@cloudflare.com · Purpose: blocking automated sign-ups at login (Turnstile), serving map files · Retention: deleted automatically after Cloudflare's retention period

Google LLC — Data transferred: cookie identifier, pages viewed and the order you moved through them, how you arrived (search, social media, etc.), approximate region, device and browser information · Destination: United States · Recipient contact: https://support.google.com/policies · Purpose: visit statistics (Google Analytics) · Retention: user- and event-level records are deleted automatically after 14 months (aggregate statistics are kept); the _ga cookie lasts up to 2 years

Spot descriptions are translated with AI (Anthropic via Vercel AI Gateway), but no personal data is sent.

How to refuse and what happens: if you do not want your data transferred abroad, contact us at the address below or delete your account. Without these providers, however, login, storage, email delivery and maps do not work, so the service cannot be used.

5. Security measures

Data in transit is encrypted with HTTPS.

The database uses row-level security (RLS), so only you can read and write your own records.

We do not store passwords. Login uses a Kakao or Google account, or a one-time 6-digit code sent by email.

Administrator access is limited to the minimum staff needed to run the service, and server keys are kept only in server environment variables.

6. Cookies and on-device storage

We store on this device a cookie to keep you logged in, the login method you last used (Kakao, Google or email), a cache of your trip screens for offline use, conquest records that could not be sent yet and favorites chosen before login. We do not use advertising cookies.

We use Google Analytics (GA4) to understand how visitors move through the site. It stores a cookie (_ga) that tells repeat visits from the same device apart and counts how you arrived and which pages you viewed in what order. We send no names, email addresses or other identifying details, and ad personalization and Google signals are turned off. Visitors from Europe (EEA, UK, Switzerland) are only measured if they consent.

We use Vercel Web Analytics and Speed Insights for visit statistics and page speed. They use no cookies and only count data that cannot identify you (pages viewed, approximate country, device type, page speed, search terms that returned no results).

How to refuse cookies: you can block or delete cookies in your browser settings. If you do, you will not stay logged in and cannot use features that require login. To turn off only Google Analytics, press “Turn off Google Analytics on this device” at the bottom of this page (this also withdraws consent) or use Google’s opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).

7. Your rights

In the Me tab you can view and delete your records or delete your account. To request access, correction, deletion or suspension of processing, contact us at the address below.

Users under 14 may not sign up.

8. Privacy officer

김강석 · support@seichilog.app

9. Changes

If we change this policy, we will announce it in the service at least 7 days before it takes effect.

Latest change: announced 2026-10-26, effective 2026-11-02 — added Google Analytics for visit-flow analysis (sections 4 and 6). Previous effective date: 2026-10-19.