Privacy Policy
Effective [2026-10-__]
This is a draft for a capstone design project. Items in brackets [ ] must be finalized by the team before public launch.
1. What we collect and why
| Source | Data | Purpose |
|---|---|---|
| Email sign-up | Email, password (stored encrypted), handle, display name | Identifying members, log-in, password reset |
| Social log-in | Account ID, name, profile photo and email from the provider | Identifying members, log-in, showing your profile |
| Using the Service | Posts, prompts and comments you write; votes, copies and follows; communities you join | Providing the Service, ranking feeds, preventing abuse |
| Generated automatically | Access logs (IP, browser info) kept by the hosting provider | Security, incident response |
2. Retention and deletion
We keep member data until you delete your account. When you do, your display name and profile photo are deleted immediately, and your posts remain anonymized under the name “Deleted user”.
Log-in account data (such as your email) is deleted from the authentication service by the Team within [__ days] of account deletion.
If the Service shuts down, all personal data is destroyed within [__ days].
3. Processors and international transfers
We use the providers below to run the Service, which means personal data is transferred outside Korea. Transfers happen over the network as you use the Service.
| Provider (country) | Task | Data transferred |
|---|---|---|
| Supabase Inc. ([region]) | Member authentication | Email, password (encrypted), social account data |
| Cloudflare Inc. (USA and others) | Web hosting, database, file storage | Handle, display name, posts, usage records, access logs, uploaded images |
| Anthropic PBC (USA) | Automatic content review (AI review) | Post titles, bodies and prompts (handles and emails are not sent) |
If you don't want your data transferred abroad, you can choose not to sign up or delete your account. In that case you can't use member features.
4. Sharing with third parties
The Team does not share your personal data with third parties, except when required by law.
5. Users under 14
People under 14 can't sign up. If we find an account belonging to someone under 14, we delete it.
6. Your rights
You can change your display name or delete your account in Settings, and you can ask to access, correct, delete or stop processing your personal data through the contact below. The Team responds within [10 days].
7. Cookies and browser storage
To keep you logged in, we store an authentication token in your browser's storage (localStorage). We don't use advertising or analytics cookies. Logging out removes the token.
8. Security measures
- Passwords are stored encrypted only by the authentication service (Supabase); the Team's servers and database never receive them.
- Members' internal IDs are never made public; the only public identifier is your handle.
- AI review records keep only reason codes, never copies of the flagged text.
- Admin actions are logged.
9. Privacy officer
[Name] · [Email] — Capstone Design Team 2