Privacy Policy

1. Purposes of processing

We process personal information only for the purposes below and will notify you before using it for anything else.

· Publishing and moderating comments, and preventing spam and abuse

· Responding to inquiries

· Analyzing site usage to improve the service

2. Information we process

You can use TripFlowy without an account.

· Comments: name (nickname) and comment text; generated automatically: a one-way hash of your IP address (the IP itself is not stored) and the time posted

· Email inquiries: email address and message

· Collected automatically while you browse: pages visited, referring page, browser type, time of visit, and cookies

3. Retention period

· Comment data: until the comment is deleted or you request deletion

· Email inquiries: 1 year after the inquiry is resolved

· Visit logs: 30 days (after that, only daily totals that can't identify anyone are kept)

· Google Analytics data: up to 14 months, per our Google Analytics retention setting

· Database backups: 90 days from the backup date

4. Destruction of personal information

Personal information is destroyed without delay once its retention period ends or its purpose is fulfilled. Electronic records are deleted so they can't be recovered, and visit logs expire automatically. We do not keep personal information on paper.

5. Provision to third parties

We do not provide your personal information to third parties, except where required by law.

6. Processors

We use the following service providers to run the site:

· Vercel Inc.: website hosting

· Supabase Inc.: comment database

· Upstash Inc.: visit log storage

· Google LLC: site analytics (Google Analytics)

· GitHub Inc.: database backup storage

7. International transfers

To run the service, personal information is transferred to (stored with) the providers below, over the network as you use the site.

· Vercel Inc. (United States): access data / hosting / as in section 3

· Upstash Inc. (United States): visit logs / visit log storage / 30 days

· Google LLC (United States): cookies and usage data / analytics / up to 14 months

· GitHub Inc. (United States): database backups including comment data / backup storage / 90 days

The comment database (Supabase) is stored in the Seoul, Republic of Korea region. If you don't want your information transferred abroad, you can skip commenting and block cookies in your browser; you can still read everything on the site.

8. Your rights

You can ask to access, correct, delete, or stop the processing of your personal information at any time by emailing hello@tripflowy.com. We will act without delay. Requests can also be made through a legal representative or an authorized agent.

9. Cookies

We use Google Analytics cookies for site statistics and a cookie to remember your language. You can block cookies in your browser settings and still use the site normally.

· Chrome: Settings > Privacy and security > Third-party cookies

· Safari: Settings > Privacy > Block all cookies

10. Security measures

· Administrative: access to personal information is limited to the operator

· Technical: HTTPS everywhere, IP addresses stored only as one-way hashes, database access controls, admin authentication

· Physical: data is kept in certified cloud data centers

11. Privacy officer

For privacy questions, complaints, or remedies, contact:

· Email: hello@tripflowy.com

12. Remedies

If you are in Korea, you can also contact: Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), Personal Information Infringement Report Center (118, privacy.kisa.or.kr), Supreme Prosecutors' Office (1301, www.spo.go.kr), or Korean National Police Agency (182, ecrm.police.go.kr). Outside Korea, you may contact your local data protection authority.

13. Changes to this policy

This policy is effective from 2026-04-09. Any changes will be posted on this page before they take effect.

Operator: Uncopy · Business registration no. 277-09-02974 (Republic of Korea)