Privacy Policy

1. What we collect and how

When you sign up with Google, we receive and store:

• Your Google account identifier (the ID Google assigns to each account)
• Your email address

Google also passes your name, profile photo, and access tokens during login, but the Site discards them without storing them.

While you use the Site, the following is created or stored:

• Nickname: assigned automatically when you sign up; you can change it on the My account page
• Login records: the IP address and browser information used when you log in
• Posts, comments, images, predictions, reports, and block lists you create. Image metadata such as location (EXIF) is removed before storage
• A reply email address, only if you enter one when sending feedback

The server access logs of the companies in section 4 also record IP addresses and request times, which are deleted under each company's retention policy.

2. Why we use it

• To identify members and keep you logged in
• To provide community features such as posts, comments, and predictions
• To handle reports and prevent abuse such as multiple accounts or spam
• To reply to your questions and feedback

3. How long we keep it

• Login records (IP address, browser information): kept until you delete your account, for security and abuse prevention.
• Feedback reply email: deleted once your request has been handled, or earlier if you ask.
• Reports and moderation records: kept until you delete your account, to prevent repeated abuse.

When you delete your account:

• Your Google account identifier, email, login records, login sessions, and block list are deleted immediately.
• Your nickname becomes "Deleted user", and any remaining records are linked only to a deleted account that no longer identifies you.
• Posts, comments, and their images remain under "Deleted user". Please delete anything you want removed beforehand. If a post contains information that identifies you, you can still ask us by email to delete it.
• Predictions remain but are excluded from pick ratios and rankings.
• Reports and moderation records: free-text report details are deleted, and the remaining records stay linked only to the deleted account.

Deleted information is removed from the database and cannot be restored. Any copy left in the database provider's recovery history is also removed automatically after a short period.

4. Service providers and international transfers

To provide the service, we entrust the processing and storage of personal information to the following overseas companies, as necessary to perform our agreement with you (Korean Personal Information Protection Act, Article 28-8(1)(iii)). All transfers happen over HTTPS-encrypted connections when you use the Site.

• Vercel Inc. (privacy@vercel.com) — Task: hosting the Site / Country: Singapore, United States / Data: access logs (IP address, request time) and data exchanged while you use the Site / When: whenever you visit / Retention: under the company's access log policy
• Databricks, Inc. (privacy@databricks.com) — Task: database operation / Country: Singapore / Data: account information, login records, posts, comments, predictions, and other data in section 1 / When: whenever data is stored or read / Retention: the periods in section 3
• Cloudflare, Inc. (privacyquestions@cloudflare.com) — Task: image storage and delivery, domain routing / Country: United States and other countries with the company's data centers / Data: images you upload and access information when images are viewed / When: whenever images are uploaded or viewed / Retention: images for as long as the post remains; access logs under the company's policy

If you do not want your data transferred abroad, you can choose not to sign up or delete your account. Features that require login will then be unavailable.

5. Cookies

We use only a cookie that keeps you logged in. We do not use advertising or analytics cookies. You can block cookies in your browser, but you will not be able to log in.

6. Your rights

You can ask to access, correct, or delete your personal information, or to stop its processing, at any time.

• Delete your account: available directly on the My account page.
• Delete posts and comments: use the delete button on each one.
• Other requests: email otis250702@gmail.com. We will handle them promptly after verifying your identity.

7. Children

Children under 14 may not sign up. If we learn that we hold information from a child under 14, we delete it right away.

8. Security

• All traffic is encrypted with HTTPS.
• We do not collect passwords; login is through Google only.
• Access to the database and storage is limited to the operator, and access keys are never kept in public repositories.

9. Privacy contact

• Contact: survpick operator
• Email: otis250702@gmail.com

10. Changes

If we change this policy, we will announce it on this page at least 7 days before it takes effect.