KOTA

Privacy Policy

Effective 2026-08-19

Project Yoon ("we") operates KOTA and follows Korea's Personal Information Protection Act. This page describes exactly what KOTA collects — and what it does not.

1. What we collect, and why

You can browse every festival without signing in. The items below apply only when you choose to leave something behind.

  • Social sign-in (optional) — from Kakao we receive your nickname and email; from Google, your name and email. We use these to attribute reviews and let you edit your own. We do not request your Kakao profile photo.
  • Reviews (optional) — your rating, your text, and the display name shown beside it.
  • Correction reports (optional) — the report itself. The contact field is optional; if you fill it in we store it only to tell you what came of your report.
  • Usage records (automatic) — which festivals you opened, what you searched for, which filters you pressed. To avoid identifying anyone, visitors are distinguished by a random string generated in your browser; we do not collect IP addresses or device information. Clearing your browser storage erases that string.

2. Your location never leaves your browser

Sorting by distance asks your browser for your position. Those coordinates are used only inside your browser to measure how far each festival is. They are never sent to our servers and never stored.

Declining the location prompt costs you nothing but distance sorting.

3. How long we keep it

  • Account details and reviews — until you ask us to delete them or close your account.
  • Correction reports — up to one year after the report is resolved.
  • Usage records — up to one year from collection.
  • Where the law sets its own retention period, we follow it.

4. We do not share it

We do not sell or hand your personal information to anyone. The only exception is a lawful request from an investigative authority following due process.

5. Processors we rely on

We use the following providers to run the service. Their servers may sit outside Korea, in which case your information is stored abroad.

  • Supabase — database and authentication
  • Vercel — web hosting
  • Kakao and Google — sign-in, if you choose it

6. Your rights

You may ask to see, correct, or delete your information, or to stop us processing it. You can edit or delete your own reviews after signing in; for anything else, write to us and we will act without delay.

We do not knowingly collect information from children under 14.

7. How we protect it

Row-level security is enforced in the database: you can change or delete only what you wrote, and cannot read anyone else's records. Usage records are write-only and cannot be queried from a browser.

8. Contact

For any privacy question, write to yuneunmi814@gmail.com.

9. Changes to this policy

When we revise this policy we update the effective date on this page. We announce material changes — such as collecting something new — before they take effect.