Privacy Policy

1. Overview

Korea Code ("we", "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights. We do not require accounts and do not sell personal data.

2. Data we collect

Browser local storage

• ktstyle:draft-places — places you marked "Add to plan" (stored on your device; sent to the server if you create a shareable draft plan)
• ktstyle:recent-searches — your last 8 search terms (kept on your device only)

You can clear these by clearing browser site data at any time.

Trip plans (server-stored, no account)

When you create a shareable trip plan, we store your regions, travel styles, duration, pace, budget, group size, pet preference, optional start date/time, dietary and accessibility preferences, optional mobility note, selected place IDs, creation time and a random share token. Anyone with the share URL can view the plan. Avoid entering names, contact details, medical diagnoses or other sensitive information in the note. Closing the page does not delete the stored plan.

Aggregated analytics (Plausible)

Plausible is not enabled in this release; its analytics script is not loaded.

3. Third-party services

• Cloudflare — hosting, CDN, database and image storage. Cloudflare processes connection and security logs to deliver and protect the service.
• Plausible — optional analytics, only when enabled as described above
• OpenStreetMap — Interactive maps request map tiles from OpenStreetMap servers. These requests expose your IP address and ordinary browser connection details to that provider.
• Korea Tourism Organization (KTO) — public tourism data source (KOGL license)

4. Advertising (Google AdSense)

We may display advertisements served by Google AdSense, a third-party advertising service operated by Google LLC. AdSense and its partners use cookies and similar technologies to serve ads based on your prior visits to this website and other websites on the Internet ("interest-based advertising").

Google's use of advertising cookies enables Google and its partners to serve personalized ads to users. Information collected may include the pages you visit on this site, your approximate geographic location (derived from IP address), device and browser type, and ad-interaction events. We do not receive any individually identifying information about you from AdSense.

Where the Google European consent message applies, use “Privacy and cookie settings” in an article’s footer to reopen the message and change or withdraw your choice. You can also manage personalized advertising by visiting Google Ads Settings, or opt out of third-party vendors' use of cookies for personalized advertising at aboutads.info. For more information about how Google uses data, see “How Google uses information from sites or apps that use our services”.

5. Cookies

We do not set our own tracking cookies. Browser local storage is used (see §2); creating a shareable plan sends the selected places and form preferences to our server. Plausible Analytics does not use cookies. Third-party advertising cookies set by Google AdSense (see §4) are managed by Google and can be controlled via the opt-out links in §4.

6. Your rights (general)

Clearing browser site data removes your local draft and recent searches. It does not delete server-stored plans, and stopping use of a share URL does not revoke access. There is currently no automatic plan-expiry feature. To request deletion of a stored plan, contact us with its share URL and do not post the link publicly.

7. EU / EEA / UK residents (GDPR)

If you are located in the European Union, European Economic Area, or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR grant you the following rights regarding personal data we may process about you:

• Right of access — request confirmation whether we process your data and obtain a copy
• Right to rectification — request correction of inaccurate data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restrict processing — request temporary suspension of processing
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests, including profiling for advertising
• Right to withdraw consent at any time (for consent-based processing)
• Right to lodge a complaint with your local data protection authority

Legal basis for processing: (a) legitimate interest for basic site operation and aggregate analytics; (b) your consent for personalized advertising cookies set by Google AdSense (see §4); (c) fulfillment of your request for trip plan storage (contract performance).

To exercise any of these rights, contact us via /contact. We will respond within 30 days.

8. California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information collected from you
• Right to correct inaccurate personal information
• Right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising
• Right to non-discrimination for exercising your CCPA rights

We do not sell personal information for monetary consideration. Personalized advertising cookies set by Google AdSense (see §4) may constitute "sharing" under CPRA. See §4 for advertising choices and contact us with privacy requests.

To exercise CCPA rights, contact us via /contact with subject line "CCPA Request".

9. Data retention

• Trip plans (server): currently stored without automatic expiry. You can request deletion through our contact page; see §6.
• Browser local storage: controlled entirely by you (clear via browser settings)
• Plausible analytics: aggregate-only, retained per Plausible retention policy
• AdSense advertising data: retained per Google's policies (see §4 opt-out links)

10. Children

This service is not directed at children under 13 (or under 16 in the EU / EEA / UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us for immediate deletion.

11. International data transfers

Site infrastructure providers (Cloudflare, Plausible, Google) operate globally distributed networks. If you access the site from the EU / EEA / UK, your data may be transferred to servers located outside your jurisdiction. Each provider maintains appropriate safeguards (Standard Contractual Clauses, adequacy decisions) as required by GDPR Article 46.

12. Changes

We may update this policy. The "Last updated" date at the top will reflect changes. Material changes will be communicated via a notice on the site.

13. Contact

Privacy questions: /contact