Privacy policy
Digging Route ("the Service") treats your personal data with care. This policy explains what the Service receives, what it uses it for, who it entrusts it to, and how it can be deleted.
Effective from 18 August 2026
In short
- If you are only browsing, you need neither an account nor any personal data.
- Your saved list and view preferences stay in your browser and are never sent to our servers.
- Only what you enter yourself — signing in, reporting, subscribing — is stored on our servers, and we never sell or pass it to third parties for advertising.
- We use Google Analytics and Microsoft Clarity for visit analytics (see section 5 for how to opt out).
1. What we collect, and how
The Service receives the following only when you enter it yourself or consent to it.
- Sign-up and sign-in— Your email address. If you sign in with Google or Kakao, the email, nickname and profile image those services provide.
- Shop reports— The content of your report. A contact (email or similar) is optional; you can report without one.
- Newsletter— Your email address.
- Shops, routes and stories you post— The text and photos you write, and the nickname shown with them.
- Collected automatically— Visit history, device and browser information and approximate location are collected by our analytics tools through cookies and similar technologies (section 5). To prevent spam and flooding, we also check your IP address in server memory momentarily when you report or subscribe; it is never written to the database.
Your saved list and list/map view preference live only in your browser's localStorage and are not sent to our servers. If you sync them to your account while signed in, they are stored against that account.
2. What we use it for
- Keeping you signed in, and identifying your own content — saves, reviews, posts
- Reviewing and applying reports, and replying to the reporter where needed
- Sending the newsletter (subscribers only)
- Analysing usage statistics and improving the interface and features
- Preventing spam, flooding and abuse
3. How long we keep it
- Account data— Destroyed without delay when you close your account or ask us to delete it.
- Shops, routes, stories and reviews you posted— Destroyed on request, and deleted along with your account.
- Contact details left with a report— Destroyed as soon as the report is closed (applied or rejected). Even if handling is delayed, they are destroyed automatically six months after we receive them.
- Report text and handling history— Kept so we can show the basis on which a listing was changed. Anything identifying a person is removed first, as above, and we destroy the rest without delay on request.
- Newsletter subscription— Destroyed when you unsubscribe.
- Data held by analytics tools— Governed by each provider's retention policy (Google Analytics up to 14 months, Microsoft Clarity up to 13 months).
Where other laws impose a retention obligation, we keep the data for that period.
4. Third parties and processors
The Service never sells personal data or provides it for advertising. We do entrust processing to the providers below, to the extent needed to run the Service; their servers may be located outside Korea.
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication, database, image storage | United States |
| Vercel | Website hosting | United States |
| Resend | Report notification emails | United States |
| Analytics, maps, Google sign-in | United States | |
| Microsoft | Session analytics (Clarity — heatmaps and session recording) | United States |
| Kakao | Kakao account sign-in | Republic of Korea |
5. Cookies, analytics, and how to opt out
The Service uses cookies and similar technologies to keep you signed in and to analyse usage.
- Google Analytics 4— We look at visit counts, referral sources and how people move between pages. Google's opt-out add-onwill stop this collection.
- Microsoft Clarity— To see which buttons get pressed and where people get stuck, it records clicks, scrolling and on-screen interaction (session replay). By default Clarity masks on-screen text such as anything typed into a field, email addresses and phone numbers. Microsoft's privacy statementis also worth reading.
- Browser settings— Blocking cookies, tracking protection and private browsing all work too. Note that blocking cookies entirely may stop you from staying signed in.
6. Your rights and how to exercise them
You may at any time ask to see, correct, delete or stop the processing of your personal data. Most of this you can do yourself once signed in; for account deletion or anything else, contact us below and we will act without delay and confirm the outcome.
Children under 14 may not register, and we do not knowingly collect children's personal data.
7. Destruction of data
Once the retention period passes or the purpose ends, we destroy the data without delay. Electronic files are deleted irrecoverably; any printouts are shredded or incinerated.
8. Security measures
- All traffic is encrypted over HTTPS.
- We never store passwords. Sign-in uses an email link or Google/Kakao authentication.
- The database uses row-level security so you can only reach your own data.
- Administrative access to personal data is limited to the operator alone.
9. Data protection officer
For questions, complaints or remedies concerning personal data, please contact us below.
- Name: 이용준
- Email: lyjooooon@gmail.com
If you need to report or discuss a privacy breach, you can contact Korea's Privacy Infringement Report Centre (118), the Personal Information Dispute Mediation Committee (1833-6972), the Supreme Prosecutors' Office (1301) or the National Police Agency (182).
10. Changes to this policy
When law or the Service changes and we revise this policy, we post the changes on this page and update the effective date. Significant changes are announced seven days before they take effect.
How we gather and verify shop information is covered on the How we collect and verifypage covers that separately.