Draft Privacy Policy
The controller is ClassicMate (brand: Everlink). Personal data is split between the personal-data database and the public database. The "Where stored" column below shows where each group is kept.
Operator: ClassicMate (Representative: Inho Choi)
Contact for questions, rights requests, and withdrawal: [email protected] Provisional — pending founder confirmation
1. Personal data we process
| Group | Items | Purpose | Retention | Where stored |
|---|---|---|---|---|
| Sign-in account | Google ID, email, sign-up time | Sign-in and account linking | Until you delete your account | Personal-data DB |
| Account number | Random account number, admin flag, session generation | Keeping you signed in and checking permissions | Until you delete your account; after deletion, cheer and admin records keep a random anonymous number. | Public DB |
| Founding members | Nickname, join number, agreed notice version, join/leave time | Public list (only nickname and number shown) | Leaving removes you from the public list right away; the record is kept until you delete your account | Public DB |
| Cheers | Account number, time, allocated amount | One cheer per person and ledger settlement | On account deletion the account number is anonymized; the cheer stays without a name | Public DB |
| Giving-opens updates | Email, agreed notice version, sign-up time | Sending news when giving opens | Until you stop updates | Personal-data DB |
| Rate-limit records | Request-limit fingerprint (hash) | Blocking abnormal repeated requests | 1 day | Personal-data DB |
| Story reports | receipt number, Type, category, story text, contact, relationship, received time, status | Verifying facts and reaching the person | If not verified, the story text, contact, and relationship are cleared 30 days after receipt; only the receipt number, type, category, purge mark, and timestamps remain. For verified reports, the text and contact are kept until the story closes or the person withdraws, and then the operator clears them. | Personal-data DB |
| Admin activity | Admin account number, time, action | Operational audit | Kept (administrators only). On account deletion the account number is anonymized | Public DB |
| Names in public records | Story need line (Korean), Story need line (English), Story title (Korean), Story title (English), Story body (Korean), Story body (English), Public vendor name, Documents checked, Consent scope, Unconfirmed details (Korean), Unconfirmed details (English), Image file name, Reason for closing a story, Ledger recipient, Ledger memo, Allocation rule text (Korean), Allocation rule text (English), Partner company name | Showing where money went and what each story is | Kept as public records. A story can be taken down at the person's request. | Public DB |
Reports marked as about a child under 14 are not stored.
Database export copies taken by the operator are kept in an access-restricted folder on the operator's computer and deleted by the operator after 8 weeks.
2. Retention and destruction
- When the retention period ends or the purpose is fulfilled, we destroy personal data. Data in the database is deleted or cleared.
- Unverified reports older than 30 days are cleared in a once-a-day check. The check runs when the home page is opened, so on a day with no visits it runs on the next visit.
- Information left in the database's recovery history (up to 7 days) disappears when that period ends, and the operator deletes backup copies after 8 weeks.
- If a law requires a separate retention period, we retain the data for that period and publish the basis and period in this policy.
3. Processors and overseas transfer
- Original stories and contact details are not sent to external generative AI. Any future use will require de-identification and the applicable separate choice.
- We entrust database storage (D1) and page delivery to Cloudflare, Inc. (USA). The databases run in Cloudflare's Asia-Pacific (APAC) region, and pages are delivered over its global network. Retention follows the personal data table above.
- Any other third-party disclosure will identify recipient, purpose, items, and period and obtain separate consent when required.
| Field | Details |
|---|---|
| Recipient | Cloudflare, Inc. (United States) |
| Contact | [email protected] |
| Destination | Database: a Cloudflare data center in the Asia-Pacific region (Cloudflare chooses the exact country) / Page delivery: Cloudflare's global network (including the United States) |
| Data transferred | Items in the personal data table above |
| Timing and method | Over the network when the service is used |
| Purpose | Service storage and delivery |
| Retention | The retention periods in this Privacy Policy |
| Refusal and effect | You may decline to sign up, submit a tip, or request updates, and may later request withdrawal or deletion. If you refuse the overseas transfer, you can't use the service. |
4. Children and teenagers
- We don't store reports marked as about a child under 14. We ask a parent or legal guardian to contact us directly.
- When story publication begins, consent from both the person and a guardian will be the default for ages 14 through 17.
5. Rights and withdrawal
- You may request access, correction, deletion, suspension, consent withdrawal, and notification unsubscribe.
- When publication consent is withdrawn, we will stop new posts and reuse on web, social media, and advertising channels we control and request cache removal. We cannot promise retrieval of every copy saved or shared by others.
- You can request access, correction, deletion, suspension, or withdrawal of consent at [email protected]. The operator verifies your identity, handles it, and replies by email (within 10 days).
6. Safeguards and contact
- We keep the personal-data database separate from the public one.
- We do not send originals to external AI before removing identifiers and limit access to necessary staff.
- Privacy officer: Inho Choi (Representative of ClassicMate)
- Business address: Room 707, 51 Uncheon-ro, Osan-si, Gyeonggi-do, Republic of Korea
- Contact: [email protected]
7. Cookies and how to block them
- We don't use advertising or analytics cookies. We use only these three.
| Name | Purpose | Duration |
|---|---|---|
| __Host-give_sess | Keeping you signed in | 14 days (removed right away when you sign out) |
| __Host-give_flow | Security check during Google sign-in | 10 minutes |
| __Host-give_fresh | Showing the confirmation right after you sign up for updates | 60 seconds |
You can block cookies in your browser settings. You can still read stories and the ledger, but you won't be able to sign in, cheer, or join as a founding member.
8. Privacy violation remedies
- If you need advice or a remedy for a privacy violation, you can contact:
- Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972)
- Personal Information Infringement Report Center (privacy.kisa.or.kr, 118)
- Supreme Prosecutors' Office (www.spo.go.kr, 1301)
- Korean National Police Agency (ecrm.police.go.kr, 182)
9. Changes to this policy
- This policy is a draft and applies from October 15, 2026. When we change it, we post what changes and the effective date on this page at least 7 days before it takes effect.