Privacy Policy

Who runs this

One person, living in France, built and runs this site alone. That person is the controller under the GDPR and can be reached at the address at the bottom. This is not a company and the scale is small, so there is no Data Protection Officer.

What we store

If you only look at the map without signing in, nothing about you is kept. What we store is this and nothing else.

• Account — the email address, name and profile picture URL that Google sign-in hands over. We never receive or store a password.
• Activity — the places you saved, the ones you marked visited, the ratings and reviews you left, and any videos you added yourself.
• Access logs — standard logs from the layer in front of the server. They hold IP address, time, requested URL and browser type, and are deleted automatically after 90 days. They are used only to estimate visitor numbers and find errors.

On what basis

Your account and activity are processed to give you the features you asked for (GDPR Art. 6(1)(b), performance of a contract). Access logs are processed to keep the site running and to find faults (Art. 6(1)(f), legitimate interests). Nothing is used for advertising or marketing, and nothing is sold to anyone.

Why there is no consent banner

There are no analytics scripts and no advertising trackers here. Three things are kept in your browser, and all three are needed for the site to work, which puts them under the consent exemption in the ePrivacy Directive and Article 82 of the French Data Protection Act. Asking for consent you do not need is itself a problem, so there is no banner.

• Sign-in state — the token that saves you from signing in again on your next visit
• Language — the fact that you once chose Korean
• Whether you have already seen the intro

Where data goes

Drawing the page needs a few outside services. Your IP address reaches them when it does.

• Google Maps — this is the map itself. Google receives a request the moment a map opens.
• Google sign-in — loaded only when you press the sign-in button. Press nothing and nothing is exchanged.
• YouTube — videos are embedded in no-cookie mode (youtube-nocookie) and load only when you press play.
• Supabase — the database. It sits in the Frankfurt region, inside the EU.
• AWS — runs the site and the API. The server is in Frankfurt (EU); the network that delivers files spans the world.
• Anthropic — used to pull restaurant names out of video transcripts. No account data is sent — only video content that is already public on YouTube.

Google, AWS and Anthropic are US companies. Where data leaves Europe, it does so under the EU Standard Contractual Clauses those providers offer.

How long we keep it

Access logs are deleted automatically after 90 days. Your account and activity stay until you delete the account — instead of setting a fixed period, we made it something you can do yourself at any time.

Deleting your account

Press your profile picture in the top right and you will find Delete account. Pressing it removes your account, your saved places, your ratings and reviews, and any videos you added along with the places extracted from them. You do not need to email anyone, and it cannot be undone.

Your rights

The GDPR gives you the rights below. Apart from deleting your account, write to the address at the bottom and it will be handled — you will get an answer within a month.

• Access — you may ask for a copy of what we hold (Art. 15)
• Rectification — you may have what is wrong corrected (Art. 16)
• Erasure — you may have it deleted (Art. 17). The delete button above is exactly this
• Portability — you may take it away in a machine-readable form (Art. 20)
• Objection — you may object to processing based on legitimate interests (Art. 21)
• Complaint — if you think something is wrong, you may complain to CNIL (cnil.fr), the French supervisory authority

If you are in one of these videos

This site pulls restaurant names and remarks out of videos that are public on YouTube. Channel names, profile pictures and what was said in the video appear alongside them. If you want your channel taken out, write to the address below — it will be checked and removed.

Children

This site is not aimed at anyone under 15 and never asks for an age. If you find that a child has an account here, tell us and it will be deleted.

If this document changes

When something needs changing, this page is edited and the date above is updated. If a change means using data we already hold in a different way, signed-in users are told separately.

Contact

For rights requests or anything else, write to this address. kimdooinn1@gmail.com