Privacy Policy
Last updated 2026-11-11 · Draft, not yet reviewed by a lawyer
You can read every review on Not That Spicy without an account. We only ask you to sign in when you want to write, save, vote or report. This page lists exactly what we keep and why.
What we collect
- From Google sign-in: your email address and a Google account ID. We never see your Google password.
- A nickname you choose. This is the only name other people see.
- Your country, if you pick one. It is optional and shows as a flag on your reviews.
- What you post: reviews, scores, photos, comments, votes, saved places.
- Basic logs: IP address and request times, kept to stop scraping and abuse.
We do not ask for your real name, phone number or passport details. Please don't put them in posts either.
Photos
When you upload a photo we shrink it and strip its location data (EXIF GPS) before saving it. If other diners' faces are visible, blur them first. Photos showing someone who asks us to remove them will be taken down.
Why we use it
- To run your account and show your posts under your nickname.
- To count Helpful votes, rankings and category summaries.
- To block spam, scraping and fake reviews.
- To send notices you turned on yourself (for example, a reply to your Fix). No more than one marketing message a week, and only if you opt in.
Who else handles it
- Google – sign-in, and web fonts (your browser contacts Google's font servers when the page loads).
- Supabase – our database and login service.
- Cloudflare – photo storage.
- Our web host – serves the site.
Some of these companies store data outside Korea. We do not sell your data and we don't share it with advertisers.
How long we keep it
Until you delete your account. After that we remove your email and nickname within 30 days. Abuse logs are kept for up to 6 months unless the law requires longer. Posts you wrote stay visible as "deleted user" unless you delete them first.
Your rights
You can see, fix, download or delete your data at any time, and you can withdraw consent by deleting your account. Deleting your account is as easy as signing up: one button in settings.
Contact
Privacy officer: [operator name to be added] · [contact email to be added]