Privacy Policy

1. Who is responsible

The operator of Campusmate is responsible for your personal data: [operator name, address and privacy contact email to be added].

2. What we collect

• Account data: email address, password (stored only as a hash by our authentication provider), username, nickname, birth-age confirmation (14+), and the optional profile details you add (country, languages, Korean level, interests, bio, photo).
• Content you create: posts, comments, likes, saves, follows, reports, photos and voice recordings, and their timestamps.
• Technical data: IP address, browser/device information and security logs, used to keep the service safe and to apply rate limits. Staff actions are recorded in an audit log.
• Marketing source: if you arrive through a link with UTM parameters or a referrer, we store the first source with your account to understand which channels work.
• Analytics and cookies: see the Cookie Policy. Analytics are only used if enabled.

3. Why we use it

• To provide the service: sign-in, your profile, posting, notifications and feeds.
• To keep the community safe: moderation, spam prevention, abuse reports, enforcing our rules.
• To improve the site: aggregated statistics and error monitoring.
• To communicate with you: verification and password-reset emails, and service notices.

4. Who we share it with

We use service providers to run Campusmate, including Supabase (database, authentication and file storage), Vercel (hosting), and, if enabled, Cloudflare Turnstile (bot protection), Google Analytics (analytics), Google AdSense (advertising) and Telegram (internal alerts to the operator, which do not contain your password). These providers process data on our behalf. Some may process data outside your country, including outside South Korea.

Public content (public posts and your public profile) can be seen by anyone, including search engines. We do not sell your personal data.

5. How long we keep it

We keep account data while your account exists. When you delete your account, your profile is removed after a grace period and your content is deleted or anonymised, except where we must keep records for legal reasons or to prevent abuse (for example moderation and audit records). Raw traffic events are kept for a short period (about 30 days) and then reduced to totals. [Exact retention periods to be confirmed by the operator.]

6. Your rights

Depending on where you live (for example under South Korea's Personal Information Protection Act, the EU/UK GDPR, or US state laws) you may have the right to access, correct, delete, restrict or export your data and to object to some processing. You can edit most of your data in Settings, and you can contact us at [privacy contact email] for the rest. You may also complain to your local data protection authority.

7. Children

Campusmate is not for children under 14, and we ask for age confirmation at sign-up. If you believe a child under 14 has an account, please report it so we can remove it.

8. Security

We use access controls, row-level security, encryption in transit and other safeguards. No online service is perfectly secure; please use a strong, unique password.

9. Changes

We may update this policy. Important changes will be announced on the site.