Privacy Policy

1. Information we collect

• Account & email. When you sign in with Google we receive a stable identifier and your email address. Email is used only for account recovery and important service notices — it is never shown to other users.
• Nickname / anonymous profile. You are shown to others as an emoji + color avatar and an optional nickname you choose. No real name is required.
• Location data. When you enable location permission we receive GPS coordinates, accuracy, and a timestamp from your browser. We use this only to compute a single yes/no — "is this device currently inside this room's geofence?" Raw coordinates are not written to our database; only the verification result and the room id are stored.
• Content you create. Chat messages, community posts, comments, uploaded photos, and reports/blocks you submit.
• Device & log data. User-Agent string, language, IP address, and basic request logs — used for abuse detection, debugging, and security.
• Payment & subscription data. If you subscribe to a paid plan, our payment processor (Creem) handles your card details directly — we never see or store your card number. We receive an order id, subscription id, plan, status, billing currency, and renewal date so we can grant and revoke entitlements.

2. How we use location data

• To verify that the device requesting to join a chat room is physically inside the room's geofenced area.
• To recommend public rooms that are currently active near your reported position.
• To detect abuse such as impossible movement patterns or GPS spoofing.
• To process safety reports where location context is relevant to the report.

We do not use location data to build advertising profiles, sell it to data brokers, or share it with third parties for marketing.

3. Legal basis & Korean location-information notice

We process your data on the basis of (a) the contract you enter into with us when using the service, (b) your consent, given when you grant location permission in your browser, and (c) our legitimate interest in operating a safe and secure platform. Because huntique offers location-based services to users in the Republic of Korea, we operate within the framework of the Korean Act on the Protection and Use of Location Information. You may withdraw your location consent at any time by disabling location permission for huntique.club in your browser; the service will remain available but features that require location verification will be disabled.

4. Retention

• Live GPS coordinates: processed in memory at verification time and not persisted to durable storage.
• Verification results & room membership: retained for the lifetime of the room.
• Chat rooms and their messages: deleted automatically when the room expires (6 hours, 1 day, 3 days, or 7 days depending on the room's setting). Permanent rooms follow operational policy and the host's deletion choices.
• Community posts & comments: retained until deleted by the author or removed for policy violation.
• Reports, blocks, and security logs: retained for up to 3 years for dispute handling and legal compliance, then deleted or anonymized.
• Account data: retained until you delete the account. After deletion, identifying information is anonymized within 90 days.
• Payment records: retained as required by tax and accounting law (typically 5 years) in pseudonymized form.

5. Third-party processors

We share data only with the processors strictly required to operate the service, under contracts that mirror this policy's protections.

• Cloudflare — hosting, edge delivery, DDoS protection, request logs.
• Google Identity — sign-in and account identifier.
• Creem — subscription billing, card processing, invoicing. Card data is collected and stored by Creem directly; huntique does not see it.

We do not sell personal data and do not provide it to law enforcement except in response to a valid legal request.

6. Your rights

• Revoke location consent at any time via your browser's site permission settings.
• Access the personal data we hold about you.
• Correct or update your nickname, avatar, and account email.
• Delete your account and associated identifying data from your profile screen, or by writing to the contact address below.
• Object to specific processing, or restrict it where applicable.
• Export your content and account data on request.
• Complain to the Korean Personal Information Protection Commission (PIPC) or your local data-protection authority if you believe your rights have been violated.

7. Security

All traffic is encrypted in transit via TLS. Database access is restricted to the application's service identity. Location coordinates are discarded from memory immediately after each verification, so an attacker who compromises our storage cannot recover a user's movement history. We apply bot screening and abnormal-movement detection to reduce automated abuse.

8. Children

huntique is not directed at children under 14. We do not knowingly collect personal data from users known to be under 14. Areas of the service that are flagged as nightlife or adult-oriented enforce an 18+ self-attestation gate. If you believe a minor has created an account, please email us so we can remove it.

9. International transfers

huntique runs on globally distributed infrastructure operated by Cloudflare. Data may be processed at the closest available edge location, which may be outside your country of residence. We rely on standard contractual clauses and equivalent safeguards with our processors.

10. Changes to this policy

We may update this policy as the service or applicable law evolves. Material changes will be announced inside the app and reflected in the “Effective date” above. Continued use of the service after a change constitutes acceptance.