Review draft · 2026-10-27
Privacy Policy
This draft describes the current service. No effective date has been set. Retention and deletion periods, international processing details and procedures for minors must be finalized before the formal documents take effect.
1. Comments and replies
Comments are stored separately from survey responses. Text, a survey-specific pseudonym and time are visible to result viewers. Account identifiers (when signed in) and a hashed browser token support ownership and abuse prevention. The commenter or survey author can delete a comment: its text and display name are cleared while management records remain. A deletion placeholder is shown only while replies remain. Guests may lose deletion access when browser data is cleared.
2. Data and purposes
Registration processes email, authentication data and account identifiers. Responses include answers, selected demographic fields, language, timestamps and management identifiers. Signed-in responses may be linked to an account. These support account and response management, statistics and security. Avoid identifying details in answers.
3. Who can see responses
Public aggregates are available to everyone. Authors see responses and demographic details submitted to their own surveys. The author response view excludes IP, email and account identifiers. Answer combinations may still allow identity to be inferred. Free-text originals are not shown in public statistics.
4. Browser storage and access data
Local storage holds language, login sessions, response tokens, follows and notice preferences. Clearing it may remove guest response access and follows. Rate limiting uses an IP hash combined with a server secret and date, not proof of a unique person. Hosting and authentication access logs are separate.
5. Retention and deletion
Surveys and responses are stored for long-term analysis. Maximum periods for accounts, raw responses, audit logs and backup deletion are not finalized. Deleting a response removes it from the operational database and subsequent aggregates, but does not immediately erase audit records or provider backups. Rate-limit records older than one day are cleared on later requests; cleanup may be delayed without traffic.
6. Providers and international processing
Vercel hosts the website; Supabase provides database, authentication and API services. The database region is Seoul, which does not mean all access, authentication and support data remains in Korea. Provider entities, countries, data categories, transfer methods and timing, retention and applicable grounds remain to be verified for the formal policy.
7. Your rights and safeguards
Use response management or the contact below to request access, correction, deletion, restriction or account deletion, subject to necessary identity checks. No dedicated account deletion screen is available yet. Server authorization checks restrict response access; Supabase handles authentication. Procedures for minors and guardians remain to be finalized.
8. Contact and changes
Service and privacy contact: BR.Park Systems, at the email below. A designated privacy officer and detailed processing schedules will be specified in the formal policy. Revisions will show their version and effective date here.
BR.Park Systems · br.parksystems@uiadapt.com