Privacy Policy

Privacy Policy

Effective Date: October 5, 2026

Picnic Planet (hereinafter referred to as the “Team”) operates the reCree service (hereinafter referred to as the “Service”) at recree.io.

The Team values the privacy of Users and processes personal information in accordance with applicable data protection laws, including the Personal Information Protection Act of the Republic of Korea (“PIPA”). This Privacy Policy explains what personal information we process, why we use it, how long we retain it, how third-party services and advertising technologies may process data, and the rights available to Users.


1. Personal Information Collected

Upon Registration (Automatically collected via Google OAuth)

ItemRequiredCollection Method
Email addressRequiredGoogle account integration

The email address collected at registration is used for account identification, Service-related notices, and optional invitations to participate in user research as described in Section 2.

The Team does not receive your Google account password.

During Service Use

ItemDescription
Uploaded imagesPhotos uploaded by the User, such as recreeshots
Saved (bookmarked) itemsList of locations and posts saved by the User
JourneysTravel itineraries created and saved by the User
Service usage recordsPages visited, feature interactions, access timestamps, etc.
Technical informationIP address, browser/device information, operating system, referrer, and similar technical data
Cookies and similar technologiesInformation processed as described in Section 10

Optionally Collected

ItemRequiredCollection Method
NicknameOptionalEntered by User
Profile imageOptionalUploaded by User
BioOptionalEntered by User
Marketing consentOptionalUser opt-in

If a User chooses to make Content public, such Content may be visible to other Users and may, depending on the Service settings, be indexed or cached by search engines or other third-party services.

2. Purpose of Collection and Use

The Team uses personal information for the following purposes:

  1. Member identification and provision of the Service;
  2. Displaying, saving, and managing Content within the Service;
  3. Operating bookmarks, Journeys, recreeshots, and other Service features;
  4. Providing customer support and Service-related notices;
  5. Preventing abuse, fraud, unauthorized access, and security incidents;
  6. Improving Service quality and developing new features, including user surveys, usability tests, and interviews;
  7. Marketing and event notifications, only where separate consent has been obtained where required;
  8. Website analytics and user-experience improvement;
  9. Displaying contextual or personalized advertisements as permitted by applicable law and subject to any required consent; and
  10. Compliance with legal obligations and handling disputes or claims.

Emails sent for account, Service operation, security, or optional Service-improvement research are not intended as advertising messages. Users may opt out of research invitations at any time by replying to the email or contacting picnicplanettt@gmail.com.

Marketing or promotional messages that require consent under applicable law will be sent only where such consent has been obtained.

3. Retention and Use Period

The Team deletes or destroys personal information without undue delay once the purpose of collection and use has been achieved, unless retention is required by law.

CategoryRetention Period
Member informationUntil membership withdrawal
Uploaded imagesUntil deletion by the User or membership withdrawal, subject to limited backup/legal retention
Saved items and JourneysUntil deletion by the User or membership withdrawal
Marketing consent recordsUntil consent is withdrawn or no longer necessary to demonstrate consent
Research opt-out recordsUntil membership withdrawal or no longer necessary
Service usage records maintained by the TeamUp to 1 year from the date of collection

Where retention is required by applicable law, information may be retained for the relevant statutory period, including:

  • Records relating to contracts or withdrawal of offers: 5 years, where applicable under the Act on Consumer Protection in Electronic Commerce;
  • Records relating to payment and supply of goods or services: 5 years, where applicable;
  • Records relating to consumer complaints or dispute resolution: 3 years, where applicable;
  • Records relating to display or advertising: 6 months, where applicable;
  • Certain access records: 3 months, where required under the Protection of Communications Secrets Act.

Information processed by third-party services through cookies or similar technologies is retained according to the settings and policies of the respective provider.

4. Provision of Personal Information to Third Parties

The Team does not, in principle, provide Users’ account information to third parties for their own independent purposes.

Exceptions may apply:

  1. where the User has given valid prior consent;
  2. where provision is required or permitted by applicable law; or
  3. where a court, law-enforcement agency, regulator, or other competent authority makes a legally valid request.

Third-party services that collect information directly from a User’s browser or device, including advertising, analytics, maps, and embedded content, are described in Sections 5 and 10.

5. Service Providers and Overseas Processing

The Team uses third-party service providers to operate the Service. Depending on the provider and feature used, personal information may be processed or stored outside the Republic of Korea.

Service ProviderPurposeInformation InvolvedCountry/RegionRetention
Supabase, Inc.Database, authentication-related backend functions, and file storageEmail address, account/service data, uploaded Content, saved items, JourneysUnited States, based on current Service configurationUntil membership withdrawal or deletion of relevant data, subject to provider backup/security retention
Vercel, Inc.Web hosting, deployment, content delivery, security, and technical logsIP address, request logs, browser/device and technical informationUnited States and other locations used by Vercel infrastructureFor the period necessary to provide hosting/security services under the applicable configuration and provider policy
Google LLCGoogle OAuth, Google Maps, Google Analytics, Google AdSense, advertising and consent-related servicesEmail address for sign-in; map/technical data; analytics, cookie, device, advertising, and interaction data where applicableUnited States and other locations where Google processes dataAccording to relevant Google product settings and policies
Microsoft CorporationMicrosoft Clarity analytics, heatmaps, and session replayPage navigation, clicks, scrolling, browser/device information, technical identifiers, and session interaction dataUnited States and other locations where Microsoft processes dataAccording to Microsoft Clarity settings and retention policies

Transfers or processing may occur electronically over encrypted networks when the relevant Service feature is used.

Where applicable law requires separate consent for an overseas transfer, the Team will obtain such consent. For non-essential analytics or advertising, Users may refuse or withdraw consent through the cookie or consent controls made available by the Service, where applicable.

For core functions that depend on a third-party provider, such as Google sign-in, hosting, database storage, or content delivery, refusal may prevent the relevant feature from functioning.

For questions regarding overseas processing, contact picnicplanettt@gmail.com.

6. Destruction of Personal Information

The Team deletes or destroys personal information without undue delay when the retention period expires or the purpose of processing has been achieved.

  • Electronic files: deleted or rendered inaccessible using reasonable technical methods;
  • Paper documents: shredded or otherwise securely destroyed, if applicable.

Information retained solely because of a legal obligation will be used only for the required purpose.

7. Measures to Ensure Security of Personal Information

The Team takes reasonable technical and administrative measures to protect personal information, including:

  1. HTTPS encryption for data in transit;
  2. access controls and limitations based on operational need;
  3. minimizing the number of personnel who can access personal information;
  4. use of secure third-party authentication services; and
  5. reasonable technical and administrative safeguards for Service operation.

No internet service can guarantee absolute security, but the Team will take measures required by applicable law.

8. Rights of Users and How to Exercise Them

Subject to applicable law, Users may request:

  1. access to personal information held by the Team;
  2. correction of inaccurate information;
  3. deletion of personal information;
  4. suspension or restriction of processing;
  5. withdrawal of consent where processing is based on consent; and
  6. membership withdrawal and account deletion.

Users may exercise available rights through Service settings or by contacting picnicplanettt@gmail.com.

The Team may request information reasonably necessary to verify the identity or authority of the requester.

9. Use of Location Information

  1. The Service may use a User’s device location, after browser or operating-system permission is granted, to center the map or support nearby-place exploration.
  2. The Team does not intentionally use the device’s current location to create or maintain a continuous movement history.
  3. The Service database may store the coordinates of places a User chooses to save, include in a Journey, or associate with Content. These coordinates describe the selected place and are not intended to track the User’s movements.
  4. Third-party map technology may process technical information associated with map requests in accordance with the provider’s own terms and privacy policy.
  5. Users may refuse or withdraw location permission through browser or device settings. The Service remains usable, although location-based convenience features may be unavailable.

10. Cookies, Analytics, Advertising, and Embedded Content

10.1 Google Analytics

The Team uses Google Analytics, a web analytics service provided by Google LLC, to understand how the Service is used and to improve Service quality.

Depending on configuration and consent status, Google Analytics may process information such as pages visited, access timestamps, browser/device information, approximate location derived from IP address, and cookie or similar identifiers.

Where applicable law requires consent for non-essential analytics cookies or similar technologies, the Team will request consent before activating them.

10.2 Microsoft Clarity

The Team uses Microsoft Clarity to understand how Users interact with the Service and to improve usability and design.

Clarity may process interaction data such as mouse movements, clicks, scrolling, page navigation, and session replay information, and may generate heatmaps.

Where applicable law requires consent, including for Users in the European Economic Area, the United Kingdom, or Switzerland, the Team will use available consent controls or consent signals before allowing Clarity to set non-essential cookies or perform consent-dependent processing.

10.3 Advertising (Google AdSense)

The Service uses or may use Google AdSense, an advertising service provided by Google LLC.

  1. Third-party vendors, including Google, use cookies to serve advertisements based on a User’s prior visits to the Service or other websites.
  2. Google’s use of advertising cookies enables Google and its partners to serve advertisements to Users based on their visits to the Service and/or other websites on the Internet.
  3. Advertising may include contextual or personalized (interest-based) advertising where permitted by applicable law.
  4. Information processed for advertising may include pages visited, ad impressions and clicks, browser/device information, cookie or device identifiers, and approximate location derived from IP address.
  5. Google and other third-party advertising vendors, ad networks, and ad technology partners may use cookies and similar technologies in connection with advertisements displayed on the Service. Information about Google’s current ad technology partners and their data practices is available through Google’s advertising and consent management resources.
  6. Users may opt out of personalized advertising through Google Ads Settings and may also use industry opt-out tools such as www.aboutads.info, where available.
  7. Where required by applicable law, including for Users in the European Economic Area, the United Kingdom, and Switzerland, consent will be requested before consent-dependent advertising cookies or personalized advertising technologies are used.
  8. For such regions, the Team may use a Google-certified Consent Management Platform (CMP) integrated with the IAB Transparency and Consent Framework (TCF) to collect and communicate User choices.
  9. A CMP or consent tool helps manage User choices but does not by itself guarantee compliance with all applicable privacy laws.

For more information on how Google uses information from sites or apps that use Google services, Users may refer to Google’s privacy and advertising resources.

10.4 Embedded Content and Third-Party Services

The Service may include embedded or linked content from third-party services, such as YouTube, Instagram, X (formerly Twitter), and Google Maps.

When such content is loaded, the third-party provider may receive technical information such as IP address, browser/device information, cookie identifiers, and interaction data in accordance with its own privacy policy. If the User is logged in to the third-party service, the provider may associate the interaction with that account.

Where legally required, the Team will apply consent controls before loading non-essential third-party technologies.

10.5 How to Refuse or Manage Cookies

Users may refuse or delete cookies through browser settings.

Where the Service provides a cookie or consent preference tool, Users may also use that tool to manage or withdraw consent for non-essential analytics, advertising, or similar technologies.

Refusing non-essential cookies does not prevent access to the core informational features of reCree, although analytics, personalized advertising, embedded media, or certain convenience features may be limited.

11. Additional Rights for Users in Certain Regions

reCree is operated from the Republic of Korea and is intended for an international audience.

Depending on the User’s country or region, additional privacy rights may apply. For example, Users in the European Economic Area, United Kingdom, or Switzerland may, subject to applicable law, have rights including access, correction, erasure, restriction, objection, data portability, withdrawal of consent, and the right to lodge a complaint with a competent data protection authority.

Where consent is the legal basis for processing, withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Users may contact picnicplanettt@gmail.com to exercise applicable rights or ask questions about how their information is processed.

12. Personal Information Protection Officer

The Team has designated the following privacy contact to oversee matters related to personal information processing and to handle User complaints and requests.

13. Remedies for Infringement of Rights

Users may contact the following organizations in the Republic of Korea for consultation or dispute resolution regarding personal information infringement:

  • Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
  • Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
  • Supreme Prosecutors’ Office: www.spo.go.kr / 1301
  • National Police Agency: ecrm.police.go.kr / 182
  • Central Administrative Appeals Commission: www.simpan.go.kr / 110

Users outside Korea may also contact a privacy or data protection authority with jurisdiction in their country or region, where applicable.

14. Changes to This Policy

This Privacy Policy is effective from the date stated above.

If the Team makes material changes, the updated Policy and effective date will be posted within the Service. Where applicable law requires additional notice or consent, the Team will provide such notice or obtain such consent.


Picnic Planet / reCree
Website: https://recree.io
Contact: picnicplanettt@gmail.com