Privacy Policy
Privacy Policy
Effective Date: October 5, 2026
Picnic Planet (hereinafter referred to as the “Team”) operates the reCree service (hereinafter referred to as the “Service”) at recree.io.
The Team values the privacy of Users and processes personal information in accordance with applicable data protection laws, including the Personal Information Protection Act of the Republic of Korea (“PIPA”). This Privacy Policy explains what personal information we process, why we use it, how long we retain it, how third-party services and advertising technologies may process data, and the rights available to Users.
1. Personal Information Collected
Upon Registration (Automatically collected via Google OAuth)
| Item | Required | Collection Method |
|---|---|---|
| Email address | Required | Google account integration |
The email address collected at registration is used for account identification, Service-related notices, and optional invitations to participate in user research as described in Section 2.
The Team does not receive your Google account password.
During Service Use
| Item | Description |
|---|---|
| Uploaded images | Photos uploaded by the User, such as recreeshots |
| Saved (bookmarked) items | List of locations and posts saved by the User |
| Journeys | Travel itineraries created and saved by the User |
| Service usage records | Pages visited, feature interactions, access timestamps, etc. |
| Technical information | IP address, browser/device information, operating system, referrer, and similar technical data |
| Cookies and similar technologies | Information processed as described in Section 10 |
Optionally Collected
| Item | Required | Collection Method |
|---|---|---|
| Nickname | Optional | Entered by User |
| Profile image | Optional | Uploaded by User |
| Bio | Optional | Entered by User |
| Marketing consent | Optional | User opt-in |
If a User chooses to make Content public, such Content may be visible to other Users and may, depending on the Service settings, be indexed or cached by search engines or other third-party services.
2. Purpose of Collection and Use
The Team uses personal information for the following purposes:
- Member identification and provision of the Service;
- Displaying, saving, and managing Content within the Service;
- Operating bookmarks, Journeys, recreeshots, and other Service features;
- Providing customer support and Service-related notices;
- Preventing abuse, fraud, unauthorized access, and security incidents;
- Improving Service quality and developing new features, including user surveys, usability tests, and interviews;
- Marketing and event notifications, only where separate consent has been obtained where required;
- Website analytics and user-experience improvement;
- Displaying contextual or personalized advertisements as permitted by applicable law and subject to any required consent; and
- Compliance with legal obligations and handling disputes or claims.
Emails sent for account, Service operation, security, or optional Service-improvement research are not intended as advertising messages. Users may opt out of research invitations at any time by replying to the email or contacting picnicplanettt@gmail.com.
Marketing or promotional messages that require consent under applicable law will be sent only where such consent has been obtained.
3. Retention and Use Period
The Team deletes or destroys personal information without undue delay once the purpose of collection and use has been achieved, unless retention is required by law.
| Category | Retention Period |
|---|---|
| Member information | Until membership withdrawal |
| Uploaded images | Until deletion by the User or membership withdrawal, subject to limited backup/legal retention |
| Saved items and Journeys | Until deletion by the User or membership withdrawal |
| Marketing consent records | Until consent is withdrawn or no longer necessary to demonstrate consent |
| Research opt-out records | Until membership withdrawal or no longer necessary |
| Service usage records maintained by the Team | Up to 1 year from the date of collection |
Where retention is required by applicable law, information may be retained for the relevant statutory period, including:
- Records relating to contracts or withdrawal of offers: 5 years, where applicable under the Act on Consumer Protection in Electronic Commerce;
- Records relating to payment and supply of goods or services: 5 years, where applicable;
- Records relating to consumer complaints or dispute resolution: 3 years, where applicable;
- Records relating to display or advertising: 6 months, where applicable;
- Certain access records: 3 months, where required under the Protection of Communications Secrets Act.
Information processed by third-party services through cookies or similar technologies is retained according to the settings and policies of the respective provider.
4. Provision of Personal Information to Third Parties
The Team does not, in principle, provide Users’ account information to third parties for their own independent purposes.
Exceptions may apply:
- where the User has given valid prior consent;
- where provision is required or permitted by applicable law; or
- where a court, law-enforcement agency, regulator, or other competent authority makes a legally valid request.
Third-party services that collect information directly from a User’s browser or device, including advertising, analytics, maps, and embedded content, are described in Sections 5 and 10.
5. Service Providers and Overseas Processing
The Team uses third-party service providers to operate the Service. Depending on the provider and feature used, personal information may be processed or stored outside the Republic of Korea.
| Service Provider | Purpose | Information Involved | Country/Region | Retention |
|---|---|---|---|---|
| Supabase, Inc. | Database, authentication-related backend functions, and file storage | Email address, account/service data, uploaded Content, saved items, Journeys | United States, based on current Service configuration | Until membership withdrawal or deletion of relevant data, subject to provider backup/security retention |
| Vercel, Inc. | Web hosting, deployment, content delivery, security, and technical logs | IP address, request logs, browser/device and technical information | United States and other locations used by Vercel infrastructure | For the period necessary to provide hosting/security services under the applicable configuration and provider policy |
| Google LLC | Google OAuth, Google Maps, Google Analytics, Google AdSense, advertising and consent-related services | Email address for sign-in; map/technical data; analytics, cookie, device, advertising, and interaction data where applicable | United States and other locations where Google processes data | According to relevant Google product settings and policies |
| Microsoft Corporation | Microsoft Clarity analytics, heatmaps, and session replay | Page navigation, clicks, scrolling, browser/device information, technical identifiers, and session interaction data | United States and other locations where Microsoft processes data | According to Microsoft Clarity settings and retention policies |
Transfers or processing may occur electronically over encrypted networks when the relevant Service feature is used.
Where applicable law requires separate consent for an overseas transfer, the Team will obtain such consent. For non-essential analytics or advertising, Users may refuse or withdraw consent through the cookie or consent controls made available by the Service, where applicable.
For core functions that depend on a third-party provider, such as Google sign-in, hosting, database storage, or content delivery, refusal may prevent the relevant feature from functioning.
For questions regarding overseas processing, contact picnicplanettt@gmail.com.
6. Destruction of Personal Information
The Team deletes or destroys personal information without undue delay when the retention period expires or the purpose of processing has been achieved.
- Electronic files: deleted or rendered inaccessible using reasonable technical methods;
- Paper documents: shredded or otherwise securely destroyed, if applicable.
Information retained solely because of a legal obligation will be used only for the required purpose.
7. Measures to Ensure Security of Personal Information
The Team takes reasonable technical and administrative measures to protect personal information, including:
- HTTPS encryption for data in transit;
- access controls and limitations based on operational need;
- minimizing the number of personnel who can access personal information;
- use of secure third-party authentication services; and
- reasonable technical and administrative safeguards for Service operation.
No internet service can guarantee absolute security, but the Team will take measures required by applicable law.
8. Rights of Users and How to Exercise Them
Subject to applicable law, Users may request:
- access to personal information held by the Team;
- correction of inaccurate information;
- deletion of personal information;
- suspension or restriction of processing;
- withdrawal of consent where processing is based on consent; and
- membership withdrawal and account deletion.
Users may exercise available rights through Service settings or by contacting picnicplanettt@gmail.com.
The Team may request information reasonably necessary to verify the identity or authority of the requester.
9. Use of Location Information
- The Service may use a User’s device location, after browser or operating-system permission is granted, to center the map or support nearby-place exploration.
- The Team does not intentionally use the device’s current location to create or maintain a continuous movement history.
- The Service database may store the coordinates of places a User chooses to save, include in a Journey, or associate with Content. These coordinates describe the selected place and are not intended to track the User’s movements.
- Third-party map technology may process technical information associated with map requests in accordance with the provider’s own terms and privacy policy.
- Users may refuse or withdraw location permission through browser or device settings. The Service remains usable, although location-based convenience features may be unavailable.
10. Cookies, Analytics, Advertising, and Embedded Content
10.1 Google Analytics
The Team uses Google Analytics, a web analytics service provided by Google LLC, to understand how the Service is used and to improve Service quality.
Depending on configuration and consent status, Google Analytics may process information such as pages visited, access timestamps, browser/device information, approximate location derived from IP address, and cookie or similar identifiers.
Where applicable law requires consent for non-essential analytics cookies or similar technologies, the Team will request consent before activating them.
10.2 Microsoft Clarity
The Team uses Microsoft Clarity to understand how Users interact with the Service and to improve usability and design.
Clarity may process interaction data such as mouse movements, clicks, scrolling, page navigation, and session replay information, and may generate heatmaps.
Where applicable law requires consent, including for Users in the European Economic Area, the United Kingdom, or Switzerland, the Team will use available consent controls or consent signals before allowing Clarity to set non-essential cookies or perform consent-dependent processing.
10.3 Advertising (Google AdSense)
The Service uses or may use Google AdSense, an advertising service provided by Google LLC.
- Third-party vendors, including Google, use cookies to serve advertisements based on a User’s prior visits to the Service or other websites.
- Google’s use of advertising cookies enables Google and its partners to serve advertisements to Users based on their visits to the Service and/or other websites on the Internet.
- Advertising may include contextual or personalized (interest-based) advertising where permitted by applicable law.
- Information processed for advertising may include pages visited, ad impressions and clicks, browser/device information, cookie or device identifiers, and approximate location derived from IP address.
- Google and other third-party advertising vendors, ad networks, and ad technology partners may use cookies and similar technologies in connection with advertisements displayed on the Service. Information about Google’s current ad technology partners and their data practices is available through Google’s advertising and consent management resources.
- Users may opt out of personalized advertising through Google Ads Settings and may also use industry opt-out tools such as www.aboutads.info, where available.
- Where required by applicable law, including for Users in the European Economic Area, the United Kingdom, and Switzerland, consent will be requested before consent-dependent advertising cookies or personalized advertising technologies are used.
- For such regions, the Team may use a Google-certified Consent Management Platform (CMP) integrated with the IAB Transparency and Consent Framework (TCF) to collect and communicate User choices.
- A CMP or consent tool helps manage User choices but does not by itself guarantee compliance with all applicable privacy laws.
For more information on how Google uses information from sites or apps that use Google services, Users may refer to Google’s privacy and advertising resources.
10.4 Embedded Content and Third-Party Services
The Service may include embedded or linked content from third-party services, such as YouTube, Instagram, X (formerly Twitter), and Google Maps.
When such content is loaded, the third-party provider may receive technical information such as IP address, browser/device information, cookie identifiers, and interaction data in accordance with its own privacy policy. If the User is logged in to the third-party service, the provider may associate the interaction with that account.
Where legally required, the Team will apply consent controls before loading non-essential third-party technologies.
10.5 How to Refuse or Manage Cookies
Users may refuse or delete cookies through browser settings.
Where the Service provides a cookie or consent preference tool, Users may also use that tool to manage or withdraw consent for non-essential analytics, advertising, or similar technologies.
Refusing non-essential cookies does not prevent access to the core informational features of reCree, although analytics, personalized advertising, embedded media, or certain convenience features may be limited.
11. Additional Rights for Users in Certain Regions
reCree is operated from the Republic of Korea and is intended for an international audience.
Depending on the User’s country or region, additional privacy rights may apply. For example, Users in the European Economic Area, United Kingdom, or Switzerland may, subject to applicable law, have rights including access, correction, erasure, restriction, objection, data portability, withdrawal of consent, and the right to lodge a complaint with a competent data protection authority.
Where consent is the legal basis for processing, withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Users may contact picnicplanettt@gmail.com to exercise applicable rights or ask questions about how their information is processed.
12. Personal Information Protection Officer
The Team has designated the following privacy contact to oversee matters related to personal information processing and to handle User complaints and requests.
- Personal Information Protection Officer: reCree Team, Picnic Planet
- Email: picnicplanettt@gmail.com
13. Remedies for Infringement of Rights
Users may contact the following organizations in the Republic of Korea for consultation or dispute resolution regarding personal information infringement:
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
- Personal Information Infringement Report Center: privacy.kisa.or.kr / 118
- Supreme Prosecutors’ Office: www.spo.go.kr / 1301
- National Police Agency: ecrm.police.go.kr / 182
- Central Administrative Appeals Commission: www.simpan.go.kr / 110
Users outside Korea may also contact a privacy or data protection authority with jurisdiction in their country or region, where applicable.
14. Changes to This Policy
This Privacy Policy is effective from the date stated above.
If the Team makes material changes, the updated Policy and effective date will be posted within the Service. Where applicable law requires additional notice or consent, the Team will provide such notice or obtain such consent.
Picnic Planet / reCree
Website: https://recree.io
Contact: picnicplanettt@gmail.com