Privacy policy

This is an English translation of the Korean privacy policy, provided for convenience. If the two differ, the Korean version applies.

moviebara (the "Service") sets out and publishes this privacy policy under Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to handle related concerns promptly and smoothly.

The Service has no sign-up process and does not collect information that directly identifies a data subject, such as a name or contact details.

Article 1 (Purposes of processing)

The Service processes personal information for the following purposes. It is not used for any other purpose, and if a purpose changes, the Service will take the necessary steps, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

Location-based features: showing nearby cinemas and travel times
Improving the Service: analysing usage statistics and finding errors
Handling enquiries: replying to questions and reports

Article 2 (Personal information processed)

The Service processes the following personal information. Location information is processed only when the data subject allows it, and is not stored on the server.

Collected automatically: IP address, device and browser information, usage records
Optional: location information, starting-point search terms
When you contact us: email address, the content of your message

Article 3 (Processing and retention periods)

The Service processes and keeps personal information for the following periods.

Location information and starting-point search terms: destroyed as soon as the request is handled
Usage records: one year from collection
Enquiry information: one year from when the enquiry is resolved

Article 4 (Destruction procedure and method)

When personal information is no longer needed, for example because its retention period has passed or its purpose has been achieved, the Service destroys it without delay. Information in electronic files is destroyed using technical methods that make the records unrecoverable.

Article 5 (Provision to third parties)

The Service processes personal information only within the scope set out in Article 1, and does not provide it to third parties except in the cases under Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or where a law specifically provides for it.

Article 6 (Processors)

The Service entrusts the following processing to other companies. If what is entrusted or who processes it changes, the Service will publish the change in this policy without delay.

PostHog, Inc.: usage statistics analysis
Vercel Inc.: website hosting, relaying place search and address lookup requests
Cloudflare, Inc.: content delivery and email forwarding
Kakao Corp.: place search and address lookup
NAVER Cloud Corp.: maps

Article 7 (Overseas transfers)

To carry out the entrusted processing, the Service transfers personal information overseas as follows (Article 28-8(1)(3) of the Personal Information Protection Act). All transfers are to the United States, and personal information is sent over encrypted connections at the time the Service is used.

PostHog, Inc.

Contact: privacy@posthog.com
Purpose: usage statistics analysis
Information transferred: usage records
Retention: one year from collection
How to refuse and its effect: you can refuse usage statistics with the setting at the bottom of this page; refusing does not limit your use of the Service.

Vercel Inc.

Contact: privacy@vercel.com
Purpose: website hosting, relaying place search and address lookup requests
Information transferred: IP address, device and browser information, starting-point search terms, locations picked on the map
Retention: destroyed once the request is handled (security access logs follow the processor's policy)
How to refuse and its effect: this processing is necessary to provide the Service; refusing it limits use of the Service.

Cloudflare, Inc.

Contact: privacyquestions@cloudflare.com
Purpose: content delivery and email forwarding
Information transferred: IP address; when you contact us, your email address and message
Retention: destroyed once the request is handled or the email is forwarded (security access logs follow the processor's policy)
How to refuse and its effect: this processing is necessary to provide the Service; refusing it limits use of the Service.

Article 8 (Automatic collection tools and how to refuse them)

The Service does not set cookies. For convenience, it stores settings and similar information in your browser's storage, which you can delete in your browser settings.

The Service uses a usage statistics tool, which you can refuse with the setting at the bottom of this page. Nothing is collected when your browser's Do Not Track or GPC setting is on, and refusing does not limit your use of the Service.

Article 9 (Rights of data subjects and legal representatives, and how to exercise them)

You may at any time ask the Service to let you see, correct, delete or stop processing your personal information. You can do so by email to the privacy officer in Article 11, and the Service will act without delay. A legal representative or someone you authorise may also exercise these rights on your behalf.

Article 10 (Security measures)

The Service takes the following measures to keep personal information secure.

Administrative: keeping the number of people handling personal information to a minimum
Technical: encryption in transit, access control, collecting as little as possible
Physical: using processors' facilities with security certification

Article 11 (Privacy officer)

The Service has designated the following privacy officer, responsible for personal information processing and for handling complaints and remedies related to it.

Privacy officer: the moviebara team
Contact: hello@moviebara.com

Article 12 (Remedies for infringement)

To seek a remedy for an infringement of your personal information, you can apply for dispute resolution or advice to the Personal Information Dispute Mediation Committee, the KISA Personal Information Infringement Report Center and others. For other reports and advice, please contact the organisations below.

Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
Korean National Police Agency: 182 (ecrm.police.go.kr)

Article 13 (Changes to this policy)

This privacy policy applies from October 1, 2026. If it changes, the Service will give notice from seven days before the change takes effect.

Effective October 1, 2026