Privacy Policy
WhatEatO helps visitors discover restaurants in Korea and offers maps, Google sign-in, and moderated reviews. This policy describes how information is handled.
Effective: October 16, 2026
1. Operator and contact
Service and privacy contact: WhatEatO. Email: pakrsky2@naver.com.
Contact us to request access to, correction of, or deletion of personal information, or to raise account and review concerns.
2. Google sign-in
We request the openid and email scopes. We check whether Google has verified your email during sign-in, but do not store your email address, name, profile photo, or Google access or refresh tokens in our account database.
We store your stable Google account identifier (sub), an internal WhatEatO account UUID, and account creation time to authenticate you and link your reviews. Our session uses the internal account ID and expires within seven days.
Google sign-in data is used for authentication and related account features. We do not request Google Contacts, Drive, or similar account data.
3. Reviews and uploaded photos
When you submit a review, we store the rating, text, restaurant and account association, timestamps, and moderation status. If you upload photos, the images and necessary metadata may be stored in our object storage.
Reviews and photos may become public after moderation; we do not display your Google name or email. Please do not upload others’ private information or content that infringes rights.
4. Country, language, and maps
To select a default language, we first use a country code supplied by our hosting/CDN. If unavailable, your IP address may be sent temporarily to ipwho.is for country lookup. We do not store the raw IP in our country-selection database, though a short-lived hashed server cache may be used.
Manual country/language choices can be stored in your browser. Map features can connect your browser directly to OpenFreeMap or OpenStreetMap providers, whose own policies apply.
5. Analytics and retention
When anonymous analytics are enabled, we may count page views, searches, restaurant clicks, selected language, device type, and broad referral channel. The analytics database is designed not to store raw IP addresses, emails, Google account IDs, or visitor-tracking cookie IDs.
Raw analytics events are configured for deletion within 30 days. Account and review records are retained while your account is active and deleted upon account closure or a valid deletion request, subject to legally required retention and technical cleanup processes.
Uploaded files may require a separate storage cleanup process. Login sessions last at most seven days.
6. Service providers and security
Our services use Google for sign-in, Hostinger for hosting, and Neon for the database. Image storage, country lookup, and external map providers may process data needed for their respective features. Processing locations and contract terms depend on the actual service configuration.
We use HTTPS and access controls, but no online service can promise absolute security.
7. Your choices and updates
You can close your account from the account page after signing in. For requests about your information or review/photo data, email pakrsky2@naver.com. Closing your WhatEatO account does not delete your Google account.
We will update this page when our practices change and identify the revised effective date.