ModuTrail

Privacy Policy

ModuTrail explains what information is processed when you use the service and how it is protected.

Effective date

The Korean version is the authoritative version. Translations are provided for convenience.

1. Controller

ModuTrail operates the service and is responsible for the processing described in this policy. The service currently has no accounts, payments, advertising, or behavioral analytics.

2. Information processed and purpose

  • Service access logs: IP address, browser/device information, requested URL, access time, and error or security events may be automatically processed by Firebase Hosting and Cloud Run for delivery, troubleshooting, abuse prevention, and security.
  • Current location: latitude, longitude, and accuracy are processed only in browser memory after permission is granted, to display and compare your position with the route. ModuTrail does not transmit or store this location on its server.
  • Recent route state: route path, route title, and last-used time are stored in browser local storage so the route can be reopened after the browser closes.
  • Protected GPX downloads, when enabled: a random token, IP address, browser information, route identifier, and request time may be processed for up to 60 seconds and for hourly rate limiting.

3. Retention and deletion

  • Current location is removed from memory when the page is closed or reloaded.
  • Recent route state remains until it is replaced or the user clears browser site data.
  • Expired GPX tokens are invalidated after 60 seconds; temporary security and rate-limit records are removed when their operational window ends.
  • Infrastructure access and security logs are retained and deleted according to the configured Google Cloud retention settings and applicable legal requirements. ModuTrail does not build user profiles from these logs.

4. Third-party provision and processors

ModuTrail does not sell personal information. Information may be processed by Google Cloud/Firebase as a hosting, storage, logging, and security provider, or disclosed when required by law. Route-start grid coordinates, not a user's current location, are sent server-side to the Korea Meteorological Administration for forecasts.

5. External map services and overseas processing

You may refuse browser location permission. You may avoid Google Maps by not selecting its link. Map pages cannot display the base map without requesting map tiles.

  • OpenStreetMap Foundation (United Kingdom/global cache network): when a map loads, the browser directly requests tiles and may transmit IP address, browser/device type, operating system, referrer, request time, and requested tile. OSMF handles these records under its own privacy policy.
  • Google Maps: only when a user selects the map link, coordinates and ordinary browser request information are sent to Google and processed under Google's policy.
  • Google Cloud/Firebase: service requests and stored route geometry may be processed in Google infrastructure, including the configured Seoul region and supporting global systems, for the service and security period.

6. Cookies and local storage

ModuTrail currently does not use advertising or analytics cookies. Browser local storage is used only for the recent-route state described above. You can delete it through your browser's site-data settings, but route recovery will no longer work.

7. Your rights

You may ask whether ModuTrail holds information about you and request access, correction, deletion, restriction, or objection where applicable. Because the service has no account and does not separately identify access logs, ModuTrail may ask for information necessary to verify and locate a request and may be unable to identify a record that cannot reasonably be linked to you.

8. Security measures

  • Restricted access to route source data and cloud storage
  • Secret management and separation of deployment permissions
  • HTTPS, security headers, request validation, short-lived download tokens, and rate limits
  • Minimal processing and no storage of current location on ModuTrail servers

9. Children

The service does not knowingly collect registration information from children. Location permission is controlled by the user, device, and browser. A guardian should supervise a child's use of route and location features.

10. Contact and changes

The ModuTrail privacy contact handles privacy questions and rights requests at the address below. Material changes will be announced through the service before they take effect where required. Urgent security or legal changes may take effect immediately with a prompt notice.