Privacy Policy

1. Controller and privacy contact

• Controller: Hallie (할리)
• Representative and privacy officer: Namgi Kim (김남기)
• Email: info@halalmap.org

2. Information we process

• Google sign-in and profile data: account identifier, email address, display name, profile image, role, and sign-in/session records.
• User content: place submissions, corrections, halal-attribute votes, reviews, comments, posts, photos, reports, evidence, and related timestamps.
• Place information supplied or confirmed by a user: name, address, coordinates, telephone number, website, opening hours, category, and supporting notes.
• Technical and security data: session cookies, request and CSP error information, device/browser information made available by the browser, and an HMAC-hashed IP-derived rate-limit identifier.
• Location: browser geolocation only after the user chooses the current-location function.

3. Purposes of processing

• Provide sign-in, profiles, contributions, community features, maps, search, moderation, and support.
• Review submissions, prevent duplicate or abusive activity, enforce service rules, and investigate reports.
• Measure service use, diagnose errors, improve performance, and serve and measure advertising.
• Comply with legal obligations and protect users, the public, and Halalmap.

4. Public content

Approved place information, display names, posts, comments, reviews, votes, and uploaded photos may be visible publicly. Do not include private or sensitive personal information in public submissions.

When an account or threaded comment is deleted, some content may be retained without a direct account link where necessary to preserve discussion integrity, resolve reports, or meet legal obligations.

5. Retention and deletion

• Account and profile data are kept while the account is active and until an account-deletion request is completed, except where law or dispute handling requires longer retention.
• User content is kept until the author deletes it, Halalmap removes it, or a valid deletion request is completed. De-identified records may remain as described above.
• Hashed rate-limit identifiers are automatically cleaned up after approximately 48 hours.
• Contribution search drafts stored in browser session storage expire after about 10 minutes or when the browser session storage is cleared.
• Data whose purpose has ended is deleted or de-identified using methods appropriate to the storage medium.

6. Service providers and data sharing

• Supabase: authentication, database, and media storage. The linked Halalmap project is hosted in Tokyo, Japan.
• Google: OAuth sign-in, Maps and Places, Cloud Translation for place-name review, Tag Manager, Analytics, AdSense, and related fraud/security services.
• Algolia: indexing and searching approved place information.
• Firebase App Hosting / Google Cloud: hosting and delivery. The configured application backend is in Seoul, South Korea.
• Information may also be disclosed when required by law, to protect safety or rights, or as part of a business transfer with appropriate safeguards. We do not sell personal information.

7. International processing

Using the providers above may transmit account, content, search, analytics, or technical information to Japan and to other countries where Google, Supabase, or Algolia and their subprocessors operate. Transfers occur over encrypted networks when a related feature is used, and data is retained according to the purposes and periods described in this policy or the provider contract.

You may contact us for current transfer details. Refusing a transfer may make sign-in, search, maps, media, analytics, or other related features unavailable.

8. Cookies, analytics, and advertising

Halalmap and Supabase use cookies or similar storage to maintain sign-in sessions and security. Google Tag Manager and Google Analytics may collect cookie identifiers, approximate location, device/browser information, and usage events to measure the service.

Google AdSense and its partners may use cookies, web beacons, IP addresses, or other identifiers to select, deliver, limit, personalize, and measure ads and detect fraud. You can control cookies in your browser and manage Google ad personalization in Google Ads Settings. Blocking cookies may affect some features.

9. Geolocation

The current-location button asks the browser for permission and uses the returned coordinates to move the map and show a marker. Halalmap does not persist that precise device location in its database through this function. You can withdraw permission in browser or device settings.

10. Your rights

You may request access, correction, deletion, suspension or restriction of processing, or account deletion by emailing info@halalmap.org. Send the request from the account email where possible. We may verify identity and may refuse or limit a request where permitted by law, explaining the reason.

11. Children

The account and contribution features are not directed to children under 14. A child under 14 must not create an account or submit personal information without the consent of a legal guardian. Contact us if you believe such information has been provided.

12. Security and policy changes

We use access controls, encrypted transmission, restricted service credentials, input and media validation, rate limiting, and moderation controls appropriate to the service. No internet service can guarantee absolute security.

Material policy changes will be posted on this page with a new effective date and, when appropriate, additional notice. Questions or complaints may be sent to info@halalmap.org.