Information that may be processed
Google may provide an account identifier, name, email address, profile image, and session data. Posts, comments, saved trips, linked stations, and creation or update times may be stored when those features are used.
Purpose and retention
Data will be used for sign-in, authorship, account controls, security, and abuse prevention—not to sell a contact list. Account data will be retained only while needed for membership and legal duties, then deleted according to the final public policy.
External services
Google directly processes Google Account information during sign-in under Google’s privacy policy. Account information that Google provides to Korea by Subway is then handled under this service’s policy. The initial service uses Cloudflare Workers and D1 for application and database processing. R2 image storage and traveler photo uploads are not enabled. This policy will be updated before photo uploads are introduced.
Access, download, deletion, and appeals
A signed-in user can download a JSON copy of their community data and request account deletion from the profile page. The same page accepts appeals against moderation restrictions. A deletion request pauses new community activity while identity and any legal retention exception are reviewed.
Before public launch
The operator’s legal name, privacy contact, retention periods, processors, and cross-border transfer details must be finalized with the production domain. Membership will not open before those details are published.
Draft updated 8 September 2026 · local development only