Privacy Policy
Choyeon (X-NAV) ("we") operates PingClab (https://pingclab.com, the "Service"), a Japan trip planner. This policy explains what information the Service actually processes, why, and what choices you have. We follow the Personal Information Protection Act of the Republic of Korea and other applicable laws.
1. Why we process information
- Sign-in: to let you sign in with Google and manage only your own saved itineraries
- Saving and sharing: to store your itineraries and let others view them through a share link
- Community: to let you publish itineraries under a nickname and offer likes, copies, comments, reports and on-site notifications, to avoid counting the same person's like or copy more than once, and to handle reported content
- Improving the Service: to understand which features and places are used, and to fix errors
- Support: to answer questions and requests sent by email
2. What we collect and how
You can create, edit, and map itineraries without signing in. There is no separate sign-up; Google sign-in is only needed to save itineraries to our server.
| When | Information | How |
|---|---|---|
| Google sign-in | Google account ID (UID), display name, email address, profile photo URL | Provided by Google via Firebase Authentication when you agree to sign in |
| Saving an itinerary | Title, city, trip length, start date, travel style, budget level, itinerary contents (places, times, notes), time saved, view count, and the saver's UID (itineraries saved before October 2026 may also contain the saver's name and profile photo URL; see section 3) | When you tap "Save" |
| Choosing a nickname | Nickname | Entered by you on My Page |
| Publishing to the community | Published status, nickname, time published, number of visited places, like/copy/comment counts | When you turn on "Publish to community" |
| Visited places | IDs of places you mark as visited | When you mark a place as visited (visible only to you) |
| Likes and copies | UID of the member and time | Recorded so the same person is counted once; not shown to other users |
| Comments | Nickname, comment text, time posted, commenter's UID | When you comment on a published itinerary |
| Reports | Reporter's UID, reported item (itinerary or comment), reason, time | When you report something. Viewed only by us |
| On-site notifications | Recipient, nickname of the member who liked or commented, itinerary title, time, read status | Created automatically when your published itinerary is liked or commented on |
| Short share links | Shared itinerary contents, number of opens, time created; to limit excessive link creation, an irreversible transformation of your IP address kept for 1 hour | When you create a share link |
| Using the Service | Pages viewed, buttons tapped, device and browser type, language, approximate location (country/city level), referring page, cookie identifiers | Google Analytics (GA4) |
| Currency detection | IP address | Looked up once via ipapi.co to pick your local currency. We do not store it |
| Contacting us | Email address, message | When you email us |
Not personal information: when places are added to itineraries, we count them anonymously (Google place ID, city, category, count) without recording who added them. Drafts, sign-in status and place lookups are kept only in your browser's local storage and are not sent to our server.
We do not collect passwords, payment details, government ID numbers, or precise GPS location.
3. Visibility of saved itineraries
Each saved itinerary gets a unique share link. Anyone with the link can view the itinerary without signing in. New itineraries are saved without your Google name and photo. For itineraries saved earlier with your name and photo, these are removed when you open My Page on the Korean version of the Service, or immediately on request. Please do not put personal details (phone numbers, room numbers, etc.) in titles or notes. Deleting an itinerary from My Page disables its link.
Itineraries you publish to the community can be browsed by anyone without a link, together with your nickname and like/copy/comment counts. Comments are visible to anyone together with the commenter's nickname. Who liked, copied or reported something is not shown to other users. Copies other users have already made remain even if you unpublish or delete the original.
4. How long we keep it
| Information | Retention |
|---|---|
| Google sign-in information | Until you ask us to delete your account |
| Saved itineraries | Until you delete them (deleted immediately, together with their comments) |
| Nickname, visited places | Until you change them or ask us to delete your account |
| Comments | Until deleted by the commenter, the itinerary's publisher or us, or until the itinerary is deleted |
| Like and copy records | Until you remove the like or ask us to delete your account |
| Reports | 1 year after we finish handling them |
| On-site notifications | Until the recipient deletes them or asks us to delete their account |
| Short share links | Until account deletion or a deletion request; the transformed IP value is overwritten after 1 hour |
| Google Analytics data | Up to 14 months, then deleted automatically |
| Support emails | 1 year after we reply |
| Browser local storage | Until you clear your browser data (on your device only) |
5. Deletion
When the retention period ends or the purpose is fulfilled, we delete the information without delay using methods that cannot be reversed.
6. Sharing and affiliate links
We do not sell or give your personal information to third parties, except where required by law.
The Service contains links to partners such as Agoda, Klook, MyRealTrip and Booking.com. We may earn a commission when you book through these links. When you click one, the partner receives only our affiliate code and a code indicating which screen the link was on, never your name or email. Anything you enter on a partner's site, and any cookies it sets, are governed by that partner's privacy policy.
7. Service providers and international transfers
We use the following providers to run the Service. Your information is transferred to them over the internet when you use the Service.
| Provider (country) | Information | Purpose | Retention |
|---|---|---|---|
| Google LLC (USA) Firebase Authentication, Cloud Firestore | Sign-in information, saved itineraries, nickname, visited places, like and copy records, comments, reports, on-site notifications | Sign-in, saving and sharing, community features | As in section 4 |
| Cloudflare, Inc. (USA) Cloudflare Workers, D1 | IP address, browser information, requested page address, short share link data (itinerary contents, open count, irreversibly transformed IP value) | Delivering the website, storing short share links and link previews | Short share links as in section 4; access logs per provider's policy |
| Netlify, Inc. (USA) | IP address, browser information, requested page address | Routing visits to pingclab.com to our website servers | Per provider's policy |
| Google LLC (USA) Google Analytics | Usage data, device information, approximate location, cookie identifiers | Usage statistics | Up to 14 months |
| Google LLC (USA) Google Maps Platform | IP address, map and place requests (e.g. search terms) | Maps, place details, photos, opening hours | Per Google's policy |
| Kloudend, Inc. (USA) ipapi.co | IP address | Automatic currency selection | Processed on request, per provider's policy |
| OpenStreetMap Foundation (UK) Nominatim | IP address, place search terms | Place search | Per the Foundation's policy |
Opting out: if you don't sign in or save itineraries, no account or itinerary data is transferred. You can block analytics by blocking cookies or enabling tracking protection in your browser. Maps and place information are core features, so the Service cannot work properly without them.
8. Other external services
To display pages, your browser connects directly to the services below, which may receive your IP address and browser information. We do not receive or store this.
- Place photos: Wikimedia Commons (Wikimedia Foundation, USA), Unsplash
- Fonts and libraries: Google Fonts, cdnjs (Cloudflare), unpkg
- Exchange rates: Frankfurter (based on European Central Bank reference rates)
- KakaoTalk sharing: when you tap the share button, the itinerary title, image and link are sent to Kakao under Kakao's privacy policy
9. Cookies and usage analytics
We use Google Analytics cookies to understand how the Service is used (which screens are viewed and which buttons are tapped). We do not use this to identify you or for personalized advertising. We also use browser local storage so you can continue an itinerary when you come back.
How to refuse: you can block cookies or clear site data in your browser settings, or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout). The planner still works without cookies, but drafts may not be kept.
10. Your rights
You may access, correct, or delete your personal information, or ask us to stop processing it, at any time.
- Delete saved itineraries, unpublish them, or change your nickname yourself on My Page after signing in
- Delete your own comments yourself from the itinerary's comments
- For account deletion or other requests, email contact@pingclab.com from, or mentioning, the Google account you signed in with
We respond within 10 days. You can also remove PingClab's access in your Google Account settings (myaccount.google.com → Security → Third-party connections). If you are in the EU/UK, you may also lodge a complaint with your local data protection authority.
11. Security
- We never receive your password; sign-in is handled by Google
- All traffic is encrypted with HTTPS
- Access to saved itineraries, comments, reports and notifications is controlled by database security rules (Firebase Security Rules); for example, reports are visible only to us and notifications only to their recipient
- API keys are restricted to our site and required APIs; server keys are never placed in web pages
- We process only the minimum information needed, and only the representative has access
12. Children
Sign-in is intended for users aged 14 and over (16 and over in the EU/UK). If we learn that we have collected a child's information without required parental consent, we will delete it promptly.
13. Contact
| Privacy contact | PingClab Team |
|---|---|
| contact@pingclab.com |
14. Changes
We will post changes on the Service at least 7 days before they take effect, or 30 days before for significant changes that affect you adversely.
- October 13, 2026: Added community features (nicknames, publishing, likes and copies, comments, reports, on-site notifications), visited places and short share links; reflected that new itineraries no longer store Google names and photos; added Cloudflare and Netlify as providers for delivering the website
- September 30, 2026: Fully revised to reflect actual processing (Google sign-in, saving and sharing, analytics, international transfers, affiliate links)
This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.