KPOPLIVEMAP operates the site. Privacy officer: Operator / contact@kpoplivemap.com. The public site does not collect registration or payment information directly. The contact address is receive-only and forwards through Cloudflare Email Routing to a regular Gmail mailbox.
Purposes, data and retention
Purposes, data and retention
Category
Purpose and data
Retention
Browser storage
Purpose and dataFavourite artist IDs, purchase country, analytics choice and notice version stay in local storage. Language switching and map return state use session storage. We do not sync these preferences to a member database or send them as analytics events.
RetentionLocal choices remain until changed or deleted; session state lasts for the browser session. You can clear them through your browser's site-data settings.
Analytics (GA4)
Purpose and dataWith consent: page views, paths, titles, referring domains, device/browser, approximate region and analytics identifiers. Google receives IP and other request data during transmission. We exclude search queries and map selection hashes from page addresses sent by the site.
RetentionUser data: 2 months. Event data: 2 months. Resetting user retention on new activity is off. Aggregated reports, cookie lifetimes and provider records follow separate rules.
Hosting and security
Purpose and dataCloudflare may process IP addresses, requested URLs, access times and browser/request information to deliver and protect the site.
RetentionProvider log retention and processing countries follow Cloudflare's privacy policy.
Enquiries and rights requests
Purpose and dataEmail address, name if supplied, message, attachments and handling records are used to respond and handle requests. Do not send passwords, payment details or unnecessary identity documents.
Retention1 year after resolution, then the operator deletes messages, attachments, handling records and copies under its control. Provider records follow that provider's retention rules.
Maps
Purpose and dataOpenFreeMap may receive IP, tile request URLs, browser and communication data when providing map tiles. We do not request device location permission.
RetentionThe provider states that it does not keep IP logs by default; error logs last 7 days and security-incident IP records up to 30 days. CDN processing follows the provider's privacy policy.
International transfers
Google Analytics — separate analytics consent
Data transferred
Page views, paths, titles, referring domains, device/browser, approximate region, analytics identifiers and request data
Countries, timing and method
United States. HTTPS requests from your browser on visits after consent. Further processing countries and routes follow Google's privacy policy.
Recipient and contact
Google LLC. Privacy contact: support.google.com/policies/answer/9581826
Purpose and retention
Visitor statistics. User and event data are each retained for 2 months. Aggregates and provider records follow Google's separate rules.
How to refuse and the effects
Decline or withdraw through the banner or Analytics settings. All site features remain available.
Enquiry sender address, message, attachments and handling records
Countries, timing and method
United States and other countries described in Google's privacy policy. Enquiries are routed to a regular Gmail mailbox for receipt, storage and response.
Recipient and contact
Google LLC (Gmail). Privacy contact: support.google.com/policies/answer/9581826
Purpose and retention
Responses and rights-request handling. The operator keeps enquiries for 1 year after resolution, then deletes them. Google's own records follow its privacy policy.
How to refuse and the effects
Do not email, or request deletion/restriction of existing data. Without necessary information we may be unable to respond or handle your request.
Map tiles and security. No default IP logging; error logs: 7 days; security-incident IP records: up to 30 days. CDN retention follows the provider's policy.
How to refuse and the effects
You can block tile requests in your browser. This limits map display and navigation; concert lists and detail pages remain available.
We send no Google Analytics script or requests before consent or while analytics is declined. Change your choice anytime through Analytics settings. If analytics has started, withdrawal disables it, clears accessible _ga cookies and reloads the site. Google Signals and advertising personalisation are unused; advertising consent is denied. Declining keeps every site feature available. Necessary hosting and map requests are separate from analytics consent.
Cookies and retention
Google's default GA cookie lifetime is 2 years and may vary with browser and settings. The 2-month user/event retention setting is separate from cookie lifetimes and aggregated reports. Google's deletion schedules and additional retention rules also apply.
Disclosure to third parties
We do not disclose personal data to third parties except where there is a legal basis for doing so.
Service providers and Korean transfer grounds
Cloudflare provides hosting, security and email delivery; Google provides analytics and the enquiry mailbox; OpenFreeMap provides map tiles. The mailbox is regular Gmail, not Google Workspace. Necessary overseas processing/storage for site delivery, routing, enquiry handling and maps is disclosed in this policy under Article 28-8(1)(3) of Korea's Personal Information Protection Act. Optional analytics transfers require separate consent under Article 28-8(1)(1). Provider processing, subprocessors, country lists and log retention are described in the official policies below.
European users and US transfers
Where GDPR applies, analytics relies on consent; necessary hosting, security, maps and enquiry responses rely on legitimate interests in providing/protecting the site and answering your requests. Optional analytics can be declined. Google LLC and Cloudflare, Inc. participate in the EU-US Data Privacy Framework. You can check their current status in the official DPF records linked below. Applicable EU-to-US transfers use the EU-US Data Privacy Framework; other transfers use the mechanisms described by the providers for those transfers. Processing within the EU by the Hungarian map operator is not a third-country transfer. Other routes, including CDN processing, follow the provider's policy.
Deletion procedure
We record enquiry resolution and its 1-year expiry date, then manually delete messages, attachments and handling records at expiry, empty the trash and remove downloaded copies under our control. If a separate law requires retention, we explain the grounds and period and store those records separately before deletion. Browser data can be cleared in site-data settings; analytics follows Google's retention/deletion procedures.
Security safeguards
We use HTTPS, CSP and browser security headers. Public static files exclude admin/login screens. API keys, private source data and admin functions are separated from public files. Response headers disable camera, microphone, geolocation and payment permissions.
Your rights and representatives
Email contact@kpoplivemap.com to request access, correction, deletion, suspension or consent withdrawal. Representatives can request this with the minimum necessary authority evidence. We verify identity/authority only as needed and explain outcomes and limitations; we do not routinely demand identity documents. Applicable law also provides restriction, portability and objection rights.
Complaints and remedies
In Korea, contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr) or the privacy reporting centre (118 in Korea, privacy.kisa.or.kr). European users can complain to the data protection authority for their residence, workplace or the place of the alleged infringement.
Children and analytics
Choose Decline if you are under 14 in Korea, under 16 in Europe, or below the required consent age in your country. All features remain available. The button is an age self-declaration; we do not collect birth dates or identity documents. We do not operate a parental-consent process. Send children's data deletion requests to contact@kpoplivemap.com.
Concert sources and external sellers
We check public concert facts using Ticketmaster Discovery API, KOPIS and official venues, agencies and organisers. Public source links use verified official web addresses; API keys and private observations are not published. Ticket links take you to an external seller whose policy applies. We do not sell your personal data to sellers. Valid rights-holder data removal requests are handled through a manual withdrawal/redeployment procedure within 24 hours of receipt.
Effective date and changes
The effective date is shown at the top of this page. We publish new effective dates and changes here. If the consent scope changes, we obtain consent to the new notice before starting analytics.
