Privacy Policy
Effective 1 October 2026
HAUTEN (the “Company”) operates the stamp tour service STAMPY and handles users’ personal information as described below.
STAMPY visitors don’t sign up. We don’t collect names, email addresses, or phone numbers. The only thing kept on your device is a random identifier that tells us whose stamps are whose. The list below is what remains after we cut collection to the minimum.
1. What we process and why
Visitors (people taking part in a stamp tour through the app or web)
| Item | Purpose | When |
|---|---|---|
| Visitor identifier (a randomly generated value) | To decide whose stamps are whose | When the app is first opened, or on the first check-in at a venue |
| Participation and visit history (which event, which spot, when, and by which method) | Awarding stamps, judging completion, and aggregate figures for partners | While you collect stamps |
| The identifier issued by a provider on quick link (Apple, Google, Kakao, LINE) | So you can recover what you collected after changing devices or reinstalling | When you choose to link |
| Apple’s link-revocation token | So that unlinking also revokes the link on Apple’s side | When you link with Apple |
| Entry record for a prize draw (the fact that you entered; in events where the partner requires a link to enter, an irreversibly transformed value of the link identifier) | Running the draw and checking that each person enters once | When you press Enter |
| Winners’ shipping details (name, phone number, address) | So the partner (event organiser) can ship the prize | When a visitor drawn as a winner enters them in the app |
Linking never collects your name, email, or profile photo. We ask the provider for one identifier only.
Entering a prize draw collects nothing. Shipping details are collected only from winners after the draw (Korea’s Personal Information Protection Commission guideline on online prize events). They are needed to perform the prize contract between the winner and the partner, so no separate consent is asked, but the screen where you enter them states what they are used for and how long they are kept.
Partners and staff (people using the console)
| Item | Purpose |
|---|---|
| Email address | Account identification, invitations and sign-in, operational contact |
| Password (stored only as a one-way hash) | Sign-in |
| Staff approval history (who confirmed which visit) | Record of on-site confirmation |
Location
For events with a “near the spot” requirement, we use the coordinates sent by your device only to compute the distance to the spot, and we do not store them. As required by Article 21-2 of Korea’s Location Information Act, the following is stated in this policy; consent and how to exercise your rights are governed separately by the Location Service Terms.
| Item | Detail |
|---|---|
| Purpose and retention of personal location information | Confirming a visit to a spot (computing the distance to it). Discarded as soon as the distance is computed; no retention period |
| Basis and retention of the records of location use | Article 16(2) of the same Act. We record the visitor identifier, spot, time, and outcome, without coordinates, and keep them for 6 months |
| How personal location information is destroyed | Without delay once the period ends, and without delay when consent is withdrawn, using a method that cannot be reversed |
| Disclosure of personal location information to third parties | None |
Records created automatically
The server logs the path, outcome, and time of each request; logs are deleted after 14 days. Session tokens, passwords, and authentication keys are never logged. We keep no separate access records (such as IP addresses).
2. Retention
| What | How long |
|---|---|
| Visitors’ participation and visit history | 3 years from the day the event ends |
| Visitors’ link identifiers | Until the visitor unlinks |
| Prize draw entry records | Same as visit history (3 years from the day the event ends) |
| Winners’ shipping details | 30 days from the day the partner marks the prize as shipped. If it is never shipped, 30 days from the later of the event’s end and the address deadline |
| Partner and staff accounts | 3 years from the day the event ends |
| Server logs | 14 days |
When the period ends or the purpose is fulfilled, we destroy the data without delay. Where another law requires retention, we keep the data for that period and then destroy it.
3. Disclosure to third parties
The Company does not disclose users’ personal information to third parties.
Partners (event organisers) see aggregate figures and on-site confirmation records for their own event in the console. These are counts (participants, stamps awarded, entries) and the records of visits confirmed by staff, not information that identifies an individual.
The one exception is winners’ shipping details. The name, phone number and address entered by a visitor drawn as a winner are shown in the console to that event’s partner so they can ship the prize. This information belongs to the partner, who holds the prize contract with the winner; the Company collects, stores and deletes it on the partner’s behalf (the partner is the controller and the Company the processor). The partner uses it only to ship the prize and neither uses it for any other purpose nor passes it on.
4. Processors
| Processor | Task | Location |
|---|---|---|
| Amazon Web Services | Running the servers and database, storing files | Republic of Korea (Seoul) |
Winners’ shipping details go the other way: the Company processes them on the partner’s behalf, as section 3 explains.
Personal information is stored on servers in the Republic of Korea. The Company is a Korean business, and personal information is handled under the protection of Korea’s Personal Information Protection Act. Data of users outside Korea is stored on the same servers.
5. External services your device talks to directly
The following are not disclosures by the Company; your device (app or browser) communicates with these services directly. Their handling is governed by the respective operator’s policy.
- Google Maps: when drawing the map screen
- Apple, Google, Kakao, LINE: when you choose a quick link
6. How we destroy data
Personal information whose retention period has ended or whose purpose has been fulfilled is destroyed without delay. Electronic files are deleted in a way that cannot be recovered; any printed copies are shredded or incinerated.
7. Your rights and how to exercise them
You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information.
- Visitors: In the app, open Settings and press “Delete all my records”. Every linked account is unlinked and the visitor identifier on your device is erased. From then on, that visit history can no longer be attributed to anyone, and it is destroyed once the retention period above ends. To request from the web, use Account deletion request. Shipping details you entered as a winner are used by the partner to ship the prize and deleted within the period in section 2; to delete them sooner, contact us at the address below.
- Partners and staff: Contact us at the address below.
We do not separately collect personal information from children under 14. We never ask for a user’s age, and what we receive from visitors is limited to the items in section 1.
8. Automatic collection on your device
The app and the web keep the visitor identifier in device storage (the app’s storage area, or browser storage). We do no advertising or analytics tracking. To remove the value, delete the app or clear browser storage; you will then need a link to recover what was collected on that device.
9. Security measures
- Passwords and session/invitation tokens are stored only as irreversible values.
- Traffic between you and the server is encrypted (HTTPS).
- The database sits in a network that cannot be reached directly from outside, and access rights are limited to the minimum needed.
- Automated checks confirm that tokens, passwords, and authentication keys never appear in logs.
10. Privacy officer
| Item | Detail |
|---|---|
| Privacy officer | Taehun Yun (Representative, HAUTEN) |
| Contact | support@stampy.site, +82-70-8027-1500 |
Requests for access, correction, deletion, or suspension are received at the same address. Enquiries in English are welcome.
11. Remedies
If you need help regarding a privacy infringement, you may contact:
| Body | Phone | Address |
|---|---|---|
| Personal Information Dispute Mediation Committee (Korea) | +82-1833-6972 | www.kopico.go.kr |
| Privacy Infringement Report Center, KISA (Korea) | +82-118 | privacy.kisa.or.kr |
| Your local data protection authority |
12. Business information
| Item | Detail |
|---|---|
| Business name | HAUTEN |
| Representative | Taehun Yun (YUN TAEHUN) |
| Business registration number (Korea) | 609-42-06363 |
| Address | 201, 28 Neungdong-ro 53-gil, Gwangjin-gu, Seoul, Republic of Korea |
| Phone | +82-70-8027-1500 |
support@stampy.site |
13. Changes to this policy
This policy applies from 1 October 2026. When we add, change, or remove content, we announce it on this site at least 7 days before it takes effect, or 30 days for changes that are unfavourable to users.