Privacy notice

Effective 2026-10-18. Trip-Pups is run by the Trip-Pups team, two students in Korea (not a registered business yet, not a travel agency). We do not charge travelers anything. Earlier versions of this notice are kept in our change history and sent on request.

This notice covers: the sign-up help tools (request_application_help, apply_now), the web sign-up help form on pages starting with /apply, the English sign-up forms on pages starting with /f/, and the form helper at /assist. Searching events and reading event details stores nothing about you.

What we collect

Sign-up help (MCP tools): your name, your email address, your party size, an optional note you write, the event you picked, and the time of the request. With apply_now, when the event cannot be signed up for automatically, also the phone number, nationality and preferred date you chose to give (all optional). An apply_now preview of an online form is not stored.

Web sign-up help (/apply): your name, email and number of people; optional nationality, phone, preferred date and note; the event you picked; the time; and which consent boxes you ticked. Nothing is stored unless you tick the required boxes.

Limits against abuse: to stop spam we count requests per email address and per network address for one hour. We keep only a one-way hash of each, not the address itself, and the counter deletes itself after about an hour.

English sign-up forms (/f/): your name, email, nationality and number of people; optional phone, preferred date and question; the time; and which consent boxes you ticked. Nothing is stored unless you tick the required boxes. Forms marked Demo are not connected to any organizer: what you send is not passed to anyone and does not register you.

Form helper (/assist): the details you type stay in your browser. They are not sent to us. If you tick "Remember on this device", they are kept in your browser's local storage until you untick it or clear site data.

Why, and on what legal basis

To handle the sign-up request you made and to email you about it. For the MCP sign-up help tools we process your details because you asked us to (Personal Information Protection Act, Article 15(1)4: measures at the request of the data subject). For the English sign-up forms we process them with your consent (Article 15(1)1). We do not use them for marketing and we do not sell or share them with advertisers.

What our 1:1 help covers

Our 1:1 sign-up help is free. We only use your own name and details. We never complete identity or phone verification for you or with our accounts. Some organizers do not allow anyone else to sign up on your behalf; for those events we only guide you through doing it yourself.

Sharing with event organizers

We share your details with an event organizer only if you give a separate consent for that specific event (Article 17(1)1, Article 22(1)). The consent box shows who receives it (the organizer's name), their purpose, which items, how long they keep it, and that you may say no. If you say no, the organizer does not see your request and you can still sign up yourself. We do not submit sign-ups to organizers' own sites for you. At the moment no organizer is connected, so nothing has been shared.

Service providers (entrustment)

Cloudflare, Inc.: hosting, storage of requests, and email forwarding. Google LLC: the team's Gmail inbox that receives a notification for each MCP sign-up help request.

Transfer outside Korea

Items: those listed above for the feature you used. Who receives it: Cloudflare, Inc. (contact via cloudflare.com) and, for MCP sign-up help notifications only, Google LLC (Gmail). Country: [to be confirmed]. When and how: at the moment you send a request, over an encrypted network connection. Their purpose and retention: storing and delivering your request, for no longer than we keep it (below). How to refuse: do not send a request or form; browsing events stores nothing. If you refuse, we cannot handle a sign-up request for you.

How long we keep it

Each request is deleted automatically 90 days after it was made.

English sign-up form entries are also deleted automatically 90 days after they are sent.

How we delete it

Requests and form entries are stored with an expiry time; the storage provider erases them when it passes. When you ask, we delete them sooner from storage. The notification copy in the team's inbox is deleted [to be confirmed] (we are setting a deletion cycle for it).

Your rights

You can ask to see, correct, stop processing, or delete your details at any time. Email mandeun.works@gmail.com from the address you gave us, with your reference number (it starts with tp- or r-). We reply within [to be confirmed] days. You may also act through a representative.

Privacy officer

Name: 정회광(대표) (Trip-Pups team representative). Contact: mandeun.works@gmail.com. Phone: [to be confirmed].

Security measures

All pages and the MCP endpoint use HTTPS. The admin screen needs a secret key, and each organizer screen needs its own key; keys are not stored in our code. Only the Trip-Pups team members who handle requests can see them. Records expire automatically as described above.

Cookies and tracking

Travelers' pages set no cookies. The admin screen sets one login cookie for team members only. Links we give you to official event pages carry Trip-Pups tags (utm_source, utm_medium, utm_campaign) so the event site can see the visit came from us. Links that go through our /go/ address add one to a counter for that event, channel and day; we store only the number, not your address or browser.

Some event pages on the web (not inside AI assistant replies) show optional tours sold by other companies (Viator, GetYourGuide, Creatrip), marked as ads. If you open one, that company may set its own cookies under its own privacy policy; we receive no personal details from it.

Children

We do not accept requests or sign-ups from children under 14.

Your AI assistant

Your AI assistant (for example ChatGPT or Claude) also sees what you type in the conversation; that is covered by its own provider's privacy policy.