Privacy Policy
LostKorea (the "Service") is an individually operated project that matches lost-item reports against Korea's public found-item data using AI. We collect only what matching needs, and delete it automatically when it is no longer needed.
1. What we process
| Item | Required? | Purpose |
|---|---|---|
| Your description of the lost item (or the description read from your photo), date lost | Required to search (date optional) | Searching and matching found items; daily re-matching |
| Photo of the item | Optional | Reading the item's features and comparing with found-item photos. We do not store the photo. |
| Email address | Optional | Match alerts — sent only after you confirm the address via the confirmation email |
| Report language | Automatic | Giving reasons and alert emails in your language |
| IP address | Automatic | Limiting excessive requests (abuse prevention). Held briefly in server memory only — never stored. |
⚠ Please do not write names, phone numbers, passport/ID numbers or card numbers in your report. They are not needed to find your item.
To run the Service we count daily totals only (e.g., number of visits, reports and alerts). These statistics contain no IP address, email, report text or anything else that could identify you.
2. Retention and deletion
- Reports are deleted automatically 30 days after the alert period ends (30 days by default; you can change it).
- You can delete a report anytime under "My reports"; it is erased immediately.
- Database backups for disaster recovery are kept for 14 days, so deleted data may remain in a backup for up to 14 days.
- Email confirmation links expire after 48 hours.
3. Third-party services (processing and transfer outside Korea)
We use the services below; in doing so your data is transferred outside Korea (e.g., to the United States, where the providers' data centers are).
| Recipient | Data | Purpose | When / how |
|---|---|---|---|
| Google LLC — Gemini API | Report text, photo, report language | Extracting item details, grading candidates, comparing photos | On report and daily re-matching, encrypted (HTTPS) |
| Google LLC — Gmail | Email address, alert content | Sending confirmation and alert emails | When an email is sent, encrypted |
Transferred data is handled under each provider's terms and privacy policy. If you do not want this transfer, do not use the Service, or use it without email and photo (analysis of the report text is the core of the Service and cannot be skipped).
Choosing a language other than Korean or English uses Google Translate, which may set cookies.
4. Data stored in your browser
The Service itself uses no cookies. So that you can manage your reports, the report number and a management token are stored only in this browser (localStorage). The server keeps only a hash of the token, so without it no one but the operator can view or change your report. If you clear your browser data, "My reports" will no longer show in that browser.
5. Where found-item data comes from
Found-item information is public data released by Korea's Public Data Portal and the National Police Agency's LOST112 portal. We show only published information such as the holding office's name and main phone number.
6. Security measures
- All traffic encrypted with HTTPS; management tokens stored only as hashes
- Email double opt-in (we only email addresses you confirmed); request rate limits
- The database runs on an internal network with no direct outside access
7. Your rights
You can view and delete your reports under "My reports", and turn off or change email alerts under "Alert settings" on the result screen. For other requests (access, correction, deletion, suspension) or questions, contact us below.
8. Contact
Operator: the LostKorea project operator (individual) · Contact: GitHub Issues