Privacy Policy
Effective: 2026-09-28
This policy explains what information Mori's Korea collects, why, who helps us handle it, how long we keep it, and what choices you have. It is part of our Terms of Use; the rules for points are in the Mori Points Terms.
The short version: reading the magazine and watching videos never requires an account, and the only visitor statistics we use are cookie-free, aggregate counts from Cloudflare Web Analytics — the site runs no advertising or tracking scripts of its own. When the members area opens and you create an account, we collect only what an account needs — your sign-in email, a one-time birth-year check, your points activity, and your comments. We don't sell your information.
1. Who we are
Mori's Korea (moryskorea.com) ("we," "us") runs this site and decides how information described here is used. For any question or request about your information — including seeing, correcting, or deleting it — see our Help & FAQ page or email moryskorea@gmail.com.
2. Information We Collect
2.1 When you just visit
- Connection data: when you load a page, our hosting provider (Cloudflare) processes standard connection data — such as your IP address, browser type, and the pages you request — to deliver the site and keep it secure. We don't ask visitors for a name or an account, and we don't set our own cookies for people who are just reading.
- Your country, in your browser: to show picks for your region, a page asks Cloudflare which country your connection appears to come from. That check happens in your browser, and we don't store the result.
- Messages you send us: if you email us, we receive your email address and whatever you write, and we use it to reply.
- Visitor statistics (Cloudflare Web Analytics): to see how many people read the site and which pages are useful or slow, we use Cloudflare Web Analytics, a cookie-free measurement tool from Cloudflare. It doesn't use cookies or local storage, and Cloudflare states that it doesn't fingerprint individual visitors or track people across websites. The reports we see are aggregate counts and breakdowns — page views and visits, which page was viewed, which site sent the visitor, country, device type, browser, operating system, and page-loading speed — not the activity of individual visitors. We use them only to understand and improve the site, never for advertising or profiling.
- No advertising trackers: apart from the YouTube videos described under Cookies & Local Storage, the site doesn't run advertising, ad-tracking, or cross-site tracking scripts. If we ever add any, we'll say so here first and ask for your consent where the law requires it.
2.2 If you create an account (when the members area opens)
Accounts, points, and comments are opening soon; this part describes what they will collect.
- Sign-in: you sign in with your Google account. Google gives our sign-in service your email address, and basic profile details such as your name and profile picture, and our sign-in provider (Supabase) stores them as part of your sign-in record. We use your email to identify your account and to show "Signed in as…" to you on your Account page. We don't use your name or picture on the site, and we never show your name, picture, or email address to other visitors.
- Age check: right after you first sign in, we ask for your birth year once — year only, no month or day — to confirm you meet our minimum age of 14 for points, comments, and other account features. We store the year and the result (14 or older, or under 14). See Children.
- Nickname: the name shown next to your comments. You choose it; it isn't your real name.
- Points activity: each action that earns Mori Points — daily check-ins, quiz completions, and the daily draw — is logged with the action, the amount, and the date, tied to your account. We also keep your check-in dates, quiz completions, and draw dates (so each can count once per day or per quiz), and your point balance, total points earned, and level. You can review your balance and recent activity on your Account page.
- Comments: when you post a comment on a magazine article, we store the comment text, the article, the time, and your nickname. New comments are checked automatically and may be held for review before other visitors can see them, and we limit how often one account can post to prevent spam. To do the automatic check, we send the text of the comment and the title of the article it's on — not your name, nickname, or email — to OpenAI, which returns a result (for example, whether it looks like spam or abuse, and what kind of feedback it is).
- Public YouTube comments: we may also keep a copy of public comments on our YouTube videos — the commenter's public display name, the text, and the date — to understand what viewers want. These aren't shown on our site.
We don't collect your phone number, physical address, precise location, payment details, or government ID, and we don't collect your month or day of birth. We don't use your information for advertising or sell it.
3. Why We Use Your Information
- To run the site and your account — sign-in, showing your balance, and delivering what you asked for.
- To give and protect points — running check-ins, quizzes, and the draw, and preventing duplicates and misuse. This is in our legitimate interest in a fair points system.
- To keep comments safe — screening for spam and abuse, reviewing reported content, and enforcing our Terms of Use.
- To keep the site secure and working — finding and fixing problems and blocking attacks.
- To understand and improve the site — using cookie-free, aggregate visitor statistics to see which pages are read and where the site is slow. This is in our legitimate interest in running a useful site.
- To answer you — replying to emails and requests.
- To follow the law — for example, responding to a valid legal request.
- With your consent — if we ever want to use information in a way that needs your consent (such as analytics that use cookies or identify individual visitors, or advertising), we'll ask first, and you can withdraw consent at any time.
4. Who Handles Your Information, and Where
We use these providers to run the site. They handle information for us, or (like Google Sign-In) under their own privacy policies:
- Cloudflare — hosting, delivery, and security of the site, and Cloudflare Web Analytics (the visitor statistics described in section 2.1). Handles connection data and those aggregate measurements. Operates a global network, including in the United States.
- Supabase — our database and sign-in service. Handles your account, points, and comment information (when the members area opens). Our project is hosted in Singapore.
- Google — Google Sign-In (your email and basic profile), and YouTube (video thumbnails and embedded videos). Operates in the United States and elsewhere.
- OpenAI — automatic checking of comment text (when comments open). Operates in the United States.
We don't sell personal information or share it for advertising. We may disclose information if the law requires it, to protect people's safety or our rights, or if the project is sold or reorganized (in which case we'll tell you).
Because these providers work in several countries, your information may be processed outside the country where you live — including outside Korea, the European Economic Area, and the United Kingdom. Where the law requires safeguards for that, we rely on the providers' standard data-protection terms, such as standard contractual clauses. Reading and watching never requires an account, so you can avoid this by not creating one, and you can ask us to delete an account at any time.
5. How Long We Keep It
- Account, points, and comments: until you delete your account or ask us to. When you ask, we delete your account record, your points, check-in, quiz, and daily-draw history, and your comments within 30 days of confirming your request.
- Emails to us: as long as needed to handle your message and keep a record of it, then deleted.
- Provider logs and statistics: Cloudflare (including its visitor-statistics service) and Supabase keep technical logs and measurements for the periods in their own policies.
- Longer, only when needed: we may keep limited information longer if the law requires it, or to resolve a dispute or stop repeated misuse.
6. Your Rights and How to Use Them
Depending on where you live — for example under Korean law, the EU or UK GDPR, India's Digital Personal Data Protection Act, or California law — you may have the right to see the information we hold about you, correct it, delete it, limit or object to how we use it, get a copy of it, and withdraw your consent. You may also complain to your local data-protection authority (in Korea, the Personal Information Protection Commission).
To use any of these rights, email moryskorea@gmail.com with "Privacy request" in the subject line — ideally from the address you sign in with, so we can confirm it's you. The "Privacy requests" topic on the Help & FAQ page says what to include. Members can download a copy of their account data from the Account page, and its "Request account deletion" button opens a ready-made email to us. There's no one-click delete-my-account button yet, so for now correction and deletion requests, and any access request the download doesn't cover, are handled by email. We reply within 30 days, and we don't charge for reasonable requests. We'll never ask for your password.
Automated screening: new comments are screened automatically and may be held for a person to review. If you think a comment or an account was handled wrongly, ask us for a human review.
California and "Do Not Track": we don't sell personal information or share it for cross-context advertising, as those terms are used in California law. We don't track visitors across other websites, so we don't change how the site works in response to "Do Not Track" signals.
7. Children
Our minimum age for accounts is 14, in line with COPPA and similar children's-privacy rules elsewhere. We don't knowingly collect personal information from anyone under 14. When you first sign in we ask your birth year, once. If it shows you're under 14, we turn off points, comments, and other account features for that account, and we keep the birth year and that result so we don't ask again and the features stay off. Reading the magazine and watching videos is never affected, signed in or not. This is a self-declared check — we don't verify it against an ID.
If you're a parent or guardian and think a child under 14 has signed up, or you have a question about your child's information, email us and we'll delete the account's information. Some countries set a higher age for using online services, or require a parent's consent for teenagers; if that applies to you, you need that consent to have an account.
8. Cookies & Local Storage
- Our own cookies: we don't set cookies of our own for people who are just reading.
- Visitor statistics: Cloudflare Web Analytics, described in section 2.1, doesn't use cookies or local storage to collect its measurements.
- Signing in: if you sign in, our sign-in service keeps a sign-in token in your browser's local storage — not a cookie — so you stay signed in. It's needed for sign-in, stays on your device, and is removed when you sign out or clear your browser data. The site may also remember small choices, like dismissing a banner, the same way.
- YouTube: the home page shows YouTube thumbnails as images, and some articles embed videos using youtube-nocookie.com (YouTube's privacy-enhanced mode). Google receives your IP address and browser details when those load, and may set cookies or use local storage if you play an embedded video. That's governed by Google's privacy policy.
- Partner and other sites: if you follow a link to a partner or another site, that site has its own cookies. We don't currently have affiliate links (see the Affiliate Disclosure). If we ever do, a link may carry a tracking code so the partner can credit a referral, and we'll say so on that page first.
You can block or delete cookies and local storage in your browser settings. Reading the site will still work; signing in won't if local storage is blocked. A content blocker may also stop the visitor-statistics script from loading; the site works the same either way.
9. Security
We use HTTPS, restrict database access so members can see only their own account data, keep what we collect small, and don't ask you to create a password on our site (you sign in with Google). No online service is perfectly secure. If a breach affects your information, we'll tell you and the authorities as the law requires.
10. Changes to This Policy
We'll post any change on this page with a new Effective date. If a change materially affects what we collect or how we use it, we'll also put a notice on the site, and we'll ask for your consent where the law requires it.
11. Contact
For privacy inquiries, requests, and questions from parents and guardians, see our Help & FAQ page or email moryskorea@gmail.com with "Privacy request" in the subject line. 한국어로 문의하셔도 됩니다 — Korean-language inquiries are welcome.
Related: Terms of UseMori Points TermsAffiliate DisclosureHelp & FAQ