← Back to trynodemap  ·  한국어

Privacy Policy

trynodemap ("the Service") is a mind-mapping web service operated by an individual. We value the privacy of our users and make every effort to comply with applicable law. This policy is written to reflect the information the Service actually collects and uses. In case of any discrepancy between this English version and the original Korean policy, the Korean version governs.

1. Personal Information Collected and Collection Methods

Required items

• When signing in with Google/Kakao: email address, name (nickname), and a unique identifier from the login provider
• When signing in via email (magic link): email address
• Information automatically generated while using the Service: login session identifier (cookie), and access logs normally recorded by the hosting server for security and operational purposes (which may include the access IP)

Optional items

• When issuing an API key: the API key value, generated only when the user explicitly requests it
• Content the user creates directly within the Service: mind map titles, node text, notes

Collection methods: Google/Kakao OAuth authentication, email verification links, and automatic collection during use of the Service

2. Purpose of Collection and Use

• Identifying members and maintaining login state
• Separating and protecting each user's mind map data (so only the owner can access their own data)
• Sending authentication emails such as magic links
• (Optional) Authenticating AI tool integrations via API key
• Responding to service incidents and security purposes (e.g., detecting abnormal access)
• Operating the free service through advertising (planned)

3. Retention and Use Period

• Member information: retained until account deletion is requested, then destroyed without delay (typically within 7 days of the request)
• Login session cookies: up to 30 days, after which they expire automatically
• Email login links (magic links): valid for 15 minutes after issuance, single-use, then discarded
• Deleted mind map nodes: kept for 30 days after soft deletion for recovery, then automatically and permanently deleted
• Deleted mind maps (entire maps): kept for 30 days after deletion for recovery, then automatically and permanently deleted

4. Provision of Personal Information to Third Parties

The Service does not provide personal information to third parties without the user's consent, except where required by law or where the user has given prior consent.

5. Outsourcing and Cross-Border Transfer of Data Processing

The Service uses the external services listed below to operate. Some of these are operated by overseas companies, so part of a user's personal information may be stored and processed on servers outside the user's home country.

Service	Outsourced task
Google (Google LLC)	Social login authentication, advertising (planned)
Kakao (Kakao Corp.)	Social login authentication
Resend	Sending authentication emails (magic links)
Render	Service hosting (server operation)
Better Stack	Monitoring service uptime (does not involve personal information)

6. Use and Refusal of Cookies

The Service uses essential cookies required for functions such as maintaining login state (as of 2026-07-18). Once advertising is introduced, Google's advertising cookies may also be used, and users can opt out of personalized ads at Google Ads Settings. Users can refuse cookie storage through their browser settings, but doing so may limit some features, including login.

7. Rights and Obligations of Data Subjects and How to Exercise Them

Users may at any time request to view, correct, delete, or suspend processing of their personal information. Please contact us at the address below and we will act without delay.

8. Procedures and Methods for Destroying Personal Information

When personal information becomes unnecessary, such as when the retention period has elapsed or the purpose of processing has been achieved, it is destroyed without delay. Information in electronic file form is permanently deleted using methods that prevent recovery.

9. Measures to Ensure the Security of Personal Information

• Per-user data access separation — each user can only access their own data
• Use of timing-attack-resistant comparison methods for API key authentication
• Encryption of data in transit (HTTPS)

10. Advertising Services

The Service plans to introduce advertising through Google AdSense. Google may use cookies to provide interest-based personalized ads, and users can opt out of personalized advertising in Google's ad settings. For details on how Google processes personal information, please refer to Google's Privacy Policy.

11. Privacy Officer

Service operator: trynodemap
Contact email: privacy@trynodemap.com

12. Duty to Notify

This policy may be revised to reflect changes in law or service policy. If the content changes, notice will be given in advance through this page.