隐私政策

1. Scope and controller

This policy applies to the TasteGeo website, accounts, community, inquiries, and authentication features operated by GXSOFT Co., Ltd. (the “Operator”).

TasteGeo is an independent Rust reimplementation project and is not an official GeoServer or OSGeo service.

2. Information we process

• Account data: display name, email address, verification status, and optional profile image
• Social sign-in data: provider account identifier and authentication tokens and scope information required to sign in
• Service content: posts, comments, bug reports, private inquiries, reports, and uploaded images
• Security and operations data: session identifiers, IP address, user agent, request time, rate-limit records, and moderation audit records

3. Google user data

If you choose Google Sign-In, TasteGeo accesses the name, email address, profile image, and Google account identifier available through Google's basic profile scopes. TasteGeo does not access Gmail, Google Drive, contacts, calendars, or other Google service content.

We use this data only to create or link a TasteGeo account, authenticate you, and show your basic profile in account screens. We do not sell Google user data or use it for advertising.

4. Purposes and legal bases

Depending on the context and applicable law, processing is based on performance of the service agreement, consent, legitimate security and operational interests, or legal obligations.

• Provide registration, email verification, sign-in, password reset, and account management
• Provide boards, comments, bug reports, private inquiries, and image attachments
• Prevent abuse, enforce rate limits, respond to security incidents, and keep the service reliable
• Comply with legal obligations and resolve disputes

5. Storage, service providers, and transfers

Depending on deployment, TasteGeo may use self-hosted PostgreSQL or Neon PostgreSQL, Vercel hosting, Cloudflare R2 object storage, and an email delivery provider. These providers process data only as needed to supply infrastructure services.

Google's own privacy policy and terms apply during Google Sign-In. We do not sell personal information and disclose it only to service providers, when required by law, or at your explicit direction.

6. Retention and deletion

• Sign-in sessions may remain valid for up to 30 days after their last update.
• Email verification and password reset tokens normally expire after one hour.
• Account data is retained until account closure or a valid deletion request. After closure, posts and comments may remain with the author anonymized to preserve discussion and operational integrity.
• Private inquiries, reports, attachments, and audit records are deleted or anonymized when no longer needed for their purpose, dispute resolution, abuse prevention, or legal retention duties.

7. Your choices and rights

You can review account information and close your account from Account Settings. You may also revoke a social connection through the provider's security settings.

Use TasteGeo's private inquiry channel to request access, correction, deletion, restriction, or withdrawal of consent. A request may be limited where retention is legally required or necessary to protect others' rights.

8. Security, children, and changes

We use reasonable controls such as access restrictions, encrypted transport, secure cookies, input validation, upload re-encoding, and rate limits. No internet transmission or storage system can be guaranteed completely secure.

TasteGeo is not directed to children under 14. We update the effective date on this page when the policy changes and announce material changes on the service.

9. Contact

For privacy questions or requests concerning Google user data, contact the GXSOFT Co., Ltd. TasteGeo operations team through the site's private inquiry board.