Privacy policy

The Pi Place shared canvas has closed and no longer accepts participation. Previously collected account, country, time, painting and report records may remain for reviewing past activity and handling rights requests. You can request access to or deletion of remaining records through Support. The shared image and country totals are separate from individual records.

My Pi is optional. Wallet addresses and connection or verification information are saved with your account to look up public Pi Mainnet balances and lockup schedules. Ordinary balance and lockup data are used while processing your lookup request and are not saved as a separate lookup history. Enabling transaction alerts separately checks public transactions and keeps alert records. Wallet information is not shown on public profiles or share cards. Disconnecting or deleting an account does not erase public blockchain records. You can request deletion of past records from the discontinued manual-date feature through Support.

When you join World Pulse, we store your account identifier, selected country, UTC check-in dates, streak and total. Only country totals are public; personal records are visible only to you. Records are deleted with your account. Cards you share are subject to the receiving app’s policies. For store registration, we retain the accepted notice version and time until the store is deleted.

Access to the community, member conversations and other services may be restricted in some countries. Store services are available in supported countries. We use Pi-verified account details, information you submit and usage records for the necessary purposes. Public posts and public store listings can be viewed without signing in.

Wallet transaction alerts

When alerts are enabled, we store the account, address, lookup cursor, and the direction, amount, transaction hash and time of public transactions. Alert events are cleaned up after 30 days. Turning alerts off or changing the address deletes the relevant watch and its linked transaction-alert records.

Device push notifications

We store the push endpoint, encryption keys, linked account and language for devices you permit, and deliver notifications through the browser push service. Delivery records are cleaned up after 7 days, and cancelled or expired subscriptions are deleted. Disabling device push and disabling wallet transaction alerts are separate actions.

Activity and limited 500 badges

Activity totals, award times and the selected badge are used to check and display badges. To prevent duplicate awards of the limited 500 badge, the award number, account-verification hash, associated post identifier and award time are retained without a fixed expiry. Account deletion removes the account link but retains these award records. They are not treated as fully anonymous data; related rights requests can be made through Support.

Public chat

Public-chat messages, authors and posting times are visible in the participation screen and are cleaned up after 24 hours. Do not post personal or secret information that you do not want to disclose.

Muse operations integration

When the operations integration is used, Muse may read the necessary parts of store applications, reports and inquiries to prepare summaries and reply drafts. Separate contact fields are excluded and some text is masked, but this is not complete anonymisation. Privacy and deletion-request bodies are withheld for direct administrator review. Approval, sanctions, deletion and sending replies are not performed automatically. Drafts are reset when the source changes; integration state stored in PinkTalk is cleared when an intake is deleted or completed.

Optional email delivery

Only when the operator connects SMTP or Resend and enables email delivery are recipient addresses, subjects and bodies sent to the selected email provider. Automatic intake alerts contain only the intake type and an administrator link, without inquiry or report bodies or applicant information. Final-state delivery records are cleaned up after 30 days and attempt records after 24 hours. Message bodies for completed, cancelled, uncertain or exhausted-retry deliveries are removed during cleanup. This feature does not create mailboxes or receive email.

Account and profile

Pi UID, username and authentication information; site member ID, nickname, profile photo, profile changes and account restriction historyUsed to verify sign-in, identify authors, manage profiles and protect accounts.

Community

Posts, topics, titles, photos and formatting; comments, upvotes, downvotes, polls, saves, follows, blocks and reports; activity totals and your selected profile badgeUsed to provide posts and conversations, show notifications and activity, and address misuse.

Location verification for posting

The posting country is checked using trusted connection-country information or location submitted with your permission. When coordinates are used, they are rounded to three decimal places and sent to OpenStreetMap Nominatim; the original coordinates are not stored in the server database.We store each member’s verified country and validity period. Posting and editing permission is valid for one hour. This verifies location, not citizenship.

Public post and comment translation

To display your selected language, the server sends public post titles, full bodies and public comments to MyMemory or configured Google Cloud Translation. Long bodies are translated in full; originals remain available. Separate account IDs, nicknames, sign-in tokens, visitor IP addresses and private conversations are not included in translation requests.Translation caches are cleaned up after 30 days and usage records after 7 days. Linked translations are deleted when the original post is deleted, and translations from before an edit are not reused. Machine translation can contain errors and is subject to usage limits.

Member conversations

Participating accounts; introduction, acceptance and rejection status; message content and times; read position; blocks and exits; monthly conversation request usage; ad reward request identifiers, grant status and timesUsed to provide private conversations and notifications, manage request and ad reward limits, prevent spam and duplicate rewards, process reports and rights requests, and manage retention.

Pi Hunch

Pi Hunch stores your account, prediction, entry time and note. Notes and top rankings are public with your nickname and displayed profile country. The country is not verified nationality.Delete only notes written before this request. Predictions and participation records are kept. Request deletion of your full participation history separately through Support.

Daily predictions and personal participation records

We store your Pi account ID, prediction round, choice, participation time and country at participation. We use your selected country first, then the connection country if unavailable; this does not establish nationality. Round prices and outcomes provide participation streaks, accuracy and history. Public views show round and country participation totals. Earlier votes without a recorded country are counted as unknown. Your personal history is visible only to you.Personal participation records are deleted within the applicable scope when account withdrawal or a community-data deletion request is processed. Round prices and outcomes that are not linked to an individual are retained. Your Pi account ID and sign-in token are not sent to the exchange for price requests.

Previously saved community reading history

Reading positions and timestamps saved before the feature was discontinuedNo new data is collected. Existing data is deleted with the associated post or account.

Stores

Applicant account; store name, category, address, coordinates, contact details, opening hours, payment conditions, introduction, photos, events and correction requests; reaction keywords and participant accountsUsed to publish, search and display stores, review reports and show visitor feedback.

Retired marketplace and chat records

Items, photos, participating accounts, messages, transaction confirmations, reviews and reports collected before closureNew sale listings, item transaction chats and transaction confirmations are no longer accepted. Existing records are only used for access, deletion and reporting requests, and cleanup under the existing retention rules.

Advertising and earlier store payments

Applicant account; ad text, images, destination link and duration; plan, order, payment ID, amount, status and transaction IDUsed to review ads, verify payments and manage service records. New store registration payments are no longer accepted; earlier payment records are retained separately.

Connect my wallet

Pi account identifiers, wallet addresses and connection times, and existing fee consent, order, payment and transaction records are used to verify connections and prevent duplicate charges. Temporary balance and lockup lookups are separate from records kept for optional transaction alerts.Disconnecting removes the connected address and lookup data. Access rights and payment records are kept separately to prevent repeat payment. Wallet information is not displayed on public profiles. You can request deletion of payment and account records through support.

Inquiries and reports

Submitting account, type, subject, content and time; processing status and operator replies; selected deletion scope and outcomeUsed to review and answer questions, payment errors, reports and privacy requests.

Spam prevention

Author account, time, post or comment type and content hash for duplicate detectionUsed to limit posting frequency and duplicates. The original text rejected by automated checks is not kept in a separate spam record.

Live online and daily visitor display

Presence uses server-issued visitor cookies and recent activity signals. Signed-in visitors are deduplicated by account; visits before sign-in are counted by browser. Different devices or cleared cookies can make totals differ from actual people.Live presence records are kept for up to 48 hours. World visitor daily records cover today and the previous 7 Korean calendar days (8 dates) before cleanup. These are separate counts.

Visit and activity statistics

With permission for optional visit statistics, we process daily hashes derived from a random device identifier and visit totals. For consenting signed-in members, we record first and latest observation days and whether they return within seven days or in week four.Optional visit statistics are off by default. They do not store page URLs or navigation paths; return-visit summaries are account-linked information. Post and comment totals, post view counts and spam-prevention records are separate features.

Information necessary to enter into or perform a contract is processed only as needed for that purpose. Processing that requires separate consent or another legal basis must meet those requirements. This notice is not blanket consent to all processing.

• Other users can see usernames, nicknames, profile photos, display countries, selected badges, content, attachments and public reaction counts on public posts and comments. Your saved-post list is available in your own activity area.
• Approved public listings display the store's address, contact details, opening hours, photos and payment conditions. Avoid publishing a private home address or someone else's contact details.
• A chat's introduction and messages are shown only to its two participants. Messages are stored on the server. Authorized operators may review the necessary information to address reports, rights requests or technical problems.
• Support requests and responses are available to their submitter and authorized operators. Relevant information may be reviewed within authorized access when investigating reports or faults.
• Do not post sensitive information, such as health or political views, identity documents or confidential financial details. Do not submit content you want to keep private; you can also edit or delete existing posts and photos.
• Deletion within the service does not also remove copies saved by others, search-engine caches or transaction records on a blockchain.

Service region and language

On a first visit without a saved country, the default country is estimated from your IP address. Your country and display language choices are then saved in browser storage and a cookie valid for up to one year. Saved choices take priority even if your connection location changes. If the country cannot be determined, the site starts with South Korea; you can change it at any time. This preference does not verify nationality or replace location verification for posting.

Keeping Pi sign-in active

Pi sign-in tokens are stored encrypted on the server. The browser stores an HttpOnly sign-in cookie valid for up to 7 days and account display information. Pi accounts are reverified when checking authentication, and signing out removes the server session.Local storage may remain after you close the browser. Signing out removes stored sign-in information. You must sign in again when authentication expires.

Convenience data on your device

Your browser stores draft posts and photos, cached profile displays, favorite and recently viewed stores, a random visitor identifier and similar information.Drafts can be removed by completing a post or deleting the draft; store history can be removed on the relevant screen. Other device data can be removed through the browser's site-data controls. Signing out does not remove all drafts and caches.

Your location

If you allow location access when finding nearby stores, it is used to calculate distances. Your current location is not saved to your member profile. You can select an area manually without granting permission.

Address search

The search term and country you enter are sent to address-search providers. Results are stored in a server cache that is not linked to a Pi account and reused for 24 hours. Expired cache entries are progressively removed during later searches.

You can revoke location permission or delete cookies and site data in browser settings. This may remove sign-in persistence, drafts, saved stores and other device data. Deleting site data does not also delete server-side posts or account information.

The optional visit-statistics choice is stored in a cookie in this browser for up to one year. While signed in, permission is also stored for your account. Turning it off while signed in deletes your account-linked return-visit summary and stops further recording. Existing daily totals remain. This choice is separate from Google advertising consent.

Previous Google sign-in information

Google sign-in is disabled, and previous Google sign-in sessions cannot be used for authentication. Previous Google account identifiers and member links are retained to identify the authors of existing activity and handle rights requests. They are removed when account information is deleted.

Accounts, profiles, stores and ads

Kept while needed to provide the service and manage registered information. For information with no automatic expiry, you can request deletion or termination through Support.

Posts, comments, reactions, saves and follows

These records are kept until you delete or undo them, or an operator processes them. Deleting a post also deletes its linked comments, reactions, saves and old reading-position records. Account relationships such as follows are separate items.

Spam-prevention records

The most recent 24 hours of records are used for limits. Older records are progressively removed during later writing requests. Deleting the original post before then does not remove the limit record.

Member chat records

New chats expire 90 days after the request, or 90 days after the last message. Members who archive a chat retain access to their own copy. Expired chats cannot receive new messages and are hidden from members who did not archive them. Expired chats and messages with no archived copy are removed during server cleanup. Clear from my list removes your archive setting and hides previous messages for you. It does not notify the other member; new messages appear again. The other member’s records remain subject to the retention period. Deleting a participant’s account also deletes linked chats and messages.

Old sales listings and item photos

Old listings become eligible for expiry 60 days after creation or their last bump and are not public after closure. Photos of sold, expired or hidden items become eligible for deletion after 30 days in that state; listing records after 90 days.

Old transaction confirmations and buyer reviews

Old item identifiers, participant accounts, confirmations and optional reviews are retained as needed to handle rights requests concerning past records. They are not used for new ratings or public seller scores. Their retention is separate from listings and chats. Contact support to request deletion or end use. Linked confirmations and reviews are deleted with an account.

Conversation request credits and ad reward records

Records are progressively deleted during cleanup after 90 days have passed since the end of the relevant month. Leaving or deleting a conversation does not reset that month’s usage limits. Deleting an account also deletes its linked credit and reward records.

Old trading chats

Old conversations become eligible for deletion 30 days after the last message, or 7 days after a participant left before closure. Contact support to access or delete remaining records.

Inquiries and replies

Your inquiry and the operator's reply are stored together. You can delete them in My Inquiries or include them in a request to delete account information.

Temporary presence identifiers

Live visitor cookies last up to 48 hours. World daily records cover today and the previous 7 Korean calendar days. Account-linked records are removed on account withdrawal.Automatic presence counting starts when this update is installed. Visits that were not previously collected are not reconstructed retrospectively.

Daily visit hashes

Records older than 45 days are removed during cleanup triggered by visit requests. Aggregates such as total visits per day are kept separately.

Account-linked return summaries

Stored for consenting accounts. Deleted when you turn optional visit statistics off while signed in or when a request to delete this information is processed. Observation periods differ from registration dates.

Deletion-request records

We retain the selected scope, processing status, counts and operator reply with the inquiry. Profile comparison values captured at submission are erased after automated processing or cancellation. You can delete completed, reviewed or cancelled inquiries from My inquiries.

Expired marketplace items, photos, chats and temporary statistics records are progressively removed by cleanup triggered by service requests. The retention cutoff and the actual cleanup time may differ.

Information due for deletion is removed from the database and file storage. If retention is required to verify rights or comply with another law, the reason and scope must be explained and the information managed so it is not used for other purposes.

Pi authentication and payments

We verify accounts through the Pi SDK and API and exchange Testnet or Mainnet payment information according to the payment network used. We never request your wallet passphrase or private key during sign-in or payment.

Addresses and maps

Address searches send search text and country to OpenStreetMap Nominatim. Opening an external map or directions sends the store address or coordinates, and that service may process connection and device information.

Country on your first visit

Cloudflare connection-country information is used first. When needed, Country.is, GeoJS or ipwho.is may estimate the country from a public IP address. This is for country display and does not replace posting-country verification. External lookups may process the public IP address.

Public-post translation services

Automatic public-post translation uses MyMemory, or Google Cloud Translation when configured by the operator. Our server connects to the translation provider; the visitor browser does not send these public-post translation requests directly.

Hosting and file storage

External hosting infrastructure is used to run the website and store its database and attachments such as photos. This processing is distinct from public posts and links to external maps.

Pi authentication, advertising, address search, translation, hosting and optionally connected email or operations providers may involve processing abroad. Your selected country and language do not change the storage country. The actual processors, countries, data, purposes, periods and rights procedures must be specified in the operator notice below. This explanation is not blanket consent to overseas processing.

Google advertising

Opening the community or selecting Ad & cookie settings starts a connection to Google to check consent. Google and advertising providers may process the page URL, IP address, device and browser information, cookies and ad interactions. Ads using cookies and previous visits to this or other sites depend on consent status and Google settings.The site code does not pass Pi login tokens or support and member chat contents as advertising data. Turning off personalized advertising does not stop all data processing needed to provide ads.

Use Google ad settings below to manage personalized ads for your Google account. Manage cookies stored on your device through your browser's site data settings.

Use Ad & cookie settings to change or withdraw the choices made in Google's consent message on this site. These choices are separate from your Google account's ad settings. Google determines whether the consent message applies, independently of this site's service country and display language settings.

New ad requests are paused until Google ad consent status is verified. If the consent message applies and you refuse or withdraw the consent needed for ads, this site stops requesting Google feed ads and removes its existing ad placements. Connections to Google may still occur to provide the consent message and settings.

These choices concern Google advertising. They do not also stop other processing, such as saved sign-in, drafts or visitor statistics, or delete all stored information. You can separately manage your Google account ad settings and browser cookie restrictions.

Select the deletion scope in Support. After review, the administrator processes your selected pre-request community posts, comments and activity, the profile present at submission, and account-linked visit statistics. Failed photo-file cleanup is not marked complete. Cancel in My inquiries before processing starts.

Full accounts, stores, payments, reports, restrictions, member chats and retired marketplace and chat records require separate review. Specify the records and action you want; we will explain what was processed, what remains and why. Completion of automated processing does not mean all information was deleted, including browser data, external caches, copies on other devices, platform logs and backups.

You can leave a conversation or block a member through the chat menu. For other requests to access or delete chat records, identify the conversation and the action you want when contacting support.

• Manage your profile and selected badge in My Activity, and posts and comments on the relevant post. Use the corresponding buttons to undo upvotes, downvotes, saves or follows. Wallet alerts and device push notifications are disabled in their respective settings.
• After signing in, submit access, correction, deletion, processing restriction or consent withdrawal requests through Privacy inquiries or Data deletion requests in Support. Track submissions and responses in My inquiries. Requests made by a representative may require authority verification.
• Specify the information concerned and the action you want. Only the minimum information needed to verify identity will be requested, never wallet passphrases, private keys or passwords.
• View your inquiries and processing replies in My Inquiries. Check the scope before requesting deletion: deleted information may be unrecoverable and associated services may no longer be available.
• Deleting Pink Talk data does not delete your Google or Pi Network account or blockchain records. If a request cannot be fulfilled immediately due to legal retention or rights protection requirements, the reason and appeal procedure must be explained.

This policy is written based on South Korea's Personal Information Protection Act. This notice and your display language do not limit rights protected by applicable law.

Account authentication and server-side authorization control access to a user's own information, and access to operator functions is restricted. Server payment secrets are separated from public code. Upload formats, sizes and ownership paths are checked.

Send privacy questions through Privacy inquiry in the site's Support page and read replies in My inquiries. Additional identity verification may be needed before providing access or deletion. In South Korea, external assistance is available from the Privacy Infringement Report Center (118 within Korea) or the Personal Information Dispute Mediation Committee (1833-6972 within Korea).

Changes to this notice must identify the changed content and when it applies. If new consent is required, a separate procedure must be provided. Changing a date alone does not extend existing consent to new processing.