Privacy Policy

Your memories deserve a clear explanation of how they are handled.

Who to contact

This policy describes the Schoolmates service at schoolmt.com, an Schoolmates project. For access, correction, deletion or other privacy questions, contact [email protected]. Effective date: 27 October 2026.

Information we use

We store your email address, password hash, display name, selected schools, membership requests and review results. Optional profile details, photos, posts, comments, event responses and chat messages are stored when you provide them. We also process limited connection, security and moderation records to operate and protect the service. We do not ask you to publish your email address or legal name. Teacher accounts also store the schools where you taught, school level, teaching start and end months, and whether you are currently teaching there. These records are reviewed before school access.

Purpose and sharing choices

Account information supports login and membership review. Community content supports the features you choose to use. Security records help detect abuse. Profiles and albums start private; shared albums are visible to approved members of the selected schools. Posts explicitly shared publicly may be indexed by search engines. Internal school spaces, including their introductions, require approved membership and school-name sharing; separately authenticated administrators have management access. Other members can copy material they can see, so share thoughtfully.

Private conversations

For members, access to a private room requires room participation and an approved school affiliation. Invitations or a room password may allow others to join, and new participants can read existing history. Removing a participant prevents their future access through the service. Separately authenticated server administrators can inspect all rooms, including private and closed rooms, without becoming members. Administrator transcript and attachment inspections record the reason, time and administrator session. Connections are encrypted, but messages are stored on the server and are not end-to-end encrypted.

Providers and international access

Vultr hosts the application and its database. Cloudflare provides DNS, traffic protection, delivery and email forwarding. Messages sent to the support address are forwarded to an operator mailbox at Naver. These providers may process information in different countries under their own service terms. Schoolmates is accessible internationally. YouTube or Vimeo players load only when you choose to view a linked video. The provider then receives your connection information and may process data under its own policy.

Cookies and local storage

An essential secure session cookie keeps you signed in for up to 30 days unless you log out or the session is revoked. Local storage remembers language and recent country choices. The service worker caches application assets, not private messages or API responses. These functions are needed for the service and preferences; this release does not include advertising trackers.

Retention and deletion

Account and community information remains while needed to provide the service. Some deleted or moderated content may be retained temporarily for abuse investigation or database integrity, although it is no longer displayed. Server backup files are kept for approximately seven days and may retain earlier copies until rotation. Server security logs follow their configured rotation schedules. To request deletion or an export, contact support; we may verify account ownership and explain any necessary exceptions. Recent-post comparison fingerprints and posting-restriction records are retained for up to 30 days, with daily removal of older records.

Your choices and rights

You can edit your profile, change visibility and delete your own supported posts, comments and photos. You may also ask support for access, correction, export, deletion or an explanation of processing. Rights and any complaint route depend on your location. We use information to provide requested account functions and to protect the service; optional publication follows your sharing choice.

Safety and changes

Uploads are restricted, inspected and stored without script execution. These measures reduce risk but cannot guarantee that every threat is detected. Do not upload another person's private information without permission. We will update this page when practices materially change; the effective date identifies the current version.

Repeated posting

To reduce advertising spam, the service compares recent school-board posts from the same account. Similar posts across schools within ten minutes can pause new school-board posts and edits for three hours. We show the reason and unlock time; contact support if you believe the restriction was incorrect.

Automated flags and administrator review

The service flags some abusive or threatening expressions in posts, comments and chats, and forwards member reports for administrator review. A flag is not a confirmed violation and does not automatically suspend an account. Administrators record their reasons and may view Korean machine translations alongside originals. Translation runs on the server; translation copies are cleared after about two days. Detection and translation can be wrong. Warning records, review outcomes, content snapshots and restriction, restoration and correction histories support dispute review. Administrator observation does not appear in participant lists or read receipts. Contact support to request an explanation, correction or deletion of records.

Visitor statistics

We measure visits to improve Schoolmates: visit time, page type, school space, selected language, approximate country, device/browser type and referring site. No analytics cookies are used. Raw IP addresses, URL queries, member names and conversation contents are not stored in analytics. Daily rotating keyed visitor identifiers are retained for 30 days and aggregate counts for up to two years. Administrator visits and known bots are excluded, and browser DNT/GPC signals are respected.