본문으로 건너뛰기

내 정보

문제 신고

이 페이지는 특정 정류장, 노선, 역, 차량에 대한 것이 아니에요. 하나를 열면 신고에 그 이름이 들어가요. 또는 전체 신고를 이용하세요.

무슨 일이 있었나요
전체 신고 내용 계정이 필요 없어요
내 정보

내 계정내 정보

계정이 없어요 · 모든 정보는 이 휴대폰에만 저장돼요

나 · 개인정보 보호

개인정보 보호

여러분의 이동 기록은 여러분의 것입니다. 선택할 수 있는 항목을 한곳에 모았습니다.

동의 설정은 이 기기에서 바꿀 수 있습니다. 계정 내보내기와 삭제는 계정 소유자만 할 수 있습니다. 문의와 이의 신청은 아래 비공개 요청 양식을 이용하세요.

Your privacy controls

Before you export or delete

Four data scopes, four separate controls

A server download or deletion cannot reach every place where information may exist. Review each scope first so the result says exactly what changed and what still needs a separate action.

Deleting Otranspo records does not clear this browser, delete a shared sign-in identity, or cancel a monthly donation. Each needs its own action below.

  • This browser and device

    Local to this device

    These records stay in browser storage and remain usable without an account.

    Inspect or clear this device’s data
    Details about this data and its limits
    What this includes
    • saved places and recent searches
    • recent or active trips
    • unfinished report and crowding drafts
    • local notification inbox, map choices, language and rider preferences
    Export result
    They are not in the server export because the server cannot read them. Settings shows the local categories that this browser can inspect and clear.
    Deletion result
    Deleting Otranspo service records does not clear this browser. Clear the chosen local category in Settings on each device you used.

  • Otranspo service records

    Controlled by the signed-in owner

    These are records in Otranspo’s database that are linked to the current account.

    Go to the owner-only export
    Details about this data and its limits
    What this includes
    • private reports, contact cases and privacy requests
    • route requests, votes, proposal support and crowding submissions
    • account saves and merge history
    • journey watches, recurring journeys, devices, consents, delivery history and access grants
    Export result
    The owner-only JSON download includes current account-linked records and identifies intentionally excluded secrets such as notification addresses and replaceable encrypted coordinates.
    Deletion result
    Permanent deletion removes each covered category inside one transaction and re-counts every category before claiming success. A short pseudonymous audit and replay-safe receipt remain under their stated limits.

  • Shared sign-in identity

    Separate account-service record

    The account identifier, email, authentication methods and sessions belong to the shared Supabase identity service.

    Ask for shared account removal steps
    Details about this data and its limits
    What this includes
    • account identifier and email
    • password, passkey or configured sign-in method
    • authentication sessions and security events
    Export result
    These records are not included in an Otranspo export. The export names the processor and the boundary instead of silently copying the identity into Otranspo.
    Deletion result
    Otranspo deletion does not delete the sign-in identity. Complete Otranspo deletion first if desired, then use the private privacy intake to request the account-service steps and learn which other service sessions may be affected.

  • Donation and payment records

    Controlled by a private donation receipt

    Stripe holds card or bank details. Otranspo holds only the minimum donation, accounting, refund, dispute and optional contact records described on the funding pages.

    Open donation receipt and management help
    Details about this data and its limits
    What this includes
    • Stripe payment method and processor receipt
    • donation amount, frequency and private Otranspo receipt
    • optional encrypted contact details
    • separate optional public-recognition choice
    Export result
    Donation records are receipt-scoped rather than joined to the Otranspo account export. Otranspo never exports card or bank details because it never receives them.
    Deletion result
    Otranspo account deletion does not cancel a monthly donation or erase records under financial retention. Use the private donation receipt to manage recurrence, erase optional contact details or remove public recognition.

Opening a linked control carries only the page address and the purpose named in the link. Otranspo does not merge browser, account, journey, report, donation, or payment records across services behind the scenes.

Consent register

Each optional use has its own decision

There is no single accept-all switch. Changing one choice affects only the purpose and records named in that row.

  • Optional analytics

    Manage optional analytics
    Applies to
    This browser
    How state is known
    Shown and changed directly below. Browser privacy signals keep it off.
    What changing it does
    Turning it off stops future optional collection, removes Otranspo-visible Google Analytics identifiers and leaves all rider tools working.

  • Exact journey monitoring and closed-page delivery

    Manage journeys and delivery devices
    Applies to
    One activated journey watch and one delivery device
    How state is known
    Granted during watch activation; browser permission alone is not consent or registration.
    What changing it does
    Ending the watch stops future checks. Revoking the registered device stops future delivery without changing other saved routes or trips.

  • Working location, live sharing and support access

    Review or revoke journey grants
    Applies to
    One active journey, recipient and short purpose
    How state is known
    Separate expiring grants are listed in Journey privacy; a location grant is not a sharing or support grant.
    What changing it does
    Revocation immediately ends that access. The replaceable working point expires within five minutes and does not create a movement trail.

  • Private contribution and any public aggregate use

    Open contribution receipts
    Applies to
    One report, observation or request
    How state is known
    Confirmed during that submission. Public rail evidence requires a second explicit choice and moderation.
    What changing it does
    Withdrawal follows the private receipt and stops future permitted use where policy allows; it does not erase already de-identified public aggregates.

  • Donation receipt or project-update contact

    Manage from a private donation receipt
    Applies to
    One private donation receipt
    How state is known
    Off until a person asks for contact and separately consents to encrypted retention.
    What changing it does
    Erasing contact removes the optional name and email while retaining only records required for accounting, refunds or disputes.

  • Public donor recognition

    Manage public recognition
    Applies to
    One donation receipt and one chosen display name
    How state is known
    Separate from contact consent and off by default. A contact name is never treated as permission to publish it.
    What changing it does
    Turning recognition off removes the name from future supporter-page output without cancelling the donation or receipt contact choice.

What works without an account

Reading rider information, changing consent on this device, and asking a privacy question do not require an account.

Access, export, correction, scoped deletion review, appeal, and permanent deletion of account-linked records require the signed-in account owner.

Saved places, recent searches, and unfinished drafts stay on this device. The server cannot export or delete them.

Manage device-only data in Settings

Access or export account-linked records

The download contains only records linked to this Otranspo account. It does not contain browser-only data or records held by the shared identity provider.

Sign in

Request access, correction, deletion review, or an appeal

Choose the smallest useful scope. Do not enter identity documents, passwords, payment details, or unrelated personal information.

Delete account-linked Otranspo data

Review every item below. This action permanently deletes the account-linked records that Otranspo can verify, while browser data, the shared sign-in identity and payment records keep their separate controls.

Deletion review

  • Account-linked reports, requests, votes, crowding submissions, private contact cases, and rider scores in the Otranspo database are deleted where no documented exception applies.
  • Device-only saves and drafts stay on this browser until you clear them in Settings; the server cannot reach them.
  • Notification endpoints and synced saves are removed only when they exist in the account-linked Otranspo systems covered by the verified deletion response.
  • Donation and payment records may have separate legally required financial retention and are not claimed deleted by this control.
  • Public aggregate statistics that no longer identify a person are not reversed.
  • After successful permanent deletion, the deleted account-linked records cannot be restored.
  • The shared authentication account is not deleted by this Otranspo-specific action.

Sign in as the account owner before submitting or changing account-linked records.

Ask a privacy question without an account

Use the private contact form for a general question or to ask for another identity-verification method. Do not send identity documents.

Open the privacy contact form

이 설정은 저희 서버에 있는 데이터에만 적용돼요. 이동 기록, 저장한 장소, 팔로우한 약속, 읽기 답변은 이 휴대폰에 있고 직접 지울 때까지 남아요. 이 휴대폰의 데이터 지우기

계정 및 동기화

계정은 선택 사항입니다. 계정이 없어도 모든 기능을 쓸 수 있고, 데이터는 이 휴대폰에만 저장돼요.

로그인계정 만들기
선택 계정

계정이 있으면 계정 기반 참여 기록과 개인정보 보호 기록을 한곳에 모아 둘 수 있어요. 계정이 없어도 출발 정보, 여정 계획, 지도, 저장 항목, 설정, 기기 알림은 사용할 수 있어요.

계정 서비스는 Otranspo에서 사용하는 로그인 신원을 관리합니다. 다른 서비스는 자체 로그인 세션이 필요할 수 있습니다. Otranspo는 도메인 간 자동 로그인을 약속하지 않으며 이동 데이터를 다른 서비스로 보내지 않습니다.

Device-local data

Checking this browser

Review or export device-only saves before signing in. Private places are never uploaded automatically.

Open Saved

Notification devices

This page cannot read a list of notification devices from your account, so it does not show a device count.

Facts available from this browser

Notification permission
Checking this browser
Saved local subscriptions
Checking this browser

Browser permission and local follows alone do not mean Otranspo can alert you after you close it. A journey watch shows its own active delivery state.

Open notification settings

Account data export

The private download is prepared now and saved to this device. It is not kept at an online link. The page shows whether the request is being prepared, is ready, expired, or failed.

Sign in to export account data

No account export has been requested on this page.

Delete Otranspo data

The shared sign-in identity is managed outside Otranspo. Deleting Otranspo records does not close that identity.

Privacy controls show which Otranspo records can be deleted and issue a receipt after verified deletion. Sign in as the account owner to submit.

Review deletion scope and receipt process