Scope and controller
This policy covers roamwindow.com and Roam Window services. The data controller is Jiho Lee (Republic of Korea), operating Roam Window as an independent project. Privacy requests can be sent through our contact form.
Calculator data stored in your browser
The anonymous calculator stores trip dates, optional country labels, planning scenarios, and interface state in browser storage on your device. This data is not sent to our server merely because you use the calculator. Clearing site data in your browser removes the local copy; the calculator also offers export and import controls for your own backup.
Accounts, sync, and reminders
If you request a sign-in link, we process your email address, one-time sign-in token records, security rate-limit records, and session data. Sessions use secure, HTTP-only cookies. Resend delivers sign-in and reminder email on our behalf.
Creating an account does not upload your local trips. If you enable sync, the trip records you choose to sync and sync metadata are stored in our Cloudflare D1 database. If you schedule a reminder, we store the related trip identifier, entry date, reminder timing, and delivery state. You can disable sync, cancel reminders, or request account deletion from the account area.
Payments
When paid features are available and you choose to purchase them, Lemon Squeezy acts as the checkout and merchant-of-record provider. It processes payment and billing information under its own privacy terms. Roam Window receives identifiers and status information needed to grant, renew, or revoke access; we do not receive complete card details.
Contact messages
The contact form sends your name, email address, subject, message, and delivery metadata to Roam Window through Resend. We use that information only to read and answer the request, prevent abuse, and keep a limited support record. Do not include passport numbers, visa documents, or other sensitive identity information.
Hosting, security, and operational data
Cloudflare hosts the site and may process IP addresses, request headers, timestamps, and security or diagnostic logs to deliver and protect the service. We also keep hashed rate-limit records rather than raw email or network values where the feature supports it. Those records stop affecting requests when their enforcement window expires; expired rows are removed opportunistically during later requests. We use operational data to provide the requested service, investigate failures, and prevent fraud or abuse.
Advertising and cookies
Roam Window does not currently load third-party advertising. If Google AdSense is activated on public guide pages, Google and its advertising partners may use cookies, device information, IP addresses, and prior visits to select, measure, and limit ads. We will use a Google-certified consent platform where required and will not request personalized advertising before the applicable choice is recorded.
Read How Google uses information from sites or apps that use its services and Google's controls for ad personalization. This policy will be updated before advertising is enabled.
Retention and deletion
Local calculator data remains until you remove it. One-time links and sessions expire. An expired rate-limit row can remain in D1 until a later request runs cleanup, but it no longer affects enforcement. Account, sync, reminder, and entitlement records are retained while the account or related legal obligation remains. Account deletion removes or schedules deletion of account-linked data, except information we must retain for payment, fraud prevention, dispute, or legal obligations.
Your choices and rights
Depending on where you live, you may ask to access, correct, export, delete, restrict, or object to processing of your personal information, or withdraw consent. Use the contact form and identify the account email involved. We may need to verify that you control the address before acting. You may also complain to your local data-protection authority.
Changes
Material changes will be reflected by the date above and, where appropriate, an in-product notice. We will not silently turn an optional local workflow into server processing.