MOA · TRANSPARENCY

Know what you are using.

Current operator and data-use information, alongside policy drafts for operator review.

Operator information

Service / operating brand: Moa (모아) / CoreInsight (코어인사이트)
Legal operator and business details: Pending operator verification · registration status unconfirmed
{{OPERATOR_NAME}} / {{BUSINESS_REGISTRATION_NUMBER}}
Contact and privacy contact: Public email, address and responsible contact pending verification
{{CONTACT_EMAIL}} / {{BUSINESS_ADDRESS}} / {{PRIVACY_OFFICER}}

The current inquiry form requires ChatGPT sign-in and is reviewed manually. It does not replace a publicly accessible privacy contact for people without an account.

Open the existing inquiry form

Start with our featured free short, The Guest in Room 404. All public shorts, including The Last Broadcast, are free through every ending without sign-in.

Draft terms of use

Moa is a free preview of branching stories and shared seasons. The Last Broadcast can be read to an ending without signing in. Shared-season voting, comments and story submissions require sign-in. The current preview is intended for adults aged 18 and over.

The first vote starts three consecutive 48-hour chapters. Published voting rules determine the canonical story. There is no feature for purchasing additional votes.

Do not post others’ personal information, threats, hate, unauthorized copies or impersonations. The operator reviews reports and publication requests. Creators must secure necessary rights and permissions; their script rights remain theirs. Exclusive copyright in an entire AI-generated work is not guaranteed.

An effective date, change notices, restriction and appeal procedures, and a dispute contact will be published after review. Reading this draft does not create a separate contract or payment.

See AI use, narration and production details

Draft privacy policy · current data use

Feature	Data processed	Purpose
Reading as a guest	Browser identifier cookie, language, country code, source category, scene/choice/share-request records	Resume reading, compare choices, understand service use
Usage-flow analytics	Existing browser/account identifier, language, event type, story/chapter/menu ID, first and latest timestamps	Measure end reached, choice, post-prompt ballots, return visits and menu discovery
Sign-in and community	Identity-provider account ID, email and display name; Moa nickname, votes, comments, follows, blocks and reports	Verify identity, connect activity, support participation, identify the operator and review reports
Creator studio	Profile, story scripts and choices, review status and rights confirmation	Save, review and publish stories
Production inquiry	Account ID, submitted name, email, brief, language and review status	Manage your request and let the operator respond

Public profiles, comments and published stories are visible to others. Inquiries are available only to their sender and the operator. Public vote results are aggregate counts. Signing in may connect this browser’s guest reading activity to your account.

The reading identifier cookie (moa_trail) expires 90 days after issuance. Voice settings and a temporary pre-sign-in choice use browser storage. You can remove cookies and storage in browser settings, which may reset continuity features. Cookie expiry does not automatically delete server records.

Activity deletion and inquiry deletion are available in the current interface. Aggregate records such as finalized public season results may remain. Automatic retention and erasure periods, backup handling and an external contact for access, correction and deletion requests still require confirmation. Deletion controls ask for confirmation before running.

The service uses ChatGPT Sites hosting and sign-in, with Cloudflare-based servers and a database. The operator must verify processors, processing locations, international-transfer details, grounds and periods against the actual arrangements. This draft does not represent those details as settled.

Open activity and privacy controls

Draft refund policy

The site currently has no payments, paid chapters or auto-renewing subscriptions. Submitting an inquiry does not charge you or reserve production work.

Future paid offers are planned to disclose pricing, deliverables, timing, withdrawal and refund conditions, and contact details before purchase, with separate agreement. For custom work, stage-based cancellation terms for kickoff, drafts and delivery are under review. No refund percentage or deadline is set yet. A blanket no-refund clause will not override statutory rights.

Storage, logs and backups: verified facts

Activity, choices, votes, comments, inquiries and creator drafts use the Cloudflare D1 DB binding. No R2 binding is used. Covers are static files in the source project.
ChatGPT Sites handles sign-in and supplies account ID, email and an optional display name. Moa profiles store account/public IDs, a nickname and related fields; an email entered in an inquiry is stored separately with that inquiry.
Observability is enabled. Inspected hosting logs include timestamps, request URLs, IP addresses, country codes, user-agent information, referrers, selected request headers, response status and execution timing. These hosting logs are separate from the application analytics table. Retention, actual backup activation and recovery coverage remain unverified.
The exact storage country and Cloudflare region are unverified. Sites currently states that data residency is not supported. A 90-day browser cookie does not define server-record retention.

Actual data location: {{DATA_LOCATION}}Operator verification required: Confirm against Sites terms and provider response
Server log fields and retention: {{LOG_FIELDS_AND_RETENTION}}Operator verification required: Verify the complete scope beyond the fields observed above and its retention. Do not assume generic Cloudflare defaults apply to Sites
Backups, restore and expiry: {{BACKUP_AND_RESTORE_POLICY}}Operator verification required: Verify configuration, agreement and restore test

Retention and erasure: proposal awaiting approval

The periods below are operational proposals, not an active retention policy. Automatic erasure has not been implemented. Existing user-requested deletion controls remain available.

Record	Proposal · assumption	Value to confirm
Inactive guest activity	30 days after last activity	`{{GUEST_RETENTION_DAYS}}`
Individual analytics events	90 days after last update	`{{ANALYTICS_RETENTION_DAYS}}`
Production inquiries	90 days after inquiry closure; closure tracking required	`{{INQUIRY_RETENTION_DAYS}}`
Account/activity deletion requests	Process without undue delay after identity verification; review legal exceptions	`{{ERASURE_PROCESS_AND_EXCEPTIONS}}`
Backups	No period proposed until provider policy is verified	`{{BACKUP_RETENTION_DAYS}}`

Current activity deletion removes scoped records and anonymizes some comments/profile fields. Finalized season aggregates and a minimal profile row may remain; it is not a guarantee that every datum is immediately destroyed.

Erasure procedure and method: {{ERASURE_METHOD}}Operator verification required: Separate active-database erasure, provider backup expiry and re-erasure after restore
Legal retention exceptions and grounds: {{LEGAL_RETENTION_EXCEPTIONS}}Operator verification required: Confirm each data category, legal basis and period

Third-party disclosure and processors

Comments, stories and profiles are user-published content. Moa’s current code has no separate SDK forwarding individual analytics to an advertising provider. This does not establish that all hosting/identity-provider processing constitutes no third-party disclosure.

Recipients, purposes, fields, retention and legal basis: {{THIRD_PARTY_DISCLOSURES}}Operator verification required: Confirm whether applicable
Processors, delegated work and subprocessors: {{PROCESSORS_AND_TASKS}}Operator verification required: Verify the actual contracting entities and roles of ChatGPT Sites/OpenAI and Cloudflare

International transfers

The following must be verified against actual agreements and processing. Placeholders neither establish a lawful transfer basis nor obtain consent.

Destination countries: {{TRANSFER_COUNTRIES}}Operator verification required: Do not infer a country
Recipients and contacts: {{TRANSFER_RECIPIENTS_AND_CONTACTS}}Operator verification required: Verify provider entities and subprocessors
Transferred fields: {{TRANSFER_DATA_FIELDS}}Operator verification required: Verify account, activity, inquiry and log fields
Timing and method: {{TRANSFER_TIMING_AND_METHOD}}Operator verification required: Distinguish access, storage, sign-in, network transmission and remote access
Purpose and retention: {{TRANSFER_PURPOSE_AND_RETENTION}}Operator verification required: Confirm per recipient
Legal basis and safeguards: {{TRANSFER_LEGAL_BASIS_AND_SAFEGUARDS}}Operator verification required: Review applicable grounds such as contract necessity or separate consent
Refusal method and consequences: {{TRANSFER_REFUSAL_METHOD_AND_EFFECT}}Operator verification required: Specify the request channel and affected features

Your rights and privacy contact

Current activity-deletion controls are in My space → Privacy; you can update/delete your inquiry on the inquiry page. The operator must confirm verification procedures and response deadlines for access, correction, deletion, restriction, consent withdrawal and legal-representative requests.

Rights-request procedure and deadlines: {{RIGHTS_REQUEST_PROCEDURE}}Operator verification required: Email channel, minimal identity verification and representative authority
Privacy officer or department: {{PRIVACY_OFFICER}}Operator verification required: Actual contact name or responsible department
Telephone: {{PRIVACY_CONTACT_PHONE}}Operator verification required: Public contact number
Email: {{CONTACT_EMAIL}}Operator verification required: A real monitored inbox

Email without signing in

An email channel is being prepared for access, correction, deletion, processing-restriction requests and production inquiries.

{{CONTACT_EMAIL}}Operator email required · sending is not available yet

Once a real address is provided, this opens your email app without sign-in. This page does not store or send inquiry text.

Effective date and changes

{{POLICY_EFFECTIVE_DATE}} · Operator verification required. This is a review draft; no effective date is backdated.

Change notice and previous versions: {{POLICY_CHANGE_NOTICE}}Operator verification required: Confirm notice method, timing and version-history link
Other applicable provisions: {{ADDITIONAL_PRIVACY_REQUIREMENTS}}Operator verification required: Review processing grounds, security measures, redress, automated decisions, sensitive data and pseudonymized processing

moa. · CoreInsight Pending operator verification

Legal business name: {{BUSINESS_NAME}}
Representative: {{OPERATOR_NAME}}
Business registration: {{BUSINESS_REGISTRATION_NUMBER}}
Commerce registration · review before payments: {{COMMERCE_REGISTRATION_NUMBER}}
Address: {{BUSINESS_ADDRESS}}
Email: {{CONTACT_EMAIL}}

Contact without sign-in