Privacy Policy

1. What we collect

Account data. Your email address and a password, handled by our authentication provider. We never see or store your password in readable form. You also choose a display name, which is shown publicly next to your check-ins.

Check-in data. For each check-in you publish: the photo of the stamp you took, the location you checked in at, the date, and your optional comment.

Language preference. Stored so the interface opens in the language you chose.

Local browser storage. The Service stores your last map view and language choice in your browser's local storage. These are not tracking cookies and are not sent to us or to any third party.

We do not run advertising, analytics, or third-party tracking.

2. Location

When you open the map, your browser may ask permission to share your location. It is used only in your browser, to centre the map on where you are. It is not transmitted to us, not stored, and not attached to your check-ins. Declining does not limit any other feature.

3. Photos

Photos are cropped and re-encoded on your device before upload. This removes embedded metadata, including any GPS coordinates your camera may have recorded.

Photos you publish are stored by our storage provider and are visible to anyone with their address, whether or not they are signed in.

4. What is public

Check-ins — their photos, comments, dates, and the display name of whoever published them — are public by design. Seeing who has visited a location is the purpose of the Service. You do not need an account to view them.

Your display name and the date your account was created are also public, even before you publish anything. Your email address is not: it is never shown to other users.

Please do not photograph other people without their consent, and do not include documents, addresses, licence plates, or anything else you would not want published.

5. Who else processes your data

The Service runs on third-party infrastructure. Each provider processes data only to operate the Service:

• Supabase — Database, authentication, photo storage. Data involved: Email, check-ins, photos.
• Vercel — Hosting and content delivery. Data involved: Technical request data, IP address.
• Mapbox — Map tiles and search. Data involved: IP address, map area you view.
• SendGrid — Authentication emails. Data involved: Email address.

Your account details, check-ins, and photos are held by Supabase on servers in Japan. Some data is still processed outside Japan: authentication emails are sent through SendGrid, and map tiles and search are provided by Mapbox, both operating from the United States. The Service is delivered through Vercel's global content delivery network, which may serve it from servers in any country.

We do not sell your data and do not share it with anyone beyond the providers above.

6. Retention and deletion

You can edit or delete any of your own check-ins at any time; deleting a check-in also deletes its photo.

Account deletion is not yet self-service. Email michinoeki.stamps@gmail.com from the address on the account, and we will delete the account and everything published under it within 14 days.

We keep account data until you ask us to delete it. We do not delete accounts automatically for inactivity.

7. Your rights

You may ask us to show you what data we hold about you, correct it, delete it, or stop using it. Write to michinoeki.stamps@gmail.com.

8. Children

The Service is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will remove it.

9. Changes

We may update this policy. Material changes will be announced in the Service before they take effect, and the date at the top will be updated.