Privacy Policy
Draft v0.1 · last updated 2026-11-03 · controller: TODO(IMYin: legal name, country and contact)
This policy explains what OumuaTown ([domain to be decided]) collects and why. We try to collect as little as possible.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email address and profile picture from GitHub or Google | You sign in | To run your account and show your name next to comments |
| Comments, reports, "I used this" marks, stamps and your avatar parts | You use those features | To show them on the Site |
| Listing details, including a private author email | You apply for a shop | To review the listing and send review notices inside the Site |
| A daily, salted, one-way hash of IP address + browser + shop | You click a shop's outbound link | To count each visitor's click once per day. The plain IP address is not stored, and hashes are deleted after 2 days |
| Web server logs (IP address shortened to its network part, time, page, browser) | Every request | Security and debugging. Kept for 14 days |
If you do not sign in, your avatar and stamps stay in your browser's local storage and never reach our servers until you sign in and choose to merge them.
Cookies
We use only the cookies needed for sign-in sessions. There are no advertising or analytics trackers.
Who processes data for us
- Hosting: Amazon Web Services (Lightsail, Tokyo region).
- CDN and DNS: Cloudflare.
- Sign-in: GitHub and Google (only when you choose them).
- Listing review: an AI model provider (TODO(IMYin: provider name)) receives listing text and code excerpts. Comments may also be screened by it. We use paid API terms where submitted data is not used for training; we do not use free tiers that train on data.
- Code scanning: GitHub's API, to download public repositories at a fixed commit.
We do not sell personal data and do not share it for advertising.
How long we keep data
Account data is kept until you delete your account. Comments stay until removed by you or us. Review records of listings are kept for the life of the listing plus TODO(12) months for abuse prevention.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to some uses. Ask at TODO(contact). You can delete your account from the account page (P1 feature).
Children
The Site is not meant for children under 16.
International transfers
Data is stored in Japan and processed by the providers above, who may process it in other countries.
Changes
We will update the date at the top and show a notice for material changes.
Page view counting (draft addendum, METRICS v0.2 §2)
| Data | When | Why |
|---|---|---|
| A daily and a weekly salted, one-way hash of IP address + browser, and a daily hash of IP address + browser + shop | You open a page | Only to count visitors and shop views once per day or week. The plain IP address is not stored. Daily hashes are deleted after 2 days, weekly hashes about 14 days after the week starts |
| Counts per day, page type and event (for example "12 shop views from the street") | Always | To see how the Site is used. Counts contain no personal information |
We do not use cookies or third-party analytics for this. Browsers that send Do Not Track or Global Privacy Control are not counted.