Privacy Policy
What we collect
- Alert subscribers' email + consent records (kept until unsubscribe + 90 days)
- Anonymous API client IPs, SHA-256-hashed (deleted after 90 days)
- API-key holders' company / contact names (for the life of the contract)
- Admin action audit log
Purpose
Sending accommodation-tax change alerts, metering API usage and preventing abuse, and contract administration. The alert list is never reused for anything else without a separate recorded opt-in (個人情報保護法 / 特定電子メール法).
Cookies
We use Google Analytics 4 (which sets cookies) to measure site traffic, and the contact and alert-signup forms load Google reCAPTCHA (also cookies) when spam protection is enabled — both subject to Google's Privacy Policy and Terms. The /admin console uses a login-session cookie. Caddy access logs follow the VPS-wide rotation policy.