Privacy
Privacy policy
Information we collect
We collect only the information necessary to process orders, ship products, reserve stock, connect with payment services, and provide customer support: name, shipping address, email address, phone number, order contents (items, quantities, amounts), and order history. All information is provided directly by you; we do not automatically harvest data.
How we use your data
Collected information is used exclusively for: (1) fulfilling orders and arranging delivery, (2) processing payments via Stripe, (3) sending order confirmations, shipping updates, and support replies, (4) inventory management and fulfillment efficiency, (5) retaining records as required by law. We never use your information for unsolicited marketing.
Points program
The points program uses the email address from your orders as your member ID and stores your points earn/redemption history. When you check your balance, we send a sign-in verification link to the email address you enter. Points records are retained for a period after program use ends, for fraud prevention and accounting purposes. See the points program terms for details.
Mail-in buyback (buying secondhand goods)
For mail-in buyback we collect, as the Secondhand Articles Dealer Act requires for identity checks and transaction records: your name and its katakana reading, address, occupation, date of birth and contact details, an image of your ID document, the bank account for payment and photos of the items; for sellers under 18 also the parent or guardian's name, relationship, contact details and an image of the consent form. We use them only to confirm your identity, record the purchase in our statutory ledger, pay you, and answer lawful police enquiries. ID images and the transaction record are kept for 3 years from the record date as the Act requires and then deleted; without a purchase they are deleted within 30 days. We never collect My Number (individual number). The data is stored over encrypted connections in Cloudflare's database (main server location: Singapore) and only the operator can access it.
Payment data
Payments are processed through Stripe Checkout. Card numbers, CVC codes, and all sensitive payment details are handled and stored by Stripe directly — they are never stored on our servers. See Stripe's privacy policy at https://stripe.com/privacy.
Third-party sharing
We do not share your information with third parties except: (1) providing shipping details to the delivery carrier (limited to what is needed for fulfillment; for overseas deliveries, Japan Post passes the address and contents details to the destination's postal operator and customs), (2) when disclosure is required by law, (3) with your explicit consent. We never sell or rent user data.
Cookies and measurement
This site uses Google Analytics and the OpenAI Ads Measurement Pixel to measure public storefront usage and conversions attributed to ads. You can allow or reject measurement through the consent banner shown on your first visit; your choice is stored in browser local storage. When you consent, OpenAI Ads may use first-party measurement cookies and receive page, product, cart, checkout, order, and inquiry events. Order events may include purchase amount, currency, a hashed email address, and opaque ad-attribution references. We do not send raw email addresses to the ad measurement service. Minimal functional cookies used for language preference remain active regardless of this choice.
Data retention
Order records are retained for the period required by Japanese tax law (7 years in principle). Google Analytics data follows the configured retention period, while OpenAI Ads measurement data is handled under OpenAI's privacy policy and the ad account settings. Information submitted through the contact form is deleted approximately one year after the inquiry is resolved.
Security
This site runs on Cloudflare Workers edge infrastructure with all connections encrypted via TLS 1.3. The admin panel is protected by authentication with monitoring for unauthorized access attempts. Stored personal information is accessible only to the site operator.
Your rights
You have the right to request access to, correction of, suspension of use of, or deletion of your personal data. Please contact us through the site's contact form. We will verify your identity and respond promptly in accordance with applicable law. Data required for order fulfillment or legal compliance may not be deletable.
Changes to this policy
This policy may be updated as needed. Material changes will be announced via a notice on the site. The revised policy takes effect upon publication.
Contact
For privacy questions or requests, please reach out via the contact form on this site. The operator will respond directly.