Privacy Policy
Last updated: 11 August 2026
Document version: 2026-08-11.3
Asodoco is operated in Japan by the individual publisher trading as the Asodoco editorial team (the “Controller”, “we”, or “us”). We minimise the personal data we use and provide the choices described below. Contact: contact@asodoco.com.
1. Data, purposes and legal bases
| Hosting and security logs | Vercel necessarily processes request data such as IP address, request time, requested URL, browser/network information and security signals to deliver and protect the site. Legal basis: our legitimate interests in providing a secure, reliable service. |
|---|---|
| Account email and authentication data | Collected only when you create or use an account. Used for authentication, confirmation and password-reset messages. Legal basis: steps requested by you and performance of the account service. |
| Favourites, visited and hidden places | Spot IDs are linked to your account so your My list works across devices. Recommendations are calculated in your browser. Legal basis: performance of the account service you request. |
| Location | Your browser asks for permission when you use a nearby or distance feature. Coordinates are used in your browser and are not sent to or stored by Asodoco. You can refuse permission and continue using other search features. |
| Optional analytics | Only after you select “Allow analytics”, Vercel Web Analytics receives page, referrer, country/region and device/browser information, and Asodoco may count opened spots on your device or, while signed in, prevent duplicate daily counts using your user ID, spot ID and date. Legal basis: your consent. No Google Analytics is used. |
| Listing submissions | A representative’s name, email address and submitted listing details are used to review and answer a submission. Legal basis: steps requested by the submitter and our legitimate interests in maintaining accurate listings. |
| Legal-consent record | User ID, time and the accepted policy versions are retained to demonstrate account terms. Legal basis: our legitimate interests and compliance with legal obligations. |
2. Storage and privacy choices
Essential browser storage is used to maintain a sign-in session and remember your privacy choice. Optional analytics and on-device view counting are off until you choose “Allow analytics”. Selecting “Essential only” keeps them off. You can change or withdraw that choice at any time with the control in the footer; withdrawal does not affect earlier lawful processing.
Asodoco does not use advertising cookies, cross-site behavioural tracking or Google Analytics. Browser and hosting technologies that are strictly necessary to transmit, secure or provide a feature you explicitly request may still operate.
3. Recipients, processors and international transfers
We do not sell personal data. We use Vercel for hosting, delivery, security logs and consented analytics; Supabase for authentication, account data and listing submissions; and Japan’s Geospatial Information Authority for map tiles. Your device contacts these providers when the relevant resource or feature is used.
The Controller is in Japan and service providers may process data in Japan, the United States or other countries outside the EEA/UK. Where transfer rules apply, we rely on the provider’s applicable data-processing terms and recognised safeguards, such as adequacy decisions or standard contractual clauses, as available. Contact us for information relevant to your transfer.
4. Retention
- Account email, saved places and consent records: while the account exists, then deleted after a valid deletion request, subject to a limited legal hold where required.
- Signed-in duplicate-view records: normally deleted after 90 days. Aggregate spot totals may be retained where they no longer identify an individual.
- Listing submissions: normally 180 days after a final response, or 365 days after receipt if still unresolved, unless a contract, legal duty or active dispute requires longer retention.
- Hosting/security and analytics data: retained according to the configured service plan and provider terms, only as long as needed for the stated purpose.
5. Your data-protection rights
Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time. Email contact@asodoco.com from your registered address where possible. We may request proportionate proof of identity and will respond without undue delay; GDPR requests are normally answered within one month. There is no fee unless a request is manifestly unfounded or excessive.
You may also lodge a complaint with the data-protection authority where you live or work, or where you believe an infringement occurred. A directory is available from the European Data Protection Board.
6. Rights in specific jurisdictions
For ordinary use in Japan to find places and events in Japan, Asodoco handles information primarily under Japanese law, including Japan's Act on the Protection of Personal Information. Mere accessibility from another country, or the availability of an English page, does not by itself make every foreign privacy law apply. Under the service's current scope, an EEA or UK representative and foreign-law procedures are not treated as prerequisites for ordinary use in Japan.
If Asodoco later specifically offers a service to people in another jurisdiction, or processes behaviour there in a way that constitutes monitoring under its law, we will reassess territorial scope and add any required notice, representative or procedure before that processing starts. Where a foreign law does apply, we respect rights that cannot lawfully be waived. Applicability depends on actual targeting, activities, processing and the law's other requirements, not location alone.
EEA and United Kingdom
If the EU GDPR, UK GDPR, UK Data Protection Act 2018 or rules concerning electronic communications and storage on a device apply, you may have rights to information, access, rectification, erasure, restriction, portability, objection, withdrawal of consent and not to be subject to a solely automated decision producing legal or similarly significant effects. Asodoco does not make such decisions. We normally respond to an applicable request within one month. You may complain to the supervisory authority where you live or work, or where you believe an infringement occurred. See the EEA authority directory or the UK ICO.
Optional analytics and on-device view counting are treated as non-essential storage/access technologies and remain off until you take a clear affirmative action. You can refuse or withdraw with Privacy choices. The Controller is in Japan and has no establishment or designated representative in the EEA or UK. Asodoco is an information service for finding places and events in Japan, does not specifically target people based on EEA or UK residence, and does not use cross-site tracking or behavioural advertising. On this current scope, representative appointment is not treated as a prerequisite for ordinary operation. If actual activities change so that appointment becomes legally required, representative details will be posted here before the relevant processing starts.
California and similar US state laws
If the California Consumer Privacy Act, as amended by the CPRA, or a similar state law applies, you may have rights to know, access, delete, correct, limit certain uses, receive portable data, opt out of sale, sharing or targeted advertising, and receive equal service without discrimination for exercising a right. Asodoco does not sell personal information, share it for cross-context behavioural advertising or use targeted advertising. A detected Global Privacy Control signal keeps optional analytics off regardless of an earlier site choice. See the California Attorney General's CCPA information.
Categories handled in the preceding 12 months may include identifiers (email, user ID and listing-submitter contact details); internet or electronic activity (delivery/security logs and consented analytics/view records); approximate location (country/region in consented analytics); and professional information supplied in a listing submission. Sources are you, your browser/device and service providers. Purposes and recipients are described in sections 1–4, including disclosure to processors such as Vercel and Supabase as needed to provide the service. Precise browser geolocation is not sent to or stored by Asodoco, and sensitive personal information is not used to infer characteristics or for an additional purpose.
Other countries and regions
If Brazil's LGPD, Canadian law or another comprehensive privacy law gives you comparable rights to access, correct, delete, object, withdraw consent, obtain portable data or complain to a regulator, contact us and we will respond as required by the applicable law. We request only proportionate identity evidence and explain any lawful exception.
7. Automated decisions and children
We do not make solely automated decisions that produce legal or similarly significant effects. On-device recommendations only reorder public listings. The account service is not directed at children; a minor should use it only with permission from a parent or guardian as required by local law.
8. Security, changes and language
We use encrypted transport, row-level database access controls, separation of public and account data, restricted administration and data minimisation. No online service can guarantee absolute security. If a personal-data breach legally requires notice to an authority or affected people, we will provide it within the applicable period. We will update this notice when processing materially changes and will show the new date here.
The Japanese and English versions are intended to describe materially the same processing. Any difference in expression does not limit mandatory rights under the law that applies where you live.
9. Controller contact
Controller: the individual operator publishing under the Asodoco editorial team name, Japan
Privacy contact: contact@asodoco.com
Further identifying and postal details will be provided without undue delay where legally required for a verified request.