Field Notes Japan — Privacy Policy
Last updated: 2026-08-04
What we collect
- At signup: your email address, your password (stored only as a hash — we never keep the original), your recovery code (also hashed), and whether you opted into updates
- As you use the service: saved spots, visit records, Day Plans, notes and folders
- If you join Field Pass: your Stripe customer ID and subscription status. Card numbers never touch our servers — Stripe handles them
- Technical: one session cookie to keep you signed in, and server access logs (including IP addresses, kept for abuse prevention and troubleshooting)
- When you use Ask Aoi: the question you type (used to generate the answer)
What we use it for
Running the service (saves, plans, billing), preventing abuse, fixing problems, and improving the service. Nothing else.
What we don't do
We do not sell your data or hand it to third parties for advertising. We won't contact you with promotions unless you opted in — and as of today, we don't send email to anyone at all.
Who processes data for us
We rely on these providers, which include servers outside Japan:
- Cloudflare (US): hosting, database, and cookieless analytics
- Stripe (US): payments
- Anthropic (US): generating Ask Aoi's AI answers (we send only your question, never your account details)
Cookies
One session cookie for login. No advertising or tracking cookies. Analytics are cookieless (Cloudflare Web Analytics).
Retention and deletion
We keep your data while your account exists. Delete your account from the account page and your data is erased immediately (full removal from backup rotation may take a few days). You can export everything as JSON at any time.
Security
Passwords are hashed with an industry-standard method (PBKDF2), and all traffic is encrypted (HTTPS).
Minors
Minors need a guardian's consent to use the service. Guardians may request deletion.
Changes
We will announce changes to this policy on the service.
Contact
Email: Coming soon — set before sales open.