Privacy Policy

1. Overview

Urban Farm DB (“this site”) is a public database of citizen-driven urban farms worldwide. We collect and use personal data only to the extent necessary to provide our services, and handle it in accordance with the Act on the Protection of Personal Information of Japan and other applicable laws.

2. Data we collect

• Membership: your email address and authentication details. Authentication is provided by Supabase.
• Newsletter: your email address, registered via double opt-in confirmation.
• Paid plans: all payment details are processed by Stripe. Credit card numbers are never stored on our servers; we keep only the identifiers needed to manage your subscription (such as a Stripe customer ID).
• Analytics: we may use Google Analytics (GA4) to understand how the site is used. This data is aggregated and does not identify you personally.
• Server logs: IP addresses and similar logs may be recorded temporarily for abuse prevention and rate limiting.

3. How we use data

We use the data above only to: (1) provide member features and paid plans, (2) deliver the newsletter, (3) respond to inquiries, (4) analyse usage and improve the site, and (5) prevent abuse. Any other use requires your prior consent.

4. Third parties and processors

• We never sell personal data, and we do not share it with third parties without your consent except where required by law.
• We rely on the following processors to run the site: Supabase (authentication and database), Stripe (payments), Resend (email delivery), Vercel (hosting), Google Analytics (analytics) and Upstash (rate limiting). Please refer to each provider's own privacy policy for details.

5. Cookies

• We use essential cookies to keep you signed in, and analytics cookies to measure site usage.
• Visitors from the EU, EEA, UK or Switzerland are asked for consent before analytics cookies are set; declining does not affect your ability to browse. You can also disable cookies in your browser, though some features such as sign-in may stop working.

6. Retention

Personal data is kept only as long as needed for the purposes above. Account data is deleted within a reasonable period after account closure, and newsletter addresses after unsubscription, except where the law requires longer retention (e.g. transaction records).

7. Your rights

You may request access to, correction of, suspension of use of, or deletion of your personal data. Contact us using the details below; after verifying your identity we will respond without undue delay, as required by law.

8. Changes to this policy

We may update this policy to reflect legal or service changes. Material changes will be announced on this site.

9. Contact

For questions about how we handle personal data, please contact us at info@goodluck.or.jp.

For operator details, see the legal notice.