Privacy
Privacy
We state clearly what Sumilca stores and the scope of information obtained through Google login.
What data we store
| Data item | Purpose | Retention period | Deletion method |
|---|---|---|---|
| Search conditions (commute destination address, commute/school conditions, priorities) | Computing property comparison scores and reproducing the search experience | While the account is active. Erased on deletion request | Deletion request link in My Page or a deletion request email |
| Summary of evaluation results (comparison scores, memos, display order) | Re-displaying saved comparison results | While the account is active. Erased on deletion request | Deletion request link in My Page or a deletion request email |
| Favorite property identifiers | Showing the favorites list and streamlining comparison | While the account is active. Erased on deletion request | Deletion request link in My Page or a deletion request email |
| Session information (cookie for keeping you logged in) | Maintaining login state and deterring unauthorized access | Up to 30 days (auto-expires when inactive) | Logging out, deleting the cookie in your browser, or expiry |
Inputs such as addresses are used only for comparison, and for free features we do not collect personal information such as your name, phone number, or workplace. However, if you use paid features, we handle information such as your name, email address, and payment details through our payment processor Stripe in order to process billing (see “Use of external services (third parties)”).
How we handle transmission and storage
- Communications are encrypted with TLS to prevent eavesdropping or tampering by third parties.
- Stored data is limited to the minimum needed for comparison and display, and is not used for any other purpose.
- Analytics and quality improvement are based on statistical aggregation; we do not handle personally identifiable information.
Use of external services (third parties)
- We use Google (Google OAuth) for login authentication. The information obtained is limited to the scope described in “Information obtained via Google login” on this page.
- Inquiry form submissions are relayed via the external service Web3Forms for email notification. The details you enter (email address, message body, etc.) pass through that service.
- If you use paid features, we use Stripe (Stripe Payments Japan G.K. and Stripe, Inc. in the United States) to process payments. The information required for payment (name, email address, payment details, etc.) is processed through Stripe, and your card number is never stored on our servers.
- We may use Google Analytics (GA4) to analyze site usage. Information collected via cookies and similar technologies is handled under Google's privacy policy, and is not sold to third parties for advertising purposes.
- To operate the service, we may use providers such as hosting. In every case, data is handled only within the scope of the intended purpose.
We do not provide data to third parties for advertising purposes, nor sell data without your consent.
Provision to third parties overseas (cross-border transfer)
To process payments for paid features, personal data such as your name, email address, and payment details may be handled outside Japan (primarily in the United States, where Stripe, Inc. is located) through Stripe above. This may constitute a “provision to a third party in a foreign country” under Japan's Act on the Protection of Personal Information. For the categories of information transferred, the purpose of use, and details of how Stripe handles it, please see Stripe's privacy policy. Stripe Privacy Policy
Information obtained via Google login
The Google OAuth scope is limited to the following.
- User ID (the identifier issued by Google)
- Name (the display name registered in your profile)
- Email address
- Profile image URL
The information obtained is used only for identity verification and login display. It is not used for advertising or provided to third parties.
Data retention and deletion
To delete your account, you can launch a preset deletion request email from the in-app settings page (deletion request).
If you request by email, please use the deletion request template and contact our inquiry desk. We will delete your saved search conditions and favorites.
- Sessions/cookies are retained for up to 30 days and automatically expire when inactive.
- We aim to handle deletion requests within 7 business days of receipt.
Where there is an exceptional legal obligation to retain data, the retention period is extended only to that extent.
Last revised date, operator information, and inquiry desk
- Last revised
- July 14, 2026
- Operator
- Hoshimono Design
- Address
- Where required by law, we will disclose it without delay upon request.
- Business information
- Act on Specified Commercial Transactions (Legal notice) and business information
- Contact
- Inquiry page
Revision history (summary of changes) and past version archive
We record important revisions together with a summary of what changed. Past versions can be checked from the archive below.
| Revision date | Summary of changes | Past version archive |
|---|---|---|
| July 14, 2026 | Changed the payment processor to Stripe and documented Stripe's third-party handling and the cross-border transfer of data associated with paid-feature payments. Also documented the use of Google Analytics (GA4) for site usage analysis, and reconciled the statement that free features collect no personal information with how data is handled when paid features are used. | — |
| June 2, 2026 | Unified operator information to Hoshimono Design and stated the use of external services (Google login and the Web3Forms relay for the inquiry form). Added a link to the Act on Specified Commercial Transactions notice (/legal). | — |
| February 14, 2026 | Added a summary of changes and links to the past version archive, strengthening transparency as a legal page. | March 8, 2025 version (previous version) |
| March 8, 2025 | Documented the scope of stored data, information obtained via Google login, and the data retention/deletion flow. | January 15, 2025 version |
| January 15, 2025 | Initial release (basic policy, inquiry desk, revision date stated). | — |