Privacy Policy

Last updated: February 23, 2026

Nomad Japan ("we," "us," or "our") operates the website workfromjapan.jp (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Data Controller

The data controller responsible for your information is Nomad Japan. For inquiries, please contact us at info@workfromjapan.jp.

2. Information We Collect

We are committed to collecting only the minimum data necessary to provide and improve our Service. We do not require user account registration, and we do not collect personal information such as names, email addresses, or phone numbers through normal use of the Service.

2.1 Information Stored Locally on Your Device

The following data is stored exclusively in your browser's localStorage or sessionStorage and is never transmitted to our servers:

• Preferences: theme (light/dark), language (English/Japanese), font size, high-contrast mode, and view mode (list/map).
• Bookmarks & visited spots: workspot IDs, names, and timestamps you choose to save.
• Search history: up to 5 recent search queries and saved search filters.
• Recently viewed spots: up to 5 recently visited workspot pages.
• Helpful votes & tips: feedback you leave on workspot pages.
• UI state: welcome-tour completion, PWA install banner dismissal, scroll position.

You can clear this data at any time by clearing your browser's local storage or using your browser's "Clear site data" function.

2.2 Location Data

When you use the "Nearby" feature, we request access to your device's geolocation through your browser's standard permission dialog. This is entirely optional and only activated when you explicitly click the Nearby button. Location coordinates are:

• Used solely to find workspots near your current position.
• Cached in sessionStorage (cleared when you close the browser tab).
• Not stored on our servers or shared with third parties.

2.3 User-Submitted Reports

If you voluntarily submit a report about a workspot (e.g., incorrect information or closure), we collect the report category and your description text. This data is stored in our database (Supabase) to improve information accuracy. Reports are anonymous — we do not associate them with any personal identifier.

2.4 Server Logs & Analytics

Our hosting provider (Vercel) automatically collects standard server log data, which may include your IP address, browser type, referring page, pages visited, and access timestamps. This data is processed by Vercel under their Privacy Policy.

We use Google Analytics 4 (GA4) to understand how visitors interact with our Service. GA4 collects anonymised usage data such as pages viewed, session duration, and approximate geographic region. IP addresses are anonymised by Google before storage. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

3. How We Use Information

We use the limited information we collect for the following purposes:

• Providing the Service: displaying workspot information, search results, and recommendations.
• Personalization: remembering your display preferences and language setting (via local storage).
• Service improvement: processing user reports to keep workspot information accurate.
• Infrastructure: server logs for security monitoring and troubleshooting.

4. Legal Basis for Processing

Under applicable data protection laws (including Japan's APPI and the EU GDPR), we process data on the following bases:

• Consent: geolocation access (explicit browser permission) and voluntary report submissions.
• Legitimate interest: server logs for security and operational stability; analytics (Google Analytics 4) for understanding usage patterns and improving the Service.

5. Cookies & Local Storage

We use browser localStorage and sessionStorage (not traditional HTTP cookies) to store your preferences and interaction history. These are:

• Strictly necessary: theme, language, font size, and accessibility settings required for the site to function as you configured it.
• Functional: bookmarks, search history, recently viewed items, and other feature-related data that enhance your experience.

Google Analytics 4 sets first-party cookies (e.g., _ga, _ga_*) to distinguish unique visitors and sessions. These cookies expire after 14 months at most. No advertising cookies, tracking pixels, or fingerprinting techniques are used.

6. Third-Party Services

We use the following third-party services that may process limited data:

We do not sell, rent, or share personal data with third parties for advertising or marketing purposes.

7. Data Retention

• Local storage data: retained until you clear your browser data or uninstall the PWA.
• Session storage data: automatically cleared when you close the browser tab.
• User reports: retained as long as necessary to verify and update workspot information.
• Server logs: retained per Vercel's standard retention policy (typically up to 30 days).

8. Data Security

We implement appropriate technical measures to protect data, including HTTPS encryption for all communications, security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy), and role-based access controls on our database. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Our Service is hosted on Vercel's global CDN and our database is hosted by Supabase. Data may be processed in countries outside your country of residence, including the United States. Where applicable, these transfers are protected by the service providers' standard contractual clauses and data protection measures.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access & portability: most of your data is already stored locally in your browser and accessible to you.
• Deletion: clear your browser's local storage to remove all locally stored data. For server-side data (user reports), contact us to request deletion.
• Withdrawal of consent: revoke geolocation permission through your browser settings at any time.
• Complaint: you have the right to lodge a complaint with a data protection authority in your jurisdiction.

Under Japan's Act on the Protection of Personal Information (APPI), you may request disclosure, correction, or deletion of retained personal data by contacting us.

11. Children's Privacy

Our Service is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy. For material changes, we will provide a prominent notice on the Service.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

• Email: info@workfromjapan.jp
• Website: workfromjapan.jp