Privacy

If you do not have an account

We collect nothing that identifies you. There are no analytics scripts, no advertising, and no third-party embeds; the content security policy blocks frames outright. No cookie is set, which is why there is no cookie banner to dismiss.

Reading this site requires no account, and everything on it is readable without one.

If you create an account

An account exists for one purpose: to remember which onsen, areas and journal entries you have saved. We store your name, your email address, a hashed password, the list of things you have saved, and — if you add a passkey — the public half of that credential. We never see the private half, and we never store your password itself.

Signing in sets a cookie so you stay signed in. It is strictly necessary for the account to function and is used for nothing else; there is no tracking cookie here to consent to. Sessions record the IP address and browser they were created from, so that you can tell your own sign-ins apart from somebody else's.

Your email address is used to send you a six-digit code when you sign up, and again if you need to recover access. It is never used for anything else — there is no newsletter, no announcement list, and nothing to unsubscribe from. Those codes are sent through Resend, who therefore process your address in order to deliver the message.

Nothing you save is public. There is no profile page, no follower list, and no page anywhere on this site that shows what another reader has saved.

Deleting your account

Email the address on the credits page and it will be deleted, along with everything saved under it. Nothing is retained afterwards, and there is no waiting period.

Location

The map's "near me" control asks your browser for your position. That happens entirely in your browser and the coordinates are used to move the map; they are not sent to us and not stored. If you decline, everything else on the map still works.

Photographs

Uploaded images have their metadata stripped before storage, including any GPS coordinates the camera recorded. Where a photo's location is shown, it is because an editor entered it deliberately — never because it was read out of a file someone did not know contained it.

Other people's servers

Map tiles are fetched from OpenFreeMap and the Geospatial Information Authority of Japan, so those services see the requests your browser makes for tiles. We have no access to their logs.