Privacy Policy

1. Who we are

the operator of BunCho (bun-cho.work) is the controller of the personal data described here. Contact: support@bun-cho.work.

2. What we collect

Account: the user ID and display name passed from your BunCho login (LINE or Google sign-in happens on BunCho, not on this site).

Reading: likes, bookmarks, reading progress, ratings, comments, reviews, reports and translation-issue reports you submit.

Device: a random anonymous ID cookie, your display settings (stored on your device), and a daily-salted hash of your IP address used only for rate limiting. Reader-insert names never leave your device.

Payments: Stripe processes your payment details; we receive only a customer ID, what you bought, the amount and the status. We never see your full card number.

Approximate country (from our hosting provider's request headers) to pick a default currency.

3. Why we use it (legal bases)

To provide the service and process payments (contract); to keep the site safe, prevent abuse and improve recommendations (legitimate interests); to send optional notifications (consent, which you can withdraw at any time); and to meet legal and tax obligations (legal obligation).

4. Who we share it with

Service providers acting on our instructions: Stripe (payments), Vercel (hosting), Neon (database), and the BunCho main service (login). We don't sell personal data. Reading statistics shown to authors are aggregated and don't identify readers.

5. International transfers

Data is processed in Japan and the United States. Japan has an EU adequacy decision; for other transfers we rely on the providers' standard contractual clauses.

6. How long we keep it

Account and reading data: while your account is active and up to one year after. Payment records: as long as Japanese tax law requires (generally 7 years). Rate-limit hashes: a few days.

7. Your rights

Depending on where you live (including under the GDPR and UK GDPR), you can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interests. You can withdraw consent at any time. Email us; we answer within one month. You can also complain to your local data protection authority.

8. Children

The service is not intended for children under 13 and we do not knowingly collect their data. In the EEA, users under 16 need a parent's consent where the law requires it. If you believe a child under 13 has an account, contact us and we will delete it.

9. Cookies

We use only cookies needed to run the site: login session, anonymous reader ID, age confirmation for 18+ works, display settings, and a cookie that remembers if you dismissed the language suggestion. We do not use advertising cookies at this time.

10. EU DSA contact

Single point of contact for the Digital Services Act: support@bun-cho.work.