Privacy

The short version

Nisatsu Journal has no reader accounts, newsletter form, payment flow, comments, saved progress, advertising, affiliate tracking, or sale or sharing of reader information for cross-context behavioral advertising.

There is no email capture or newsletter signup on public pages. There are no payments. The Journal does not track readers across sites or sell reader data.

Public pages do not set non-essential cookies. Optional presentation choices (reading mode and theme) may use local browser storage only; they do not identify readers across devices or feed analytics. There is no consent banner because nothing is sold, tracked across sites, or required to read.

Who operates the Journal

NISATSU LLC operates Nisatsu Journal and is the controller responsible for the Journal's handling of personal information.

Information handled when you visit

A web request necessarily reaches the hosting network. Vercel may process request metadata such as IP address, requested URL, timestamp, browser or user-agent information, approximate network location, response status, and security or diagnostic identifiers to deliver and protect the site. That infrastructure data is not used by the Journal to build reader profiles.

The Journal does not ask public readers for a name, email address, account identifier, payment detail, precise location, or demographic information. If you choose to email the contact address, your address and message are handled by the email service so the request can be answered. Email is separate from the Journal's public reading surface.

Geographic availability

The Journal is available on the open web but is not localized or marketed specifically to European Union or United Kingdom residents. The Journal does not currently run advertising campaigns. Any United States advertising for the separate Nisatsu app is outside this publication.

Cookies and browser storage

Anonymous reading does not require a Journal cookie or a tracking identifier. Optionally, the reading-mode control (furigana, romaji, or no readings) and the theme control may store those presentation choices in your browser's local storage only. They stay on your device, are not sent to Journal servers as analytics, and do not identify you across visits beyond that device.

Protected operator sign-in is separate from reading. It uses essential authentication and security cookies only on the login, authentication, and administrator flow. Those cookies are for the authorized operator, not public-reader measurement or advertising.

Analytics and error monitoring

No analytics are currently active, and no third-party application error monitoring service is used. Vercel's ordinary hosting and runtime logs still exist as part of delivering and securing web requests.

If these practices change, this notice will be updated before the change takes effect. Consent will be requested where required.

Service providers and subprocessors

Vercel

Hosts and delivers the site and processes infrastructure request and runtime metadata. See Vercel's privacy notice, data processing addendum, and current subprocessor list.

Neon

Hosts the Journal database containing lesson and operator workflow records, not reader accounts or reader profiles. See Neon's privacy policy and subprocessor list.

Upstash

Supports rate limits for protected administrator and machine-to-machine routes. Its analytics option is disabled, and ordinary lesson-page reading is not sent to that service. See Upstash's privacy policy and subprocessor list.

Google

Provides sign-in for the authorized operator. During sign-in, the Journal accesses the Google account's verified email address and compares it with the administrator allowlist. The application retains that email only in the encrypted Auth.js session, which expires after at most eight hours. It does not retain the Google access token, profile name, or picture. The email is not used for a reader account, advertising, or profiling, and is not shared for those purposes. Public readers are not asked to sign in with Google. See Google's privacy policy.

Fastmail

Hosts the contact@nisatsu.com mailbox and processes the sender address, message, attachments, and delivery metadata when someone contacts the Journal. See Fastmail's privacy policy and data processing agreement.

Infrastructure providers may engage their own subprocessors and process data in more than one country under their published terms. Current provider lists are linked above where available.

Retention and security

The Journal does not copy hosting request metadata into a reader database. Provider logs are retained under the active provider plan, settings, and legal obligations, which can change. Contact emails are kept only as long as reasonably needed to address the request and related records.

Access to editorial and administrator systems is restricted. No internet service can promise absolute security. Please use the security reporting process for a suspected vulnerability.

Your privacy rights

Because the Journal does not create reader accounts or profiles, it will usually have no reader record to access, correct, export, or delete. Where privacy law applies, you may still ask what personal information is held about you and request access, correction, deletion, restriction, portability, or objection as applicable.

California residents may also exercise applicable rights to know, correct, or delete personal information and to receive non-discriminatory treatment. The Journal does not sell personal information or share it for cross-context behavioral advertising. If another privacy law applies, requests and regulator-contact rights will be handled as that law requires.

Send a request to contact@nisatsu.com. Only information reasonably needed to understand and verify a request will be requested.

Children

The Journal is a general-audience educational publication and is not directed to children under 13. It does not knowingly collect personal information from children through accounts, forms, or tracking. A parent or guardian who believes a child sent personal information may contact us for review.

Contact

Questions, concerns, and privacy requests for NISATSU LLC may be sent to the monitored contact at contact@nisatsu.com.