Privacy Policy

Essential authentication

Admins sign in with NextAuth. The admin area uses essential authentication cookies (e.g., session and CSRF protection). Regular visitors do not receive these cookies unless they access the admin login.

Site metrics without tracking

We increment counters for blog views (by slug) and resource downloads solely to understand content reach. No cookies or cross-site identifiers are used.

Security and abuse protection

We use hCaptcha on abuse-report uploads. hCaptcha may receive your IP/device information under its own privacy policy. We also store IP-based rate-limit entries for a short time to block spam and brute-force attempts.

Reports and evidence you submit

If you file a report, you may provide contact details, incident descriptions, locations, and optional evidence (images/links). Evidence images are stored in our file storage (Vercel Blob). Anyone with the direct file URL may be able to access it, so please avoid uploading unnecessary personal information. We use this information only to review and act on the report.

Petition signatures (on-site)

If we provide an on-site petition, signing may collect your name and email (and optional country/comment). We use this to record support, show signature counts, and prevent duplicates. Public display is opt-in: if you choose a “public signature”, your name/comment may be shown publicly; your email is not.

Emails and contact

If you email us, we keep the correspondence to respond and maintain records of issues reported.

External petitions and social links

Petition cards often link to external platforms that collect signatures directly. Social links (e.g., Instagram, X/Twitter, Facebook) open third-party sites that apply their own privacy practices.

Essential only

We do not set marketing cookies for visitors. The admin area uses essential authentication cookies (e.g., session and CSRF protection) to keep signed-in admins authenticated.

Third-party cookies

When hCaptcha is presented or when you follow external links, those services may set their own cookies under their policies.

Service providers

We host on Vercel (including Vercel Blob for file storage) and use a managed PostgreSQL database. We may also use Upstash (rate limiting) and hCaptcha (abuse prevention). These providers process data on our behalf to run the site securely.

Legal or safety reasons

If legally required or to protect people or animals from harm, we may share relevant report information with authorities or trusted partners.

Operational data

Report records and related evidence are kept only as long as needed to investigate and follow up. Petition signatures (where offered) are kept for as long as needed to operate the petition and maintain an accurate record. Rate-limit entries expire automatically after short windows.

Deleting data

You can ask us to delete or update your data by contacting us. We will remove what we can where no legal or safety obligations require retention.

Requests

You may request access, correction, or deletion of your personal data. We will respond as soon as possible.

How to reach us

Email: felineguardianswithoutbordersjapan@protonmail.com