The short version
Sumikoto is operated by Sumikoto LLC, a Colorado limited liability company, which is the controller of the data described here.
- You can search every listing without an account, and we collect only ordinary server logs when you do.
- An account is an email address. Sign-in is by one-time link or Google; there is no password to store.
- We keep what you save — searches, alert settings — so we can act on it for you.
- Payments go through Stripe. We never see your card number.
- We do not sell, rent, or share your data for advertising, and there are no third-party ad or tracking scripts on the site.
- You can delete what you have saved from your account page, and your whole account by emailing us.
What we collect
Without an account
Standard server logs: IP address, browser and device type, the pages and API endpoints requested, referrer, and timestamps. These are used for security and to keep the service running, and are kept for 30 days. Your theme preference (light or dark) is stored in your own browser and never sent to us.
With an account
- Email address, and if you sign in with Google, the name and profile picture Google provides.
- What you save: saved searches and their filters, whether alerts are on, and the listings on your watchlist with any note you attach.
- Alert history: which listings we have emailed you about, so we do not send them twice.
- Subscription status: plan, whether it is active, and the Stripe customer and subscription identifiers. Not your card.
- Promo redemptions: which code you used and when, including which partner it came from.
- API usage: request counts and timestamps per key, to apply the plan limits.
We do not ask for, and would prefer you did not send us, anything beyond that.
What we use it for
- To provide the service: sign you in, remember your searches, send the alerts you asked for, generate exports, answer API calls.
- To bill you, if you subscribe, and to work out a partner’s share of revenue where a partner code was used.
- To keep the service safe: rate limiting, abuse detection, and debugging when something breaks.
- To talk to you about your account: receipts, a failed payment, a change to these terms. We do not send marketing email, and if that ever changes it will be opt-in.
Where the law asks us to name a legal basis: providing the service and billing are performance of our contract with you; security and debugging are our legitimate interest in running a working service; alert emails are sent because you asked for them and stop when you say so.
Cookies and local storage
We set two cookies. The session cookie keeps you signed in; it is HttpOnly, Secure, and SameSite, and it expires after 30 days of inactivity. The currency cookie (sumikoto_currency) records whether you asked to see prices in yen, US dollars or Australian dollars, so a page can be drawn in that currency before it reaches your browser. It holds nothing but a three-letter code. There are no analytics cookies, no advertising cookies, and no cross-site trackers, which is why there is no cookie banner.
Your browser’s local storage holds your theme choice. It never leaves your device.
Who else touches your data
We use a small number of service providers, each for one job. They process data on our instructions and under their own contractual and legal obligations.
| Provider | Job | What they see |
|---|---|---|
| Stripe | Payments | Card details, billing address, subscription status. We never see your card number. |
| Resend | Email delivery | Your address and the content of sign-in links and alert emails. |
| Sign-in, if you choose it | Your Google account email and name, sent to us by Google after you consent. | |
| Frankfurter (ECB reference rates) | Currency conversion | Nothing about you: our server fetches the day’s rates a few times a day; your browser never contacts it. |
| CARTO / OpenStreetMap | Map tiles | Your IP address and the map area you are viewing, as with any web map. |
| YouTube | Embedded video on the About page | Loads only after you press play, from youtube-nocookie.com. |
| Sentry | Error reporting | A stack trace and request context when something breaks. Cookies and credentials are stripped before it is sent. |
| LaunchDarkly | Feature flags | An anonymous or account identifier used to decide which features you see. |
| DigitalOcean | Hosting | Everything above lives on servers we rent from them. |
Some of these providers are in the United States. Where data moves out of the region you live in, it does so under the provider’s standard contractual protections. We do not share your data with partners such as KickAssets; a partner learns how many people used their code and the revenue share that results, never who.
We disclose personal data outside this list only if the law requires it, or to protect someone from imminent harm, and we will tell you when we are allowed to.
Listing data about other people
Listings sometimes contain personal data about people who are not our users — an owner’s name, a contact number, a photograph of a house someone lives in. We index only what a publisher has already made public, we reproduce it so that it can be found, and we link back to the source rather than replacing it. If you are the subject of information in a listing and want it removed from Sumikoto, write to us and we will remove it; you may also want to contact the original publisher, since it will remain there.
How long we keep things
- Server logs: 30 days.
- Account data: for as long as the account exists. Delete the account and it goes within 30 days, except as below.
- Billing records: for as long as tax and accounting law requires, typically seven years, held by Stripe and in our records of what was charged.
- Error reports: 90 days.
- Backups: rotate out within 35 days.
Your rights
Wherever you live, you can ask us what we hold about you, get a copy of it, correct it, or have it deleted, and you can object to or restrict how we use it. Saved searches and alerts you can remove yourself from your account page; for the rest, including deleting the account, email support@sumikoto.com from the address on the account and we will respond within 30 days. If you live somewhere with a data protection authority, you also have the right to complain to it — though we would rather you gave us the chance to fix things first.
Security
Traffic is encrypted in transit. Data is stored in an access-controlled database with encrypted backups. There are no passwords to leak because there are no passwords; sign-in links work once and expire in 15 minutes. Administrative access is limited to the people who run the service. If we ever suffer a breach that affects you, we will tell you promptly and say what happened.
Children
Sumikoto is for adults looking at property. We do not knowingly collect data from anyone under 18; if you believe a child has created an account, tell us and we will remove it.
Changes
If we change what we collect or who processes it, we will update this page, change the effective date at the top, and — if the change is material — email account holders before it takes effect.
Contact
support@sumikoto.com. A person reads it.