Privacy Policy
Effective date: September 23, 2026
1. Introduction
This Privacy Policy describes how Onsen Oni ("we", "us", "our") collects, uses, and handles your information when you use the Service.
2. Information We Collect
Account information. When you register, we collect information such as your email address, display name, and preferences (e.g. language, timezone). Your display name can be anything you choose; it does not need to be your real name.
Password, if you set one. A password is optional: you can always sign in with a code sent to your email. If you set one, it is securely hashed using industry-standard algorithms. We never store passwords in plain text.
Sign-in with Apple or Google. If you sign in with Apple or Google, they share your email address and name with us, and Google also shares your profile picture, which we copy once as your avatar if you don't have one. Apple may give us a private relay address instead of your own. We keep the tokens Apple issues only so that we can hand them back to Apple when you delete your account.
Usage data. We collect basic usage data to improve the Service.
Contributions. Content you submit to the Service (corrections, additions, photographs) is stored and associated with your account.
3. How We Use Your Information
We use your information to operate and improve the Service, including account authentication, email verification, contribution attribution, and any other purposes related to the Service.
4. Information Sharing
We may share your information when required by law, with service providers who assist in operating the Service, or as otherwise described in this policy.
5. Data Security
We protect your data using HTTPS encryption, password hashing, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We are not responsible for data breaches resulting from circumstances beyond our reasonable control.
6. Your Responsibilities
You are responsible for the information you provide to the Service. We recommend not using your real name as your display name if you wish to remain anonymous. You are responsible for maintaining the security of your account credentials. Do not share your password with others.
7. Data Retention and Deletion
You can delete your account yourself at any time, in Settings on the website or in the app. We send a code to your email to confirm it, and the deletion takes effect immediately. It cannot be undone. We erase your email address, your sign-in methods (password, passkeys, Apple and Google), your visits, saved places, drops, badges, Onsen Passport, profile and settings, and your Telegram link. Reviews, photos and other contributions stay on Onsen Oni, shown with the display name you used, because they are part of the shared catalog. Security and change records keep an internal account number. You can create a new account with the same email address afterwards. If you can't sign in, write to us at [email protected] and we will delete the account for you.
8. Cookies
We use cookies for authentication, session management, and to improve the Service. Third-party services integrated into the Service may also set cookies.
9. Children's Privacy
The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be indicated by an updated effective date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
11. Contact
If you have questions about this Privacy Policy, please contact us at [email protected].