A control room for your cravings — browse, add to cart, and "check out." No charge ever reaches your account.
EN / JA Log in Cart 0
Log in EN / JA
Legal

Privacy policy

Last updated: 19 September 2026

[運営者名(法人名または個人名) — configure.phpで設定] (“we,” “the Company”) handles personal information collected through Foozera, a shopping-simulation service, in accordance with Japan’s Act on the Protection of Personal Information (APPI) and related laws and guidelines. This policy explains what we collect, why, how long we keep it, and your rights. This English text is a courtesy translation; if it differs from the Japanese version, the Japanese version prevails.

1. The short version

Foozera is a simulation. We never collect payment details and never ship anything, but we do hold a small amount of personal information for accounts and enquiries.

  • We do not collect card numbers or bank details.
  • We do not use tracking tools for advertising or analytics.
  • We do not sell your personal information.
  • You can delete your account and data at any time from Account settings.

3. What we collect and how

(1) Information you provide

  • Registration: name, email address, password (stored only as a hash — we cannot read it), the date, time and version of your agreement to the Terms and this policy, and whether and when you agreed to update emails
  • Contact messages: name, email address, message and replies
  • Product suggestions: title, details, attached images (up to 4) and replies
  • Simulated-order form: name, address, postal code and phone number (all optional). Your name is used only to address the confirmation email; address, postal code and phone number are neither stored nor used

(2) Information from social sign-in: account identifier, name or nickname, and email address (where the provider supplies it)

(3) Information collected automatically

  • IP address, browser and device information, and access time (server logs)
  • IP address at registration and login attempts (to prevent abuse)
  • Usage history — products viewed, items added to cart, clicks on “Real product” links — which may be linked to your account
  • Simulated-order data (order number, items, quantities, total, delivery method and status)
  • Cookies (see section 12)

We do not intend to collect special-care personal information (such as medical history, creed or criminal record). Please do not include it in your messages.

4. Purposes of use

We use personal information only for the following purposes:

  • Providing and operating the service (registration, authentication, processing simulated orders, sending order and delivery emails)
  • Verifying identity and preventing fraudulent registration or use, and keeping the service secure
  • Responding to messages and product suggestions
  • Improving the service, considering new features and producing statistics — including analysing viewing, cart and link-click history, which may be tied to your account
  • Sending news about new items and features to members who opted in to update emails (possibly tailored to how they use the service; you can stop at any time)
  • Dealing with breaches of the Terms
  • Important notices such as changes to the Terms or this policy
  • Purposes incidental to the above

We will not use personal information beyond these purposes. If we change them, we will do so only within a scope reasonably related to the original purposes and will announce the change in the service.

5. Proper acquisition

We do not obtain personal information by deception or other improper means.

6. Provision to third parties

We do not provide personal data to third parties without your prior consent, except:

  • where required by law
  • where necessary to protect a person’s life, body or property and consent is difficult to obtain
  • where especially necessary for public health or the sound upbringing of children and consent is difficult to obtain
  • where cooperation with a government body or its contractor performing statutory duties is needed and consent would impede those duties

Entrusting handling to a processor (section 7) and transfer in connection with a business succession are not third-party provision. We currently do not share personal data jointly with anyone.

If we ever provide “personal-related information” such as cookie data to a party who is expected to obtain it as personal data, we will first obtain your consent as the law requires. We do not currently do so.

7. Outsourcing

To the extent needed for the purposes above we may entrust the following to outside businesses, under contracts consistent with the APPI and with appropriate supervision:

  • Website hosting (server operation)
  • Sending email (verification codes, order confirmations, update emails)

8. Handling abroad and transfers to third parties abroad

Countries or regions where we store and handle personal data: [個人データを保管・取り扱う国・地域 — configure.phpで設定]

We take security measures after understanding the personal-information protection regimes of those countries or regions.

If we entrust handling to a business abroad or provide personal data to a third party abroad, we will do so only with your prior consent or to a business that maintains a system meeting the standards the APPI requires. When we ask for consent, we will also tell you the country, its data-protection regime and the measures the recipient takes.

9. Social sign-in

When you use “Continue with Google” or another social sign-in, the provider authenticates you and we receive your account identifier, name or nickname, and email address (if provided). We do not give your personal information to the provider (beyond the technical exchange needed to sign you in). The provider’s own privacy policy governs its handling.

Providers currently available:

  • Google LLC (United States)
  • LY Corporation (Japan)

10. Security measures

To prevent leakage, loss or damage of personal data we:

  • store passwords only as one-way hashes
  • encrypt traffic (HTTPS/TLS)
  • require email-based two-step verification for admin sign-in
  • limit who handles personal data, manage access rights and log admin actions
  • understand the data-protection regimes of the countries where data is handled (section 8)

If a leak occurs that is likely to harm individuals’ rights and interests, we will report it to the Personal Information Protection Commission and notify you, as the law requires.

11. Retention and deletion

  • Account information: until you delete your account, then deleted without delay. Copies in backups are overwritten over time.
  • Contact and suggestion history: until you delete your account, and deleted with it.
  • Update-email history and consent records: until you delete your account, and deleted with it.
  • Simulated orders: deleted automatically about one month after delivery is completed; older orders beyond the per-member limit are also removed. If you delete your account, orders are unlinked from you.
  • View, cart and link-click history: kept linked to your account until you delete it; afterwards the link is removed and the data may remain only as anonymous statistics.
  • IP address at registration: kept with the account and deleted with it.
  • Short-lived anti-abuse records (login attempts, registration attempts, email-send counts): deleted automatically within days.
  • Verification and password-reset codes: deleted progressively once expired.
  • Server access logs: kept for a period set by our hosting provider, for troubleshooting and abuse prevention.

Where the law requires us to keep data, we keep it for that period.

15. Minors

Minors should use the service with the consent of a parent or other legal representative. If you are under 15, a parent or guardian should review the Terms and this policy before you register. A legal representative may make the requests in section 14 on behalf of the child.

16. Complaints and enquiries

Send complaints or questions about our handling of personal information to the contact in section 2; we will respond appropriately and promptly.

We are not a member of an accredited personal information protection organisation.

You can also consult public bodies:

  • Personal Information Protection Commission — APPI consultation line: +81 3-6457-9849 (weekdays 9:30–17:30 JST) / https://www.ppc.go.jp/

17. Changes to this policy

We may revise this policy to reflect changes in law or in the service. We will announce important changes in the service in advance. A revised policy applies from the time it is posted here.

The last-updated date is shown at the top of this page.