Your personal information

Privacy policy

Established: November 1, 2026

Last updated: November 1, 2026

This is a translation. The Japanese version is the authoritative one.

Optimized Roast ("we") follows Japan's Act on the Protection of Personal Information (APPI) and the related rules and guidelines, and handles your personal information as described below.

1. Who we are

Name: Optimized Roast (sole proprietorship)
Owner's (representative's) name and address: Provided without delay on request. Please ask through the contact in section 10.
Contact: optimizedroast@gmail.com

2. What we collect and how

The sign-up form

When you sign up, we record:

your email address
the language the page was in (Japanese or English)
where you signed up (this site, or the QR code on a bag)
the consent sentence shown when you signed up, its version, and the date and time
whether you are subscribed or unsubscribed, and when you unsubscribed
a random code for your unsubscribe link (it has nothing to do with your email address)
the history of your sign-ups and unsubscribes

Emails you send us

If you email us, we receive your email address, your name if you include it, and your message.

IP address (stopping floods of submissions)

When you sign up or unsubscribe, the server briefly uses your IP address, in memory, to stop large numbers of submissions in a short time. It is never saved, and it is cleared within 20 minutes.

Access records (our hosting provider)

Vercel, which serves this site, automatically records the IP address, browser type, page address and time of each visit as part of delivering the pages. We look at these only to fix problems and for security.

Orders (once the shop opens)

Once the shop opens, we will ask for your name, delivery address, phone number, email address and what you order. Card details go directly to Stripe, the payment service; we never receive or store them. We will update this page when the shop opens.

We collect no other personal information at present.

3. Why we use it

We use personal information only to:

email people who signed up about the shop opening and new products (including making sure unsubscribes take effect and keeping a record of consent)
reply to your questions
process orders and ship them, once the shop opens
protect the forms above from floods of submissions (the brief use of your IP address)

We use it for nothing else. If a purpose changes, we will announce it on this page, as the law requires.

4. Sharing with third parties

We do not give your personal information to anyone else without your consent, except where the law requires it. We never sell it or share it for advertising.

5. Service providers and where data is stored

We use the following services and entrust them with personal information to that extent. Each handles it under its own terms and data processing agreement.

Supabase
What they do for us
The database that stores sign-ups
Company (country)
Supabase Pte. Ltd. (Singapore); technical support by Supabase, Inc. (United States)
Where data is stored and processed
The database is in Tokyo, Japan. For support or to deal with incidents, it may be accessed from Singapore or the United States.
Vercel
What they do for us
Serving this website and running its server code (including the sign-up and unsubscribe forms)
Company (country)
Vercel Inc. (United States)
Where data is stored and processed
Server code runs in Tokyo, Japan. Access records and similar data may be processed in the United States and other countries.
Google (Gmail)
What they do for us
Receiving and keeping emails you send us
Company (country)
Google LLC (United States)
Where data is stored and processed
Google data centres in the United States and other countries
StripeFrom when the shop opens
What they do for us
Taking payments (card details never pass through us, and we never store them)
Company (country)
Stripe (the contracting company and its country will be listed here when we start using it)
Where data is stored and processed
To be listed here when we start using it.
Japan PostFrom when the shop opens
What they do for us
Delivering orders (your name, delivery address and so on)
Company (country)
Japan Post Co., Ltd. (Japan)
Where data is stored and processed
Japan

Providers in other countries

Supabase, Vercel and Google are companies in the United States or Singapore. We have looked into how personal information is protected in the United States and Singapore, and take the measures in section 6 with that in mind. Japan's Personal Information Protection Commission publishes information on each country's system (in Japanese):

6. How we keep it safe

Only the owner handles personal information. Nobody else has access.
The database uses row-level security, so the public key can neither read nor write it. The site's server is allowed to do only what signing up and unsubscribing need.
All traffic, between your browser and this site and between our server and the database, is encrypted (HTTPS/TLS).
Our admin accounts use two-factor authentication.
Unsubscribe links use a random code that cannot be guessed, and opening a link does not unsubscribe you by itself: it happens only when you press the button on the page.
Other countries: we have looked into the personal information rules of the United States and Singapore and take these measures with them in mind (see section 5).

7. How long we keep it

After you unsubscribe, we keep your sign-up so that we never email you again by mistake, and as a record of your consent and unsubscribe. If you would like it deleted, tell us and we will delete it.
We keep emails you send us for as long as we need them to deal with your question.

8. Unsubscribing, and seeing or correcting your information

You can unsubscribe at any time with the link at the end of every email we send, or by emailing us at the address below.

You can ask us to tell you why we use your personal information, to show it to you (including any record of sharing it), to correct, add to or delete it, to stop using or erase it, or to stop sharing it. Email us at the address below.

To check it's you, we may ask you to write from the email address you signed up with. Once we have checked, we act without delay and reply by email. There is no charge.

9. Cookies and browser storage

This site uses no analytics, advertising or social media embeds. Videos and fonts are served from this site too, so nothing about your visit is sent to outside services. The only things stored in your browser are:

or-locale (Cookie): Your choice of Japanese or English, for a year, if you use the language switch. Nothing is stored if you don't.
or-cart-v1 (Local storage): What's in your cart and how many. It stays in this browser and is never sent to us.
or-signup-source (Session storage): That you arrived from the QR code on a bag. It disappears when you close the tab, and is used only as "where you signed up".

You can delete these at any time in your browser's settings.

10. Contact

For questions, requests or complaints about your personal information, email:

Optimized Roast — optimizedroast@gmail.com

11. Changes to this policy

We may change this policy when the law changes or our service does (for example, when the shop opens). If we do, we will say so on this page with the date of the change.