Privacy Policy
Privacy Policy
Effective September 25, 2026. The Japanese version is the official text; this translation is provided for convenience.
1. Operator
ralleru (the "Service") is operated by Tanaka Daisuke Inc. (the "Operator"). This policy explains what information the Service collects and how it is used.
2. Information we collect
- Account: nickname, email address, and a hashed password (we never store the password itself).
- Settings: the allergens you avoid, your language and view preferences, and your favorites.
- Posts: foods you register, edits, "checked in store" records, reviews, store records and photos. Location data (EXIF) is removed from photos when uploaded.
- Access logs: IP address, browser type, requested pages and time, kept by the web server for security.
- Login attempts: IP address and email of failed logins, kept for 15 minutes to block brute-force attacks.
The Service does not use third-party analytics or advertising scripts. Affiliate links lead to external sites (Amazon, Rakuten, Yahoo! Shopping, au PAY Market), which have their own privacy policies.
3. Cookies
| Name | Purpose | Lifetime |
|---|---|---|
| ralleru | Login session and form protection | 60 days |
| avoid | Allergens you avoid (when not logged in) | 1 year |
| lang | Language (Japanese / English) | 1 year |
| view | List or grid view | 1 year |
No third-party cookies are set by the Service itself.
4. How we use information
- To run the Service: showing whether foods are safe for the allergens you avoid, saving your posts and favorites.
- To keep the Service trustworthy: recording who changed what, and reviewing reports.
- To keep the Service secure and to respond to inquiries.
5. What is public
Your nickname is shown with your posts, edits, checks, reviews and store records, and in the edit history of each food. Your email address is never shown publicly.
6. Sharing with third parties
We do not sell or share personal information with third parties, except when required by law or to protect someone's life or safety.
7. Retention and security
- Account information is kept until you delete your account. Access logs are kept for about 14 days; failed login records for 15 minutes.
- All traffic is encrypted (HTTPS). Passwords are hashed. Data is stored on a server in Japan and backed up daily.
8. Deleting your account
You can delete your account from "My page". Your nickname and email address are anonymized and your favorites are deleted. Posts remain, attributed to an anonymous user, because they are shared knowledge for other families. To request removal of a specific post or of other personal information, contact us.
9. Children
Children may use the Service with a parent or guardian's consent. Do not post children's names, faces or other identifying information.
10. Contact and changes
Tanaka Daisuke Inc. — contact form. This policy may be revised; changes take effect when posted on this page.