Privacy policy

This is the privacy policy of Cityglot (cityglot.com), the site that collects notices from the official websites of Tokyo wards and summarizes them in your language. It says what we store about you, for how long, and who else handles it. It is a plain-language description of how the site works, not legal advice.

Who runs the site

Cityglot is an independent website. You can write to [email protected].

If you only read the site

You do not need an account. We do not ask for your name or email to read pages. The web server logs each request (address of the page, time, status) to keep the site running; these logs are not used to follow you from page to page. Pages load fonts from Google Fonts and, on item pages that show a map, the map from Google Maps, so Google receives your IP address when they load. Pages are served through Cloudflare, which sees your IP address too.

The wards you pick are kept in a cookie on your device (see Cookies below). They are not tied to you.

If you have an account

You can sign in with Google or with a link sent to your email. We then store:

• your email address, your language, and the settings you choose: how often to get the digest (daily, weekly or off), whether to get disaster emails, and your preferred calendar;
• your favorites (items and series, with whether reminders are on) and the wards you follow, with their categories and whether you want instant or digest emails;
• your sign-ins: a random token (only its hash is stored), when it was created and last used, and when it expires. A sign-in lasts 30 days after you last used it, and expired ones are deleted every day;
• a send log of the emails we sent you: the kind (daily, disaster), the item, the status and the times. It does not contain the text of the emails, and rows older than 90 days are deleted every day.

We use this only to run the account: to sign you in, to send the emails you asked for, and to show your favorites. We do not sell it and we do not use it for advertising.

Deleting your account

Choose Delete account on your account page and type your email to confirm. This deletes your account, favorites, follows, sign-ins and send-log rows from our database at once. Two things can remain: our sign-in provider keeps its own record of the email address it verified (to have it removed, write to the contact above), and backups of the database, kept for up to 8 weeks, still hold the deleted data until they are rotated out.

Reports

When you use Report a problem on an item, we store the item, the type of problem, your note (up to 1,000 characters), the page language, and a reporter key. The key is your account id when you are signed in, and otherwise a keyed hash of your IP address (for IPv6, of its network part); we never store the IP address itself. The key limits how many reports one person can send and counts how often a person's reports were right. These counts have no fixed end date. If you delete your account, your key remains but points to nobody. A key whose reports are found abusive is flagged, and its further reports are dropped; the flag and the number of dropped reports are kept with the key.

The text of your note is sent to an AI service that checks the report against the official page, one of the providers named below. Please do not put personal data in the note. The note of a closed report is erased when its item is deleted by the clean-up described next.

How long pages are kept

Pages about events, support, notices and so on are archived, and later deleted, some time after they end. A page that someone has saved as a favorite is never deleted.

Automatic clean-up of old pages is switched off at the moment, so pages are kept until it is turned on.

Cookies and storage on your device

The site sets only the cookies it needs to work, when you use the feature. None is used for advertising.

Cloudflare Turnstile, which checks that a sign-in request or a report comes from a person, may set its own cookie for that check.

The site also keeps a few settings in your browser's local storage. They never leave your device: cityglot:consent (your cookie choice, asked again after 13 months), cityglot:theme (light or dark), cityglot-cal (your calendar app), cityglot-lang-hint (that you dismissed the language suggestion) and cityglot:helper:… (dates you typed in the deadline helper of an item).

Analytics

We use Google Analytics to see which pages are read. It loads only if you choose Accept in the cookie panel; it then sets cookies named _ga and sends Google your page views and IP address. If you choose Decline, nothing is loaded and those cookies are deleted. You can change your choice at any time with Cookie settings in the footer.

Who else handles data

• Supabase Auth verifies your email or Google sign-in. It receives your email address.
• Our email delivery provider sends the emails. It receives your email address and the content of each email.
• Cloudflare serves the site, runs Turnstile, and stores our database backups (private and encrypted). It sees your IP address and requests.
• Google provides the fonts, the maps and, only if you accept, Analytics. It sees your IP address when they load. If you sign in with Google, Google also handles that sign-in and gives us your email address.
• AI providers (Anthropic and Jev) read the text of reports as described above. They do not receive your email address or your account.
• Our hosting provider runs the server and the database.

Some of these companies are outside Japan and the EU, so your data can travel abroad. We do not share your data with anyone else, except where the law requires it.

Your choices

You can see and change your settings on your account page, unsubscribe from any email with the link at its end, delete your account, and clear the cookies of this site in your browser. To ask about or correct your data, write to the contact above.

Changes

When this policy changes, the date at the top changes too.