fmnfc

Privacy Policy

Privacy Policy

How fmnfc collects, uses, and protects your personal information under the Act on the Protection of Personal Information of Japan (APPI).

Last updated: 2026-05-27  |  Policy version: 1.0.0

This Privacy Policy explains how Atsushi Masachika ("we", "us", "our") collects, uses, and protects your personal information when you use the fmnfc service (the website, the FileMaker NFC plug-in, sample downloads, and related support — collectively, the "Service").

The Service is operated as a sole proprietorship under Japanese law. We process personal information in accordance with the Act on the Protection of Personal Information of Japan (APPI).

1. Information We Collect

We collect the following personal information:

Purchase information

Email address, full name (collected via Stripe Checkout custom field).

Payment information

Stripe Checkout Session ID, payment status, amount, currency. We do not receive or store credit card numbers — Stripe handles all card data.

License information

License ID, license code, license type, issuance and expiry timestamps.

Technical information

IP address, user agent, request timestamp (recorded at license issuance for security and fraud prevention).

Support correspondence

Email content and timestamp when you contact us at contact@fmnfc.com.

Consent records

Timestamp, IP, locale, and policy version when you accept this Privacy Policy and the Terms of Service at checkout.

We do not collect or use:

  • Cookies for tracking or analytics (only essential cookies, if any, used by Cloudflare Turnstile for bot protection)
  • Third-party analytics (Google Analytics, etc.)
  • Advertising identifiers

2. Purpose of Use

We use your personal information for the following purposes:

  1. License issuance and management: To generate, deliver, reissue, and manage your fmnfc license.
  2. Receipt issuance: To generate and send PDF receipts and license emails.
  3. Support: To respond to your inquiries and provide customer support, including identification by your registered name.
  4. Fraud prevention and security: To detect and prevent abuse (rate limiting, request log analysis).
  5. Legal compliance: To respond to disclosure requests under the Specified Commercial Transactions Act of Japan, tax-related record keeping, and other legal obligations.
  6. Service improvement: To analyze aggregate usage patterns (with no individual identification).

3. Third-Party Sharing and Cross-Border Transfer

We use the following third-party service providers, all of which are located in the United States. By using the Service and accepting this Privacy Policy at checkout, you consent to the transfer of your personal information to these providers for the purposes stated above.

Stripe, Inc. (United States)

Purpose: Payment processing, receipt generation, fraud detection. Data shared: email, name, payment information.

Cloudflare, Inc. (United States)

Purpose: Website hosting (Cloudflare Pages), database (D1), bot protection (Turnstile), email forwarding. Data shared: all Service data.

Resend (Resend.com, Inc.) (United States)

Purpose: Transactional email delivery (license emails, receipts). Data shared: email, name, license content.

About the United States: The United States does not have a comprehensive national data protection law equivalent to the APPI. We have selected the above providers based on their published privacy practices, security certifications, and contractual commitments to data protection. Summary information about each provider's privacy practices is available on their official websites.

We do not sell, rent, or share your personal information with any other third parties for marketing or unrelated purposes.

4. Retention Period

We retain your personal information for as long as it is needed to fulfill the purposes described above, including:

  • License management for the duration of your license validity
  • Past transaction history for support and accounting reference
  • Records required by Japanese tax law and other legal obligations

We do not automatically delete database records. If you wish to have your information deleted, you may submit a request under Section 6 below; we will respond in accordance with applicable law.

5. Safety Measures

We implement the following measures to protect your personal information:

  • All data stored in Cloudflare D1 (SQLite at the edge), encrypted at rest by Cloudflare
  • API credentials and secrets managed via Wrangler Secrets (encrypted, not exposed in source code)
  • Access logs maintained for the API service
  • HTTPS-only communication between your browser, our service, and our providers
  • Rate limiting and Cloudflare Turnstile bot protection at the API layer
  • The service is operated by a single sole proprietor; no internal third parties have access to data

6. Your Rights (Disclosure, Correction, Suspension, Deletion)

Under the APPI, you have the right to request:

  • Disclosure of personal information we hold about you
  • Correction of inaccurate information
  • Suspension of use or deletion of your information
  • Disclosure of records of third-party provision (cross-border transfer logs)

To exercise these rights, please contact us at contact@fmnfc.com with sufficient information to verify your identity (typically the email address used at purchase). We will respond promptly, in accordance with the APPI.

7. Cookies and Access Logs

We do not use tracking cookies or third-party analytics. The Service may use essential technical cookies set by Cloudflare Turnstile solely for bot detection during checkout. Server-side access logs are maintained for fraud prevention and operational monitoring; these logs include IP addresses and user agents and are subject to the same protection and retention policies as other personal information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page, and the Last Updated date and Policy Version at the top will be updated accordingly. For material changes (major version bump), we may request renewed consent at the next checkout. We do not send email notifications about Privacy Policy updates; please check this page periodically.

9. Contact

For questions about this Privacy Policy or to exercise your rights:

  • Service operator: Atsushi Masachika (sole proprietor)
  • Personal information manager: Atsushi Masachika (the operator concurrently serves as the personal information manager)
  • Email: contact@fmnfc.com

For commercial disclosures required under the Specified Commercial Transactions Act of Japan, please see our Legal Notice page.

10. Governing Law

This Privacy Policy is governed by the laws of Japan. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the Tokyo District Court as the court of first instance.

← Back to Home