Effective: March 27, 2026
Stripe — Payment processing
Handles all payment transactions on the platform.
- Data shared: payment card details, billing address, transaction amounts
- Stripe is both data processor and controller (for fraud prevention)
- Your full card number is never stored on our servers
- PCI DSS compliant
Authentication
Handles account creation and single sign-on.
- Data shared: email, name, authentication tokens
- Used for account management and SSO
- Neon Auth for identity management
Vercel BotID — Bot protection
Protects the platform from automated abuse via Vercel BotID. We do not use Google reCAPTCHA.
- Data collected: device fingerprint signals (canvas, WebGL, fonts, timing), processed ephemerally
- Used during login, signup, password reset, and sensitive actions
- Vercel acts as the processor for this data; no third-party tracking cookies set
Klipy — GIF content
Powers GIF search and embedding in communities.
- Data shared: search queries
- Highest content safety filter applied
- No personal data transmitted
Vercel & Neon — Infrastructure
Our hosting and database providers.
- Vercel: application hosting, edge network, serverless functions
- Neon: PostgreSQL database with connection pooling
- All data encrypted in transit and at rest
- Both providers are SOC 2 compliant
Typesense — Search
Powers product and content search across the platform.
- Data indexed: product catalog data, search queries, interaction signals
- Enables fast, typo-tolerant search
- No personal data stored in search index
Your rights
You can exercise your data rights directly with third-party controllers (like Stripe or Google) or through us for data we process on their behalf. Contact privacy@tokyofishmarket.com for assistance.
Contact
privacy@tokyofishmarket.com