Data kept only for recovery.

Information used

For a free feasibility check, we collect your contact email for our reply, the item summary, and up to five candidate locations you enter. Your contact email is not a facility email and is not used to contact a facility. For a formal case, we may collect contact details, facility and incident information, item description, photographs of the item, case correspondence, payment status, authorization evidence, and only when required, identity evidence.

We also record which version of the service terms and confirmations was shown at the moment a request was submitted, together with the exact wording, so that what was agreed to can be shown later.

Identity documents

Do not submit an ID image during initial checkout. If a confirmed custodian requires one, we provide case-specific instructions. ID images are stored separately with restricted access and deleted after the case closes, subject to legal requirements.

Sharing

Necessary case details may be shared with the holding facility, police, the courier the customer contracts with, and their customs provider. To let us and Japanese facilities read a description written in another language, the item description may be sent to Google Cloud Translation for translation into Japanese. This runs in the same Google Cloud project that already holds our operational records, so it does not add a further processor. Payment card data is handled by Stripe and is not stored by this site.

Google Maps

The location step lets you enter a facility name or Google Maps URL yourself. If you cannot identify a building, one interactive Google map is available for the customer-selected dropped pin; Google may process that map interaction, IP address, and device information under the Google Privacy Policy. Your use of the map is also subject to the Google Maps/Google Earth Additional Terms. We do not use Google Places autocomplete or place-details lookups. Customer-entered facility text, submitted Maps URLs, and any dropped-pin coordinates are retained as part of the case so that an operator can verify the correct destination.

Operational records

We keep two records in a spreadsheet that only the operator and the service account writing to it can open. It is not shared by link and no one else has access.

The analytics tab receives a case ID and non-sensitive operational measures such as facility count, item category, country of residence, and payment status. It does not receive names, email addresses, phone numbers, street addresses, free-text item descriptions, signatures, or photos.

A separate restricted tab holds a full copy of each submitted request, including name, email address, phone number, address, item description, and electronic signature. It exists so that a case can be reconstructed if the main system's data is lost. Photographs are not copied there.

Free consultation records are stored separately with the summaries and customer contact email encrypted. The operator can see them through the protected consultation queue; a fixed source bucket and a hash are used for routing and duplicate detection, not the raw email or text.

Operator access to your request

The details of a request are stored encrypted. Each time the operator opens the photographs, the item description, or the contact and delivery details of a case, that access is recorded — what kind of information was opened, for which case, and when. Those records hold no names, contact details, or item text themselves.

Website analytics

When enabled, this site records daily aggregate funnel totals such as a landing-page view, consultation view, request-step view, consultation submission, start-request click, checkout start, or completed-payment page view. For acquisition analysis, a visit is reduced to one fixed source bucket such as direct, Google organic, AI referral, guide, site navigation, social, or another referral. These totals contain no IP address, cookie, case ID, account ID, raw URL, URL query, referrer, campaign value, or form value.

In the current production build, Cloudflare Web Analytics and Microsoft Clarity are disabled. If either is deliberately enabled in a future build, it may load only on public service, guide, consultation, terms, privacy, and legal pages; Microsoft Clarity must load only after the visitor accepts the analytics preference. Neither may load on request forms, account pages, case pages, or API routes, and neither is used to collect request descriptions, identity details, contact details, authorization signatures, or photos.

Retention and requests

Customer intake is separated from the analytics ledger and retained only for recovery, accounting, dispute, and legal requirements. A free feasibility lead is retained only long enough to answer the question and handle a related service request, then deleted or anonymized unless a longer period is legally required. You may request deletion of a feasibility check at any time before it becomes part of an authorized case. An image uploaded before a request is successfully created is kept in a short-lived pending area and may be automatically deleted after 24 hours. Photos attached to an active case are not removed by that pending-upload rule. Customers may request access, correction, or deletion where legally available by emailing the contact address below.

Contact

For any privacy question, or to request access, correction, or deletion of your data, email support@lostitemrescuejp.com. Please do not attach passport or identity-document images to a privacy request. Operator details are listed in the legal notice.