Privacy Policy

01Who we are

Wisteriver LLC (“we”, “us”) handles users' personal information on “Festory” (https://festory.jp) in accordance with this policy. Contact: contact@festory.jp

02Information we collect

• Account information: email address and display name. If you sign in with Google, the name and email address of your Google account (we never collect or store passwords).
• Booking information: name, country/region, email address, phone number (optional), number of participants, festival experience, dietary or other accommodations, notes.
• Payment information: card details are handled directly by our payment processor, Stripe; we do not collect or store card numbers (we keep only a payment identifier and the amount).
• Posts: photos, text and display names submitted via “Engrave”, and messages in “Crews”.
• Participation records: booking history, on-site check-in (QR) timestamps, and participation stamps.
• Technical information: cookies used to keep you signed in. For analytics we use Vercel Web Analytics, which does not use cookies.
• We do not collect device location data (GPS or similar).

03Purposes of use

• Receiving and managing bookings, verifying identity, and contacting participants
• Providing features such as QR tickets, participation stamps and your personal page
• Sending booking confirmations, sign-in links and important notices
• Publishing approved Posts as part of a festival's archive
• Preventing fraud and responding to inquiries
• Producing statistics in a form that does not identify individuals

04Sharing with third parties

We share with the Organizer of the festival you booked the information needed for on-site reception and operations (name, party size, accommodations, etc.).

Beyond this, we do not provide personal information to third parties without your consent, except as required by law.

05Processors and external services

We use the following services to operate Festory, entrusting the handling of personal information to that extent: Supabase (database, Tokyo region), Vercel (hosting and analytics, USA), Stripe (payments, USA), Resend (email delivery, USA), and Google (sign-in, USA).

As some of these providers are located outside Japan, we use them after reviewing the data-protection regimes of their countries and the safeguards they provide, in accordance with the Act on the Protection of Personal Information. [TO CONFIRM: review the required disclosures on cross-border transfers before publishing]

06Cookies and similar technologies

• Cookies to keep you signed in (session cookies for participants and operators)
• Browser localStorage (e.g. to prevent duplicate 🔥 reactions; used only on your device)
• Caches for offline display when the site is added to your home screen (PWA)
• You can delete these in your browser settings (you will be signed out).

07Retention

We keep account and booking information for as long as needed for the purposes above. To delete your account, please contact us. [TO CONFIRM: account deletion is currently handled by request (no self-service deletion yet)]

Approved “Engrave” Posts are, by the nature of the Service — keeping festival records alive — kept published as a rule. If you wish a Post taken down, contact us; we will respond within reason.

08Security

We take necessary and appropriate measures against leakage, loss or damage of personal information, including TLS encryption, access controls, and not storing card details.

09Your rights

Upon request from the person concerned, we will disclose, correct, add to, delete or stop using retained personal data in accordance with applicable law, after verifying identity. Contact: contact@festory.jp

10Minors

Minors should use the Service with the consent of a parent or guardian.

11Changes to this policy

We may revise this policy to reflect changes in law or in the Service. Material changes will be announced on the Service.

12Contact

Wisteriver LLC — Festory desk: contact@festory.jp [TO CONFIRM: whether to add postal address and phone number, in line with the Commercial Disclosure]