Privacy Policy
Last updated: May 2026
1. Overview
LOCA web zine is designed to collect as little personal information as possible. This policy explains what data is collected, how it is used, and how it is stored.
2. Information We Collect
When you submit a work, the following data is stored: — Title, statement, artist name, bio, and link (as provided by you) — Photographs you upload (stored in Supabase Storage) — A bcrypt hash of your delete code (the original code is never stored) — Category and NSFW flag — Submission timestamp and expiry date We do not collect your name, email address, phone number, or any other personally identifiable information unless you choose to include it in your artist profile fields.
3. Access Logs
The Platform is hosted on Vercel. Vercel may collect server-side access logs including IP addresses and request metadata for security and operational purposes. These logs are governed by Vercel's privacy policy and are not accessible to us in identifying form.
4. Cookies and Local Storage
The Platform uses browser local storage (not cookies) to remember your language preference (English or Japanese) and age verification status. No tracking cookies or third-party analytics scripts are used.
5. Photographs and Storage
Uploaded photographs are processed server-side (resized and re-encoded as JPEG, with EXIF metadata removed) and stored in Supabase Storage. Files are publicly accessible via a direct URL during the publication period and are permanently deleted 90 days after submission, or immediately upon use of the delete code.
6. Data Sharing
We do not sell, rent, or share your data with third parties for marketing purposes. Submitted works are displayed publicly on the Platform. Infrastructure providers (Vercel, Supabase) process data solely to operate the service.
7. Data Retention
All submitted data and photographs are automatically deleted 90 days after submission. Bcrypt hashes of delete codes are deleted at the same time.
8. Your Rights
You may permanently delete your work at any time using your delete code. If you have lost your delete code or have other data-related requests, contact us at hirokikamanoi@gmail.com and we will assist you.
9. Security
Delete codes are stored only as bcrypt hashes. Photographs are stored under randomised filenames. EXIF metadata (including GPS location) is stripped from all uploaded images during server-side processing. We implement rate limiting and brute-force protection on deletion endpoints.
10. Changes to This Policy
We may update this policy at any time. The date at the top of this page reflects the most recent revision.
11. Contact
For privacy-related enquiries or deletion requests: hirokikamanoi@gmail.com