Privacy Policy

Last updated: September 7, 2026

1. Introduction

Welcome to Mikasa. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our services, and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you:

  • Identity Data: includes name, username or similar identifier
  • Contact Data: includes email address

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To provide and maintain our service
  • To notify you about changes to our service
  • To provide customer support
  • To detect, prevent and address technical issues

4. Authentication and Account Data

When you sign in to Mikasa using Google authentication, we collect:

  • Your email address
  • Your Google profile information (name, profile picture)
  • Authentication tokens to maintain your session

This information is used solely to provide you with access to our services and to personalize your experience on our platform.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We use industry-standard encryption and security protocols to protect your data.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

6. Cookies and Essential Technologies

We use essential cookies necessary for authentication, for maintaining your session, and for remembering your cookie choices. These cookies are required for the service to function properly and cannot be disabled.

We also use PostHog, a product analytics service hosted in the European Union, to understand how visitors use our website and improve our service; the data it collects stays within the EU. Where it is switched on, PostHog stores an identifier on your device (a cookie and a matching browser-storage entry) so we can recognise you across visits, and links that activity to your account when you are signed in. This covers pages visited and actions taken in the product.

Whether it is switched on before you answer the cookie banner depends on where you are visiting from, because the rules do. From the European Economic Area or the United Kingdom, nothing is stored on your device until you accept: until then we count your visits with the identifier described below, which stores nothing. From Switzerland and everywhere else, analytics cookies are on unless you decline, which Swiss law permits so long as you are told and can refuse. Answering the banner settles it either way, and the answer is the same wherever you are.

Session recording never starts on its own anywhere, whatever the local rules allow. It captures how you interact with pages, and it runs only if you accept analytics in the cookie banner, because a recording of a property search can reveal your budget and the areas you are looking in. Accepting is one choice covering both: analytics cookies and session recording are allowed together, and declining refuses both. Nothing is recorded until you accept, so if you never answer the banner, recording never starts. You can withdraw that consent at any time under settings, cookie preferences.

To refuse, decline in the cookie banner, and we stop storing analytics data on your device (the essential cookie recording that choice stays, as described above): your visits are then counted using a pseudonymous identifier derived from your IP address and browser that changes daily and cannot be linked to you across days.

Once analytics are switched off, everything PostHog stored on your device to recognise you is removed, and the temporary entries scoped to the open tab are discarded when you close it. If you had another tab of the site open at the time, that tab can keep writing until you reload it, and the next page you open clears it again.

Mikasa is operated from Switzerland. Under Swiss law, information may be stored on your device for analytics purposes provided you are informed of the purpose and can refuse, which is what this section and the cookie banner are for. In the European Economic Area and the United Kingdom, storing anything on your device for analytics requires your consent instead, which is why nothing is stored there until you give it. Where the GDPR applies, our lawful basis for the analytics itself is our legitimate interest in understanding how the product is used and improving it, weighed against your rights and freedoms, and you can exercise your right to object as described below. Where we rely on your consent, for storage on your device and for session recording, you can withdraw it at any time using the controls above, and refusing leaves only the essential cookie that records the choice. Session recording only ever runs after you accept analytics in the cookie banner, and the analytics switch in cookie preferences is on by default, so saving that panel while it is on accepts both.

We do not use marketing or advertising cookies.

7. Third-Party Services

We employ third-party companies and individuals to facilitate our service and provide the service on our behalf. These third parties include:

  • Google Authentication: For secure user authentication
  • Supabase: For database and authentication services
  • PostHog (EU): For product analytics and application error reports, hosted in the European Union

These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer need your personal data, we will securely delete or anonymize it.

9. Your Data Protection Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

  • Right to access: You have the right to request copies of your personal data
  • Right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete
  • Right to erasure: You have the right to request that we erase your personal data, under certain conditions
  • Right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions
  • Right to object to processing: You have the right to object to our processing of your personal data, under certain conditions
  • Right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions

10. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date at the top of this policy. You are advised to review this privacy policy periodically for any changes.

11. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us:

Email: contact@mksa.app