Privacy Policy (website)

The waiting list is closed

The waiting list closed on 2026-09-13. Everyone who registered will be sent the announcement of the release once, and their registration deleted afterwards.

Scope

This page covers two things: (1) information sent through the waiting-list form, and (2) information sent by the web analytics used to improve this site. This site serves no advertising and loads no external fonts.

The app itself embeds no analytics SDK and does not send your records or photos off the device. What is on this page applies to the website only. The privacy policy for the app is here

This site is published in Japanese and in several other languages, and the app is distributed in countries and regions worldwide except mainland China. Users in the European Economic Area (EEA), the United Kingdom and Switzerland are therefore among those it is offered to, so visits from those regions are treated as subject to the EU General Data Protection Regulation (GDPR) or the UK GDPR, and analytics is carried out only after your consent.

Web analytics

To learn which pages are read and where people stop reading, this site uses the tools below. All of them are provided by businesses located outside Japan, and the information sent to each is handled under that business’s own privacy policy.

Google Analytics 4

Provider: Google LLC (United States)
Information sent: The URL of the page viewed, the referrer, the kind of browser and OS, a rough region (country and prefecture), and a random identifier saved in a cookie (`_ga`). In addition, the interactions listed under “What behaviour is recorded” below.
Purpose: To see which pages are read and where people stop reading, and to fix the order and the wording of the explanations.
How to stop it: Google Analytics Opt-out Browser Add-on
The provider’s own description: How Google uses information from sites or apps that use its services

Microsoft Clarity

Provider: Microsoft Corporation (United States)
Information sent: A recording of what happens on screen (scrolling, clicks, pointer movement), the pages viewed, the kind of browser and OS, and random identifiers saved in cookies (`_clck`, `_clsk`). In addition, as markers for filtering recordings, the name of the button pressed and the identifier issued by Google Analytics (so that the same visit can be matched across both records). **What you type into an input field is masked in the recording, and an email address itself is never sent.**
Purpose: To watch a replay of where people hesitated and where a press does nothing, and to fix it.
How to stop it: Digital Advertising Alliance opt-out (choose Microsoft)
The provider’s own description: Microsoft Privacy Statement

Vercel Web Analytics / Speed Insights

Provider: Vercel Inc. (United States)
Information sent: The page viewed, the referrer, the kind of device, and measured display speed. In addition, as a minimal record in case the other two are blocked by an ad blocker: that a button was pressed, that it was pressed repeatedly, how far you had read and how long you stayed when you left the page, and that a link to the App Store was pressed (which button, and the link on which page). **No cookie and no storage on your device is used.** The identifier is a hash built from the request itself that expires in a day, so by the next day you cannot be recognised as the same person.
Purpose: To measure display speed in the environment real visitors use, and to know at least the number of visits when the two tools above are blocked by an ad blocker.
Individual opt-out: because no cookie is used, the tool has no opt-out mechanism.
The provider’s own description: Vercel Privacy Notice

Sentry

Provider: Functional Software, Inc. (United States; the data is stored in the United States as well)
Information sent: Only when the JavaScript on a page stops, what happened — the wording of the error and where it occurred (the line number in the program), the URL of the page being viewed (**the query string is stripped before sending**), the kind of browser and OS, and what you did just before it stopped (moving between pages, the kind of element pressed). **No cookie and no storage on your device is used, and no identifier is issued.** IP addresses are configured not to be recorded. If nothing stops, not a single request is made to this tool.
Purpose: To learn about faults such as an explanation that stops being shown or a button that stops responding, and fix them without waiting for someone to report it.
Individual opt-out: because no cookie is used, the tool has no opt-out mechanism.
The provider’s own description: Sentry Privacy Policy

What behaviour is recorded

How far down the page you scrolled (in four steps), and which sections you had in view and for how long
That a button or link came into view, how long the pointer rested on it, and that it was pressed
That the same place was pressed repeatedly in a short time, and that a place where nothing happens was pressed
That text was selected (only the number of characters and where; **the selected text itself is not sent**)
That a link to the App Store was pressed (which button, and the link on which page)
That a link from this site to an outside site was pressed (the destination domain and path)

About consent

The identifiers above are “personal-related information”: on their own they do not identify a particular individual. Japan’s Act on the Protection of Personal Information does not require prior consent for collecting such identifiers, so for visits from within Japan this site shows no consent prompt and instead informs you by publishing this page. For visits that appear to come from the European Economic Area (EEA), the United Kingdom or Switzerland, this site asks for your consent before loading Google Analytics and Microsoft Clarity, and does not load them until you agree. Error reporting (Sentry) and the Vercel measurements set no cookie and store nothing on your device, so they are outside that prompt.

Whether you are asked is estimated from the time zone set on your device. This is a static site with no server of ours, so no more precise determination is made (no IP-based lookup and no location data). The estimate can be wrong in both directions: if you are travelling in Europe you may see a prompt you do not need, and if you have changed your time zone you may see none.

Your choice is stored only on your own device (in localStorage) and is never sent to a server of ours. You can change it at any time with the control below. If you withdraw consent, Google Analytics and Microsoft Clarity will not be loaded again; records already sent are deleted once each provider’s retention period has passed.

The identifiers obtained through analytics are never linked to the email address you registered on the waiting list. Nor is an email address ever sent to an analytics provider.

Refusing cookies in your browser settings, or using an ad blocker, also stops the traffic described above. This site still displays normally in that case.

The name and address of the business handling the information

The business that handles the waiting-list information is 友田陽大.

The address is a private residence and is therefore not published on this page. If you request it at the contact address under “Requesting deletion or disclosure” below, we will answer without delay.

Information collected through the waiting list

Email address
Your answers on which features interest you, what price you would be willing to pay, and how many goshuin books you own
Whether you consented to this policy, and the date and time of submission

Why the waiting-list information is used

To send you the announcement of the app’s release
To decide the order of features and the price (answers are aggregated in a form that does not identify an individual)

The processor (a third party outside Japan)

Receiving and storing the form is entrusted to Formspree, Inc. (United States) . Because that amounts to providing personal information to a third party outside Japan, the following was disclosed under the Act on the Protection of Personal Information and consent was obtained in the consent field of the form.What is provided is limited to what the entrusted purpose — receiving and storing the form — requires, and the company does not use it for purposes of its own.

An outline of the personal-information protection regime in the recipient’s country

The United States has no federal law that sets out the duties of businesses and the rights of individuals across the board, as Japan’s Act on the Protection of Personal Information does. Personal information is protected instead by sector-specific federal laws (health, finance, children and so on) and state laws, together with the Federal Trade Commission’s enforcement against unfair and deceptive practices. It is not among the countries that Japan’s Personal Information Protection Commission has recognised as having a standard equivalent to Japan’s (the EU member states and the United Kingdom).(source: Personal Information Protection Commission, “Survey of personal-information protection regimes in foreign countries” (United States, in Japanese))

An outline of the measures the recipient takes to protect personal information

The company publishes security measures including TLS encryption of traffic (1.2 or later), encryption of stored data with AES-256, access control on the principle of least privilege, and two-factor authentication for critical systems. As a data processor subject to the GDPR, it also uses standard contractual clauses (SCCs) for transfers out of the EU.

Retention period

The information is deleted after the announcement of the app’s release is sent, or within one year of registration.

Requesting deletion or disclosure

If you would like your registration deleted, or the information held about you disclosed, please write to the contact address below. We will confirm your identity and respond without delay.

Contact: tomodahinata@gmail.com

Provision to third parties other than the above

Except where the law requires it, information is not provided or shared with anyone other than the processor named above.

Revisions

If this policy is revised, the revision is published on this page and the last-revised date is updated.