Privacy Policy / プライバシーポリシー

Last updated: 2026-05-07

1. We do not accept personal data / 個人データを受け付けません

The Service is designed to operate on non-personal claim/evidence pairs (e.g. row counts, file paths, code diffs, API request shapes). Submissions detected to contain personal data — including but not limited to email addresses, phone numbers, postal addresses, Japanese postal codes, 12-digit identifiers (My Number / マイナンバー shape), passport numbers, or credit-card-shaped numbers — are rejected at receipt with HTTP 400. Operators are responsible for redacting personal data before submission.

2. What we collect / 取得情報

For each request, the following metadata is recorded for operational purposes (rate limiting, abuse prevention, aggregate statistics):

• SHA-256+salt hash of the source IP (16 hex chars). Plaintext IPs are never stored.
• User-Agent header.
• Timestamp.
• Request kind and verdict (e.g. db_op / ok).
• Length and SHA-256 hash (16 hex chars) of the submitted claim. Raw claim text is not stored.
• Top-level keys, total byte size, and type of the submitted evidence object. Raw evidence values are not stored.
• A small allowlist of HTTP headers (User-Agent, Content-Type, Accept, Content-Length, CF-IPCountry, CF-Ray). Authorization, Cookie, custom headers, and any other request headers are dropped at receipt.

3. Retention / 保管期間

Operational logs and trace metadata are retained for 30 days on rolling delete. After 30 days, logs are automatically purged. Aggregate statistics (no per-request data) may be retained indefinitely.

4. No third-party sharing / 第三者提供しない

Per-request data is not shared with any third party. Aggregate statistics may be published openly (e.g. "verdict distribution by kind").

5. Cross-border transit / 越境通信

Requests reach the Service through Cloudflare, Inc. (US) edge infrastructure. By submitting a request, you consent to your request transiting through infrastructure located outside Japan. Cloudflare's data processing addendum applies to its handling. Per Japan PIPA Article 28 (外国にある第三者への提供): the United States is not, as of this writing, designated by the Personal Information Protection Commission as an equivalent-protection country, so this consent is required.

6. Your rights / 利用者の権利

Under Japan's Act on the Protection of Personal Information (個人情報保護法), you may request disclosure, correction, deletion, or cessation of processing of your personal data. Since the Service does not accept personal data and stores no personally identifiable information by design, such requests should typically return "no data on file." However, if you believe the Service has inadvertently retained personal data of yours (e.g. through a regex false-negative), please contact us and we will investigate and delete.

7. Contact / 連絡先 / 苦情窓口

For privacy inquiries, deletion requests, or PIPC-related complaints: [email protected].

8. Changes / 変更

This policy may be updated. Material changes are reflected in the "Last updated" date.

← back to about | Terms of Service →