Privacy Policy

1.Introduction

This Privacy Policy sets out how the operator of logve (paul., "the operator") obtains, uses, and protects the information about users that logve handles (including personal information). The operator handles user information in accordance with Japan's Act on the Protection of Personal Information and other laws, and with the guidelines of the Personal Information Protection Commission.

The Japanese version of this policy is authoritative. The English version is a translation for reference.

2.Operator

• Operator: paul. (run by an individual)
• Contact: info@logve.app

The operator's name and address will be provided without delay on request to the contact address.

3.Information we obtain

Information received when you log in with Google

• A number that identifies your Google account
• Your email address (verified by Google)
• Your Google account name (on the screen you see when you first log in, it is shown as the initial value in the name field of your card; it is saved only when you check it and press "Agree and start"; you can change it later)

We do not use your profile photo. We never receive your Google password.

Information you enter

• Your ID, the name and reading on your card, card design, favorite quote, and card background image
• The works you love and your oshi, rankings, highlights, shelves, and names of works or people entered by hand
• Modes and who can see each mode
• Your card holder (cards you received and where you received them)
• Chawa records and notes
• Your own images (images you add to works or oshi)
• Language and display settings, and when you confirmed you are 13 or older

Information recorded as you use logve

• Login records (when you logged in and when you last used logve)
• Records used to count whether the same action is repeated in a short time (your internal member number or an irreversible code made from your IP address, and the count; deleted together once a day after the counting period ends)
• Your member number and previous IDs
• Notifications (who kept your card in their card holder)
• When you asked to leave logve

Information received when you contact us

• Your email address, your name (if given), and the content of your message

Information stored on your device

• Cookies: logve itself uses only one cookie to keep you logged in (it expires after 90 days without use), one to keep the login process secure (it expires after 10 minutes), and one to show your Google account name in the name field when you first log in (it expires after 1 hour and is deleted when your name is saved). In addition, Microsoft Clarity, which we use to understand how our screens are used, sets cookies (see Information sent from your device to outside services).
• Device storage (localStorage): language and display settings and screen state (such as which bundles are open and how far you are in Chawa) are stored only on that device.

Information we do not receive

Images are resized on your device before they are sent, and data attached to photos, such as location (Exif and similar), is removed at that time. Our server also removes such data before saving if any remains in a received image.

4.How we use information

We use the information we obtain for the following purposes.

• To provide logve's features (log, cards, card holder, Chawa, notifications, export)
• To confirm your identity and keep you logged in
• To show people who receive your card the content within the scope you chose
• To respond to inquiries, removal requests, and reports, and to contact you when necessary
• To prevent and deal with use that breaks the terms and unauthorized access
• To prevent impersonation with the same ID after you leave logve
• To count registrations per work in a form that does not show whose they are, and use the counts to improve logve and build new features
• To understand how our screens are used (such as where people tap and how far they read) and improve logve
• To let you know about important changes to logve

If we use information for any other purpose, we will get your consent in advance.

5.Information visible to others

logve is a service for showing information to others within the scope you choose.

Visible to people who can see your card

• The front of the card for that mode (name, reading, ID, favorite quote, and design; you choose whether the reading, ID, and quote appear on the front)
• The works and oshi you put in that mode, their order, and the highlight for each
• Your ID is part of your card's URL, so anyone who sees the URL can tell your ID even if you hide it on the front.

Visible only to people who kept your card

• The background image of that mode's card
• Your own ticket images (images you add to works or oshi) for which you turned on "Show to card keepers", for works and oshi you put in that mode
• Only people who are logged in and have kept that mode's card in their card holder can see these. People who only know the card's URL cannot. They stop being visible if the person removes the card from their card holder, if you set the mode to "Only me", or if you start leaving logve.

Not visible to others

• Your email address, member number, and the content of other modes
• Your own images that you have not chosen to show to card keepers, and large images shown at the top of a page
• The contents of your card holder, Chawa records and notes, and shelves

When you keep a card

• When you keep someone's card in your card holder, the card's owner is notified of the name on your card. If the owner can see your card, the notification also includes a way to open it.

Who can see a card

• "Public": anyone can see it. It may appear in search engines, or in lists within logve in future versions.
• "Friends only": anyone who knows the card's URL can see it.
• "Only me": no one else can see it.

Works you put in "Public" and "Friends only" modes are counted in each work's registration count (without showing who registered them).

Card background images and shown images are sent with an instruction not to store them on the other person's device. However, the operator cannot stop the other person from taking screenshots or saving them.

6.Sharing with third parties

The operator does not give personal information to third parties without your consent, except in the following cases. The operator never sells or gives information to anyone for advertising (how Microsoft Clarity handles the information it receives directly from your device is described in Information sent from your device to outside services).

• Where required by law
• Where it is necessary to protect a person's life, body, or property and it is difficult to get your consent
• Where it is especially necessary to improve public health or promote the sound growth of children and it is difficult to get your consent
• Where it is necessary to cooperate with a national agency, local government, or similar body carrying out duties set by law, and getting your consent could interfere with those duties

Showing your card's content to people who can see it follows the visibility settings you chose yourself. To run logve, we also entrust the storage of information and similar tasks to the companies described in "Use of outside companies and handling outside Japan" below.

7.Use of outside companies and handling outside Japan

logve runs on services from the following companies outside Japan.

Cloudflare, Inc. (United States)

• Services used: servers (Cloudflare Workers), database (D1), image storage (R2), visit statistics (Web Analytics), and forwarding of email sent to our contact address (Email Routing)
• Information handled: all information stored in logve, the content of communications, and email sent to our contact address
• Country of the servers that store data: cannot be identified. Cloudflare automatically chooses a region close to where the database and image storage were created, and its system does not let us specify a country (logve does not specify a region either). Because they are created from Japan, they are expected to be in data centers in the Asia-Pacific region. Communications also pass through Cloudflare data centers around the world.
• Cloudflare states that it processes user information on logve's instructions (Cloudflare Privacy Policy). It is also certified under Global CBPR and Global PRP, international certification systems for personal information (directory of certified organizations).
• You can learn about the personal information protection system in the United States from the survey by Japan's Personal Information Protection Commission (in Japanese).

Google LLC (United States)

• Services used: login (Google account) and fonts (Google Fonts)
• When you log in, your device opens Google's page and you log in to Google. The operator receives from Google only the information listed under "Information we obtain" above.
• Google's handling of information is governed by the Google Privacy Policy. Google states that it processes information on servers around the world.

Microsoft Corporation (United States)

• Service used: analysis of how our screens are used (Microsoft Clarity)
• Information handled: the information listed under "Information sent from your device to outside services" below. It is sent directly from your device to Microsoft.
• Microsoft states that it stores Clarity data in the Microsoft Azure cloud. It does not state the country of the servers.
• Microsoft's handling of information is governed by the Microsoft Privacy Statement.

Wikimedia Foundation (United States)

• When you search for works or people, the search words you enter are sent from logve's server to Wikidata. No information that identifies you is sent.

On request, we will tell you about the measures these companies take to protect personal information.

8.Information sent from your device to outside services

When you open a logve page, your device sends information to the following companies.

Google Fonts (Google LLC)

• Information sent: your IP address, device information such as the browser type, and the fact that you are on a logve page (logve's domain)
• Purpose: to display the fonts used on screens and cards

Cloudflare Web Analytics (Cloudflare, Inc.)

• Information sent: the URL of the page you opened, where you came from (referrer), the type of device, browser, and operating system, your country, and how long the page took to load
• Purpose: to count page views and loading speed and use them to improve logve
• Cloudflare states that it does not use cookies or device storage and does not track individuals (Cloudflare Web Analytics).

Microsoft Clarity (Microsoft Corporation)

• Purpose: to understand how our screens are used and improve logve. We view this as session recordings (which replay interactions like a video) and heatmaps (which aggregate where people tap, among other things).
• Information sent: your interactions (where you tap, finger and mouse movements, scrolling, and moving between screens) and how the page is rendered, the URL of the page you opened, where you came from (referrer), the type of device, browser, and operating system, your IP address (used to estimate your approximate location), an identifier Clarity assigns to each device, and labels the operator adds (language, whether you are logged in, and the type of screen)
• Text and images on the screen are masked before they are sent. The content of input fields is not sent either. The operator does not send information that identifies you, such as your member number, ID, or email address, as labels. However, the URL of a card page you received includes that card's ID.
• Cookies: Clarity sets _clck (to recognize the same user) and _clsk (to combine pages viewed in a row into one visit) on logve's domain. Cookies on Microsoft's domains (such as MUID) may also be used. Microsoft states that it also uses MUID for advertising, site analytics, and other purposes.
• Retention: Microsoft deletes recordings after 30 days and aggregated data such as tap locations after 9 months (recordings the operator marks are kept for 9 months).
• Microsoft may also use the information it receives for its own purposes, including advertising. Microsoft's handling is governed by the Microsoft Privacy Statement.
• If you open logve from the European Economic Area (EEA), the United Kingdom, or Switzerland, Clarity measures without setting cookies on your device. In these regions, Clarity by default uses cookies only after consent is given, and logve does not ask for consent.
• To stop the cookies: if you block cookies in your browser settings, Clarity does not set them.

We do not use any other mechanisms that send information from your device to outside services.

9.How long we keep information and deletion

• We keep information while your account exists. When you remove a work or oshi, its ranking and highlight are deleted at that time.
• Your own images remain even if you remove the work or oshi (so they come back if you add it again). You can delete them all at once with "Delete all your images" in Settings.
• Login records expire after 90 days without use, and expired records are deleted.
• Notifications you have read are deleted after 90 days.
• After a 30-day grace period from your request to leave logve, we delete the data you registered. Deletion runs once a day in batches, so it may be slightly delayed. Deleted data remains for up to 7 days in records kept for recovery from failures (a feature of Cloudflare D1).
• What remains after deletion: names of works and people entered by hand (because other users also use them; who registered them is removed), registration counts per work (numbers that do not show whose they are), and your former IDs (reserved for 180 days so no one can use them, to prevent impersonation; we do not keep whose IDs they were)
• Emails sent to our contact address are deleted about 1 year after we finish dealing with them.

10.Security measures we have taken

Basic policy

• This Privacy Policy commits us to following laws and guidelines and to providing a contact point for questions and complaints.

Rules for handling

• The ways we obtain, use, store, and delete information are set out in our design documents, and logve is built to follow them.

Organizational measures

• Only the operator handles personal information. If a leak or similar incident occurs, the operator deals with it.

Personnel measures

• The operator runs logve after checking the laws and guidelines on handling personal information.

Physical measures

• Information is stored in data centers managed by Cloudflare.

Technical measures

• All communications are encrypted (HTTPS).
• The keys that keep you logged in are not stored in their original form.
• With "Log out of all devices" in Settings, you can end logins left open on other devices all at once.
• When the same action is repeated in a short time, we temporarily stop accepting it (to prevent repeated login attempts for impersonation and mass reading or sending).
• Your own images and card background images are sent only after confirming, each time, that the requester is you (logged in) or someone allowed to see them (a person who kept that card).
• The database and image storage are not public and can be used only by logve's servers and the operator's account.
• We do not handle passwords (you log in with your Google account).

Understanding the external environment

• For the company in the United States that stores information, we took the measures above after checking that country's system as published by the Personal Information Protection Commission (see Use of outside companies and handling outside Japan).

11.Requests for disclosure and more

• You can ask the operator, regarding your retained personal data, to notify you of the purpose of use; to disclose it (including in electronic form); to correct, add to, or delete it; to stop using or erase it; to stop providing it to third parties; and to disclose records of provision to third parties.
• To make a request, email us at info@logve.app. To confirm that you are the person concerned, we may ask you, for example, to write from the email address registered with logve. If someone makes a request on your behalf, we will ask for a document showing that they are your representative.
• We do not charge a fee.
• You can check or fix much of your information yourself. Cards and your log can be edited on screen. "Export your data" in Settings gives you the stored information as a ZIP file. If you leave logve, all of your information is deleted.
• Where the law allows us not to comply, we may decline, with reasons.

12.Minors

• logve is for people aged 13 and over.
• If you are under 18, please read this policy with your parent or guardian and get their consent before using logve.
• If we learn that a person under 13 has registered, we delete that account and its information.

13.Complaints and inquiries

We accept complaints and inquiries about the handling of information at info@logve.app. The operator is not a member of an accredited personal information protection organization.

14.Changes to this policy

• We may change this policy in line with changes to laws or to the service.
• When we do, we will announce the new policy and the date it takes effect through notifications in logve (logve updates) and on this page.
• Where the law requires your consent, such as when we change the purposes of use, we will get your consent in advance.