Privacy Policy

This Privacy Policy applies to information handled through websites, games, applications, web services, and related support provided by Hiroki Tamiya under the name "tamilabo" (collectively, the "Services").

Each product supplement describes the information actually handled by that product, its SDKs and service providers, retention periods, and deletion methods. A supplement will be published before any product that handles personal data, analytics, advertising, or online features is released. Products that make no external data transmissions will also state that fact in a supplement.

Third-party platforms such as the App Store, Google Play, and Steam independently handle certain account and payment information under their own privacy policies. This Policy applies only to information tamilabo receives from those platforms or handles independently.

• We do not collect information beyond what is necessary to provide the Services.
• We disclose the information collected, purposes, recipients, and retention period in this Policy or a product supplement.
• When introducing a new SDK, advertising, analytics, or external transmission, we keep the implementation, store disclosures, and product supplement consistent.
• We delete or anonymize information once its purpose has been fulfilled unless retention is required for legal, contractual, security, or dispute-related reasons.

Depending on the Service, tamilabo may handle the following information. The applicable product supplement limits and specifies the actual processing.

• Account data: email address, display name, and identifiers received from external authentication providers, used for authentication, login, synchronization, and account administration.
• Support data: email address, optional name, inquiry details, and minimum device or application information needed to respond, investigate defects, and improve support.
• Usage and technical data: IP address, device, operating system and browser information, application version, interaction or gameplay records, and crash data, used to provide and improve services, investigate failures, maintain security, and prevent abuse.
• Public data: display names, player IDs, rankings, achievements, posts, chat messages, and profile images, used to provide online features selected by users.
• Purchase and transaction data: order number, product, amount, purchase time, and contact details, used for delivery, refunds, accounting, and fraud prevention. tamilabo does not retain payment credentials such as full card numbers; payment providers process them.
• Permission-based device data: location, photos, microphone, contacts, or similar data, collected only when essential to a product's core function, after explaining the purpose, and limited to what is necessary. It is not collected solely for advertising or general analytics.

Products using analytics or crash reporting identify the SDK, data, recipient, purpose, and retention period or deletion criteria in their supplement. Optional analytics can be disabled in product settings. Where consent is legally required, processing begins only after consent and a withdrawal method is provided.

Products using advertising identify the advertising provider, advertising identifiers and other data, purposes, personalization, and opt-out method in their supplement. Personalized advertising is used only with required consent and is not used in products directed to children.

tamilabo does not sell personal data. Where transmission for personalized advertising may constitute a sale, sharing, or targeted advertising under applicable U.S. state law, the relevant product will provide an opt-out mechanism.

For users in the EEA, United Kingdom, and other regions requiring a legal basis, processing relies as appropriate on performance of a contract, compliance with legal obligations, legitimate interests, or consent. Legitimate interests may include secure service delivery, failure investigation, fraud prevention, and quality improvement.

Where processing such as personalized advertising relies on consent, refusing or withdrawing consent will not prevent use of basic features that do not require that processing.

tamilabo does not disclose personal data to third parties except with user consent, as required by law, to protect life, safety, or property, or as otherwise permitted by applicable law.

We may engage hosting, email, cloud, authentication, analytics, crash reporting, advertising, payment, and customer-support providers as necessary. We select and oversee providers appropriately, and identify the providers and transmitted data in each product supplement.

Information may be sent to providers or servers outside the user's country. Where required, we use contractual safeguards, adequacy decisions, consent, or other lawful measures, and identify the destination country or a way to confirm it in the relevant product supplement.

Information is retained only as long as necessary for its purpose or for legal, accounting, contractual, security, fraud-prevention, or dispute-related requirements. Product supplements state a specific period or deletion criterion for each data category.

Information that is no longer required is securely deleted or anonymized. Data in backups is removed through the ordinary backup lifecycle.

tamilabo uses safeguards appropriate to its size and risks, including access control, authentication, encryption, permission management, and provider oversight.

If a breach, unauthorized access, or other incident occurs, we investigate, determine the scope, contain harm, and prevent recurrence. Where legally required, we report to the Personal Information Protection Commission of Japan or another supervisory authority and notify affected users.

Depending on applicable law, users may request access, correction, deletion, restriction, withdrawal of consent, objection, or data portability. We perform proportionate identity verification and explain if a request cannot be fulfilled because of legal retention duties, third-party rights, or another lawful reason.

Products that allow account creation provide deletion requests both in the application and on the web. If limited information must remain for legal, security, or fraud-prevention reasons, the product supplement identifies the data and retention period.

To make a request, email the address below with the subject "Privacy Request."

Age eligibility is defined for each product. Products directed to children publish a dedicated supplement and obtain parental consent where required. Behavioral targeted advertising is not used in products directed to children.

Generative AI may assist with support, analysis, or moderation. We use contracts or APIs that do not permit provider model training on submitted data, and remove or pseudonymize unnecessary names, email addresses, account IDs, and similar identifiers before transmission.

Investigations that require identifying information are handled by people or controlled systems rather than sent to generative AI. Significant actions such as account suspension are not based solely on automated AI decisions; human review and an appeal method are provided.

Material changes are announced in advance through the website, in-product notice, registered email, or another reasonable method. Where new consent is required, we obtain it again. Minor changes apply when published.

This Policy displays its effective date, last update, and version. Each product supplement has its own update date.

The Japanese version is authoritative. If a translation conflicts with it, the Japanese version prevails, without limiting mandatory rights under the law of the user's location.

This Policy is interpreted primarily under Japanese law. Users may have the right to lodge a complaint with a supervisory authority under applicable local law.