Privacy Policy

Article 1. Basic policy and scope

Yuki Lab (“we”), which operates yuki-lab.com and its subdomains (for example reversi.yuki-lab.com and shogi.yuki-lab.com) as well as native applications, establishes this privacy policy (the “Policy”) to handle your personal information appropriately.

The Policy applies to the following services provided by Yuki Lab:

• The websites above (including Reversi Web, Chess Web, Shogi Web, the character counter and others).
• The native applications we operate (the “app versions”).

Terms used in the Policy follow the definitions of the Act on the Protection of Personal Information of Japan.

Article 2. Information we collect

Article 3. Purposes of use

Under the Act on the Protection of Personal Information, we may use the collected information for purposes such as the following.

When we receive a request based on the law regarding notification or disclosure of purposes of use, we will respond without delay, except where the law provides otherwise (a fee, described below, applies).

Article 4. Main external services we use

Our services use external services such as the following. Not every service uses all of them; which ones are used differs from service to service.

• Google AdSense (websites) and Google AdMob (app versions): ad delivery, measurement and fraud prevention. The app versions use advertising identifiers.
• Google Analytics and Microsoft Clarity: analysis of usage and improvement of our services.
• Stripe: payment processing on our websites. Credit card information is sent directly to and stored by Stripe; we do not collect or view card numbers.
• Google Play: in-app purchases in the app versions, and verification that a purchase is valid.
• Cloud databases and servers, and form services: storage of account information and the content of enquiries.

These are representative examples and not an exhaustive list. We may add or change external services as our services change; in every case they are used within the purposes set out in Article 3.

Article 5. Disclosure to third parties

• Usage data for each service and information necessary for payment processing may be sent to providers such as Google (Analytics, AdSense, AdMob, Tag Manager, etc.), Microsoft (Clarity) and Stripe.
• In the app versions, advertising identifiers (advertising IDs) and similar data are sent to Google (AdMob) for ad delivery, measurement and fraud prevention.
• For payments, credit card information is sent directly to and stored by Stripe; we do not collect or view card numbers.
• For in-app purchases in the app versions, purchase tokens and similar data are sent to Google (Google Play) to verify that a purchase is valid.
• We may disclose information to third parties where required by law, or where necessary to protect a person's life, body or property, in accordance with the law.
• Records of third-party disclosure will be disclosed upon a request based on the law (a fee, described below, applies).

Article 6. Security measures

• We select established providers such as Google, Microsoft and Stripe and take care to configure them appropriately.
• We implement multiple security measures, including access control and the use of HTTPS. For security reasons we do not publish the details, except where disclosure is required by law.
• We use cloud services provided by companies located in the United States (databases, forms, payments, advertising and analytics), and personal data may be stored on servers located in the United States. We take security measures on the basis of our understanding of the personal data protection regime of the United States.

Article 7. Requests for disclosure and similar matters

We respond without delay to requests under the Act on the Protection of Personal Information for “disclosure and similar matters” (notification of purposes of use; disclosure of retained personal data or records of third-party disclosure; correction, addition or deletion; suspension of use or of third-party disclosure), and to other requests based on the law, subject to the exceptions set out in the Policy.

• How to request: please contact us through this form. We may ask you to submit documents to verify your identity.
• Fees: for requests for notification of purposes of use and for disclosure of retained personal data or records of third-party disclosure only, we charge 2,000 yen (tax included) per request. The same amount is charged as an administrative fee even when we cannot comply with the request. No fee applies to requests for correction, addition, deletion, suspension of use or suspension of third-party disclosure.
• Deleting a Reversi Web account: no form is required. While logged in, you can do this free of charge from the menu inside the service.
• Retention: we keep account information for as long as the account exists, and delete or anonymise it within a reasonable period after the account is deleted. Information we are required by law to retain is kept for the period required by law.
• Exceptions: where a statutory exception applies, we may be unable to disclose or suspend use of all or part of the information.
• Response: we will respond promptly within a reasonable scope.
• The above does not apply where the law provides otherwise.

Article 8. Disclosure of the operator's name and address

We disclose these without delay upon request from the person whose personal information we handle, or from someone who uses or is considering using our services.

• For the operator's name, please use this form.
• For the operator's address, please use this form.

Article 9. Use of cookies and similar technologies

• Google Analytics, Google AdSense, Google AdMob, Microsoft Clarity and similar services may use cookies and similar technologies (advertising identifiers in the app versions) to measure usage and deliver advertising.
• You can disable cookies in your browser settings, but some features may not work correctly.
• The advertising identifier used in the app versions can be reset, and personalised advertising can be opted out of, from your device settings.
• In the EU/EEA, the UK, Switzerland and other applicable regions, a consent message may be shown through Google's consent management tools in connection with Google's ad delivery.
• For details of advertising and measurement, and how to opt out, please refer to the policies and opt-out add-ons of the respective external tools.

Article 10. For residents of the EU/EEA and the UK

• We respect the additional rights provided under the EU General Data Protection Regulation (GDPR) and UK data protection law.
• Residents of the EU/EEA and the UK have rights under applicable law including withdrawing consent to the processing of personal data, requesting data portability, requesting restriction of processing, and lodging a complaint.
• To exercise your rights under the law, please contact us through this form.
• Personal data of residents of the EU/EEA and the UK may be transferred outside the EU/EEA and the UK where necessary; we take appropriate safeguards when doing so.
• The above does not apply where the law provides otherwise.

Article 11. Revisions

The Policy may be revised in line with changes in the law or in our services. Important changes will be announced on this page or within the services.

Article 12. Enquiries and complaints

For enquiries or complaints about the handling of personal information, please contact us through this form, selecting “Enquiry or complaint about the handling of personal information” as the type of enquiry.