Privacy Policy
The Japanese version is authoritative. This English version is a reference translation.
1. Operator
GunplaDex (run by an individual). We will tell you the Operator's name and address without delay if you ask through our contact address.
2. Information we collect
| Information | How we get it | What we use it for |
|---|---|---|
| Google user ID and email address | Received from Google when you sign in | Signing in and confirming it is you only. Your email address is never shown to other users |
| Nickname | You enter it | Shown on screens |
| Photos | You add them (location and similar data are removed on our server) | Your own collection; the community gallery if you choose (from stage 2) |
| Kit records (status, rating, tags, notes, purchases, quantity, etc.) | You enter them | Your own collection and stats |
| Barcode suggestions | You register them | The barcode dictionary (other users only see how many people registered) |
| Cookie that keeps you signed in | Stored by the Service | Keeping you signed in |
- We do not store your Google name, profile picture or access tokens.
- We do not store IP addresses or device/browser information in member records (the Service's database).
- However, the Cloudflare systems that run the Service temporarily keep access logs (such as IP address, country or region, browser type, pages viewed and time) to deliver traffic and to block attacks and unauthorised access. The Operator looks at these logs only to investigate outages and respond to unauthorised access, and never stores them linked to member information. How long the Operator can see them is set by Cloudflare's systems, generally up to about 7 days.
- Cloudflare may use statistics and threat information (such as dangerous IP addresses) derived from these logs, under its own responsibility, to protect its network (see Cloudflare's privacy policy).
3. Why we use information
- To provide the Service (sign-in, collection, stats, community gallery, barcode dictionary)
- To review photos submitted to the community gallery
- To prevent misuse and respond to breaches of the Terms
- To answer enquiries and send important notices
- To improve the Service (only as statistics that do not identify anyone)
4. What other people can see
- Photos and records in your own collection are visible only to you.
- Photos approved for the community gallery can be seen by anyone, including people who are not signed in (from stage 2).
- Your email address and internal IDs are never shown to other users.
5. Outside services and companies abroad
| Company | Country | When | Information involved |
|---|---|---|---|
| Cloudflare, Inc. | United States (data is handled in facilities around the world) | Running the Service; storing data and photos | All Service data |
| Google LLC | United States | Sign-in | The information received from Google (above) |
| Anthropic, PBC | United States | Preliminary review of photos submitted to the community gallery (done by the Operator with an AI tool; from stage 2) | The submitted photo and kit name (no nickname or email address) |
- Cloudflare (running the Service and storing data): The Service's data is processed and stored in facilities of Cloudflare, Inc. (United States) around the world. We have confirmed that, under our contract with Cloudflare (its data processing terms), Cloudflare handles the data only to run the Service and within our instructions, does not use it for marketing or advertising, and limits access to authorised personnel. Cloudflare also holds the Global CBPR international privacy certification. See "9. How we keep information safe" below for handling abroad; details are available on request through our contact address.
- Before a photo is first submitted to the community gallery, a confirmation screen will explain (1) that the photo is entered into an AI service of a US company, (2) the US system for protecting personal information, and (3) Anthropic's measures (including using a setting under which inputs are not used to train AI), and we will ask for your consent (from stage 2).
5-2. Sending user information to outside parties
- The only programs on the Service's pages that make your device send information are those needed to run the Service (showing pages, checking sign-in, blocking unauthorised access, handling heavy traffic) and those that send the sign-in cookie issued by the Service back to the Service.
- We currently include no tags that send user information to other companies for advertising, analytics or similar purposes.
- Before we add any, we will first list in this section what is sent, the name of the company that handles it, and the purposes (both ours and that company's).
6. How long we keep information
| Information | Period |
|---|---|
| Member information, records and photos | Until you delete your account; then deleted step by step |
| A keyed hash of your sign-in method (used to block re-registration with the same account for 30 days; cannot be turned back into the original ID) | 30 days after deletion is completed |
| Deletion record (internal ID and dates only) | In principle 60 days after deletion is completed (longer until we have confirmed that the photos are erased) |
| Records of operator actions | 1 year (IDs are masked for records about deleted members) |
| Full encrypted export made before major changes | Up to 30 days |
| Database change history (kept automatically by Cloudflare) | 30 days |
7. Deleting your account and data
When you delete your account from My page, your data is deleted within the periods above. Before that, you can also delete your own photos or withdraw them from the community gallery.
8. Cookies
We only use the cookie needed to keep you signed in. (If we start showing ads, we will update this section first.)
9. How we keep information safe
- Encrypted connections, server-side sign-in checks, and checks that prevent anyone from seeing another person's data.
- Photos are rebuilt before storage to remove location and similar data.
- The operator screens are protected so that only the Operator can enter.
- Handling abroad: data is stored and processed in the facilities of Cloudflare, Inc. (United States; worldwide facilities). Sign-in uses Google LLC and photo review uses Anthropic, PBC (both United States). We take safety measures after checking the US system for protecting personal information using the materials published by Japan's Personal Information Protection Commission.
10. Requests about your information
To ask for disclosure, correction, suspension of use or deletion of your information, please contact us. We will confirm it is you and respond in line with the law. You can also edit or delete your records, nickname and photos yourself in the Service.
11. Children
The Service is not for anyone under 13 (under 14 if you live in South Korea). If we learn that a user is below the minimum age, we will treat the account as deleted and erase the data. If you are under 18, please get your parent's or guardian's consent first.
12. Regions we do not serve
The Service is not available in the EU, the EEA, the United Kingdom or Switzerland. If someone in those regions asks us to delete data, we will handle it through our normal procedures.
13. Changes to this Policy
We may change this Policy when necessary. We will announce important changes in the Service in advance.
14. Contact
Email: gunpladex@gmail.com (same as Article 13 of the Terms)