Privacy Policy

The operator of setups. (hereinafter "Service") establishes this Privacy Policy (hereinafter "Policy") regarding the handling of users' personal information in the Service.

Article 1 (Information We Collect)

The Operator collects the following information in providing the Service:

1. Information Provided Directly by Users

• Account Information: Email address, username, display name
• Profile Information: Profile picture, bio, X (Twitter) account
• Posted Content: Setup photos, product information, comments, etc.

2. Information Collected Automatically

• Usage Information: Access date and time, pages viewed, search keywords, like/save history
• Device Information: IP address, browser type, operating system, device type
• Cookie Information: Please refer to "About Cookies" below

3. Information Obtained from Third Parties

• Social Login: When logging in using a Google account, email address, name, and profile picture provided by that service

Article 2 (Purpose of Use)

The Operator uses the collected information for the following purposes:

1. Provision, operation, and improvement of the Service
2. Creation, management, and authentication of user accounts
3. Response to user inquiries
4. Provision of personalized content (such as recommended setups)
5. Analysis and statistics of Service usage
6. Response to violations of the Terms of Service
7. Sending important notices regarding the Service
8. Information about new features, updates, campaigns, etc. (if users have opted in)
9. Purposes incidental to the above

Article 3 (Disclosure to Third Parties)

The Operator will not provide personal information to third parties without user consent, except in the following cases:

1. When required by law
2. When necessary for the protection of human life, body, or property and it is difficult to obtain the consent of the individual
3. When particularly necessary for improving public health or promoting the sound development of children and it is difficult to obtain the consent of the individual
4. When it is necessary to cooperate with a national institution, local government, or a person entrusted by them in performing duties prescribed by laws and regulations, and obtaining consent from the individual may impede the performance of such duties
5. When personal information is provided due to business succession through merger, business transfer, or other reasons

Article 4 (Use of External Services)

The Service uses the following external services. Please refer to each service's privacy policy for information on how they handle data.

1. Infrastructure & Hosting

| Service | Provider | Purpose | Privacy Policy | | ------------ | ---------------------- | -------------------------------- | ----------------------------------------------------------- | | Supabase | Supabase Inc. (USA) | Authentication, Database | Link | | Cloudflare | Cloudflare, Inc. (USA) | Web hosting, Image delivery, CDN | Link | | Google Cloud | Google LLC (USA) | Backend server | Link |

2. Affiliate

| Service | Provider | Purpose | Privacy Policy | | ----------------- | ---------------------- | ---------------------- | -------------------------------------------------------------------------------------- | | Amazon Associates | Amazon.com, Inc. (USA) | Product link provision | Link |

Article 5 (International Data Transfers)

Information collected through the Service may be stored and processed on servers outside Japan (primarily in the United States) through the external services listed in Article 4. These service providers implement appropriate data protection measures.

Article 6 (About Cookies)

1. What are Cookies?

Cookies are small text files that websites store on users' browsers. The Service uses cookies for the following purposes:

2. Types of Cookies Used

| Type | Purpose | Retention Period | | ------------------ | -------------------------------------- | --------------------------------- | | Essential Cookies | Maintaining login status, security | Until session ends to max 30 days | | Functional Cookies | Storing user settings (language, etc.) | Up to 1 year | | Analytics Cookies | Analyzing service usage | Up to 2 years |

3. Managing Cookies

Users can reject cookies through browser settings. However, rejecting certain cookies may limit some Service features.

Article 7 (Data Retention Period)

The Operator retains collected information for the following periods:

1. Account Information: Deleted within 30 days after account deletion (including backups)
2. Posted Content: Retained for up to 90 days after user deletion for backup purposes
3. Usage Logs: Up to 2 years
4. Information required to be retained by law: As required by law

Article 8 (Security Measures)

The Operator implements the following measures to prevent leakage, loss, or damage of collected information:

1. Encryption of communications using SSL/TLS
2. Password hashing
3. Implementation of access controls
4. Regular security audits

However, complete security cannot be guaranteed for communications over the Internet.

Article 9 (User Rights)

Users have the following rights regarding their personal information:

1. Right to Access: Users may request disclosure of their personal information held by the Operator
2. Right to Correction/Deletion: Users may request correction or deletion of inaccurate personal information
3. Right to Restrict Processing: Users may request suspension of use of their personal information
4. Data Portability: Users may request export of their posted content

To exercise these rights, please contact us using the information provided at the end of this Policy. We will respond within a reasonable period after verifying your identity.

Article 10 (Children's Personal Information)

The Service is intended for persons aged 13 and over. If we become aware that we have collected personal information from a child under 13, we will promptly delete such information.

Article 11 (Changes to This Policy)

1. The Operator may change this Policy due to changes in laws, changes to the Service, or other reasons.
2. When making significant changes, we will notify users through appropriate means such as announcements on the Service or notification to registered email addresses.
3. The revised Privacy Policy shall take effect from the time it is posted on the Service.

Article 12 (Contact Information)

For inquiries regarding this Policy, please contact:

• Operator: setups.
• Email: [email protected]

Enacted: June 29, 2024 Revised: January 15, 2026