Privacy Policy

1. Operator

Operator: nolozy

Contact: contact@nolozy.com

The Service is run by an individual. The Operator's name and address, as required by Article 32 of Japan's Act on the Protection of Personal Information, will be given without delay to anyone whose data is held who asks for them.

2. What is collected

The Service collects:

• your Google account identifier (the number Google assigns to each account), used only to recognise you when you sign in. The Service does not receive the name, email address or profile picture on your Google account
• what you enter or upload (handle, display name, bio, icon, social usernames, devices, in-game settings, language)
• information used to count views of public pages, and how often product links and sponsor banners are shown and clicked (IP addresses are hashed, see below)
• cookies for your session and your chosen language
• the language your browser asks for, and the country Cloudflare infers from your IP address (used on the spot to choose the page language and which banner fills an ad slot; never stored)

3. IP addresses

So that the same visitor is not counted twice within a period, the Service keeps a hash of the visitor's IP address combined with a secret key and the page, link or banner concerned.

Only the hash is kept; the address itself is never stored. The hash cannot be turned back into an address, and the same visitor cannot be matched across two public pages.

Hashes are deleted 24 hours after they are created.

4. How it is used

The information is used to:

• provide the Service, identify you and sign you in
• display what you set up on your public page
• count views of your public page and show that count to you
• count views per page, clicks per product link, and views and clicks per sponsor banner, as totals that identify no one, to improve the Service, decide where advertising is placed and report to advertisers
• notify people who bookmarked you when you update (shown inside the Service; no email is sent)
• show you notices from the Operator, such as a revision of the terms, a badge given to you or a change to your handle, in your notifications inside the Service
• choose the page language, and the banner shown in an ad slot for your region
• prevent abuse and act on breaches of the terms
• answer your enquiries

5. What is public

Your handle, display name, bio, icon, social usernames, devices, in-game settings with their change history (the old and new values, the date and any note you wrote, for the latest 20 saves per game) and view count are visible to anyone on the internet. If you have not set a display name, your handle is shown as your name.

Uploaded images are stored only after location data and camera details are removed from them.

Your Google account identifier is not published.

When a link to a public page is shared on social media or elsewhere, it shows a card image carrying some of the information above (display name, icon, in-game settings, devices and so on). The service it is shared on may keep its own copy of that image, which can remain there after your account is deleted. The Operator cannot delete copies kept by other services.

6. Sharing with third parties

The Operator does not share your information with third parties except where required by law.

No third-party analytics or advertising networks are in use, and the Service's pages contain no tags, pixels or other code that sends information about visitors to another company. When you follow a link to a social network or a shop, that site collects information under its own policy.

Settey takes part in the Amazon Associates Program. When you follow a buy link to Amazon, Amazon may use cookies to record the referral. Amazon handles that under its own privacy notice, and the Operator receives nothing that identifies you.

7. Processors

The Service is built on:

• Cloudflare, Inc. — running the application, the database and image storage
• Google LLC — account authentication (sign in with Google)

8. Where data is stored, and processors abroad

Data is stored on Cloudflare's network. Their infrastructure is global, so data may be stored and processed on servers outside Japan.

Both processors, Cloudflare, Inc. and Google LLC, are companies in the United States. The Operator relies on their terms and data processing agreements, which provide safeguards meeting the standard of Japan's Act on the Protection of Personal Information (Article 28(1)); details of those safeguards are available on request.

For the United States' data protection system, see the survey of foreign systems published by Japan's Personal Information Protection Commission.

9. Security measures

To prevent personal data from leaking or being lost, the Operator:

• has set out, in this policy, how information is handled when it is collected, used, stored and deleted
• is the only person who handles personal data, and reviews that handling regularly
• keeps personal data in the processors' physically secured data centres
• encrypts traffic (HTTPS), restricts the admin screens, hashes IP addresses, strips location data from uploaded images, and deletes information automatically once it is no longer needed
• is aware that the data is stored and processed on US companies' infrastructure, including outside Japan, and takes the measures in section 8 with the US system in mind

10. Cookies

Cookies are used to keep you signed in and to remember your language. Settey itself sets no advertising or tracking cookies (for the cookies Amazon uses on its own site, see section 6).

You can disable cookies in your browser, but you will not be able to sign in.

11. Retention and deletion

Your information is kept for as long as your account exists, except that notifications are deleted automatically after 30 days and the hashes used to count views after 24 hours.

If you delete your account, your profile, public page, social links, devices, in-game settings, view count, bookmarks, notifications and uploaded images are all deleted immediately and can no longer be seen on the Service.

The database is backed up automatically in case of failure, and a backup still holds deleted information for up to 30 days. Backups are used only to recover from a failure and are erased automatically after 30 days.

12. Access, correction and deletion

Most of what you registered can be viewed, changed or deleted yourself from the dashboard.

For anything else - to be told the purposes of use, or to have your data disclosed (including records of provision to third parties), corrected, added to, deleted, no longer used, erased or no longer provided to third parties - write to contact@nolozy.com. Requests are handled without delay according to law once identity is confirmed, free of charge.

13. If you live outside Japan

For people in the European Economic Area, the United Kingdom, Brazil and similar jurisdictions, the Service processes information to provide your account (performance of a contract), and to count views and prevent abuse (legitimate interests).

Under those laws you may ask for access to, correction or erasure of your information, restriction of or objection to its processing, and a portable copy of it, by writing to contact@nolozy.com. You may also complain to your local supervisory authority.

14. Changes to this policy

This policy may be revised. A revision applies from the moment it is published on the Service. Significant changes, such as a new purpose of use, will be announced on the Service in advance.

Contact

Questions about this policy: contact@nolozy.com