Privacy policy

1. Operator and contact

Operator: Fuse Capital LLC. Responsible person: Shinichi Fuse. Contact fuse@fuse-capital.jp for privacy enquiries and requests for access, correction, restriction or deletion. Business address information is also available promptly upon request through this contact.

2. Information we handle

We handle account email addresses, language settings and authentication information; email addresses specified for invitations; submitted names or nicknames, relationships, questions, text, photos and consent; review status; book drafts; purchased album and purchaser identifiers, payment identifiers, amounts, payment status and accepted terms versions; and usage dates and actions. Passwords are managed by the authentication service and are not displayed in the operator dashboard.

Delivery and authentication infrastructure may process connection information such as IP addresses for security and troubleshooting. When you contact us, we also handle your contact details and enquiry.

For friends groups we also handle group names, optional graduation years, nicknames, photo prompts, captions, votes and results, reports and their status, book selections and accepted policy versions. We use these for group play, limited sharing, revisiting memories, book previews and support.

For photo public links we handle expiry, sharing consent and comment availability, along with comment text, chosen display names and withdrawal status. To limit abuse we record one-way identifiers derived from connection information and attempt counts. This feature does not store raw IP addresses in its database, though delivery infrastructure may include them in connection logs.

3. Why we use it

We use information for registration and sign-in, invitations, questions and contributions, storage, review and limited sharing, book previews and viewing PDFs, purchase verification, delivery and refunds, support and data requests, print-launch notices for people who request them, necessary service notices, abuse prevention, troubleshooting and usage analysis to improve the service.

We do not sell personal information for advertising or use private photos and stories as public examples without separate consent. Submitted content is not currently used for AI training or AI rewriting.

4. Sharing and service providers

A contribution goes to the owner whom the contributor agreed to send it to, and is shared with invited members after review. People permitted to view records may keep their own copies or PDFs.

We use external infrastructure as needed to provide the service, including Supabase for authentication, data and photos, and Sites / Cloudflare for site delivery. Processing by overseas providers is included. Except where permitted by law, we obtain necessary consent before disclosure to third parties beyond these purposes. We do not yet send records to print providers. Stripe processes payments. We send purchase identifiers and payment details, not private photos or story text. Stripe handles card information entered at checkout; we do not store it in our database.

Group photos are shared with members when posted. Caption authors appear after results only if they choose to show their names. Explicitly shared photos and comments written on their public pages can be viewed by anyone with the link. Private group captions are never automatically published. Hiding or revocation cannot recall saved copies. Printed-book orders are not open and group photos are not sent to printers.

5. Storage and protection

We use private storage, permission checks, HTTPS and access limited to operational needs. The database region is currently Japan (Tokyo). Location metadata in original photos is not carried over to display images or viewing PDFs.

We retain information as needed for the service and legal obligations. We review the relevant records and storage when information is no longer needed or deletion is requested. Specific deletion timing and backup handling are explained in our response.

6. Browser storage and measurement

The photo game editor and pass-the-phone mode do not save your photos or answers on our server or in browser storage. They stay only in the open page’s memory and are lost when you close, reload or leave the page. Challenge links contain only a public prompt ID and language, or format and sample choices, never your answer. Sharing or copying a link is initiated by you.

Browser storage keeps sign-in information, language preferences and a selected public question. The question selection is kept for up to 24 hours to resume after registration confirmation, and removed after a question link is created. At signup, the account also stores the public question type and whether to return to the print-launch notice screen, so you can continue in another browser. These choices stop being used after 24 hours and are cleared after link creation or confirming the notice preference. That selection record contains no private text, photos, names or contribution links.

While you make a memory card, your photo and words are not uploaded. Choosing “Keep draft & continue” stores one draft in this browser, including the original photo, display images, words and any names you entered. A draft can be resumed within 24 hours of creation; expired data is removed the next time the draft is read. It is also removed after a successful album save or when you choose to delete it. On shared devices, delete the draft or clear the browser’s site data after use. Photos and words are sent to an album only when you review the imported content and choose to save it.

Choosing Save draft in the card or two-photo collage editor stores the edits, original photos and display images in this browser. Each editor keeps its latest draft, which can be resumed within 24 hours of saving. Expired drafts are deleted on the next read; you can also remove them with the delete-draft button or by clearing the browser's site data. Drafts are not synced to other devices or uploaded to the operator. Image downloads and sharing happen on the device or in the app you choose.

We record events such as creating, sharing and opening a question link, starting a response, submitting and approving it. Those event records do not include story text, photos or names, and are not used for public popularity rankings or follower counts.

Public-link access information stays after the URL fragment marker and in the open page; it is not sent to the page host or search metadata. Comment withdrawal identifiers and secrets are kept in that tab’s session storage for up to 30 days, without device synchronization. Closing the tab or clearing site data may remove withdrawal access; contact the operator if needed.

7. Your requests

Email us to request access, correction, restriction, deletion or account closure. We verify identity and the records concerned and respond under applicable law. Contributors and people shown in photos can make requests without an account. If we cannot fulfill a request or need another process, we explain why.

Do not email passwords or sign-in links. Initially, describe your request and the relevant record in general terms. We will explain any further verification needed.

8. Updates

We announce changes and their effective date on this page. We provide advance notice of important changes where appropriate, including changes in purpose or external data transfers, and obtain consent where required.