Privacy Policy
This is a reference translation. The Japanese version at https://urara.dev/privacy is the authoritative text. If the two differ in meaning, the Japanese version governs. The English version may also be older than the Japanese one, so please check the Japanese page for the current wording.
1. Operator
This site (urara.dev) is operated by 麗 (urara), a solo developer.
2. Information collected
This site performs access analytics for the purposes of improving the site and gathering statistics. When a page is displayed, the following information is recorded on the operator's server (Cloudflare Workers).
- The date and time of access, the address of the page displayed, and the response status
- The type of browser and OS you are using (User-Agent), and the type of device (smartphone or computer)
- The country the connection came from, and the name of the network operator used for the connection
- The address of the page you were viewing immediately before (the referrer; only when your browser sends it)
IP addresses are handled differently depending on the type of access.
- The IP addresses of visitors are not stored as they are. A secret string is added and the address is converted into a value that cannot be reversed (a hash value), which is used to approximate the number of visitors. This is not a mechanism that identifies a device itself, so different devices on the same connection are counted as one person, and the same device may be counted as a different person if its IP address changes. Because this secret string is regenerated every 90 days, the same visitor cannot be tracked beyond 90 days.
- The IP addresses of automated programs (search engine crawlers, AI crawlers, programs scanning for vulnerabilities, and so on) are recorded as they are for 90 days, in order to investigate and guard against unauthorized access.
On all pages, in order to confirm that the page could be displayed, your browser sends a temporary token once, used only for that single display. This token is not saved on your device and is not linked to your next visit. Successful displays for which the confirmation comes back are counted in the admin screen as "confirmed as a person". Successful displays for which no confirmation comes back are shown separately, as ones where it cannot be determined whether the access was human or automated. Nothing you enter or save inside a work or a blog article is included in this confirmation in any way.
In addition, on the play pages of works only (/works/<work name>/play/ and /works/<work name>/app/), in order to understand how much those pages are used, the following information is sent from your browser while the page is displayed.
- The address of the page being displayed, and the number of seconds that page was visible on screen (time spent switched to another tab or app is not counted)
- A temporary token used only for that single display. It is created anew each time the page is opened and is not saved on your device. It is lost when the page is closed, so it is not linked to the record of your next visit
Nothing entered or saved inside a work is included in what is sent for the time spent on a work page. These records are handled in the same way as above: IP addresses are converted into hash values before being recorded, and are deleted automatically once 90 days have passed. Access from a device for which the opt-out setting described in this section has been made is excluded from the ordinary visitor and page view totals, from the display confirmation, and from the time-spent totals. However, in order to verify that the opt-out is working, it is recorded as self (excluded) for 90 days.
Individual records are deleted automatically once 90 days have passed. Daily totals (statistics not tied to an individual, such as visitor counts and page view counts) are kept without a set period, in order to follow how the site changes over time.
These records are stored only on servers managed by the operator. They are not used for ad delivery, and are not provided or sold to third parties. This is a separate mechanism from the external services described in sections 3 and 4.
If you would like your own device left out of the ordinary totals, please open this link. For one year afterwards, page views and similar activity from that device and that browser will be excluded from the ordinary visitor and page view totals. However, in order to verify that the opt-out is working, it will be recorded as self (excluded) for 90 days. (This setting is held in a cookie, so deleting your browser's cookies will cancel it.) You can cancel it from this link.
Contact form
The contact form uses Google Forms. In order to answer your enquiry, make any necessary contact, and prevent misuse and spam, the following information entered into the form is collected.
- Your name (real name or handle)
- Your email address
- The type of enquiry, the content of the enquiry (the message body), and whether you would like a reply
- The date and time the response was submitted
The setting that automatically collects the email address of your Google account is not used; the email address is taken from the form's input field. The information collected is not used for any purpose other than those above.
Where Google Forms collects technical information in order to display and submit the form or to prevent misuse, that information may also be collected on Google's side. The specific items collected are not specified by this site.
Response data is currently managed within the Google Forms form. No uniform retention period is set; it is kept only for as long as is necessary to respond and to make any necessary contact, and is deleted once the matter is complete and it is no longer needed. Viewing the pages of this site that link to the form is subject to the access analytics described in sections 2 and 4.
Information entered into the form is sent to Google Forms, and the submission date and time is recorded on the Google Forms side alongside the response record. The details of the technical information Google Forms collects, and the storage and deletion of response data on Google's services, follow Google's privacy policy and the form's settings. This site does not use any external form or anti-spam service other than Google Forms, such as Formspree or Cloudflare Turnstile.
3. About ad delivery
This site uses Google AdSense as a third-party ad delivery service.
Third-party ad providers, including Google, may use cookies to serve ads based on information about your past visits to this site and to other websites. Cookies are used for purposes such as making ads more relevant, limiting how many times the same ad is shown, detecting fraud, and measuring the effectiveness of ad delivery.
You can disable personalized advertising in Google Ad Settings. You can also manage the use of advertising cookies by participating third-party ad providers at www.aboutads.info.
You can also disable cookies themselves in your browser settings. For Google's use of cookies in advertising, please see Google's explanation of advertising and Google's privacy policy.
4. About access analytics tools
This site uses Google Analytics to analyse access. The information collected by Google Analytics may include browsing history, access dates and times, environment information and identifiers obtained through cookies and similar technologies. Google Analytics on this site also measures page views, scrolling, outbound clicks and similar events through enhanced measurement.
Data collection through Google Signals is enabled. Through Google Signals, visit data may be associated with Google account information for users who have given the necessary consent. Advertising features related to Google Signals may be used. This site's Google Analytics is not currently linked to a Google Ads account. Data retention in Google Analytics is set to 2 months for event data and 14 months for user data (user data is set to have its retention period refreshed with each new user activity).
Google Analytics user-provided data collection and automatic detection are enabled, but this site's code contains no processing that explicitly sends email addresses or similar data to Google Analytics. Through automatic detection on the Google Analytics side, information on the page may be detected, and consented data may be hashed and sent.
To refuse the collection of information by Google Analytics, please use the Google Analytics Opt-out Browser Add-on. Disabling cookies and similar technologies in your browser can limit the storage of cookies and identifiers, but does not necessarily stop all communication with, or event sending to, Google Analytics. Settings for advertising features related to Google Signals can be checked and changed in Google Ad Settings and My Activity. These are separate from the link in section 2 used to opt out of this site's own access analytics. For details, please see Google's privacy policy.
5. Disclaimer
All use of the works, tools and similar content published on this site is at your own risk. The operator accepts no responsibility whatsoever for any damage arising from the information or content on this site.
6. Copyright
Unless otherwise noted, the copyright in the text, images, code and other content on this site belongs to the operator. Reproduction or republication without permission is prohibited.
7. About linking
Linking to this site is, in principle, free. Please refrain from links that would clearly create a misunderstanding of the content.
8. Changes to this policy
The content of this policy may be changed as necessary without prior notice. A changed policy takes effect from the time it is published on this page.
9. Contact
For enquiries about this policy, please use the contact form or X (@urara_ainote).