PrivacyPolicy

Last Updated: April 1, 2026

HieronLab (hereinafter referred to as “the Site”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy is designed to comply with international legal standards, including the Japanese Act on the Protection of Personal Information (APPI), the European Union’s General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This policy outlines how we collect, use, and protect your data with the utmost transparency.

1. Information We Collect (Notice of Collection)

We only collect the minimum amount of data necessary for the legitimate operation of our business and to maintain security. The categories of personal information we may collect include:

  • Automatically Collected Information (Technical Data): IP addresses, browser types, operating systems, referring URLs, and browsing behavior on the Site (e.g., access times, pages viewed, click logs). This is collected via cookies and similar tracking technologies.

  • Information You Provide Directly: Name (including pseudonyms or handles), email address, and message content submitted through our contact form.

2. Purposes of Processing and Legal Basis

We use the collected data for the following purposes:

  • Site Optimization: Improving user experience and content using analytics tools such as Google Analytics and Google Search Console.

  • Security and Fraud Prevention: Maintaining security and preventing spam (based on our legitimate interests under GDPR Article 6(1)(f)).

  • Customer Support: Responding to your inquiries.

  • Advertising and Affiliate Programs: Displaying advertisements via third-party vendors, including Google AdSense, and promoting products or services through affiliate programs (including future implementations).

3. Cookies and Advertising

We use cookies for analytics and advertising purposes.

  • Google Analytics: We use cookies to collect analytical data. This data is aggregated and does not personally identify you.

  • Personalized Advertising: We may use advertising services like Google AdSense, which serve ads based on your interests. These vendors use cookies to serve ads based on your prior visits to our Site or other websites.

  • Management and Opt-Out: You can disable cookies through your browser settings or opt out of personalized advertising by visiting Google’s Ads Settings.

4. Data Retention and International Transfers

  • Retention Period: Inquiry data is retained for up to 180 days after the final response. Analytics data is retained according to each tool’s policy (typically up to 26 months). We promptly delete or anonymize data once it is no longer needed.

  • Disclosure to Third Parties: We do not sell or share your personal data with third parties without your explicit consent, except as required by law or to service providers acting on our behalf (e.g., Google).

  • International Data Transfers: By using the Site, you acknowledge and consent to the transfer and processing of your data in countries outside your country of residence, including Japan and the United States, where our servers or service providers may be located.

5. Your Legal Rights

Depending on your jurisdiction (e.g., GDPR, CCPA, APPI), you may have the following rights:

  • Right to Access, Rectification, and Erasure: The right to request access to, correction of, or deletion of your personal data.

  • Right to Object and Restrict Processing: The right to object to our data processing or request data portability.

  • Right to Opt-Out of Sale or Sharing: Under the CCPA, you have the right to opt out of the “sale” or “sharing” of your personal information. Note: We do not currently sell personal information.

  • Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

6. Children’s Privacy (COPPA & GDPR Compliance)

Our Site is not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe we have inadvertently collected such information, please contact us so we can promptly delete it.

7. Do Not Track (DNT) Signals

Some web browsers transmit “Do Not Track” signals. Because there is currently no universal standard for recognizing or decoding these signals, our Site does not currently respond to DNT signals.

8. Security Measures

We implement appropriate physical, technical, and organizational security measures, including strictly enforced SSL/TLS encryption (HTTPS), to prevent unauthorized access, data breaches, loss, or alteration of your personal data.

9. Disclaimers

The Site participates in affiliate programs. We assume no responsibility for the information, services, or products provided on external websites linked from our Site. While we strive for accuracy at the time of publication, we make no warranties regarding the completeness, reliability, or safety of the content.

10. Governing Law and Jurisdiction

Any disputes arising out of or relating to this Privacy Policy or the use of the Site (including contractual, tort, and all other claims) shall be governed by and construed in accordance with the laws of Japan. You agree that the Tokyo District Court shall have exclusive jurisdiction as the court of first instance over any and all legal disputes arising in connection with the Site.

11. Precedence of Language

In the event of any discrepancy between the Japanese version and the English version of this Privacy Policy, the Japanese version shall prevail.

12. Contact Information

For inquiries regarding this policy or to exercise your rights, please contact us at:

Contact: [Your Email Address or Contact Form URL]