Privacy policy

This is an English translation of the privacy policy of Iromoe.com. The Japanese version is authoritative. The oshi (favorites) and notification features below are currently available in Japanese only.

Analytics

We use the analytics tool Umami to understand how the site is used. Umami does not use cookies and does not collect information that identifies individuals.

We also use Microsoft Clarity to improve usability. Clarity uses cookies and similar technologies to record interactions on the page (such as clicks and scrolling). The collected data is handled under the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).

We also use Google Analytics (Google LLC). It collects pages viewed, referrers, interactions on the page (such as scrolling and clicks on links to other sites), device/browser information and approximate region using cookies and similar technologies, and sends them to Google. We do not use Google signals or ads personalization, and the data is not used for advertising. The data is handled under the Google Privacy Policy (https://policies.google.com/privacy). You can opt out with the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout).

Microsoft Clarity and Google Analytics are not loaded on the oshi and notification settings pages (My Oshi, new works from your oshi and transfer codes, under /oshi). The screens for choosing whom to follow and at what level on other pages are also hidden from Clarity recordings. Umami is used on these pages too, but only counts the URLs of the pages opened.

Cookies

We use a cookie that remembers your age confirmation for 30 days (iro_age) and the cookies of Microsoft Clarity and Google Analytics. On devices where you have added an oshi or allowed notifications, we also use a cookie that identifies the device (iro_dev). On devices signed in with a passkey, we also use a cookie that keeps you signed in (__Host-iro_ses).

Oshi and notifications (My Oshi)

There is no membership registration (only if you want to sync with other devices can you sign in with a passkey, described below). For each device on which you add an oshi or set up notifications, we assign a randomly generated number (device ID) and store only the following on our server. We do not store your name, email address or the works you viewed.

  • The device ID (a random number, stored in the iro_dev cookie)
  • What you follow as an oshi (names of circles, makers, labels, series, voice actors, authors, performers, directors, etc.), its level (Interested, Casual, Oshi, Top oshi) and per-oshi display settings
  • The notification destination (the endpoint and encryption keys issued by your browser's or OS's notification service when you allow notifications)
  • Notification display settings, allowed notification hours, the levels sent immediately even outside those hours, the frequency of the casual-oshi digest, and the device's time zone
  • The works we notified you about as new works from your oshi, when they were sent and when you viewed them in My Oshi
  • If you issue a transfer code, an irreversible value (hash) derived from it; we do not store the code itself. If code entry fails repeatedly, we store an irreversible value derived from the IP address for a short period (up to 1 day) to temporarily stop accepting attempts

Notifications are delivered through your browser's or OS's notification service (Google, Apple, Mozilla, Microsoft, etc.). Notification content is encrypted, and by default it does not include work titles or images.

Signing in with a passkey (optional)

If you change devices or want the same oshi and settings on several devices, you can sign in with a passkey (sign-in confirmed with your device's fingerprint, face or screen lock). Using it is optional. We do not ask for your name, email address or phone number. The passkey's private key stays on your device (iCloud Keychain, Google Password Manager, etc.) and never reaches us. When you sign in, we store the following on our server.

  • The passkey's public key, its identifier (credential ID) and a counter used to detect unauthorized copies (signCount)
  • When the passkey was created and last used to sign in, and the name you gave the passkey (optional; initially the device type, such as "iPhone")
  • A randomly generated number that identifies the account (separate from the device ID)
  • A copy of your oshi (levels and per-oshi display settings) and settings (notification display, allowed hours, levels sent immediately, casual-oshi digest frequency, notifications of announcements) for syncing with other devices, with the time each was changed
  • The signed-in devices (device IDs) and an irreversible value (hash) derived from the sign-in cookie. If sign-in attempts continue, we store an irreversible value derived from the IP address for a short period (up to 2 days) to temporarily stop accepting attempts

You can list and delete passkeys under "Manage passkeys" in My Oshi. Deleting the last one or deleting the account removes all of the above (the oshi and settings on each device stay on that device). Accounts not used for one year are deleted automatically.

Recording when you usually visit (optional)

Only on devices where you choose "Record" in the settings, we record how many times you open Iromoe.com by day of the week and time slot (2-hour units), to send notifications at times that suit you. We do not record the works you view or exact times. This is off by default. You can stop it at any time in the settings, which deletes that device's records. The records are used only for that device's notification timing and for overall statistics on which hours are busy (in a form that does not identify individuals; no statistics are shown while few devices are recording).

Retention and deletion

You can delete your oshi and settings at any time with "Delete all settings on this device" in My Oshi (if you are signed in with a passkey, the account's copy remains, so please also delete the account under "Manage passkeys"). Information for devices not used for one year is deleted automatically. Records of works we notified you about are deleted after about 90 days. We never pass oshi or notification information to external analytics tools.

External services

We show the official embedded player of chobit (DLsite's sample service) for audio samples and sample images provided by DLsite for work images. When these are displayed, browsing information may be sent to each service.

Affiliate programs

This site participates in the DLsite affiliate program and the DMM affiliate program. Purchase information on the linked sites is handled by each service.

Contact

info@akiba-k.net. Terms of use (Japanese): iromoe.com/terms