Privacy Policy

1. Information we collect

The Operator collects the following information to the extent necessary to provide the Service.

• Account information: User identifier (UID), email address, display name, profile image, and related information provided by Firebase Authentication
• Posts and usage: Event and SS SPOT information and images, in-game areas and coordinates, image-maker settings, external links, views, and related activity
• Device and communications: IP address, browser and device information, access time, request details, cookies and other identifiers, and error logs
• Inquiry information: Inquiry contents, contact details, and response history

The Service does not directly collect or store your Google password when you log in with Google.

2. Purposes of use

• Identity verification, maintaining login sessions, and account management
• Providing Event, SS SPOT, and image-maker posting, publication, editing, saving, and related features
• Preventing misuse, maintaining security, investigating failures, and operating the Service
• Understanding usage, improving features, and considering new features
• Reviewing and serving advertising, measuring its effectiveness, and preventing abuse
• Responding to inquiries and communicating important notices
• Handling violations, disputes, and legal obligations

3. Cookies and similar technologies

To securely maintain login sessions, the Service stores session information exchanged from a Firebase ID token in an httpOnly cookie, and stores Firebase authentication information and the login retention deadline in browser local storage or similar storage. Browser session storage is also used to avoid counting the same page view more than once in a browser session.

Google Analytics 4 and Google Tag Manager

The production website uses Google Analytics 4 (GA4) through Google Tag Manager (GTM) to understand usage and improve content and features. GTM manages measurement tags; GA4 measures and reports usage. These services are provided by Google LLC.

• Information sent: Page URLs and titles, referring URLs, visit times, browser language, browser and device information, cookie-based identifiers, and interaction information such as the type of card created, template selection, downloads, saves and sharing actions. The items measured depend on the enabled tags and features used.
• Recipient and purposes: Google LLC receives this information to provide analytics. The Operator uses the reports to understand traffic sources and feature usage and to improve the Service. Information may be processed outside Japan, including in the United States.
• Cookies and communications: GA4 uses cookies such as _ga to distinguish browsers and sessions. An IP address is transmitted when connecting to Google; Google states that GA4 does not log or store individual IP addresses and uses them to derive approximate location information.

The Service’s custom image-maker measurement events record action types and settings, rather than attaching image files, entered character names, email addresses, passwords or Lodestone profile URLs as event parameters. Public page URLs and titles may still appear in page-view measurements. Do not enter private information in public content or search fields.

Managing measurement and browser storage

On supported browsers, you can install and enable the Google Analytics Opt-out Browser Add-on to prevent Google Analytics measurement in that browser. It does not disable other services or the Service’s own access logs. Availability depends on your device and browser.

You can also delete or restrict cookies and site storage in your browser settings. Blocking cookies alone does not guarantee that all communications or measurement stop, and deleting or blocking authentication storage may prevent login or remove saved local settings.

See How Google uses information from sites or apps that use its services and Google Analytics data safeguards for Google’s handling of this information.

Google AdSense

The production website uses Google AdSense, an advertising service provided by Google LLC, for site review and ad delivery. Google and other third-party vendors may use cookies to serve ads based on a user’s previous visits to this or other websites. Information such as page URLs, IP addresses, browser and device information, cookie-based identifiers, and ad interactions may be sent to Google and processed outside Japan, including in the United States.

You can manage or opt out of personalized advertising in Google Ads Settings. The Service will use a consent management mechanism where required by applicable law or Google policy. Agreement to the Service’s terms at registration does not replace any separately required consent for analytics or advertising.

4. External services and international processing

The Service uses Firebase Authentication, provided by Google LLC, for authentication. Authentication information may be processed on Google’s servers. See Firebase privacy and security information for details.

When you use Lodestone import in the image maker, the public character-profile URL you enter is sent to the EO PLACE server. EO PLACE retrieves and caches public profile fields and the public character portrait from The Lodestone. XIVAPI is used through pre-synchronized static master data; character details and EO PLACE account information are not sent to XIVAPI when creating a card. See About EO PLACE and its data sources for details.

The Operator may engage external providers for server operation, data storage, failure monitoring, and similar tasks. In that case, providers may handle information only to the necessary extent and will be appropriately supervised.

5. Disclosure to third parties

The Operator does not provide personal data to third parties except with the person’s consent, as required by law, when necessary to protect a person’s life, body, or property and obtaining consent is difficult, or in other cases permitted by law.

6. Public information

Event and SS SPOT information, images, areas, coordinates, display names, external links, and other information you make public can be viewed by anyone, including users who are not logged in. Image-maker work with a share URL can be viewed by anyone who knows that URL. Source images and settings retained for editing are available only to the owner. Do not post personal information you do not want made public.

7. Retention and security

Information is retained only for the period needed to fulfill its purpose or to meet legal and abuse-prevention requirements. Information no longer needed is deleted or anonymized through reasonable methods. Information in backups is removed according to the applicable backup cycle.

The Operator uses reasonable safeguards including encrypted communications, access controls, permission management, and backups. However, complete security on the internet cannot be guaranteed.

8. Access, correction, and deletion

Subject to applicable law, you may request notice of purpose, access, correction, suspension of use, or deletion of your retained personal data. After verifying your identity, the Operator will respond within a reasonable period. SS SPOT posts and saved image-maker work can be edited or deleted from My page.

9. Minors

If a minor uses the Service, they should obtain consent from a parent, guardian, or other legal representative where necessary.

10. Changes to this Policy

This Policy may be updated in response to changes in law or the Service. Important changes will be announced in a clear manner within the Service.

11. Requests and inquiries

Your account and ordinary post data can be deleted from Profile settings. Other requests concerning access, correction, suspension of use, deletion, or the handling of personal information are accepted through the Service’s dedicated form.

Operator

ネコセン

Contact

Inquiry form