Privacy Policy

Version 1 — Effective 12 September 2026

Studio Duckbill LLC (“we”, “us”) handles personal information collected through the services we provide under the name “SplatStroll” (including SplatStroll Avatar, SplatStroll Map and SplatStroll Story; together, the “Service”) as set out below.

Where a company other than us provides a service under its own name using the technology behind the Service, that service is governed by the terms and privacy policy issued by that company.

1. Information we collect

When you use features that require registration, we collect the following.

Email address	As entered by you at registration. Used to verify your identity and to send the sign-in link.
Display name	A name you may set freely. The initial value is a placeholder we generate.
Registration and last sign-in time	Used to manage your account.
Hashed IP address	We do not store your IP address itself. We store only an irreversible hash computed with a salt that changes daily. Used to detect unauthorised access.
Device information	A shortened form of the User-Agent string sent by your browser. Used to detect unauthorised access.
Cookies	Used to keep you signed in (Section 5).

We collect no other information that identifies you. We do not record which scenes you open or what you do inside the Service in a way that is linked to you.

2. Purposes of use

We use the information collected only for the following purposes.

• To verify your identity and send you a sign-in link
• To control access to features that require registration
• To detect unauthorised access and operate the Service securely
• To respond to your enquiries

We do not use personal information beyond these purposes without your consent. We do not use personal information for advertising or behavioural targeting.

3. Retention

• Registration data (email address, display name, registration time, last sign-in time): retained until the account is deleted.
• Authentication records (sign-in requests and outcomes, sign-outs, suspensions and deletions, including the hashed IP address and device information): deleted 90 days after they are recorded.

If you request deletion of your account, we delete your registration data and the authentication records that correspond to you.

4. Disclosure to third parties and outsourcing

We do not disclose your personal information to third parties except as required by law.

We may outsource all or part of the handling of personal data to external providers, to the extent necessary to achieve the purposes above. We supervise such providers as necessary and appropriate.

Such outsourcing may involve providers located outside Japan. The countries in which our providers are currently located are Japan and the United States of America.

The United States is not a country recognised as having a personal-data protection regime equivalent to that of Japan. It has no comprehensive federal statute corresponding to Japan’s Act on the Protection of Personal Information; protection is provided instead by sector-specific federal laws and by state laws. We have these providers handle personal data under appropriate contractual terms.

The names of our providers, further detail on the personal-data protection regime of the relevant foreign country, and detail on the safeguards those providers implement are available on request from the contact below.

5. Cookies

The Service uses cookies to keep you signed in. These cookies are strictly necessary to provide the Service and are not used for advertising or analytics.

If you disable cookies in your browser, you will not be able to use features that require registration.

6. Security measures

• All communication is encrypted.
• We use a passwordless method, eliminating the risks associated with storing passwords.
• Authentication records contain no email addresses, sign-in links or cookie values. Of IP addresses, only an irreversible hash is stored.
• We limit who may handle personal information and manage their access rights.
• Awareness of the external environment: we handle personal data in the United States of America. We implement our security measures with an understanding of that country’s personal-data protection regime.

7. Your rights

You may request disclosure, correction, addition or deletion of your personal information, and the suspension of its use, its erasure, or the suspension of its provision to third parties. Please use the contact form below. We will verify your identity and respond in accordance with applicable law.

You can change your display name at any time from the profile screen of the Service.

8. Changes to this Policy

We may revise this Policy. Where a revision materially affects your rights or the handling of your personal information, we will issue a new version and ask you to accept it.

This English text is provided for convenience. If it differs from the Japanese text, the Japanese version prevails.

Terms of Service · About SplatStroll