Privacy policy

This English version is a reference translation. The Japanese text is binding, and where the two differ the Japanese governs.

Last updated: 2026-10-01

This policy covers how personal information is handled by Kamakiri Pages and this site (together, the service), and in email sent to us. The service is run by タバリ・コンサルティング, a sole proprietorship in Kyoto, Japan, under the brand Kamakiri Labs. The Terms of Service name the provider in full.

Visitors

We set no cookies. To run the service, count visits and protect it against attacks, we may record a visitor’s IP address and what they requested, on this site and on every site we host, and keep them only as long as these purposes need. This site remembers display choices you make, such as the theme or the language of a command’s output, in your own browser only, and never sends them to us.

What a hosted site collects through its own code is its owner’s responsibility. When its owner turns on the Cloudflare CDN, Cloudflare, a United States company, serves that site, so the traffic to it passes through Cloudflare, which may set cookies of its own.

Account holders

What we hold, and what we use it for:

• Your email address. It is your account. We use it to send login codes and notices, and we record with it when you accepted the Terms.
• Sign-in data. Login codes, which expire after 10 minutes, and API keys, of which we store only a hash. We use them to confirm it is you.
• Your sites. Their settings, deploy history and files. We use them to serve your sites and to let you roll back. The files are public by design.
• Your custom domains. The hostnames, their certificates and what public DNS answers for them. We use them to check that you control each name and that it points at the service, and to serve it over HTTPS.
• WebAccel credentials. Only if you use the WebAccel CDN, to manage the resource in your own Sakura account.

People who write to us

When you ask for the beta or email us, we keep your address and what you write. For a request through the form, we also keep the reason you chose and the language of the page you sent it from. We use them to reply and to send your invitation.

We use everything this policy describes only to run the service and to contact you about it. We never sell it or use it for advertising.

Where it is kept, and who handles it

Everything we store, apart from email sent to us, is on Sakura Internet’s servers in Japan: the service and its database in Ishikari, and the encrypted backups in Tokyo. Email sent to us is stored with Fastmail, an Australian company, in the United States. The service also relies on these providers:

• Scaleway. A French company that delivers the emails the service sends, so it receives your address and each message. France is a country the Personal Information Protection Commission recognises as protecting personal information to a standard equivalent to Japan’s.
• Let’s Encrypt. A United States certificate authority that issues the certificates for your hostnames. Issuing one records the hostname in the public certificate transparency logs.
• Public DNS resolvers. Including Cloudflare’s and Google’s, in the United States. They receive your hostnames when we check your DNS.
• CDN providers. Cloudflare or WebAccel, only when you turn that CDN on.

Except where the law allows it, we give it to nobody else.

How long we keep it

Account data is kept while the account exists. A site keeps its five newest deploys, and tearing a site down deletes its files. When you ask us to close your account, we delete it and its sites within 30 days. Anything we delete leaves the encrypted backups within a further 14 months and 14 days. A beta request made through the form is kept until you ask us to delete it. Email you send us is kept as long as it takes to answer, and for the life of your account when it concerns your account. We cannot remove a hostname from the certificate transparency logs, or an email we have already sent.

Security

Only we can reach the server and the database. API keys are stored as hashes, and WebAccel credentials are encrypted under a key kept apart from the database. We handle personal data in France (email sent through Scaleway), and in Australia and the United States (email to us, stored with Fastmail). We take our security measures having checked each country’s system for protecting personal information.

Your rights and contact

To learn why we use your data, to see what we hold or the record of what we passed on, or to have it corrected, completed, deleted, erased, no longer used or no longer passed on, or to close your account, write to contact@kamakiri-labs.jp. We answer within 30 days. Complaints, and requests for our postal address, go to the same email address.

Changes to this policy

When this policy changes, we announce the new policy and the date it takes effect by email to account holders and on the news page, before that date.