WirohScope of Application and Operator
This Privacy Policy (the “Policy”) applies to the handling of information relating to users of the Wiroh public website (the “Site”) and the Habitat administration site at habitat.wiroh.com (the “Administration Site”). It also covers information processed by Google Sign-In for Gorillango at gorillango.com. These services are operated by 上田大樹 (the “Operator”).
Information Handled and Purposes of Use
Ordinary Browsing
Ordinary browsing of the Site does not collect names, contact details, inquiry content, or other information entered by users.
Technical Information
When a user accesses the Site, technical information such as the user’s IP address, date and time of access, pages viewed, referrer, browser, operating system, device, country or region, and network and display performance may be transmitted.
This information is used to deliver and maintain the Site, aggregate usage, improve the site experience, respond to outages, and implement security measures.
Inquiry Information
If a user contacts the Operator by email, the Operator collects the user’s email address, name and other information provided by the user, the inquiry content, and any attachments.
This information is used to respond to the inquiry, verify identity where necessary, manage response records, handle requests concerning individual rights, address misuse or disputes, and take other actions required by law.
Google Sign-In (Habitat Administration Site)
The Administration Site uses Google Sign-In to verify the identity of authorized users with Wiroh Google Workspace accounts. The requested scopes are openid, email, and profile, which cover basic account information. Through Microsoft Azure’s authentication service, the Administration Site verifies the Google account identifier, email address, email verification status, and Google Workspace domain.
This information is used to verify identity, match users to previously registered accounts, determine access permissions, and prevent misuse. On the first successful sign-in, the Google account identifier is linked to the registered user. Subsequent access checks use that identifier.
The registered email address, Google account identifier, role, access status, and registration and update timestamps are stored in Microsoft Azure Storage. Audit records of changes to user access and administration actions include the acting account identifier, action, and timestamp. Administrators responsible for managing access can view the registration information needed for that purpose.
Google Sign-In (Gorillango)
Google Sign-In for Gorillango is for general users. The requested Google scopes are openid, email, and profile, which cover basic account information. Through Supabase Auth, Gorillango may receive the Google account identifier, email address, verification status, and basic profile information such as a name and profile image.
This information and the Supabase account identifier are used to verify identity, link the account, maintain the signed-in session, and match information to the user’s own account. Authentication and account information are stored in Supabase. Account information is also used for the name displayed in the app.
External Services, External Transmission, and Cookies
Google Analytics
Only when a user allows analytics, the Site uses Google Analytics 4 provided by Google LLC. Cookie and similar identifiers, page categories, referrers, viewing dates and times, on-site actions such as scrolling and link clicks, browser, operating system, device, language and screen information, the IP address accompanying communications with Google, and an inferred region are sent to and processed by Google to measure and improve Wiroh’s work, communications, and site experience.
The Operator does not send names, contact details, inquiry content, other direct identifiers, or user-entered text to Google Analytics. Before permission is granted or when analytics is rejected, the Google tag is not loaded and no information is sent to Google Analytics. Users can change their choice through “Site settings” in the shared header.
How Google uses information from sites or apps that use its services
Provision to Third Parties and Outsourcing
The Operator does not provide personal data to third parties except with the individual’s consent or as permitted by applicable law. If an external service provider processes personal data to the extent necessary to operate the Site, the Operator appropriately selects and supervises the provider in accordance with applicable law.
Moshimo Affiliate
The Site may use Moshimo Affiliate, provided by Moshimo Co., Ltd. If a user purchases a product or applies for a service through an advertisement, the Operator may receive a performance-based commission.
When an advertisement is displayed or clicked, information identifying the advertisement or promotion, the user’s IP address, access date and time, referrer, browser, and device information may be sent to Moshimo Co., Ltd. to display advertisements, measure impressions, clicks and resulting activity, and manage advertising placements.
Moshimo Co., Ltd. Privacy Policy
Administration Site Authentication and Storage
The Administration Site uses Google and Microsoft Azure authentication services for identity verification and session management, and Microsoft Azure Storage for user information and audit records. These service providers process information to the extent necessary for authentication, storage, and operation of the Administration Site.
Gorillango Authentication and Storage
Gorillango uses Google and Supabase Auth for identity verification and session management, and Supabase to store authentication and account information. These service providers process information to the extent necessary for authentication, storage, and use of the account.
Cookies and Similar Technologies
The Site stores the selected display language and analytics choice in the user’s browser. If a user allows analytics, Google Analytics uses cookies or similar technologies. No Google Analytics cookie is set before permission or when analytics is rejected, and future transmission stops if permission is withdrawn.
Moshimo Co., Ltd. or an advertised site may use cookies or similar technologies to display affiliate advertisements or measure clicks and resulting activity.
The Administration Site uses authentication cookies to maintain the signed-in session. Sign-in sessions expire after eight hours.
Gorillango stores Supabase authentication session information in the user’s browser localStorage to maintain and refresh the signed-in session.
Security Measures and Requests Concerning Retained Personal Data
Security Measures
The Operator takes necessary and appropriate measures to prevent leakage, loss, or damage of personal data and otherwise ensure its security, including limiting the scope of data handling, managing access privileges, and appropriately selecting and managing external services.
Upon request, the Operator will provide information about its security measures in accordance with applicable law, except to the extent that disclosure could compromise security.
Requests Concerning Retained Personal Data
Individuals may, in accordance with applicable law, request notification of purposes of use, disclosure, correction, addition, deletion, suspension of use, erasure, cessation of provision to third parties, or disclosure of records concerning provision to third parties with respect to retained personal data relating to them.
Requests are accepted at contact@wiroh.com. After requesting information only to the extent necessary to identify the relevant data and verify the individual or authorized representative, the Operator will respond in accordance with applicable law.
Contact
For inquiries about this Policy, the handling of personal information, requests for disclosure and other actions, security measures, or any other matter required by applicable law to be made available to individuals, please contact the Operator at contact@wiroh.com.
The Operator will review the nature and details of each inquiry and respond in accordance with applicable law.
Changes to This Policy and Effective Date
The Operator may amend this Policy in response to changes in applicable law or in the handling of information on the Site. If this Policy is amended, the Operator will give notice of the amendments and their effective date by posting them on the Site or by other appropriate means. If applicable law requires an individual’s consent to an amendment, the Operator will obtain such consent by an appropriate method.
Effective date:
Last updated: