This English version is provided for reference. If there is any inconsistency, the Japanese version prevails.
View the Japanese versionTsukutta (the “Service”) is operated by an individual. This Privacy Policy describes how the Service handles users’ personal information under Japan’s Act on the Protection of Personal Information.
1. Information We Collect
We collect the following information to provide and improve the Service.
Account information
- Email address (when registering or signing in)
- Display name and profile information provided voluntarily
- Profile image (optional)
- Public Google Account profile information when Google authentication is used
Usage data
- IP address (access logs and fraud prevention)
- Browsing history and search terms
- Usage such as app upload and download history
- Browser information, device information, and access date and time
- Cookie information
Paid plan information
- If you subscribe to the paid plan “Tsukutta Plus”: the payment processor’s (Stripe) customer ID, subscription ID, subscription status, and end of the current period. Card numbers are processed by Stripe and are not stored by the Service
2. Purposes of Use
We use collected information for the following purposes.
- Providing, operating, and maintaining the Service
- User authentication and account management
- Access analysis and service improvement
- Detecting and preventing misuse
- Improving security
- Responding to user inquiries
- Providing important notices about the Service
- Generating and revising apps in response to users’ instructions in “Make with Tsukutta,” and recording the amount used for generation (tokens, time, and cost) to manage limits and prevent misuse
- Handling subscriptions, payments, and cancellations of the paid plan, and contacting you about billing
- Generating replies from what app users enter into the AI feature of apps made with “Make with Tsukutta,” and recording the number of uses, tokens, and cost (the text of inputs and replies is not stored) to manage limits and prevent misuse
3. Disclosure to Third Parties
The operator does not provide users’ personal information to third parties except in the following cases.
- With the user’s consent
- When required by law
- When necessary to protect a person’s life, body, or property and obtaining consent is difficult
Information sent to generative AI service providers on official streams is described in “5. Information Handling on Official Streams (AI VTuber).” Instructions entered in “Make with Tsukutta” and the files of the app being made are also sent, to generate the app, to the providers listed under “Provision to third parties in foreign countries” in that section (Anthropic, PBC (United States of America) and Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (People’s Republic of China)). Each country’s system and each provider’s measures are described in the same section. Please do not enter personal information in the Builder. In addition, what is entered into the AI feature of apps made with “Make with Tsukutta” is sent to Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (People’s Republic of China) to generate replies. Please do not enter personal information into the AI feature of apps.
4. External Services
The Service uses the following external services. Please refer to each provider’s privacy policy for its handling of data.
- Supabase - user authentication, database, and file storage
- Vercel - hosting and access analytics (Vercel Analytics)
- Sentry - error monitoring and performance analysis
- YouTube (Google) - official streams and retrieving live chat comments (YouTube API Services)
- Anthropic - generating replies to comments on official streams, and generating apps, drafting listings, and pre-publication checks in “Make with Tsukutta” (generative AI service)
- DeepSeek - generating replies to comments on official streams, and generating apps in “Make with Tsukutta” and the AI feature inside apps made with it (generative AI service; a provider in the People’s Republic of China that may use submitted content to improve its services)
- Cloudflare - serving sites published on the Service (tsukutta.dev)
- Stripe - monthly payments for the paid plan (Tsukutta Plus) (card numbers are processed by Stripe and are not stored by the Service)
5. Information Handling on Official Streams (AI VTuber)
The operator streams the Service’s official AI VTuber, “Tsukutta-chan,” on YouTube (“Official Streams”) and handles information as described below. This Privacy Policy also applies to information about Official Stream viewers, including those who are not users of the Service.
Information handled
- The text of comments posted in the Official Stream chat
- The commenter’s display name and YouTube identifier (channel ID)
- The days and number of times a viewer commented, and excerpts of earlier comments (for greetings in later streams)
- Listing information for Service apps featured on Official Streams and their creators’ display names (information published on the Service)
Purposes of use
- Generating replies to comments with AI and reading them aloud on stream
- Operating Official Streams (such as excluding inappropriate posts)
- Temporarily remembering viewers for greetings in later Official Streams
Provision to third parties in foreign countries
- To generate replies, the operator sends the comment text, the commenter’s display name, and the information remembered for greetings to the following foreign providers of generative AI services. Only the information needed to generate replies is sent.
- Recipient - Anthropic, PBC (United States of America)
- Recipient - Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (People’s Republic of China)
- For each country’s personal information protection system, see the Personal Information Protection Commission’s survey of personal information protection systems in foreign countries (in Japanese).
- The measures each provider takes to protect personal information are governed by its terms and privacy policy. Anthropic states that it does not use information received through its API to train its models. DeepSeek states that it stores information it receives on servers in the People’s Republic of China and may use it to improve its services.
Retention
- Information obtained from YouTube API Services is deleted or refreshed within 30 days in accordance with YouTube’s policies. A viewer’s remembered information is deleted 30 days after their last comment.
- Archives (recordings) and clips of Official Streams may include display names and comments read aloud during the stream.
Use of YouTube API Services
AI replies
- Replies are generated automatically by AI and may contain errors or inaccurate information.
Requests to stop
- You may ask the operator to stop reading your display name aloud on Official Streams, stop featuring your apps, or delete remembered information through the contact form (“Stop featuring”).
6. Cookies
The Service uses cookies for the following purposes.
- Session management (maintaining signed-in state)
- Access analysis (understanding usage and improving the Service)
You may disable cookies in your browser settings, but some Service features may then not function correctly.
7. Security Measures
The operator implements the following safeguards to prevent leakage, loss, or damage of personal information.
- Encrypted communications (SSL/TLS)
- Database access controls (Row Level Security)
- Password hashing
- Periodic security reviews
8. Access, Correction, and Deletion
Users may request the following regarding their personal information.
- Access - after verifying identity, we disclose personal information held
- Correction - profile information can be edited directly from My Page
- Deletion - accounts can be deleted in My Page account settings; related personal information is deleted with the account
- Suspension of use - users have the right to request suspension of use
If you cannot complete these actions, please contact us through the contact page.
9. Contact
For inquiries about our handling of personal information, please contact us through the contact page.
10. Changes to This Policy
The operator may revise this Privacy Policy as necessary. Revisions will be announced by posting them on the Service. Material changes will be announced separately on the Service. The revised Privacy Policy takes effect when posted.