Privacy policy
How genko.me handles user information.
The Japanese privacy policy is authoritative. This English version describes the same practices.
1. Information we collect
We collect account details, authentication settings, content you create, usage logs, session information, billing records, and email addresses entered for team invitations. For support inquiries, we keep the name, email address, subject, message, attachments, and our replies. We also keep operational records, including error counts and email delivery outcomes.
2. How we use information
We use it to provide and secure the service, respond to support requests, send essential notices and invitations, send optional updates where requested, and improve the service.
3. Cookies
We use cookies to maintain sign-in sessions. Disabling those cookies prevents sign-in. Google Analytics 4 uses cookies for analytics. In the EEA, UK, and Switzerland, analytics cookies are used only after consent. You can choose “Reject” in the banner, disable cookies in your browser, or use Google's opt-out add-on.
When you open a support conversation in your browser, a cookie that lets you reopen that inquiry is stored on your device for up to 30 days.
A first-party cookie records the first page visited and campaign parameters. At sign-up, we save that information to your account to measure which channels lead to sign-ups. In the EEA, UK, and Switzerland, we set this cookie only after consent.
4. External services
- Cloudflare (US) — CDN and Turnstile bot protection. Cloudflare Web Analytics aggregates pages viewed, referrers, browser type, and country without cookies or localStorage and is not used to identify individuals. Support emails reach the service through Cloudflare Email Routing.
- Google LLC (US) — Google Analytics 4 receives pages viewed, referrer, campaign parameters, device and browser details, approximate location derived from IP address, and events such as sign-up. We use it to understand usage and measure advertising. See Google's privacy policy.
- Gravatar (Automattic, US) — We may send a hash derived from your email address to display an account icon.
- Stripe, Inc. (US) — Processes payments and receives billing contact details. Card details go directly from your browser to Stripe.
- Google LLC and GitHub, Inc. (US) — If you choose social sign-in, we receive details such as your email address and display name for authentication.
- Apple Inc. (US) — Receives and stores email sent to our support address ([email protected]) in iCloud Mail; a copy is imported into the service.
- XServer Inc. (Japan) — Provides the server (VPS) that runs the service. Your data and its backups are stored there.
5. Sharing with third parties
We share personal information only with consent, when required by law, or when necessary to protect life, health, or property and consent is difficult to obtain.
6. Security
We use encrypted communication, hashed credentials, and access controls to protect information.
To prevent unauthorized sign-ins, we record security events such as sign-ins, two-factor verification, and password resets, with the time, event type, result, IP address, country derived from the IP address, and browser type. For failed sign-ins, the email address entered is stored only as an irreversible hash. Sign-ins from an IP address with many recent failures may be refused for a short time. These records are kept for 90 days and then deleted automatically.
7. Access, correction, and deletion
You can update or delete account details and content in the app. For other requests, contact us below. We may verify your identity. A year after an inquiry is marked closed, its subject, name, email address, account link, messages, and attachments are deleted. Browser links sent by email stop working after seven days. Error counts and email delivery records are kept for 90 days. Database backups are taken daily and kept for 7 days (daily) and 4 weeks (weekly), so deleted data can remain in backups for up to about a month; backups are used only for recovery. We also collect optional, non-identifying account closure reasons for service improvement, retained for the periods described in the Japanese policy.
8. Policy changes
We will announce material changes through the service or another appropriate channel.
9. Contact
Contact [email protected] about this policy or your information.
Established September 2, 2026. Revised October 16, 2026.
Last updated: October 16, 2026