Privacy Policy

Last updated: 2026-10-08

hiroakiishibashi.com ("this site") is a personal game portal operated by Hiroaki Ishibashi ("the operator"). This policy describes how user information is handled.

1. Information We Collect

• Account info: email address, display name and profile image when you sign in with Google or register by email.
• Birth date: collected at registration (or, for existing accounts, before first use of features that require it). It is used solely to apply age-appropriate restrictions — for example, voice/video calling is limited by age. Your birth date is never shown to other users, and it cannot be changed after it is set (contact us if it was entered incorrectly). It is self-declared; we do not perform identity verification.
• Game data: scores, play history, game save data (progress), language preference.
• Social data: friend relationships (requests and confirmed friends), comments you post on profile guestbooks, profile‑visit records ("footprints" — a record that you viewed another user's profile, and that others viewed yours), users you have blocked, and your social privacy settings.
• Location markers: voice markers (location, text, timestamp) you record yourself with the companion app "headphone". Markers are visible to all users.
• Usage analytics: self‑hosted, first‑party measurement of how the site is used — page views, referrer, approximate country (derived at the Cloudflare edge from your IP; the raw IP is not stored by us), browser / operating system / device type (from your browser's user‑agent), browser language, and time spent on a page (dwell time). This is linked to an anonymous per‑device identifier stored in your browser, and is associated with your account only while you are signed in.
• Newsletter: if you subscribe to the newsletter, we store your email address, your language preference, and a record of your consent (the date, the page you signed up from, and the IP address at that time — retained because the law requires us to be able to show that consent was given). We also record delivery results for each email (delivered, bounced, unsubscribed) and, when open tracking is enabled, whether the email was opened and how many times. Open tracking works by embedding a 1×1 transparent image; it is inherently approximate — some mail clients never load it, and others (notably Apple Mail Privacy Protection) load every image automatically, so the figure is treated as a trend indicator only. When click tracking is enabled, links in the body of the email point at our own redirect address, which records that the link was followed and then sends you straight on to the destination; the destination is never taken from the URL itself, only from a list saved when the email was sent. Unsubscribe links are never rewritten, so unsubscribing works even if tracking is unavailable. Newsletter data is kept separate from your site account: subscribing does not create an account, and deleting your account does not by itself unsubscribe you.
• Inquiries: messages you send through the contact form or by email to contact@hiroakiishibashi.com — your name, email address, the message and, for email, its subject and reply-to address — are stored together with our replies so that we can handle and respond to your inquiry. With a contact-form message we also store your browser's user-agent, your approximate country (derived at the Cloudflare edge) and the page you sent it from; with an email we also store its message ID and the result of the sender-authentication check (whether the sending domain's signature could be verified). We also store draft replies the operator prepares for your inquiry, together with any internal notes on them (a draft is normally deleted once the reply has been sent), and, for each reply we send, a record of whether a copy of it was delivered to the operator's own mailbox (see Google below).
• Technical info: standard access logs recorded by our hosting provider (Cloudflare).

2. How We Use It

• Authentication and account management
• Score rankings and leaderboards (your username is visible to other users)
• Operating social features — friends, guestbook comments, and footprints
• Syncing game progress across devices
• Understanding site usage and improving the site (aggregate analytics)
• Sending the newsletter you subscribed to, and measuring whether those emails were delivered and opened so we can tell if the newsletter is working
• Stable operation of the site, moderation, and abuse prevention

3. Social Features & Visibility

• Public: your username and profile image, your confirmed friends list, and comments you post on a user's guestbook are visible to anyone (including signed‑out visitors).
• Footprints: the list of who visited a profile is shown only to that profile's owner (and to the operator for moderation). You can turn off leaving footprints in your profile's privacy settings.
• Comments: you can disable comments on your own profile. You may delete comments left on your profile, and the author may delete or edit their own comments.
• Blocking: blocking a user removes any friendship between you and prevents them from sending you friend requests, commenting on your profile, or leaving footprints on it.
• Friend requests, pending requests, and your block list are visible only to the parties involved (and to the operator for moderation).

4. Voice & Video Calls (applies when the feature launches)

• Camera and microphone: used only during a call, only after you accept it. Nothing is transmitted while a call is ringing. You can turn your camera or microphone off at any time during a call.
• Who can call you: only users you have accepted as friends. There is no way for strangers to call you.
• No recording: calls are not recorded, and the content of calls (audio or video) is never stored on our servers. One-to-one calls connect devices directly where possible; group calls pass through a relay (Cloudflare) which forwards media without storing it.
• Call records: we keep only the fact of a call — who called whom, when, for how long, and the connection type — for abuse prevention and cost monitoring. These records are deleted automatically after 90 days.
• Age limits: calling requires a registered birth date. Users under 13 cannot use calls. For users 13–17, video defaults to off (avatar and voice instead).
• Reporting: you can block and report another participant from within a call; reports are recorded and reviewed by the operator.

5. Storage and Third-Party Services

• Supabase (database & auth, Tokyo region)
• Cloudflare (hosting, CDN, edge geo/country lookup, and receiving email sent to contact@hiroakiishibashi.com)
• Google (authentication when you choose Google sign-in, and the operator's mailbox (Gmail): email sent to contact@hiroakiishibashi.com is forwarded there unchanged, including any attachments, so that the operator can read it, and new inquiries are notified there. A copy of each reply we send to your inquiry is also delivered there for the operator's records; it contains our reply, the address it was sent to, your name, the subject (for email inquiries) and the first 1,000 characters of your original message)
• OpenStreetMap (map tiles; your IP address is sent to OSM servers when viewing map pages)
• Resend — used to send email (newsletter, confirmation emails, replies to your inquiries, and operational notices). Your email address is passed to Resend in order to deliver those messages. When you send us an inquiry, your name, email address and message (and, for email, its subject and reply-to address) are also passed to Resend, because the operator is notified of new inquiries by email. Our replies to your inquiries are sent through Resend as well; they contain only our reply and signature and do not quote your original message. The operator's own copy of each reply (described under Google above), which includes the first part of your original message for reference, is also sent through Resend, to the operator's mailbox only.
• Anthropic (Claude, an AI assistant) — the operator uses Claude, an AI assistant provided by Anthropic, in the operator's own work, including to help draft replies to inquiries. When the operator asks Claude to draft replies, the name, subject, message and date of your inquiry, together with our earlier replies and any draft, are given to Claude. The material prepared for this leaves out your email address (only its domain, such as example.com, is included), and email addresses we recognise in the name, subject or message are shortened to their domain in the same way; anything else you write there, such as a phone number or other contact details, is included as received. The operator may also ask Claude to read or summarize the operator's own mailbox (Gmail, see Google above); the emails kept there about your inquiry — the forwarded original of an email inquiry, our notification of a new inquiry and our copies of replies — include your email address, and Claude can see it when it reads them. Claude only writes drafts and summaries for the operator: every reply is read, edited as needed and sent by the operator, and no reply is ever sent automatically. This site's own server never sends inquiry content to an AI service. Anthropic processes this information under its own terms and privacy policy.

Analytics are processed on our own database (Supabase); we do not use third‑party advertising or tracking networks. The operator does not sell or share personal information with any other third party.

6. Cookies & Local Storage

This site uses browser local storage to keep you signed in, remember your language, store game saves, and hold an anonymous analytics identifier. No advertising or third‑party tracking cookies are used.

7. Data Deletion

You control your social data while signed in: you can delete guestbook comments, remove friends, unblock users, and turn footprints off. To delete your account and all associated data — including your profile, scores, friendships, comments, and footprints — contact the email below; deleting your account removes this related data. Location markers can be deleted by yourself from the Dive Map page while signed in.

Newsletter: every newsletter email contains a one-click unsubscribe link at the bottom, and mail clients that support one-click unsubscribe can be used as well. Unsubscribing stops all future sends immediately and cancels anything already queued. If you would also like your email address erased from our records rather than marked as unsubscribed, contact the address below.

8. Mobile and VR Apps

SUPERHORIZON (iPhone / iPad app): the app does not collect any personal information, and it contains no ads, no analytics and no in‑app purchases. Your progress and scores are stored only on your device. Deleting the app removes all of its data from your device.

SUPERHORIZON VR (Meta Quest app): the app itself does not collect personal information or send gameplay data to the operator. It does not use advertising, third-party analytics, or in-app purchases. Gameplay progress, scores, upgrades, and settings are stored locally on the headset and are used only to resume and display your game. Uninstalling the app (or clearing its app data in the headset settings) deletes this locally stored data; there is no separate operator-held game account to request deletion from. Meta may process account, device, entitlement, and diagnostic information as the platform provider under Meta’s Privacy Policy and the headset’s settings.

9. Contact

contact@hiroakiishibashi.com

10. Changes

This policy may be updated from time to time. Significant changes will be announced on this site.