Privacy policy

This English version is a reference translation. The Japanese text is binding, and where the two differ the Japanese governs.

Last updated: 2026-10-27

This policy covers how personal information is handled by Kamakiri Pages and this site (together, the service), and in email sent to us. The service is run by タバリ・コンサルティング, a sole proprietorship in Kyoto, Japan, under the brand Kamakiri Labs. The Terms of Service name the provider in full.

Visitors

We set no cookies. To run the service, count visits and protect it against attacks, we may record a visitor’s IP address and what they requested, on this site and on every site we host, and keep them only as long as these purposes need. This site remembers display choices you make, such as the theme or the language of a command’s output, in your own browser only, and never sends them to us.

What a hosted site collects through its own code is its owner’s responsibility. When its owner turns on the Cloudflare CDN, Cloudflare, a United States company, serves that site, so the traffic to it passes through Cloudflare, which may set cookies of its own.

Account holders

What we hold, and what we use it for:

• Your email address. It is your account. We use it to send login codes and notices, and we record with it when you accepted the Terms.
• Sign-in data. Short-lived login codes, and API keys, of which we store only a hash. We use them to confirm it is you.
• Your sites. Their settings, deploy history and files. We use them to serve your sites and to let you roll back. The files are public by design.
• Your custom domains. The hostnames, their certificates and what public DNS answers for them. We use them to check that you control each name and that it points at the service, and to serve it over HTTPS.
• WebAccel credentials. Only if you use the WebAccel CDN, to manage the resource in your own Sakura account.

People who write to us

When you ask for the beta or write to us, we keep your address and what you send, including your answers on the beta request form. We use them to reply and to send your invitation.

We use everything this policy describes only to run the service, to contact you about it, and to settle disputes or deal with abuse of the service. We never sell it or use it for advertising.

Where it is kept, and who handles it

The service, its database and its encrypted backups are on Sakura Internet’s servers in Japan. The email we receive, including what the service sends us, is stored with Fastmail, an Australian company, in the United States. The service also relies on these providers:

• Scaleway. A French company that delivers the email the service sends, so it receives the address and the contents of each message. France is a country the Personal Information Protection Commission recognises as protecting personal information to a standard equivalent to Japan’s.
• Let’s Encrypt. A United States certificate authority that issues the certificates for your hostnames. Issuing one records the hostname in the public certificate transparency logs.
• Public DNS resolvers. Including Cloudflare’s and Google’s, in the United States. They receive your hostnames when we check your DNS.
• CDN providers. Cloudflare or WebAccel, only when you turn that CDN on.

Except where the law allows it, we give personal information to nobody else.

How long we keep it

We keep personal information only as long as we need it for the purposes in this policy, and longer only where the law requires it.

Account data is kept while the account exists. A site keeps its five newest deploys, and tearing a site down deletes its files. When you ask us to close your account, we close it and delete its sites within 30 days. Everything else we hold about you, including what remains of a closed account, beta requests and email, we delete once we no longer need it. Deleted data is gone from our encrypted backups within 15 months of its deletion, as they are replaced.

No deletion described here covers what the law requires us to keep, such as accounting records, or what we need to settle a dispute or deal with abuse of the service. We keep those for as long as the law sets or the matter needs.

Some things are out of our hands: a hostname recorded in the public certificate transparency logs, and an email we have sent that has been delivered.

Security

Only we can reach the servers and the database. We store API keys only as hashes, and we encrypt the credentials you give us and our backups. We handle personal data in France (email sent through Scaleway), and in Australia and the United States (email we receive, stored with Fastmail). We have looked into each country’s system for protecting personal information, and our security measures take it into account.

Your rights and contact

You can ask us why we use your data, or to see what we hold, including the record of what we passed on. You can ask us to correct, add to or delete it, to stop using it or erase it, or to stop passing it on. You can also ask us to close your account. Write to contact@kamakiri-labs.jp, and we answer within 30 days. When we cannot do all you ask, for instance because the law requires us to keep the data, we tell you so and why. Complaints, and requests for our postal address, go to the same email address.

Changes to this policy

When this policy changes, we announce the new policy and the date it takes effect by email to account holders and on the news page, before that date.