nanabasePrivacy Policy
How nanabase handles personal information.
This is a reference translation provided for convenience. The Japanese version is the official text, and it prevails if the two differ.
1. Information we collect
- IDs that identify the external accounts (Google / X) you use to sign in, and the screen name of your X account (the username beginning with @)
- Your email address (stored only if you enter it yourself; see “2. Handling of email addresses”)
- Profile information, icon images, and posts that you register yourself
- Session cookies needed to keep you signed in
- Usage data collected through cookies for access analytics (which does not identify individuals)
When you sign in, the external account also provides your display name, icon image, and email address in addition to the above, but we do not store them. The display name and icon image used on this service are the ones you register yourself.
2. Handling of email addresses
We store an email address in our database only when you enter it yourself in one of the following ways.
- When you enter it to sign up or sign in with an email address
- When you enter it to register an email address on the account settings screen
If you signed up with a social login (Google / X), we do not store the email address registered with your external account. To sign in with an email address in that case, please register an email address on the account settings screen.
We use stored email addresses only for the following purposes.
- Sending verification codes used to sign in and sign up
- Checking for duplicates to prevent the same email address from being registered to multiple accounts
We never send emails for advertising or promotional purposes. Verification codes are sent using Cloudflare Email Service, provided by Cloudflare, Inc. When you delete your account, your stored email address is deleted as well (see “6. Account deletion and removal of personal information”).
You can delete your stored email address by removing it on the account settings screen. Once removed, you can no longer sign in with an email address, so it can be removed only if you still have another sign-in method (a Google or X connection).
About the revision of August 5, 2026
Before this revision, when you signed up with a social login (Google / X), we obtained and stored the email address of your external account. After the revision, we no longer store it. Email addresses that were already stored have not been deleted and can still be used to sign in with an email address.
About the revision of August 3, 2026
Before this revision, email addresses were converted with a cryptographic hash function (SHA-256) before being stored, and were not stored in plain text. Because providing sign-in with an email address requires sending verification codes, we changed to storing email addresses as they are. Hash values registered before the revision remain as they are and cannot be used to send verification codes. They are replaced with your email address once you register it again on the account settings screen.
3. Purpose of use
We use the information we collect only to provide this service (sign-in authentication, sending verification codes, and displaying profiles) and to prevent misuse.
4. Disclosure to third parties
We do not provide the information we collect to third parties, except as required by law.
5. Access analytics tools
To understand how the service is used and to improve it, this service uses Google Analytics, an access analytics tool provided by Google LLC. Google Analytics uses cookies to collect traffic data in a form that does not identify individuals.
You can refuse this collection by disabling cookies in your browser or by using the Google Analytics Opt-out Browser Add-on. For how the collected data is handled, please see Google’s Privacy & Terms.
6. Account deletion and removal of personal information
- While signed in, you can delete your account yourself at any time from the “Delete account” section of the “Settings > Account” page.
- Once your account is deleted, the profile information stored by this service (display name, bio, fan card information, and icon image), your email address, social login connections, and session information are all permanently deleted.
- Deleted information cannot be restored. We do not retain personal information on our servers after account deletion, except where retention is required by law.
7. Contact
For inquiries about the handling of personal information, please use the contact form ↗.