Privacy Policy

1. Introduction

This policy applies to the Kiroku web service, Evidence Camera, Evidence Voice Memos, the Chrome extension "Kiroku Monitor - Webpage Change Monitor," and related websites, apps, APIs, shared pages, and subscription features (collectively, "the Service"). This policy explains what information the Service collects and stores, how we use it, where it is stored, and how to contact us about privacy matters.

2. Information We Collect

2.1 Account and installation information

When you create an account, we collect your email address. We do not collect passwords (we use passwordless authentication). Evidence Camera and Evidence Voice Memos may also store an installation ID, authentication token, app type, app version, build number, distribution channel, language setting, consent version, and consent timestamp to support login-free use, consent records, usage limits, abuse prevention, device-level recovery, and support.

2.2 Web archive information

Kiroku saves the URLs you specify for archiving and their results, including screenshots, HTML, AI summaries, metadata, save times, and public or private settings, on our servers. When you trigger "Archive on Kiroku" from the Kiroku Monitor Chrome extension popup, only the target URL is sent to the archive API (https://kiroku.today/api/archive) and stored through the same mechanism. Archives are public unless set to private.

2.3 Evidence Camera photo and video information

Evidence Camera stores photo and video files captured or saved by users, thumbnails, media type, file size, video duration, device-side capture time, server receipt time, SHA-256 hash, information needed for server receipts and evidence certificates, titles, notes, collections, lock status, deletion status, shared links, public IDs, password-protected sharing settings, and report or review status. If a photo or video includes people, places, documents, screens, license plates, addresses, conversations, or other personal or confidential information, that information is stored as part of the file.

2.4 Evidence Voice Memos recording information

Evidence Voice Memos stores audio files recorded or saved by users, waveform or playback-derived data, file size, recording duration, device-side recording time, server receipt time, SHA-256 hash, information needed for server receipts and evidence certificates, titles, notes, collections, lock status, deletion status, shared links, public IDs, password-protected sharing settings, and report or review status. If a recording includes voices, conversations, ambient sounds, names, addresses, account details, health information, business secrets, or other personal or confidential information, that information is stored as part of the audio file.

2.5 Access, device, and log information

For rate limiting, abuse prevention, security, incident investigation, and service improvement, we may store hashed IP addresses, User-Agent strings, access times, requested endpoints, error information, and logs related to saving, uploading, sharing, deleting, and legal consent. We may preserve logs to the extent necessary for legal compliance, rights-infringement handling, or safety response.

2.6 Inquiry information

Information submitted through contact forms, including inquiry type, related URL, reason, details, reply email address, related shared pages, and archive URLs, is stored for handling purposes.

2.7 Local data stored by the Kiroku Monitor Chrome extension

Kiroku Monitor stores the following entirely within your browser (IndexedDB and chrome.storage): the list of URLs you choose to monitor, monitoring settings such as CSS selectors and notification keywords, and historical page snapshots (HTML and extracted text used for diff comparison). This local data is never automatically transmitted to Kiroku servers or any third party. To detect changes, the extension sends HTTP requests directly from your browser to the URLs you specify; that traffic flows between the target site and your browser only and does not pass through our servers. Uninstalling the extension removes all of this local data.

3. Purpose of Use

Collected information is used for the following purposes:

• Providing and operating web archiving, Evidence Camera, Evidence Voice Memos, shared pages, server receipts, evidence certificates, libraries, and collections
• Account authentication, device-level usage management, consent recordkeeping, and billing management
• Rate limiting, abuse prevention, security, and response to rights infringement, privacy violations, and prohibited content
• Responding to inquiries
• Service improvement, analysis, incident investigation, and quality improvement

4. Third-Party Disclosure

The operator will not provide users' personal information to third parties except in the following cases:

• With the user's consent
• When required by law (court orders, law enforcement inquiries, etc.)
• When providing to contractors within the scope necessary for service operation (database, storage, and other infrastructure providers)

5. Cookies

The Service may use cookies, local storage, and device storage for authentication, language settings, consent status, shared-page display, and service improvement. You can disable cookies or storage in your browser or device settings, but some features such as login, private settings, sharing, and consent records may become unavailable.

6. Data Storage

Saved archives, photos, videos, recordings, thumbnails, and derived files are stored on Cloudflare R2 or other storage services. Metadata, server receipts, hashes, sharing settings, consent records, billing information, and account-related information are stored in Supabase or other databases and external services. This data is retained until it is deleted by the user, a deletion request is processed, a retention period expires, the operator decides to delete it, or retention is necessary for legal or safety reasons.

When you delete your account, personal information associated with the account, such as email address, is deleted or anonymized. However, archives, photos, videos, recordings, server receipts, logs, information needed for report or takedown handling, and information needed for legal compliance or rights protection may remain until processed through an individual deletion request or operator review.

7. User Rights

Users have the following rights:

• The right to request deletion of archives, photos, videos, recordings, and shared pages you have saved
• The right to request disclosure, correction, or deletion of your personal information
• The right to request account deletion

Please submit these requests through the contact form. Contact Form

8. Use by Minors

The Service does not impose age restrictions, but we recommend that minor users use the Service with parental consent.

9. Policy Changes

The operator may change this policy as necessary. Changed policies take effect upon posting on this page. If significant changes are made, users will be notified through the Service.

10. Contact

For inquiries regarding the handling of personal information, please use the contact form. Contact Form