✎ irotto

Privacy Policy

Effective October 26, 2026

irotto ("the service") respects your privacy and manages personal information appropriately. Under the policy below, we handle only the minimum data needed to run the service.

1. Information we collect

Depending on how you use the service, we collect the following.

  • As a guest: your categories, records, notebook pages, to-dos, timer presets and settings are kept only in your browser (IndexedDB and localStorage). They are never sent to the operator's servers.
  • When you sign in with Google: the account details Google shares with us (your name, email address, profile picture and similar) and the records and settings above, saved to your account.
  • When you contact us: your email address, the type of inquiry, your message and the language you were using.
  • Information sent automatically when you view a page: your IP address, browser and device type, the pages you visit, cookies and similar. This is mainly collected by ad providers and by the company that hosts the service.

2. How we use it

We use this information to:

  • Provide the service, such as saving your records and showing them on other devices
  • Sign you in and confirm who you are
  • Answer your inquiries
  • Investigate problems, improve the service and prevent misuse
  • Show ads
  • Deal with breaches of the Terms of Use

3. Sharing with third parties

We do not give your personal information to third parties without your consent, except where the law requires it. Your category names and records are never made public or shared with other users.

4. Outside services

The service uses the following outside services. See each one's privacy policy for how it handles information.

  • Supabase: storing accounts and their data (privacy policy)
  • Google: signing in with a Google account, and ads (privacy policy)
  • Resend: sending contact form emails (privacy policy)
  • Upstash: limiting how often the contact form can be sent and how often data can be read and written. IP addresses and email addresses are only handled in a form that cannot be turned back, and accounts are counted by an internal ID. All of these are deleted within a day (privacy policy)

Some of these providers' servers are outside Japan, so information may be stored and processed abroad.

5. Ads (Google AdSense)

The service shows ads through Google AdSense, a third-party ad service.

Depending on where you live, we may ask for your consent to cookies.

6. Cookies and browser storage

  • A cookie (NEXT_LOCALE) remembers the language you use.
  • Your sign-in, display settings, running timer and sound settings are kept in browser storage (localStorage and IndexedDB).
  • If you allow timer notifications, they are shown on your device only.

You can turn cookies off in your browser settings. Some features of the service, and ads, may then not work properly.

7. How long we keep data, and deleting it

  • Account data is kept until you delete your account. Deleting your account from the settings page removes the account and all its records for good.
  • Guest data is removed when you clear your browser's site data. The operator cannot restore it.
  • Inquiries are kept as long as needed to deal with them, then deleted.

8. Security

Connections are encrypted, and account data can be read and written only by its owner. We take necessary and appropriate measures to prevent leaks and loss of information.

9. Access, correction and deletion

To ask us to disclose, correct, stop using or delete your information, use the contact form. We will confirm that you are the person concerned and respond as the law requires.

10. Changes

We may revise this policy as the law or the service changes. A revised policy takes effect when it is posted on this page. We will announce important changes in the service.

11. Contact

Operator: take

For questions about this policy, use the contact form.