Privacy Policy
Effective October 26, 2026
irotto ("the service") respects your privacy and manages personal information appropriately. Under the policy below, we handle only the minimum data needed to run the service.
1. Information we collect
Depending on how you use the service, we collect the following.
- As a guest: your categories, records, notebook pages, to-dos, timer presets and settings are kept only in your browser (IndexedDB and localStorage). They are never sent to the operator's servers.
- When you sign in with Google: the account details Google shares with us (your name, email address, profile picture and similar) and the records and settings above, saved to your account.
- When you contact us: your email address, the type of inquiry, your message and the language you were using.
- Information sent automatically when you view a page: your IP address, browser and device type, the pages you visit, cookies and similar. This is mainly collected by ad providers and by the company that hosts the service.
2. How we use it
We use this information to:
- Provide the service, such as saving your records and showing them on other devices
- Sign you in and confirm who you are
- Answer your inquiries
- Investigate problems, improve the service and prevent misuse
- Show ads
- Deal with breaches of the Terms of Use
3. Sharing with third parties
We do not give your personal information to third parties without your consent, except where the law requires it. Your category names and records are never made public or shared with other users.
4. Outside services
The service uses the following outside services. See each one's privacy policy for how it handles information.
- Supabase: storing accounts and their data (privacy policy)
- Google: signing in with a Google account, and ads (privacy policy)
- Resend: sending contact form emails (privacy policy)
- Upstash: limiting how often the contact form can be sent and how often data can be read and written. IP addresses and email addresses are only handled in a form that cannot be turned back, and accounts are counted by an internal ID. All of these are deleted within a day (privacy policy)
Some of these providers' servers are outside Japan, so information may be stored and processed abroad.
5. Ads (Google AdSense)
The service shows ads through Google AdSense, a third-party ad service.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this service or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this service and/or other sites on the internet.
- You can opt out of personalized advertising in Google's Ads Settings. You can also opt out of third-party vendors' cookies for personalized advertising at www.aboutads.info.
- To learn how Google uses information, see Google's advertising policies and How Google uses information from sites or apps that use our services.
Depending on where you live, we may ask for your consent to cookies.
6. Cookies and browser storage
- A cookie (NEXT_LOCALE) remembers the language you use.
- Your sign-in, display settings, running timer and sound settings are kept in browser storage (localStorage and IndexedDB).
- If you allow timer notifications, they are shown on your device only.
You can turn cookies off in your browser settings. Some features of the service, and ads, may then not work properly.
7. How long we keep data, and deleting it
- Account data is kept until you delete your account. Deleting your account from the settings page removes the account and all its records for good.
- Guest data is removed when you clear your browser's site data. The operator cannot restore it.
- Inquiries are kept as long as needed to deal with them, then deleted.
8. Security
Connections are encrypted, and account data can be read and written only by its owner. We take necessary and appropriate measures to prevent leaks and loss of information.
9. Access, correction and deletion
To ask us to disclose, correct, stop using or delete your information, use the contact form. We will confirm that you are the person concerned and respond as the law requires.
10. Changes
We may revise this policy as the law or the service changes. A revised policy takes effect when it is posted on this page. We will announce important changes in the service.
11. Contact
Operator: take
For questions about this policy, use the contact form.