Privacy Policy

1Introduction

Ryu-raku Co., Ltd. ("we," "us," or "our") operates the MUTE service ("Service"). We are committed to protecting your personal information. This Privacy Policy describes what information we collect, how we use it, how we protect it, and your rights.

By using the Service, you agree to the collection and use of information as described in this Policy.

2Data Controller

3Information We Collect

3.1 Information You Provide at Registration

• Your name
• Company name or business name
• Website domain
• Email address
• Registration date and time

3.2 Information Automatically Collected

• Bot detection logs (source IP address, User-Agent string, first 100 characters of honeypot field input, timestamp, source country code)
• Session tokens (temporary random strings issued at login)

3.3 Information We Do Not Collect

• Credit card or payment information (processed directly by Stripe)
• Personal information of general visitors to your website
• Passwords (we use passwordless authentication)

4How We Use Your Information

Purpose	Data Used
Providing and operating the Service	Name, company, domain, email
Account authentication and login	Email, session token
Trial and subscription management	Email, registration date
Service notifications and report emails	Email
Bot log aggregation and reports	Bot log data
Fraud detection and prevention	IP address, User-Agent
Service improvement	Anonymized aggregate data
Legal compliance	As required by law

5Data Retention

Data Type	Storage Location	Retention Period
User registration data	Cloudflare KV (USA)	30 days after cancellation
Bot detection logs	Cloudflare KV (USA)	30 days (auto-deleted)
Session tokens	Cloudflare KV (USA)	10 minutes (auto-deleted)
Email logs	Resend, Inc. (USA)	Subject to Resend's data retention policy

6Disclosure to Third Parties

We do not sell or share your personal information, except in the following cases

• With your prior consent
• When required by law or court order
• To protect life, safety, or property

Sub-Processors

Provider	Purpose	Location	Privacy Policy
Cloudflare, Inc.	API server, KV storage, CDN	USA	Link
Xserver Co., Ltd.	Web hosting	Japan	Privacy Policy
Resend, Inc.	Email delivery infrastructure	USA	Privacy Policy
Stripe, Inc.	Payment processing (future)	USA	Link

7International Data Transfers

Part of our infrastructure uses Cloudflare's services in the United States. Registration data and bot log data may be transferred outside Japan. We take appropriate measures to ensure compliance with applicable data protection laws, including Japan's APPI and GDPR where applicable.

8Cookies and Local Storage

We store your session token in browser local storage to maintain your login state. We do not use advertising or tracking cookies.

9Security

• TLS/HTTPS encryption for all communications
• Secret key authentication for API requests
• Short session token expiry (10 minutes)
• Automatic deletion of bot logs (30 days)
• Cloudflare global security (DDoS mitigation, WAF)

10Your Rights

You may have the following rights regarding your personal information

• Right to access your personal data
• Right to correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing

11Children's Privacy

The Service is not directed to individuals under 13. We do not knowingly collect data from children under 13.

12Changes to This Policy

We may update this Privacy Policy. For material changes, we will notify you via the Service or email at least 14 days before the change takes effect.

13Contact Us