Stamp Rally Maker

Privacy Policy

This English translation is provided for convenience only. The official text of this policy is the Japanese version. In the event of any discrepancy, the Japanese version shall prevail.

VirtualCross ("we", "us") handles user information on "Stamp Rally Maker" (the "Service") as set forth below.

1. Information We Collect

  • Organizers: email address, password (stored hashed), display name, and — when linking a Google account — profile information (name and email address)
  • Participants: an anonymous ID (issued automatically per device), stamp acquisition records, and — if the participant links an account — an email address
  • Location data: obtained only when collecting a GPS-type stamp, to determine whether you are at the spot. Collection is based on your browser permission, and the result is stored as part of the acquisition record
  • Camera: the camera feed is used to read QR codes. The video is processed on your device and is never sent to or stored on our servers
  • Payment information: credit card details are handled by our payment processor (Stripe); we do not hold card numbers
  • Cookies, etc.: we use cookies and localStorage to keep you signed in and for similar purposes

2. Purposes of Use

  • Providing the Service, verifying identity, and saving and transferring progress
  • Determining stamp acquisition and preventing fraud
  • Billing and plan management
  • Responding to inquiries and sending important notices
  • Producing statistics (processed into a form that cannot identify individuals)

3. Third-Party Provision and Outsourcing

We do not provide personal information to third parties without the individual's consent, except as required by law. To provide the Service, we entrust data processing to the following providers:

  • Supabase (database, authentication, storage)
  • Cloudflare (hosting, content delivery)
  • Stripe (payment processing)
  • Google (Google sign-in; generation processing when the AI image generation feature is used)

Information Participants enter into entry forms set up by an Organizer is provided to that Organizer and managed under the Organizer's responsibility.

4. Retention and Deletion

When you delete your account, related data such as rallies you created and participation records are deleted. Information we are legally required to retain is excepted.

5. Security Measures

We take reasonable security measures, including encrypted communication (TLS), access control (row-level security), and hashing of credentials.

6. Requests for Disclosure, Correction, or Deletion

To request disclosure, correction, or deletion of your personal information, please contact us at the address below. After verifying your identity, we will respond promptly in accordance with applicable law.

7. Contact

VirtualCross (7F Nihonbashi Mizuno Bldg., 1-11-12 Nihonbashimuromachi, Chuo-ku, Tokyo 103-0022, Japan)
Email: info@virtual-cross.com / Tel: +81-3-6824-4705 (Weekdays 10:00–18:00 JST)

8. Revisions

This policy may be revised in response to changes in law or in the Service. Material changes will be announced on the Service.

Established: August 20, 2026