Privacy Policy

This English version is provided for reference only. In the event of any discrepancy, the Japanese version prevails.

Yuki Higashi (東 裕樹; the “Operator”) handles personal information in connection with “G®yph” (the “Service”) as follows.

1. Information collected and purposes of use

1. Payment information: Payments are processed by Link, a Stripe service. Credit card details are sent directly from the checkout page to Stripe, Inc. and its affiliates, which manage them. They never pass through the servers of this site (G®yph), and the Operator does not store or manage card details. From Stripe, the Operator receives the email address used for the purchase, the name (such as the cardholder name entered at checkout), the purchase details and the payment ID, and uses them to confirm purchases; to send emails containing license keys, download links and notices of download-period expiry; and to handle refunds and inquiries.
2. Files of single purchases: When you make a single purchase, the two files (light and dark) made from the screen at the time of purchase, and a small image included in purchase emails, are sent to the server before payment and held there for download. The name of the work (the typeface and the text) and the type of the typeface’s license are also stored.
3. Device information: To count the number of devices used with a subscription, the Operator stores a value derived (via SHA-256) from a random number generated for each browser, the device name (e.g., “Mac Chrome”) and the date and time of last use. To ensure that only one device of each type is in use at a time, your browser sends the device type (computer, smartphone or tablet) and its in-use status about once a minute while you use the subscription, and the Operator stores the dates and times when two devices of the same type were in use simultaneously (deleted after 90 days).
4. Access information: To prevent unauthorized access, a value derived from the IP address and an access count are stored for up to 1 day. While a single purchase is awaiting payment, a value derived from the IP address is stored so that one address cannot place too many files on the server, and it is deleted when the payment completes or fails (after 1 day at the latest). The server (Xserver) also keeps standard access logs.
5. Information stored in your browser: Bookmarks, a flag indicating that you have viewed the guide, license verification data, and records of single purchases (download links, names of works and small images) are stored in your browser (localStorage). While you use the Service for free, the text you enter and your actions in the app are not sent to the server.

2. Provision to third parties and outsourcing

Except as required by law, the Operator does not provide personal information to third parties without the individual’s consent. The Operator outsources processing to the following companies:

• Stripe (payment processing and buyer support; provided by Stripe, Inc. (United States) and its affiliates, so information may be processed outside Japan)
• Xserver Inc. (server and mail)

Personal information is provided to Stripe as a third party located in the United States. Information on the U.S. system for protecting personal information is available in the Personal Information Protection Commission’s survey of personal information protection systems in foreign countries (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku). Stripe handles personal information in accordance with its own privacy policy (https://stripe.com/jp/privacy). By proceeding to purchase, you consent to this.

In addition, when you use the Service, your browser accesses the following servers (standard access information, such as your IP address, is sent).

• Google (Google Fonts: font delivery; your browser accesses it to load the fonts when you open a page)
• jsDelivr (delivery of typeface files and of the component that reads them; accessed when you use Effects or Motion, for example)
• GitHub (delivery of typeface files and information; accessed when you open a typeface’s information, for example)
• Stripe (the checkout page; accessed only when you proceed to purchase)

3. Retention period

• Files and small images of single purchases: Deleted when the download period (30 days from purchase) ends. If payment is not completed, they are deleted when the checkout page closes (about 1 hour after the purchase began). If a purchase is canceled, such as by a refund, they are deleted in the daily cleanup.
• Records of purchases whose payment was not completed: 1 day
• Records of sent emails and payment notifications: 90 days
• Access count records, and values derived from the IP address while awaiting payment: 1 day
• Records of purchases and licenses: As long as necessary for accounting and for responding to inquiries

4. Security measures

To prevent personal information from being leaked, lost or damaged, the Operator takes the following measures.

• All communication is encrypted (HTTPS).
• License keys and download links are stored only as irreversible values (hashes); the original values are never stored.
• Files held on the server are kept in a location that is not publicly accessible, and are made available for download only after the unguessable link and its validity period have been verified.
• Only the Operator can access the server and the database, using key-based authentication.
• The Operator selects service providers after confirming their security management practices.

5. Requests for disclosure, correction or deletion; complaints and inquiries

If you wish to request the disclosure, correction, deletion, etc. of your personal information, or have complaints or inquiries about how personal information is handled, please contact support@higashiyuki.com. The Operator will respond after verifying your identity.

6. Business operator

Yuki Higashi (東 裕樹). The address will be disclosed without delay upon request. Contact: support@higashiyuki.com

7. Revisions

If this policy is revised, the changes will be announced on this page.