Privacy Policy

When you submit an X (formerly Twitter) post URL for analysis, the Service stores the post URL, the public post metadata fetched from X, the analysis results (probabilities, heatmaps), and a timestamp. The stored public metadata may include information about third parties other than you, such as the account name of the poster whose post is analyzed. Posters may request deletion of the corresponding analysis result via the contact channel described in Section 8. The Service does not require user registration and does not knowingly collect personally identifiable information from you. Standard web server access logs (IP address, user agent, request timestamp) are temporarily retained for security and abuse prevention; IP addresses retained long-term by the Service are hashed. The information above is used for: (a) executing the requested analysis, (b) generating and publicly displaying result pages, (c) preventing abuse and securing the infrastructure, (d) improving the Service, and (e) responding to inquiries and deletion requests.

The Service uses a `NEXT_LOCALE` cookie to remember your language preference and a `showNSFW` cookie (valid for one year) to remember your NSFW visibility setting. An NSFW visibility setting previously saved in your browser's localStorage may be read in order to migrate it to the cookie. Your age-confirmation status is stored temporarily in your browser's sessionStorage and is cleared when the browser session ends. These are first-party and not used for tracking. Third-party advertising vendors may use cookies to serve ads based on your prior visits to this site or other sites — see the "Advertising" section below.

The Service uses Google AdSense to display advertisements. Google, as a third-party vendor, uses cookies to serve ads. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet. Users may opt out of personalized advertising by visiting https://www.google.com/settings/ads. Users may also opt out of some third-party vendors' use of cookies for personalized advertising by visiting https://www.aboutads.info. For more information about how Google uses data when you use its partners' sites or apps, see https://policies.google.com/technologies/partner-sites.

The Service may use server-side aggregate counters (page views, feed sort selections) for service improvement. It also uses Cloudflare Web Analytics to understand traffic. This is a privacy-friendly measurement that does not use cookies or user identifiers; it collects only aggregate data such as page views, referrers, country, and page-load speed, and does not track individual users.

The following external transfers, processing, or direct browser-to-third-party fetches occur during normal use of the Service. The companies listed below are primarily located in the United States. • Google AdSense (Google LLC): displays advertisements, may set cookies on your browser; the information sent includes cookie identifiers, the URL of the page you are viewing, and browser information. Processes data as described in Section 3. • Cloudflare (Cloudflare, Inc.): hosts the front-end, serves generated heatmap images from Cloudflare R2 storage, and provides CDN/edge functions and traffic analytics (Cloudflare Web Analytics, see Section 4). May log connection metadata for security purposes. • X / Twitter CDN (`pbs.twimg.com`, X Corp.): your browser fetches original post images directly from X, subject to X's privacy practices. The Service does not re-host original images. • Railway (Railway Corp.): hosts the backend API and database (data processing on the operator's behalf). • Modal (Modal Labs, Inc.): runs the image-analysis workers (data processing on the operator's behalf). Workers fetch the target images temporarily to perform the analysis and do not store them. Other than the above, the operator does not provide personal data to third parties without consent, except where required by law.

The Service implements technical and organizational measures including: HTTPS for all client communication, restricted access to operational systems via per-service tokens, retention limits for access logs, hashing of IP addresses in long-term records, and deletion of analysis results upon valid request. These measures are subject to revision as the Service evolves.

Analysis results, the submitted X post URL, and fetched public metadata are retained for as long as needed to keep the result page publicly available, and are deleted when the operator grants a valid deletion request (see Section 8). Access logs retained long-term by the Service are stored with hashed IP addresses for up to 90 days for security purposes.

If applicable law (including Japan's Act on the Protection of Personal Information) recognizes you as a data subject with respect to information held by the Service, you may request disclosure, correction, suspension of use, deletion of, or lodge a complaint regarding your personal data by contacting tagfake@gmail.com. You may also request deletion of a specific analysis result by referencing its result page URL. The operator reviews requests individually and responds within a reasonable time. Users in the European Economic Area or United Kingdom may also be entitled to additional rights under applicable data protection laws, including access, rectification, erasure, restriction of processing, and the right to object.

The Service is not directed to children under 13. The operator does not knowingly collect personal information from children under 13.

Operator: TagFake (individual operator). Operator identification details required by applicable law will be disclosed promptly upon a legitimate request received via the contact channel in Section 11.

For privacy-related inquiries, data subject requests, or complaints, please contact: tagfake@gmail.com

The operator may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates the date of the most recent revision. For material changes, the operator will provide notice on the Service or by other appropriate means. This Policy is prepared in Japanese and English; in the event of any discrepancy between the two versions, the Japanese version shall prevail.