LEGAL
Privacy Policy
ESTABLISHED OCTOBER 9, 2026 LAST REVISED OCTOBER 19, 2026
This is a reference translation. The Japanese version is authoritative.
VirtualCross ("we") sets out below how information is handled on our website, virtual-cross.com, including its English pages (the "Site").
1. Operator
VirtualCross
Address, representative and phone: see Operator information.
2. Scope of this policy
This policy applies to browsing the Site and to inquiries made through the Site's contact form (the "Contact" section of the home page) or by email to info@virtual-cross.com.
How information is handled in our apps is set out in each app's privacy policy.
- TreadmillManager: /treadmill/privacy
- mosaipe: /mosaipe/privacy
- fabulaouscam: /fabulaouscam/privacy
- LiveConverter: /liveconverter/privacy
- favs: /favs/privacy
- photomap: photomap.virtual-cross.com/privacy
- Notia: /notia/privacy
- DualCam: /dualcam/privacy
- OtoIroha: /otoiroha/privacy
- Sparkle Sticker Book: /stickerbook/privacy
For web services we run on their own domains (such as Stamp Rally Maker, aqua and Hakkeyoi), please check each service's site.
3. Information we collect
| Information | Who collects it | Purpose |
|---|---|---|
| Your name, email address, topic and message (entered in the contact form or sent by email) | Us | Answering and handling your inquiry (Section 4, item 1) |
| The country the message was sent from (a country code that Cloudflare determines from the IP address; contact form only) | Us (included in the inquiry email) | Handling your inquiry and spotting unwanted messages (Section 4, items 1 and 2) |
| How long the form took to fill in, and the state of a field used to spot automated submissions | Us (used only for the check and not stored) | Spotting unwanted messages (Section 4, item 2) |
| Access logs such as IP address, date and time, pages viewed and browser type | Cloudflare, Inc. (our service provider; Section 6). We refer to these logs when needed | Delivering the Site, investigating faults and dealing with unauthorised access (Section 4, items 2 and 3) |
| Information sent from your device by Turnstile, Web Analytics and Google Fonts | Each provider (Section 8) | As set out in Section 8 |
| Cookie identifiers, advertising identifiers, payment details | Not collected (the Site sets no cookies and shows no ads) | — |
4. Purposes of use
We use the information we collect for the following purposes.
- Answering inquiries, considering requests, and contacting you as needed for these
- Preventing unwanted messages, unauthorised access and other conduct that interferes with running the Site
- Delivering the Site, investigating faults and keeping the Site secure
- Understanding and improving how the Site is used (through aggregated data that does not identify individuals)
5. Provision to third parties
We do not provide personal data to third parties except with your consent or as required by law. Provision that accompanies the entrustment in Section 6, or the succession of our business through a merger, business transfer or similar event, is not a provision to a third party. The collection of information by the providers in Section 8 is not a provision by us; each provider collects it directly from your device.
6. Service providers
To the extent needed to achieve the purposes above, we entrust the handling of personal information to the companies below. We choose them carefully, secure appropriate security measures by contract, and supervise them as necessary and appropriate.
| Service provider | Country | What we entrust | Where data is stored |
|---|---|---|---|
| Zoho Japan Corporation (Zoho Mail) | Japan | Receiving, sending and keeping inquiry emails | Japan (Tokyo and Osaka). Its group companies outside Japan (such as in India) may access the data for maintenance and support |
| Cloudflare, Inc. | USA | Delivering the Site, receiving contact form submissions (passing them to Zoho Mail; nothing is stored on Cloudflare), checking Turnstile results (we send the verification token and the sender's IP address to Cloudflare), and access logs | Processed in Cloudflare's data centres around the world. The country where access logs are kept is not disclosed by Cloudflare |
7. Service providers outside Japan
Of the service providers in Section 6, Cloudflare, Inc. is a US company and handles personal data outside Japan. We have confirmed, through its Global CBPR certification, that it has a system in place to continuously take measures in line with Chapter IV, Section 2 of Japan's Act on the Protection of Personal Information (security, no use beyond the entrusted purpose, control of sub-processors, breach reporting, etc.) (Article 28(1) of the Act and Article 16 of its Enforcement Rules).
We review these measures and any foreign laws that may affect them at least once a year. Information about the personal information protection system of the USA is available on the website of the Personal Information Protection Commission of Japan (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku ). On request, we will provide further information about these measures as required by law, at the contact point in Section 14 (Article 28(3) of the Act).
8. Information sent from your device to other companies
When you browse the Site, the information below is sent directly from your device to the companies below. They handle it on their own responsibility under their own privacy policies; this is not a provision of personal data by us. The only things we receive from them are those listed under "What we receive".
| Recipient (who handles it) | Information sent | Purpose | What we receive |
|---|---|---|---|
| Cloudflare, Inc. (Turnstile), when the contact form on the home page (Japanese or English) is shown | IP address, browser and device information, interaction data | Telling people from bots. Cloudflare also uses it to improve its detection | The result of the check |
| Cloudflare, Inc. (Web Analytics), on every page of the Site (including app introduction, support and legal pages) | URL of the page viewed, referrer, browser type, IP address, and measurements such as page load time | Aggregating how the Site is used. Cloudflare says it uses no cookies and does not track visitors | Aggregated data that does not identify individuals |
| Google LLC (Google Fonts), on every page of the Site | IP address, browser information, the page being viewed | Serving fonts. Google says it does not use the IP address to build profiles or for advertising | Nothing |
Providers' information: Turnstile, Cloudflare Privacy Policy, Google Fonts
9. Security measures
We take the following measures to prevent leaks, loss or damage of personal data and otherwise keep it secure.
- Basic policy: we have set out and published this policy.
- Organisational and personnel measures: we have appointed a person responsible for handling personal data and limit who handles it.
- Physical measures: we keep devices used to handle personal data safe from theft and loss, and out of view of third parties.
- Technical measures: communications are encrypted (HTTPS), and access to the mailbox and administrative screens is restricted by authentication. The credentials used to send email are held only as secret settings on our server. The contact form accepts submissions only from the Site's own pages.
- Understanding the external environment: we entrust the handling of personal data to a US company (Cloudflare, Inc.). Inquiry emails are kept in data centres in Japan, but group companies of Zoho Japan Corporation outside Japan (such as in India) may access them for maintenance and support. We take security measures based on an understanding of the personal information protection systems of the USA and India (Sections 6 and 7).
10. Retention and deletion
Inquiry emails are kept as a record of how we handled the inquiry and deleted once they are no longer needed. Access logs are kept for the period set by Cloudflare, Inc. Information received by the providers in Section 8 is kept for the period each provider sets.
11. Requests for disclosure and other actions
You may ask us to notify you of the purpose of use of, disclose (including records of provision to third parties), correct, add to or delete, stop using or erase, or stop providing to third parties, the retained personal data about you that we hold. Please email info@virtual-cross.com. After confirming that the request comes from you or your representative, by a method suited to the request, we will respond without delay in accordance with the law. We charge no fee.
12. Minors
If you are a minor, please get the consent of a parent or legal guardian before contacting us.
13. Changes to this policy
We may revise this policy. Revisions are posted on this page, and significant changes are announced on this page before they take effect.
14. Contact
Questions, complaints and consultations about this policy and how we handle personal information are handled at the following contact point.
VirtualCross
Email: info@virtual-cross.com
Operator details (address, representative, phone): https://virtual-cross.com/en/contact
Established: October 9, 2026
Last revised: October 19, 2026