Privacy Policy

Scope

This privacy policy sets out how the operator handles information about users of SHINOBILIA, including when it is used through its Android and iPhone apps. A user is anyone who uses this site; a member is a user who has logged in. The apps show the same site and collect the same information as the site.

A member is deemed to agree to this policy and to the submission guidelines by logging in. A user who does not log in is deemed to agree to this policy by using this site.

Information the operator collects

The operator collects the following information. For each item, this section states what is collected, for what purpose, who can see it, and how long it is kept.

• Account used to log in
  A member logs in with a Google account or a Discord account. The operator stores only the identifier that that service assigns to the member (the user ID); it does not store the name, username, or icon the member uses on that service. A member may link more than one login account to the same membership; the operator then stores the identifier of each. The operator also stores the date and time of the member's last login or activity and the date and time the member first agreed to this policy and the submission guidelines. Purpose: to identify the member when logging in. This information is not shown on the site.
• Display name and profile
  The operator stores the display name, the icon, the profile address (URL), the Ninja No. (a number given to each member in order of registration), and everything the member enters on the profile: the self-introduction, images, favourite characters, links to other sites and social media, the X account, and optional items such as a birthday, a country, or an age range. When a member adds a link, the operator's server fetches the image of the linked page and stores it as a thumbnail. The display name and icon are shown with the member's posts, and the SHINOBILIA ID (the last part of the profile address) is shown with the member's reactions, columns, and replies. The SHINOBILIA ID is shown even if the member has not published the profile. The profile is not public until the member chooses to publish it (see “Information made public”). A registered X account is shown on the published profile. Kept until the member deletes it or leaves.
• Reactions, Columns, Replies, and anniversary messages
  The operator stores the text of the member's posts, the chapter, characters, and category the member chooses, images added to a column, and the Like the member gives. Posts are published on this site as soon as they are posted and anyone, including users who are not logged in, can read them together with the member's display name and icon.
• Fan Memoirs
  The operator stores what the member writes in Fan Memoirs: the display name at the time of posting, the title, the text, the work the member first came to know (NARUTO or BORUTO), the member's age range at that time, how the member first came to know it (the medium), an optional image, and the language of the text. A story is published as soon as it is posted, and the operator is notified by email. A member cannot delete a published story from the site; see “Requests and inquiries” for how to ask for it to be taken down.
• Images
  The operator stores the images that a member uploads (the icon, profile images, the image of a Fan Memoir, images of visit records and spots on the Spot Map, images in Collection, images in columns, and so on). Before storing an image, the operator removes the location information and other information embedded in the file and reduces its size. An image used in public content can be viewed by anyone at its address (URL). When a member removes or replaces an image, the operator deletes it; it may remain viewable for up to about one hour for delivery reasons. An image that a member uploaded but did not save is deleted when the member leaves or the member's use is suspended. The operator also deletes a member's images when the member leaves or the member's use is suspended.
• Collection
  The operator stores what the member registers in Collection: images, names, makers, shops, genres, tags, characters, sections and groups, memos, prices, and purchase dates. Memos, prices, and purchase dates are visible only to the member. The other items are visible to other users only when the member has published the profile and has not chosen to hide the collection.
• Visit records on the Spot Map
  The operator stores the member's visit records: the place, a memo, an image, the date, whether the record is anonymous, and whether it is shared on the timeline (shared unless the member turns it off). For what is shown to others, see “Information made public”.
• Registering and reporting spots on the Spot Map
  When a member registers a spot on the Spot Map, the operator stores its name, position, description, and image, and records which member registered or edited it. A registered spot is published on the Spot Map immediately. The Spot Map does not show who registered a spot. The home timeline shows the display name of the member who registered it, unless the member registered it anonymously (then it is shown as anonymous). When a member reports a spot, the operator stores the reason and the details (up to 500 characters) and is notified by email.
• Place search and current location
  When a user opens the Spot Map, this site asks the browser for the user's current location; the browser asks the user for permission first. The current location stays in the browser and is not sent to the operator, except when the user searches for a place. When the user searches, the search words and a position (the current location if it has been obtained, otherwise the centre of the map) are sent to the operator's server, which sends them to the place-search services listed in “Sending information to outside services”. The operator's server keeps search results for 10 minutes. Recent searches (place names, addresses, and positions) are saved in the user's browser.
• Reports and blocking
  When a member reports a post, a Reply, a Fan Memoir, a profile, a collection, or another member, the operator stores who reported what and the reason. The operator reviews a report within 24 hours of receiving it. The operator does not tell the reported member who made the report. What a member reports is hidden from that member's own screens immediately. When a member blocks another member, the operator stores that; the blocked member is not notified. Records of reports are kept as the history of how they were handled. A block is kept until the member removes it or leaves.
• Inquiries
  The operator stores the type of the inquiry, its text (up to 2,000 characters), and, if the sender enters one, the email address to reply to, and uses them only to respond. The operator receives inquiries by email. Inquiries are deleted one year after they are received.
• Comment notification email
  Only when a member turns on Comment notification email, the operator stores the email address confirmed by the login service (Google or Discord) and the member's time zone. Purpose: to send one email a day telling the member how many new comments the member's posts received. The address is shown to the member partly hidden. The operator deletes the address when the member turns the emails off, when the member leaves, when the member has not logged in for 180 days, or when an email cannot be delivered or is reported as unwanted. Every email contains a link to stop the emails.
• Push notifications
  Only when a member allows notifications in the browser or the app, the operator stores the delivery address that the browser's notification service issues. Purpose: to notify the member of a comment on the member's post, a reply to the member's comment, a Like, and a new chapter. The text of a notification is fixed text. The operator deletes the delivery address when the member turns notifications off, leaves, or the member's use is suspended.
• Column view counts
  For each column and each day, the operator stores only totals: the number of views, how far the column was read (in 10 steps), and the kind of place the reader came from. Views from the same device are counted once a day, and the author's own views are not counted. The operator does not record who read a column. The author of a column can see these totals for the author's own columns.
• Access analysis
  This site uses Google Analytics 4 (Google) and Microsoft Clarity (Microsoft) to improve the site. Using cookies and similar technologies, they collect the pages viewed, actions on the site (for example pressing a share button, following a link to another site, or how far a page is scrolled), information about the device and browser, and the approximate location derived from the connection. Microsoft Clarity also records how pages are used (heatmaps and recordings of the screen); what is typed into input fields is hidden before it is recorded. The operator does not use this information to identify individuals. How to stop it: see the links at the end of “Sending information to outside services” and the browser's cookie settings.
• Information stored on the device (cookies and similar)
  This site stores the following on the user's device (browser). Cookies: to keep a member logged in (for up to 400 days), to complete a login (10 minutes), and to show that a registration has been completed (10 minutes), and the cookies of the access analysis above. Browser storage: settings (such as the display mode, the display language, and whether the site is used as an app), drafts being written, marks for what has already been seen, recent searches, temporary copies of screens (10 minutes), and the last position of the map. Purpose: to keep settings and drafts and to show screens quickly. The information in the browser storage is not sent to the operator. All of it can be deleted in the browser's settings.
• Information used to prevent abuse
  When a user logs in or sends an inquiry, Cloudflare Turnstile checks that the user is not an automated program; for this check, the user's IP address and information about the browser are sent to Cloudflare. The operator turns the user's IP address into a code from which the address cannot be recovered, and uses it to limit the number of registrations and requests. The code is kept for up to 24 hours, and the code attached to an inquiry is kept with the inquiry.

Purposes of use

• To provide the functions of this site (logging in, posting, profiles, Collection, Spot Map, notifications, and so on).
• To show on this site the posts and the information that members choose to make public.
• To let users read posts in other languages.
• To send the notifications that a member has turned on (email and push notifications).
• To handle reports, and to prevent and deal with posts that violate the submission guidelines and with abuse of this site.
• To respond to inquiries and requests and to confirm that a request comes from the person concerned.
• To improve this site through access analysis and column view counts, and to tell the author of a column how the author's columns are read.

The operator does not use the information it collects for any purpose other than the purposes above.

Sending information to outside services

To run this site, the operator uses the following outside services and sends information to them to the extent necessary (entrusts them with handling it).

• Cloudflare
  Delivers this site and its apps, stores all information of this site (the database and images), checks for automated programs at login and when an inquiry is sent (Turnstile), processes images, and translates text by machine (Cloudflare Workers AI).
• Google
  Login with a Google account; access analysis (Google Analytics 4); fonts (Google Fonts) — the user's browser downloads the fonts from Google, including fonts that members choose for their profiles and columns.
• Discord
  Login with a Discord account.
• Microsoft
  Access analysis (Microsoft Clarity).
• Resend
  Sends emails: Comment notification email to members, and notices to the operator about new members, members who leave, new Fan Memoirs, reports, and inquiries.
• DeepL
  Translates posts by machine.
• Yahoo! JAPAN, Geoapify, Photon (komoot)
  Place search on the Spot Map. The operator's server sends the search words and the position; the user's IP address is not sent.
• OpenFreeMap, Esri, Geospatial Information Authority of Japan (GSI)
  Map images on the Spot Map. The user's browser downloads the map images directly from these services, so the area being shown and the user's IP address reach them.
• Browsers' notification services
  Delivers push notifications through the notification service used by the user's browser (for example Google, Apple, Mozilla, or Microsoft).
• X, LINE, Facebook, Reddit, Weibo
  The share buttons. Only when a user presses a share button, the screen of that service opens; nothing is sent to these services before the button is pressed.
• X, Pinterest
  The images of some older Fan Memoirs are loaded from these services.

To let users read posts in other languages, this site sends Reactions, columns, replies, anniversary messages, spot names on the Spot Map, and, when a reader chooses to translate it, the text of a profile, to DeepL or Cloudflare Workers AI and translates them. The operator stores the translations on this site. Text sent to DeepL is handled under DeepL's terms for its free version and may be stored by DeepL.

Some of these services handle information outside Japan (for example in the United States and the European Union). How each service handles information is governed by that service's own privacy policy. Links for Google and Microsoft, including how to stop Google Analytics, are listed below.

• Google Privacy Policy
  https://policies.google.com/privacy
• How Google uses information from sites and apps that use Google services
  https://policies.google.com/technologies/partner-sites
• Google Analytics opt-out browser add-on
  https://tools.google.com/dlpage/gaoptout
• Microsoft Privacy Statement
  https://www.microsoft.com/privacy/privacystatement

Provision to third parties

The operator does not sell personal information. The operator does not provide personal information to a third party except in the following cases.

1. When the person concerned has consented.
2. When it is required by law.
3. When it is necessary to protect a person's life, body, or property and it is difficult to obtain the consent of the person concerned.
4. When the operator entrusts the handling of information to the services listed in “Sending information to outside services”, to the extent necessary for the purposes of use.

Information that a member chooses to make public can be seen by anyone, as set out in “Information made public”.

Information made public

The following information can be seen by anyone, including users who are not logged in.

• Reactions, columns, replies, anniversary messages, and Fan Memoirs, together with the display name and icon of the member who posted them (Fan Memoirs also show the other items the member entered, such as the work the member first came to know). Anniversary messages may also show the country the member entered in a Fan Memoir. Reactions, columns, and replies also show the SHINOBILIA ID of the member who posted them (including members who have not published their profile).
• The display names and icons of the members who gave a Like to a post, in the list of Likes of that post.
• A profile that the member has published: the display name, the icon, the SHINOBILIA ID, the Ninja No., the items, images, and links the member placed on it, and the collection (unless the member hides it). A registered X account is shown in the social media section of the profile. A profile that the member has not published is not shown to anyone else.
• On the home timeline: members' posts, spot registrations, and visit records that are shared on the timeline, with the member's display name.
• A visit record that the member marks as anonymous is not shown on the member's profile, and instead of the member's name it is shown with the label “Anonymous” on the Spot Map and “Anonymous” on the timeline. The memo and date of a visit record are shown on the page of the spot.
• Columns may appear in the results of search engines. Profiles are set not to appear in search engines.

Retention and deletion

• What a member can delete
  A member can delete the member's own posts (Reactions, columns, replies), images, profile items, collection items, and visit records from the screens of this site. A deleted post is no longer shown, but the operator keeps its content as a record for dealing with abuse. A deleted image may remain viewable for up to about one hour. Fan Memoirs cannot be deleted by the member; see “Requests and inquiries”.
• When a member leaves
  When a member leaves, the operator deletes the member's profile, icon, images, collection, visit records, Comment notification email address and settings, push notification address, links to login accounts, the display language and other settings, logs the member out on every device, and retires the profile address (URL) so that it is never used again.
• What remains after leaving
  Posts (Reactions, columns, replies, anniversary messages, and Fan Memoirs) remain on the site with the name shown under a label indicating a member who has left; the image of a Fan Memoir is deleted. Likes remain but are not shown in the list of Likes. Records of reports, spots the member registered (no longer shown) and their edit history, and inquiries (until one year after receipt) also remain.
• When use is suspended
  The operator may suspend the use of this site by a member who violates the submission guidelines. When the operator suspends a member, the member's posts (including Fan Memoirs) and spot registrations are no longer shown, and the member's profile, collection, visit records, and notification information are deleted. To prevent the member from registering again, the operator keeps the identifiers of the member's login accounts.
• Information deleted after a set period
  Inquiries: one year after receipt. Comment notification email address: when the member has not logged in for 180 days. Search results kept by the server: 10 minutes. Information used while logging in: 10 minutes. Codes used to limit registrations: 24 hours.
• Other information
  Other information is kept until the member deletes it or leaves.

Management of information

To prevent unauthorised access to, and leakage or loss of, the information it collects, the operator limits the persons who can handle it to the operator, encrypts communication, and takes other necessary and appropriate security measures.

Age

Persons under 13 may not use this site. If the operator determines that a person under 13 is using this site, the operator may suspend that person's use.

Images and assets

Some images of this site, such as illustrations, are made with generative AI. The operator does not use images or text posted by members to train AI.

This site uses the following assets in accordance with the terms of each distributor.

• Icons and motifs
  The icons and motifs of profiles use assets distributed by ICOOON MONO and SILHOUETTE DESIGN, and Material Symbols (Google, Apache License 2.0).
  ICOOON MONO / SILHOUETTE DESIGN / Material Symbols (Apache License 2.0)
• Three-pronged kunai
  Kunai Vectors by Vecteezy — https://www.vecteezy.com/free-vector/kunai
• Typefaces
  The text uses Noto Sans JP, and brush-style shapes are made from Yuji Syuku (both under the SIL Open Font License 1.1). The shapes of flags use flag-icons (The MIT License).

The full text of each licence is available at the links below.

• Noto Sans JP（SIL Open Font License 1.1）
• flag-icons（The MIT License）
• Material Symbols（Apache License 2.0）

Display language

This site saves the display language that the user chooses in the user's device (browser) and shows the site in that language from then on. For a member, the display language is also stored with the member's information, and the member can change it at any time in the settings of Profile.

Requests and inquiries

A user may request the operator to notify the purposes of use of, disclose, correct, add to, delete, stop using, or stop providing to third parties, the user's personal information held by the operator. Requests are accepted through the contact form. The operator confirms that the request comes from the person concerned by a method it determines, and then responds without delay in accordance with the law.

Requests to take down a published Fan Memoir are accepted through the contact form.

Requests to add, correct, or delete spot information on the Spot Map are also accepted through the contact form.

Contact form

Operator X account: @shinobilia

Changes to this policy

The operator may change this policy. Important changes are announced in Announcements on this site. A user who uses this site after a change is deemed to agree to the changed policy.

Last updated: September 27, 2026