Privacy Policy

This document is a reference translation of the Privacy Policy provided for convenience only. The official version is the Japanese version. In case of any discrepancy between this translation and the Japanese version, the Japanese version shall prevail.

Sally Inc. (hereinafter referred to as "the Company") has established the following privacy policy (hereinafter referred to as "this Privacy Policy") as basic matters to be observed for appropriately managing and operating personal information obtained by the Company through the smartphone application "UZU" (hereinafter referred to as "UZU"), the murder mystery creation and publishing service "UZU STUDIO" (hereinafter referred to as "UZU STUDIO"), the murder mystery scenario search and performance reservation service "Madamis.jp (マダミス.jp)" (hereinafter referred to as "Madamis.jp"), and any other services provided by the Company (hereinafter collectively referred to as "the Services"), and will handle personal information properly.

1. Acquisition of Personal Information

In this Privacy Policy, "personal information" and "personal data" shall follow the definitions set forth in Article 2, Paragraph 1 of the Personal Information Protection Act. The Company will clearly define the purpose of acquisition within the legitimate scope of business in advance, and will acquire and use personal information by lawful and fair means to the extent necessary to achieve that purpose.

2. Purpose of Use of Personal Information

The Company will use the personal information obtained through the Services only within the scope of the following purposes of use. If the use exceeds the scope of the purposes, the Company will obtain the consent of the person in advance. The Company may change the purpose of use to the extent that it is reasonably recognized as having relevance to the purpose of use before the change, but if the purpose of use is changed, the Company will promptly notify or announce it.

Purposes of use common to personal information obtained through each service

  1. To provide each service
  2. To improve the convenience of each service
  3. To bill, process payments for, and manage usage fees for paid services within each service
  4. To create statistical data on the use of the Services and to conduct marketing
  5. To conduct surveys and similar activities regarding current services or services under consideration for new provision
  6. To consider and provide new projects and initiatives related to the Services
  7. To refuse use by persons who have violated the terms of use or other rules and regulations established by the Company, or persons who attempt to use the Services for fraudulent or improper purposes
  8. To respond to inquiries and verify identity
  9. To provide information from the Company (including information on new services and products provided by the Company, or new services and products of other companies recommended by the Company) and to send e-mail newsletters and the like
  10. To contact users as necessary in connection with their use of the Services, such as other notices regarding the Services
  11. To exercise rights and perform obligations under contracts, laws, and regulations

Purposes of use of personal information obtained through "UZU" and "UZU STUDIO"

  1. To prevent the same person from making multiple registrations
  2. To contact users from the Company in cases such as when a user has registered to participate in a game but does not participate by the start time
  3. To make revenue distributions and other payments to scenario creators and others
  4. To determine participant combinations in Quick Match and to recommend scenarios based on play history and the like
  5. To confirm the applicable conditions of campaigns and benefits and to prevent fraudulent acquisition of benefits
  6. To verify identity, process payments, and carry out tax-related procedures in connection with revenue distributions to scenario creators and others
  7. To respond to reports from other users and otherwise ensure the safety of the usage environment of the Services

Purposes of use of personal information obtained through "Madamis.jp"

  1. To contact users from the Company in cases such as when a user has registered to participate in a performance but does not participate by the start time
  2. To make contact necessary for the fulfillment of reservations, such as confirmation, change, cancellation, and reminders of performance reservations
  3. To provide user information together with reservation details to the operator of the performance to the extent necessary for the establishment and fulfillment of the reservation
  4. To verify telephone numbers and other information when store operators determine whether to accept a reservation, in order to prevent no-show cancellations and the like
  5. To display play records, reviews, and other user posts on the Services
  6. To analyze the usage of Madamis.jp

3. Disclosure and Provision of Personal Data to Third Parties

Except in the cases set forth below, and except where disclosure or provision is permitted under the Personal Information Protection Act or other laws and regulations, the Company will not disclose or provide personal data to third parties without the consent of the person.

  1. In "Madamis.jp", when a user makes a reservation for a performance, the Company will provide the reserving person's name, contact information (e-mail address and telephone number), reservation details, messages to the store, and other information to the store operator running the performance, to the extent necessary for the establishment and fulfillment of the reservation.

4. Viewing, Correction, etc. of Personal Information

  1. When the Company is requested by the person to be notified of the purpose of use of personal data, the Company will notify the person without delay. However, in cases where the purpose of use of the personal data is clear, or in other cases where the Company is not obligated to disclose it under laws and regulations, the Company may not notify the purpose of use. A fee of 1,100 yen (tax included) per request will be charged for notification of the purpose of use of personal data.
  2. When the Company receives a request from the person for disclosure of personal data (including disclosure of records of third-party provision concerning the transfer of personal data), the Company will disclose the personal data by the method designated by the person from either (1) mailing a document to the address designated by the person, or (2) sending an electromagnetic record to the e-mail address designated by the person. However, if disclosure by the method designated by the person requires a large expense, or if disclosure by such method is otherwise difficult, the Company will disclose the personal data by method (1). A fee of 1,100 yen (tax included) per request will be charged for disclosure of personal data.
  3. When the Company receives a request from the person for correction, addition, or deletion (hereinafter referred to as "correction, etc.") of the content of personal data, the Company will conduct the necessary investigation without delay, and if it is found as a result of the investigation that the content of the personal data is not factual, the Company will make the correction, etc. of the content of the personal data.
  4. When the Company receives a request from the person for suspension of use or erasure (hereinafter referred to as "suspension of use, etc.") of personal data, the Company will promptly conduct the necessary investigation, and if it is found that the Company is handling the personal data beyond the scope of the purpose of use, is using the personal data in a manner that may encourage or induce illegal or unjust acts, or has acquired the personal data by fraudulent means, the Company will suspend the use, etc. of the personal data to the extent necessary to correct the violation.
  5. When the Company receives a request from the person for suspension of provision of personal data to third parties, the Company will promptly conduct the necessary investigation, and if it is found that the Company is providing personal data to third parties in violation of Article 27, Paragraph 1 or Article 28 of the Personal Information Protection Act, the Company will suspend the provision of the personal data to third parties without delay.
  6. When the Company receives a request from the person for suspension of use, etc. of personal data or suspension of provision to third parties (excluding the cases in items (4) and (5) above), the Company will promptly conduct the necessary investigation, and if the Company no longer needs to use the personal data, if an event prescribed by the rules of the Personal Information Protection Commission has occurred with respect to the personal data as a situation concerning the security of personal data — such as leakage, loss, or damage — that is highly likely to harm the rights and interests of individuals, or if there is otherwise a risk that the rights or legitimate interests of the person may be harmed by the handling of the personal data, the Company will suspend the use, etc. of the personal data or the provision thereof to third parties without delay, to the extent necessary to prevent infringement of the rights and interests of the person.
  7. Notwithstanding items (4) through (6) above, in cases where suspension of use, etc. of personal data or suspension of provision to third parties requires a large expense, or where it is otherwise difficult to suspend the use, etc. or the provision to third parties, and where the Company takes alternative measures necessary to protect the rights and interests of the person, the Company may not suspend the use, etc. or the provision to third parties.

For requests based on items (1) through (6) above, the Company will respond after verifying the identity of the person, so please contact the inquiry desk described at the end of this Privacy Policy.

5. External Transmission of Cookies, etc.

Use of cookies

When users use the Services, the Company stores and references its cookies, automatically obtains information such as IP addresses, advertisements and pages viewed, and usage environment, and records such information on its servers.

A cookie is a small text file containing arbitrary characters that is exchanged between a web server and a user's Internet browsing software (browser) when the user views the Services, and is stored on the user's device.

The Company uses the information obtained by this method to improve the Services, as reference material for considering new services, and to analyze and provide advertisers and information providers with insights into what kinds of advertisements, information, and services are effective to publish or provide. No personally identifiable information will be included in the analysis results.

However, when the Company provides cookies to a third party as personally referable information, and it is expected that the third party will use the cookies as personal data by which the user can be identified, the Company will provide them to the third party only after confirming that the user's consent has been obtained.

Restricting cookies

Users can configure their browsers to indicate in advance that a site uses cookies, to disable cookies, and to delete stored cookies. Please note that if you refuse the use of cookies or delete cookies, the functions available in the Services may be limited.

Types of cookies

The Company uses the following types of cookies. For the handling of information obtained through cookies and the like by each provider, and for how to disable the use of cookies, please refer to the links below.

Service nameType of cookieProviderInformation collectedPurpose of useHow to change settings, etc.
Google AnalyticsAnalytics cookiesGoogle LLCWebsite usage, access status, traffic, site navigation, etc.To collect users' browsing history and receive analysis results in order to understand usage and improve the Company's servicesTerms of Service
Google Privacy Policy
Opt-out
SentryCookies for error information collection and session replayFunctional Software, Inc.Records of operations at the time of errors, browser environment, screen interactions, etc.To detect service defects and improve quality (used in Madamis.jp and the UZU STUDIO editor)Privacy Policy
Vercel Speed InsightsPerformance measurementVercel Inc.Measurement data such as page display speedTo improve the display speed of the Services (used in Madamis.jp)Privacy Policy
Firebase AuthenticationAuthentication cookies, etc. (essential)Google LLCAuthentication information necessary to maintain the login stateTo maintain the login state and perform authenticationPrivacy Policy

Behavioral analysis tools

In "UZU", instead of cookies, the Company obtains usage information and the like using the following information collection modules.

Service nameProviderInformation collectedPurpose of useHow to change settings, etc.
AdjustAdjust GmbHAdvertising identifiers (for Android devices), event information such as app installations and purchasesTo measure the effectiveness of advertisementsPrivacy Policy
Firebase AnalyticsGoogle LLCDevice information, app usage history, etc.To analyze app usageFirebase Analytics
Google Terms of Service
Google Privacy Policy
Firebase CrashlyticsGoogle LLCApp usage and crash information, etc.To detect app defectsPrivacy Policy

6. Outsourcing of Personal Information Handling

The Company may outsource the handling of personal information to external parties in the course of business operations. In such cases, the Company will supervise the contractors and have them implement appropriate management of personal information.

Payment processing such as credit card payments in the Services is outsourced to payment service providers, and the Company does not retain payment information such as credit card numbers.

7. Use of Statistically Processed Data

The Company may create statistical data processed so that individuals cannot be identified, based on the personal information provided. The Company may freely use, at its discretion, statistical data processed so that individuals cannot be identified.

8. Security Management System

In order to prevent leakage, loss, or damage of personal information and otherwise protect personal information, the Company provides education and training to all employees, including the Company's officers, and also takes necessary and appropriate measures for the security management of personal information on the system side, such as restricting access to personal information files, recording access logs, and implementing security measures to prevent unauthorized access from outside.

For details of the security management measures taken by the Company, please contact the Company's inquiry desk described in this Privacy Policy.

9. Scope of the Privacy Policy

This Privacy Policy does not apply to the Company's business partners, contractors, or sites linked from websites operated by the Company. The Company assumes no responsibility for any trouble that occurs on such sites. Please check the handling of personal information on each site.

10. Revision of the Privacy Policy

The Company will review the operational status of its handling of personal information as appropriate, strive for continuous improvement, and may revise this Privacy Policy as necessary. Changes to the Privacy Policy will be notified individually or announced on the websites or within the applications of the Services.

11. Inquiry Desk

For questions, complaints, and other inquiries regarding the Company's handling of personal information, please contact the following desk.

Sally Inc.
Representative Director: Eitaro Hiraishi
Kurashima Shibuya Building 602, 2-3-8 Shibuya, Shibuya-ku, Tokyo
E-mail: info@sally-inc.jp

Established and enforced on April 21, 2021
Revised on July 22, 2026