← Back to STAMP ENGINE

Privacy Policy

This is a reference translation. The Japanese version is the legally binding original. If the two differ, the Japanese Privacy Policy prevails.

STAMP ENGINE ("the Service") complies with Japan's Act on the Protection of Personal Information and other applicable laws, and handles users' personal information as set out below.

1. Operator

For the operator's name and contact details, please see the Commercial transactions notice. For questions about personal information, contact [email protected].

2. Information we collect

· Uploaded image data (if you generate from a photo)
· Generated sticker images
· Email address (if you ask us to send the finished product, and if you create an account)
· Information from the external service you sign in with (from your Google or LINE account we receive your email address, display name and the user identifier within that service)
· Payment-related information (payments are processed by Stripe; we do not receive or store card numbers)
· Purchase history (date and time, plan, amount)
· Access logs (IP address, browser information, access date and time, and similar)
· Information used to identify a device or browser (identifiers stored in cookies and browser local storage, IP address, and device characteristics produced by our bot-detection provider)

3. Purposes of use

· To generate, provide and deliver stickers
· To register accounts, sign you in and verify identity
· To process payments and manage purchase history (including re-download for 30 days after purchase)
· To prevent unauthorised access and misuse (including managing the number of free uses and detecting and blocking use by automation tools (bots))
· To respond to enquiries
· To improve the service and develop new features
· Purposes incidental to the above

We do not use email addresses for any other purpose. We do not use them to send advertising or promotional email.

4. Retention periods

InformationRetention
Uploaded images and generated sticker images90 days from creation
Email address and account informationUntil you delete your account
Access logsWithin the period needed to prevent misuse
Purchase history and transaction recordsThe period required by law

We do not keep information beyond these periods where it is not needed for the stated purposes.

5. Security measures

To prevent leakage, loss or damage of personal information, we use encryption in transit (TLS), access control and other necessary and appropriate safeguards.

6. Provision to third parties

Except as required by law, we do not provide personal information to third parties without the person's consent. Exceptions are: where required by law; where necessary to protect a person's life, body or property and consent is difficult to obtain; and where cooperation with a public body carrying out statutory duties is required.

7. Third-party services we use (processors)

· OpenAI API (image generation): uploaded images and your input are sent to OpenAI's API for generation. Data sent to the API is not used to train OpenAI's models.
· Stripe (payments): payment details go directly to Stripe and do not pass through our servers.
· Cloudflare (protection, delivery, bot detection): used for security and performance. To detect use by automation tools, information about device and browser characteristics is processed by Cloudflare.
· Google (account authentication): used when you choose "Sign in with Google".
· LY Corporation (account authentication): used when you choose "Sign in with LINE".
· Resend (email delivery): used to send the finished product and similar email.

Please refer to each provider's own privacy policy for how they handle information.

7-2. Transfers to third parties outside Japan

Of the processors above, OpenAI, Stripe, Cloudflare, Google and Resend are located in the United States. Under Article 28 of Japan's Act on the Protection of Personal Information, we provide the following information:

· Destination country: United States of America
· Information on that country's data protection regime: the United States has no comprehensive data protection law equivalent to Japan's; it is regulated by sector-specific federal laws and by state laws, which differ between states.
· Measures taken by the recipients: each provider applies contractual safeguards such as Standard Contractual Clauses, encryption in transit, and access control.

LY Corporation is a company located in Japan. Our servers are located in Japan (Tokyo).

8. Cookies and device identification

We use cookies and similar technologies (browser local storage, identification based on device and browser characteristics) for the following purposes:

· Keeping you signed in
· Payment processing
· Managing the number of free uses (to prevent the same person repeatedly using the free allowance, we estimate the device by combining cookie and local-storage identifiers with the IP address)
· Detecting and blocking use by automation tools (bots)

You can disable cookies in your browser settings, but sign-in and some features will stop working correctly. Note that even if you delete cookies or local storage, the record of free uses may still be carried over via your IP address and similar information.

9. Advertising (third-party ad delivery)

The Service may use Google AdSense as a third-party advertising service. Third-party providers such as Google use cookies to serve ads based on your previous visits to this and other sites. The information collected includes cookie identifiers, IP address, browser type, pages viewed and the date and time of viewing; it does not include information that directly identifies you, such as your name, address, telephone number or email address.

Opting out of personalised ads: turn off personalised advertising in Google's Ad Settings; opt out of participating providers at the Network Advertising Initiative opt-out page; or disable cookies in your browser (some features of the Service may stop working).

We do not show ads on the generation, purchase or download screens, and we do not show ads on narrow screens (smartphones and tablets).

10. Disclosure, correction, deletion and account closure

You may ask us to disclose, correct, delete or stop using your personal information. Please contact [email protected]. After verifying your identity we will respond without delay, as required by law.

To close your account, contact the same address. We delete the email address, display name and sign-in information linked to the account. Transaction records that we are legally required to keep cannot be deleted. Please note that after deletion you can no longer re-download stickers you purchased.

10-2. If a leak occurs

If personal data is leaked, lost or damaged, we will promptly report to the Personal Information Protection Commission and notify affected users, as required by law.

11. Use by minors

Minors should use the Service only with the consent of a parent or guardian.

12. Changes to this policy

This policy may be changed as necessary. The changed policy takes effect when it is posted on this page.

13. Contact

Questions about this policy: [email protected]

Last updated: 14 August 2026 (Japanese original). Reference translation added 29 September 2026.