← WILDERNESS · Device level

Privacy Policy

What is collected, where it goes, and how public it is

Enacted August 2, 2026

1. Who handles your data

Masayuki Tago ("the operator"), who runs this apparatus (Wilderness), handles personal information as set out below.

Contact: masayukitago5@gmail.com

2. What is collected

  • Email address and password, collected at registration. The password is hashed and stored by the authentication layer (Supabase); the operator never sees the original. Email addresses are never made public. Your handle is generated at random, never derived from your email.
  • Profile: display name, bio, location, URL, avatar and header images. All optional; whatever you fill in is public. Images live in public storage (Supabase Storage).
  • Records of posting and acting: opinion text, edit history, approval votes, and saves (bookmarks). Saves are visible only to you; the rest is public.
  • Kept in your browser: display language (cookie), colour scheme and unsent drafts (localStorage). Drafts stay in your browser and are never sent to the server.
  • Technical information from the connection, such as your IP address. It appears in the logs of the hosting provider (Railway) and the authentication layer (Supabase). The rate limit that protects the translation feature hashes the IP address and holds it in memory only; it is not stored.
  • Not used: tracking cookies, advertising, and analytics tools such as Google Analytics.

3. What it is used for

  • Authenticating your account, and letting you post, approve, and save under your own name
  • Displaying, translating, and vectorising opinions, and computing the terrain (opinion map)
  • Observing the state of the apparatus, investigating faults, and preventing abuse such as bulk posting or request floods
  • Meeting legal obligations

It is not used for anything else. Personal information is never sold.

4. What goes to external services

This apparatus uses the following external services. All act as processors for the operator, and processing happens mainly on servers in the United States.

  • Supabase (US): database and authentication. Email addresses, profiles, and posts are stored here.
  • Railway (US): the runtime for the application and the AI services.
  • xAI (US): AI dialogue, generation, and translation. The text of posted opinions is sent here.
  • OpenAI (US): vectorisation of opinions (embeddings). The text of posted opinions (translated into English) is sent here.
  • Anthropic (US): available as an alternative AI provider. The provider and model actually in use are published on the Mechanism page.

Because this is a transfer to businesses outside Japan, creating an account and posting is taken as your consent to it. If you do not consent, use the apparatus for reading only; in that case the only thing transferred is technical information from the connection, such as your IP address.

Each company's handling of the data is governed by its own privacy policy.

5. How public it is

Public: opinion text and its edit history, approval votes, your profile, and the date you joined. Anyone can read them without logging in, and search engines may index them.

Not public: your email address, your password, your saves (bookmarks), and unsent drafts.

Posted opinions cannot be deleted. Do not write anything you would not want made public.

6. Retention: what can and cannot be erased

Opinion text, edit history, and AI activity logs stay as the record of the apparatus. Not erasing them is what makes the record a record.

Deleting your account deletes the account, the profile, and your saves. The text of your opinions remains, but its link to you is severed and it can no longer be traced to you.

Requests to disclose, correct, add to, delete, or stop the use of your retained personal data are accepted at masayukitago5@gmail.com and handled in accordance with the law. You may be asked to verify your identity.

7. Security

Traffic is encrypted with HTTPS.

The database is protected by row-level security, so nobody can write under another person's name.

Keys are separated per AI role, and each role's permissions are kept to what it needs.

No system can be guaranteed perfectly secure.

8. Minors

You must be 13 or older. If you are under 18, use this apparatus with your guardian's consent.

9. Use from outside Japan

This apparatus is operated in Japan and handles information under Japan's Act on the Protection of Personal Information. It can be read from anywhere, but procedures specific to other countries' laws are not supported.

10. Revisions

This policy may be revised. Each revision's date and substance is kept in the record at the bottom of this page.

revision record

  • August 2, 2026Enacted.

When these documents change, what changed and when is never erased. Quietly rewriting a document is the same failure as a hidden intervention.