Privacy

This page publishes how paidtop (operated by paidtop) handles personal data, as required by Japan's Act on the Protection of Personal Information.

What we collect

• Email address, display name, description, and the URL or handle you list
• Photos, support messages, and supporter names posted to the oshi board
• IP address, user agent, access logs, and the `ref` parameter (referral source)

Why we use it

• To provide and display placements and to compute ranks
• To email you when your placement is overtaken, and to contact you about payments
• To detect and act on abuse and prohibited content
• To produce statistics (processed so that individuals are not identified)

Who else processes it

We entrust processing to the following providers, for the purposes above. All of them store and process data outside Japan (primarily in the United States): Polar (payments, US), Supabase (database and photo storage, US), Resend (email delivery, US), Cloudflare (delivery, US), and unavatar.io (fetching an avatar from a handle, US). We do not share personal data with anyone else except where required by law.

How long we keep it

Placement and payment records are kept while a placement is public and for the retention period required by law afterwards (seven years for accounting records). Access logs are deleted within twelve months.

Access, correction, and deletion

Email support@paidtop.org. We act on the request once we have confirmed your identity. For removal of a placement, see paidtop.org/takedown.

Cookies

We use only `lang` (display language), `ref` (referral source), and `theme` (color scheme). We do not use advertising or behavioral-targeting cookies.