This policy describes how Kohibou handles information. It is not legal advice.
Who we are
Kohibou 小火 is operated by Heuze Productions (“we”, “us”). Privacy contact: info@kohibou.com.
Who may use Kohibou
Kohibou is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13 (United States COPPA baseline). If you believe a child has registered, contact us and we will delete the account.
Users in the EU/EEA/UK should be at least 13 or the digital consent age in their country, whichever is higher. Users in Japan should use the service in line with applicable age and consent rules (APPI).
Information you provide
- Account: username, email address, password (hashed), optional avatar sprite
- Community content: posts, replies, reactions you submit
- Support email: if you contact info@kohibou.com
First-party analytics (no Google Analytics)
We run our own analytics on the server. We do not use Google Analytics or advertising trackers on pages. See our Transparency page for the last 30 days of aggregate stats.
Analytics may include:
- Page path, external referrer domain, coarse country, device type
- A daily anonymous session identifier (not linked to your account in analytics storage)
- Whether the visit was from a logged-in user (boolean only)
We do not store IP addresses in analytics tables.
Legal basis (GDPR): legitimate interest in operating and improving a small community site, balanced against your privacy through minimization and aggregation.
APPI (Japan): we specify this purpose here, use data only for site operation and aggregate reporting, and apply appropriate security.
Moderation
Posts and replies may be processed by automated moderation (Claude API) before publication. Content is sent for tone review only — not for advertising or profiling.
Search Console
We use Google Search Console to understand search performance. It does not place tracking scripts on Kohibou pages for visitors.
Retention
- Account and community content: until you delete your account or we remove it under our Terms
- Public analytics aggregates: last 30 days on the Transparency page
- Older daily aggregates: kept internally for site health and potential aggregate media reporting
- Per-day anonymous session rows: up to 730 days, then purged
Sharing
We do not sell personal information. We share data only with infrastructure providers needed to run the site (e.g. hosting, email delivery) under contract, or when required by law.
Your rights
Depending on where you live, you may have the right to:
- Access, correct, or delete your account data
- Export your data
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
- Lodge a complaint with a supervisory authority (EU/UK) or relevant Japanese authority (APPI)
Email info@kohibou.com to exercise these rights.
Security
Passwords are hashed. Access to admin analytics is restricted to site operators.
International transfers
Data may be processed in the United States or other regions where our host operates. We use reputable providers and appropriate safeguards where required.
Changes
We will update this page when practices change. Material changes may be announced on the site.