隱私權政策

Who we are

Takame (takame.io) is operated by Great Bright Science and Technology Inc. (偉輝科技株式会社). Representative: TAN PEK AUN (Representative Director). Address: 402, 1-51-3 Chuo, Nakano-ku, Tokyo 164-0011, Japan. Questions about this policy or your data: support@gbst.jp.

Reading Takame without an account

You can read every page without signing in. On the website we use Google Analytics to count page views; it is not used in the Takame iOS app, and we never send it your name, email or anything that identifies you. We use no advertising trackers.

Live prices are loaded by your browser directly from the public market-data feeds of Binance, and OKX if Binance cannot be reached. Those exchanges receive your IP address as part of that connection, under their own privacy policies. We never receive the data.

Our hosting providers (Vercel and Vultr) process request logs such as IP address and user agent to deliver and protect the service.

Signing in with Google or Apple

Accounts are for people aged 18 or over.

When you sign in we receive from Google or Apple: a unique account identifier, your email address and whether it is verified, and, if you allow it, your name and profile picture. With Apple you may hide your email; we then receive a relay address.

If you sign in with an email address instead, we store that address and, while it is valid, a one-time code we sent to it. The code is stored only as a hash, is single use, and expires within ten minutes; a day after it expires we erase the address and the hash from that record. We keep a salted one-way hash of your IP address for these requests, used only to limit abuse.

We use this only to create and run your Takame account. Next to your comments we show only the public name you choose, or an anonymous tag until you choose one; your Google or Apple name is never shown. We do not send you marketing email and we never merge accounts by email address.

For Apple accounts we store an encrypted refresh token so we can revoke Takame's access at Apple when you delete your account.

Identity verification (only if you want to comment)

Signing in does not require identity verification. To post comments you verify once through FirstPass (firstpass.cloud), the identity verification service we run.

On the FirstPass page you do a live face scan and photograph an identity document. FirstPass compares your face with the document photo and reads the document. The document image is read using Anthropic's AI service. This involves biometric data.

FirstPass keeps a verification record, encrypted: your face scan images and video, the document images, the information read from the document, and a numeric face template used for matching. It keeps these records without a set deletion date, so that banned users cannot return under new accounts and so that disputes can be answered. You can ask us to erase your verification record by writing to the address above.

Takame itself stores only whether your verification passed and a reference number. Takame does not store your document, face images or the details read from them, and never shows them to other users.

Comments

Comments you post are public and are shown with your public name, which you choose. Your Google or Apple name is never shown. If you delete a comment it is removed from the site; we keep a hidden copy and any reports about it to handle abuse.

When you report a comment or hide a person, we store that choice with your account.

Watchlist and alerts

When you star an exchange or coin we store that choice with your account, and show you register changes and regulator mentions for it on your Watchlist page.

Email summary: if something happens to an exchange you watch (a regulator names it, its register entry is revoked, expires or disappears, a new register record or a security incident is recorded), we email you one summary that day, at most one a day. It is on by default for accounts that watch exchanges. Turn it off on the Watchlist page or with the link at the bottom of every summary; that link works without signing in. We send it to the verified email address of your account.

App notifications: if you turn on alerts in the Takame app, we store your device's push token and send notifications through Apple (and, on Android, Google). Turn them off on the Watchlist page or in your phone's settings. A token is deleted when you sign out on that device or when Apple or Google tells us it is no longer valid. We keep a note of which alerts we have already sent you, so you never get the same one twice, for as long as your account exists.

AI assistant

If you use the "Ask" assistant, your question is sent to Anthropic, which runs the AI model that writes the answer. The assistant only looks things up in Takame's own data and does not browse the web.

We keep each question and answer, the lookups the assistant made, how many tokens it used and what it cost, a one-way hash of your IP address (not the address itself), and your account ID if you are signed in. We use this to enforce daily limits, stop abuse and check that answers are accurate. We keep these records with no fixed deletion date.

Checking a platform, and telling us about one

When you check a platform name or website, we do not save what you typed in our database. The check is sent as part of the page address, so it appears in our hosting provider's request logs like any other page you open, and identical checks may be served from its cache for a few minutes.

If a platform is not in our records and you choose to tell us about it, we store the name or website you checked, the optional note you write, the language of the page and a one-way hash of your IP address (not the address itself), which we use only to limit how many submissions can be sent. We ask for no name or email, we do not publish submissions and we do not reply to them. We use them only to decide which official records to check. We keep them with no fixed deletion date.

Cookies

We set one sign-in cookie (takame_session) when you sign in. It holds a random token; we store only a hash of it. It expires after 60 days or when you sign out.

On the website, Google Analytics sets its own cookies to count visits. The Takame iOS app sets no analytics cookies.

During sign-in we set short-lived cookies (10 minutes) that protect the Google and Apple sign-in flow against forgery. Apart from these and the analytics cookies above, we set no cookies.

Advertising and data inquiries

If you send an advertising inquiry we store the company name, email, website and message you enter, the page language, and a salted one-way hash of your IP address used only to limit spam. We use it to reply to you.

If you send a data inquiry, we store the company name, role, intended use, jurisdictions and email you enter, the page language, and the same salted hash of your IP address. We email a copy of the inquiry to our support inbox through Resend so we can reply to you.

Claiming a company page, and registration badges

If you claim a company's page, we store the company email address you verified, the status of your claim, the links you add for the company and any correction requests you send, together with your account ID. We send the verification code to that email address through Resend. The claim is shown on the page as claimed by the company; your name and email are never shown.

When a website displays a Takame registration badge, we record only the name of that website's domain, which badge it showed, the date and how many times it was loaded. We do not record visitors' IP addresses or the full page address. We use this to spot badges shown on websites that are not the company's own.

If you delete your account, your claims are revoked and the verified email address is removed.

Who we share data with

We share personal data only with service providers that run Takame for us (hosting: Vercel and Vultr; sign-in: Google and Apple; email delivery for sign-in codes, company-page claim codes and alert summaries: Resend; app notifications: Apple Push Notification service and, on Android, Google Firebase Cloud Messaging; identity verification: FirstPass, which uses Anthropic to read documents; answers from the AI assistant: Anthropic; website traffic counting: Google Analytics, website only), and with authorities when the law requires it. We do not sell personal data or share it with advertisers. Advertisers on Takame never receive information about who saw or clicked an ad.

Deleting your account

You can delete your account at any time from the account page. We remove your name, picture and email, sign you out on every device and revoke our access at Apple. Comments you posted remain visible, shown as posted by a deleted user. A minimal record of the account (the account identifier from Google, Apple or your email sign-in, and your app notification tokens) is kept for 90 days to prevent abuse, then removed. At the same time we remove the reference to any identity check and unlink your AI assistant questions from the account; after that nothing we keep links the deleted account to you.

Where data is stored and how long

Account data is stored on servers in Tokyo, Japan, and is kept while your account exists. Advertising and data inquiries are kept for up to three years. We do not sell personal data.

Takame is used worldwide, so your data may be processed in Japan and in the United States (Vercel), which may have different data-protection laws from your country.

Your rights

We handle personal information in accordance with Japan's Act on the Protection of Personal Information. Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, or stop using it, and you can withdraw consent at any time. If you are in the EU or UK you may also object to processing, ask for your data in a portable format, and complain to your local data-protection authority.

Send requests to support@gbst.jp. We reply within 30 days.

Changes

If we change this policy we will update the date on this page. Material changes will be announced on the site before they take effect.