Kagebu Privacy Policy

Last updated: June 11, 2026 (Policy v1.0 / bundled with Kagebu v1.9.4 / sold on emocutelab.com)

1. Information We Collect

1.1 Information Collected at the Time of Purchase

When a User purchases the Product, the following information is provided to the Company through this site's payment (Stripe) and authentication (Supabase):

  • The purchaser's display name (handle or registered name) — to confirm the purchase.
  • The purchaser's email address — for support contact, update notifications, and watermark generation.
  • The purchase amount, currency, and purchase date — for revenue recording and tax processing.
  • Country / region (coarse information) — to display the appropriate tax rate and currency.

The Company does not collect payment information (such as card numbers). Payment processing is completed by Stripe.

1.2 Information Relating to Use of the Product (ZIP)

The Product is a set of text files that operate offline. The Company does not collect the following:

  • The content of conversations in which the User used the Product prompts in Claude Code or similar.
  • The number, timing, or persona-usage frequency of the User's prompt invocations.
  • The User's IP address or User-Agent (relating to use after installation).
  • The User's location information.

1.3 Information Contained in the Watermark

The ZIP delivered to each purchaser may contain, as a watermark, an irreversible hash of the purchaser's email (the first 12 digits of SHA256(salt + email)). The email address itself, name, address, telephone number, and similar information are not contained in the watermark. The Company uses the watermark only to identify the source in the event of a leak, and does not track Users in normal operation.

2. Purposes of Use of Information

  1. Delivery of the Product (providing the download link, and individual delivery where necessary).
  2. Notification of updates (v1.x patch / minor updates).
  3. Support handling (replies to inquiries, defect response).
  4. Revenue recording and tax processing.
  5. Identifying the source of a leak via the watermark in the event of unauthorized distribution.

3. Provision to Third Parties

We do not provide a User's personal information to third parties except in the following cases.

  1. Where required by law (court orders, inquiries from tax authorities, etc.).
  2. Where the User's explicit consent has been obtained.
  3. The minimum necessary provision to subcontractors (the payment provider, the authentication / data infrastructure, and the email delivery service).

3.1 Subcontractors

  • Stripe — payment processing (credit card payments; United States / Ireland).
  • Supabase — data infrastructure for authentication and purchase records (United States).
  • Resend — email delivery service (support contact and update notifications; United States).

Privacy policies of each provider: Stripe (https://stripe.com/privacy) / Supabase (https://supabase.com/privacy) / Resend (https://resend.com/legal/privacy-policy)

4. Data Retention and Deletion

  1. Purchase records (purchaser display name, hashed email, purchase amount, purchase date) are retained for 7 years in accordance with tax retention obligations.
  2. The hash table used for watermark matching is retained for the same period as the purchase records.
  3. Plaintext email addresses are retained, for login authentication and for payment and receipts, in this site's authentication infrastructure (Supabase) and at the payment provider (Stripe). Watermark matching uses only the irreversible hash.
  4. A User may request deletion of their own data at any time by writing to support@emocutelab.com (except for information subject to tax retention obligations).

5. Users' Rights

  1. Right of access: to request disclosure of the User's own information held by the Company.
  2. Right to rectification: to request correction of incorrect information.
  3. Right to erasure: to request deletion of the User's own information (except for information subject to a statutory retention obligation).
  4. Right to data portability: to request receipt of the User's own information in a machine-readable format (for Users subject to the GDPR).
  5. Right to withdraw consent: consent to marketing notifications and the like may be withdrawn at any time.

Please send requests to support@emocutelab.com. The Company will respond within 30 days of receipt.

6. Security Measures

  1. All communications are encrypted with TLS 1.3 or higher.
  2. The salt for the watermark hash is managed independently by the Company and is not provided to external subcontractors.
  3. Database access follows the principle of least privilege.
  4. In the event of a serious security incident, we will notify Users within 72 hours (in accordance with Article 33 of the GDPR).

7. International Data Transfers

  1. Purchase records may be stored on the United States servers of the payment provider (Stripe) and the authentication / data infrastructure (Supabase). The Standard Contractual Clauses (SCC) under each provider's DPA apply.
  2. Emails sent via Resend may pass through servers in the United States. For users in the EU, the Standard Contractual Clauses (SCC) under Resend's DPA (Data Processing Agreement) apply.
  3. The English edition (Umbrae) is also sold on this site (emocutelab.com), and this Privacy Policy applies to it.

8. Cookies

  1. Because the Product is a ZIP download, we use cookies only on the website we operate (emocutelab.com/kagebu).
  2. On the landing page, we use only cookies for maintaining the authentication session.
  3. We do not use cookies for analytics or advertising purposes (if we adopt them in the future, we will provide prior notice).

9. Use by Minors

  1. Users under 18 years of age should make purchases with the consent of a guardian.
  2. We do not knowingly collect personal information from anyone under 13 years of age (in accordance with COPPA).

10. Handling of the Care Personas

  1. Because the care personas (MX/PS/HB/YB) included in the Product operate in the User's local environment, the Company does not collect any conversation content.
  2. Conversation content is processed by the respective companies in accordance with the privacy policy of the LLM the User uses (Anthropic / Claude Code, etc.).
  3. For content suggesting an acute crisis, please refer to the contact details for professional institutions set out in the CARE_DISCLAIMER.md bundled with the Product.

11. Consent Regarding Handling of the Watermark

  1. By purchasing the Product, the User consents to an irreversible hash of the purchaser's email being embedded in the Product text.
  2. The watermark is used only to identify the purchaser in the event of a leak.
  3. The design makes reverse conversion of the watermark into a plaintext email address mathematically impossible (a one-way hash).

12. Policy Amendments

  1. If this Policy is amended, the amended version will be distributed bundled with the next version of the Product.
  2. For Users who continue to use an existing version, the policy in effect at the time of purchase continues to apply.

13. Contact

support@emocutelab.com

Data Protection Officer: Representative of Emocute Lab.