Privacy Policy

PlayGraphics Inc. ("PlayGraphics," "we") handles the personal information we receive through the Compo website (compo.tools) as described in this policy.

1. What we collect

• Your email address
• The language you use (Japanese, English, or Chinese)
• The URL of the page where you signed up, the page you came from, and a campaign tag (if the URL has one)
• Records of your consent: when you agreed, on which page, and to what wording, including when you unsubscribed
• When we sent your confirmation email and when you confirmed

We don't ask for your name or phone number. To check that a person, not a bot, is signing up, your IP address and browser information are sent to Cloudflare (section 6). We don't store your IP address.

2. How we use it

• To send the email that confirms your sign-up
• To send your invite to Compo and news about the launch
• If you opt in, to send news about new features and ways to use Compo (about once every 1–3 months)
• To keep records of your consent and of any unsubscribes
• To prevent sign-ups by bots or with someone else's email address
• To see which pages and campaigns bring in sign-ups, so we can improve how we share news
• To answer your questions

3. Sharing with third parties

We don't share your personal information with third parties without your consent, except where required by law.

4. Service providers outside Japan

We use the following companies to store your information and send email. When you sign up, you agree to your personal information being provided to these companies outside Japan.

• Supabase Pte. Ltd. (Singapore)

  Role

  Storing data and receiving sign-ups

  Information

  Everything in section 1

  Where data is stored

  Japan (Tokyo). Its US affiliate may handle it, for example for support

• Plus Five Five, Inc. (United States), which runs Resend

  Role

  Sending email

  Information

  Email address, language, and email content

  Where data is stored

  United States

• Cloudflare, Inc. (United States)

  Role

  Serving the website and checking for bots (section 6)

  Information

  IP address, browser information, and website access logs

  Where data is stored

  Worldwide

• Laws in these countries: The United States has no comprehensive federal privacy law. Instead, it has laws for specific sectors and state laws, such as the California Consumer Privacy Act. Singapore has the Personal Data Protection Act (PDPA). Both take part in the APEC Cross-Border Privacy Rules (CBPR) System. For details, see the pages by Japan's Personal Information Protection Commission (United States, Singapore; in Japanese).
• How these companies protect your data: We have a data processing agreement with each company. Each agreement requires the company to handle data only on our instructions, keep it confidential, take security measures, oversee its subprocessors, and delete the data when the contract ends. Cloudflare is certified under the Global CBPR System.
• To contact these companies, see their privacy policies, linked from their names in the table.

5. How long we keep it

• If you don't confirm your email within 30 days of signing up, we delete your sign-up.
• While you receive our emails, we keep your information.
• After you unsubscribe from all emails, we keep your email address and consent records for 3 years, so that we don't email you again and can show that you agreed. Then we delete them.
• If you ask us to delete your information, we delete it then (section 8).
• Email content and delivery logs kept by our providers are deleted under their own rules (30 days for Resend).

6. Bot check (Cloudflare Turnstile)

The sign-up form uses Cloudflare Turnstile to stop sign-ups by bots. Turnstile processes your IP address, browser type, device information, and similar signals. It doesn't read the email address you enter. Cloudflare also uses this information on its own behalf to improve how it detects bots. For details, see Cloudflare's Turnstile Privacy Addendum.

7. What's stored in your browser

We don't use cookies for analytics or ads.

• When you switch languages, your choice is saved in your browser, so the site opens in the same language next time.
• Turnstile may use cookies or browser storage to run its check.

8. Your requests

You can ask us to tell you how we use your information, show it to you, correct, add to, or delete it, stop using it, or stop sharing it. Email hello@compo.tools from the address you signed up with. After checking that the request is from you, we'll usually reply within 30 days. There's no fee.

You can also unsubscribe with the link in any of our news emails.

9. How we keep your information safe

• Only our server-side systems can read or write the sign-up list. It can't be read from the website.
• Access to admin tools and the scope of each key are limited to what's needed.
• The key in each confirmation link is stored only as a one-way hash.
• All connections are encrypted.
• We take these measures based on our understanding of the laws in the countries where our providers are (the United States and Singapore).

10. If you're in the EEA or the UK

• The controller is PlayGraphics Inc.
• Legal basis: We send emails based on your consent (Article 6(1)(a) GDPR). We keep consent and unsubscribe records and prevent sign-ups by bots based on our legitimate interests (Article 6(1)(f)).
• Transfers: Japan has an adequacy decision from the European Commission. Transfers to the companies in the United States and Singapore rely on the European Commission's Standard Contractual Clauses (SCCs). Cloudflare and Plus Five Five also take part in the EU-U.S. Data Privacy Framework.
• Your rights: You have the right to access, correct, and erase your data, to restrict or object to its processing, and to data portability. You can withdraw your consent at any time. This doesn't affect processing before you withdraw.
• You can lodge a complaint with the data protection authority in your country.

11. If you're in China

• The personal information handler is PlayGraphics Inc. Contact: hello@compo.tools.
• The purposes, methods, types of information, and how long we keep it are in sections 1, 2, and 5.
• The overseas recipients' names, contact details, purposes, methods, and types of information are in section 4. To exercise your rights with them, contact us.
• You have the right to know about and decide on how your information is handled, to view and copy it, to correct or complete it, to delete it, and to ask us to explain our rules. You can withdraw your consent at any time.

12. Children under 16

If you're under 16, get permission from a parent or guardian before signing up.

13. Changes to this policy

We'll post any changes on this page. For important changes, we'll also email you before they take effect and ask for your consent again if needed.

14. Languages

This policy is available in Japanese, English, and Chinese. If the versions differ, the Japanese version prevails.

15. Contact

PlayGraphics Inc.
hello@compo.tools
We'll give you our postal address and the name of our representative promptly on request.

Effective November 4, 2026