Privacy Policy
How we handle personal information across the websites, apps, and software we provide
InformationCloset ("we," "us," or "our") handles users' information in connection with the websites we operate, the applications and services we provide, and the software we distribute in accordance with this Privacy Policy (this "Policy"). This Policy consists of provisions common to all of the above (Part 1) and provisions specific to individual services (Part 2).
Effective date: 2026/06/20
Contents
Part 1 — General Provisions
- About the operator
- Scope and structure of this Policy
- Information we collect
- Purposes of use
- Cookies and local storage
- Analytics tools
- Disclosure to third parties
- External services and subcontractors
- Security measures
- Access, correction, and deletion of personal information
- Changes to this Policy
- Contact
Part 2 — Handling by Service
Part 1 — General Provisions
1. About the operator
The websites, apps, and software covered by this Policy are provided by us, an individual developer.
2. Scope and structure of this Policy
This Policy applies to the following. Handling specific to each service is set out in Part 2.
- Browsing this website (infocloset.jp)
- Use of the applications we provide (such as MumoStream), and the information sent to us through their inquiry features
- Handling that arises when you run software we distribute on your own server (see "Running distributed software yourself" in Part 2)
In addition to the above, the general provisions of this Policy (Part 1) and the relevant service-specific section (Part 2) also apply, as appropriate to its nature, to any application or software we may provide or distribute in the future. Where a new service involves handling specific to it, we will add a section to Part 2 to address it.
If you download (including install) any software or application we distribute or provide, you are deemed to have agreed to this Policy at that point. The conditions for using our services are set out in our separate Terms of Service.
3. Information we collect
We collect the following types of information to the extent necessary to provide our services. The specific items collected are set out in each service's section in Part 2.
- Information recorded as you access our web server (IP address, browser type, referrer, date and time of access, and the like)
- Information you provide when contacting us (the message itself, an optional reply address, device information, and the like)
4. Purposes of use
We use the information we collect within the scope of the following purposes.
- To respond and reply to your inquiries
- To investigate and fix problems, and to improve our products and services
- To operate our services reliably and to prevent misuse
5. Cookies and local storage
On this site and in our admin console, we may use cookies and your browser's local storage to retain display settings (such as the theme) and to keep you signed in. We do not store any confidential information in them.
6. Analytics tools
On this site, we may use analytics tools such as Google Analytics to understand how the site is used and to improve our services. When used, these tools collect information by means such as cookies; that information is collected anonymously and does not identify any individual. The information collected is managed in accordance with each provider's privacy policy. You can refuse this collection by disabling cookies in your browser settings.
7. Disclosure to third parties
We do not provide the personal information we collect to third parties without the individual's consent, except in the following cases.
- Where required by law
- Where it is necessary to protect a person's life, body, or property and it is difficult to obtain the individual's consent
- Where we use or engage external services to the extent necessary to achieve the purposes of use, as set out in the following section
8. External services and subcontractors
In providing and operating our services, we may use external services such as the following. When we do, we handle information only to the extent necessary to achieve the purposes of use.
- Server and hosting providers (the infrastructure that runs our sites and services)
- Email-sending and message-notification services used to alert us that an inquiry has been received
- Services for processing and managing in-app purchases (Apple and RevenueCat; for details, see the MumoStream section in Part 2)
- The analytics tools described in the preceding section
9. Security measures
To prevent the leakage, loss, or damage of the information we collect, we take the following measures.
- Access to the admin console is protected by password authentication, and passwords are stored in a form that cannot be recovered (hashed).
- Backups of stored data are kept encrypted.
- We keep the information we collect to the minimum necessary—for example, we do not store source IP addresses.
10. Access, correction, and deletion of personal information
If you request the disclosure, correction, suspension of use, or deletion of the personal information we hold about you, we will confirm that you are the individual concerned and respond without undue delay in accordance with the law. Please send any such request to the contact listed at the end of this Policy.
11. Changes to this Policy
Where we consider it necessary, we may change this Policy without prior notice to users. The revised Policy takes effect from the time it is posted on this site.
12. Contact
We accept questions about this Policy and requests concerning the handling of personal information at the contact below.
InformationCloset contact
X (formerly Twitter): please reach us by direct message at @ic_sns.
Part 2 — Handling by Service
13. This website (infocloset.jp)
When you browse this website, the web server's access logs may temporarily record details such as your IP address, browser type (user agent), referrer, and date and time of access. We use these to operate the server reliably and to detect unauthorized access. Our use of analytics tools is as set out in Section 6 of Part 1.
14. Inquiry management platform (ContactBox)
Content sent through the inquiry feature of an app we provide (such as MumoStream) is received and stored on the inquiry management platform (ContactBox) that we operate, and is used to address problems and improve features. The items we collect are as follows.
| Item | Details | Required by ContactBox |
|---|---|---|
| Inquiry message | The message you write (up to 1,000 characters) | Required |
| Subject and type | Subject and type (such as problem or request) | Optional |
| Reply email address | A contact address, if you would like a reply | Optional |
| Device information | OS type, OS version, app version, device model name, and language setting | Optional (added automatically by the app) |
Inquiries we receive are stored on servers under our control, and we keep encrypted backups of that stored data. We use your reply email address solely to respond to your inquiry. To stay aware of incoming inquiries, we may send the content of an inquiry to the email or message-notification services we use.
15. MumoStream (app and server)
MumoStream is "self-hosted" streaming software. You run the server software on a computer you provide yourself, and you connect to it from the client app to watch media that you own. We do not operate or host any server, and we never hold, collect, or view your account information, media files, playback history, or the like.
15.1 Information the app stores on your device
The client app stores on your device the details of the server it connects to (protocol, host name, and port), the login password (kept in the iOS Keychain), authentication tokens, your user name, various settings, and any media files you download. None of this is sent anywhere other than the server you connect to.
15.2 Information the app sends to the server
The client app sends authentication information and playback requests to the server you have specified. The destination is the server you specify, not us. Communication supports encryption via TLS (HTTPS). For the information that the server software records, please see Section 16 of this Part.
15.3 In-app purchases
In-app purchases that unlock Pro features (auto-renewing subscriptions and a one-time purchase) are processed through Apple (the App Store) and the billing-management service RevenueCat. Payment information such as credit card numbers is processed by Apple, and we do not collect or hold it. To manage purchase status, purchase information and an anonymous user identifier are sent to RevenueCat. RevenueCat's handling of that data is governed by its own privacy policy.
15.4 Analytics and tracking
The client app does not use any analytics tools or advertising SDKs that track user behavior (such as Firebase Analytics or Crashlytics). We do not collect any information about how you use the app.
16. Running distributed software yourself
Software we distribute (such as the ContactBox distribution edition and the MumoStream server) runs on the operator's own server. The controller of the data that accumulates is the operator, and we do not access that data. The operator is responsible for managing the personal information it handles, including establishing a privacy policy for its end users. The handling set out in this section applies in the same way to any software we may distribute in the future, and the operator bears responsibility for managing the data.
16.1 Data handled by each program
The data handled differs depending on the type of distributed software. Representative examples are as follows.
- ContactBox (distribution edition): inquiries received from connected apps (message, subject, type, reply email, device information, status, and date and time). The source IP address is not stored. The admin password is stored hashed.
- MumoStream server: account information (user name and hashed password), activity logs (actions taken, source IP address, user agent, and date and time), playback history and favorites, and access-permission settings. TLS private keys and the keys related to certificate issuance (ACME) are stored encrypted with AES-256-GCM.
16.2 External transmission
Only when email (SMTP) or LINE notifications are configured in the ContactBox distribution edition is the content of a received inquiry sent to the configured destination. Both are disabled by default.
16.3 The operator's responsibilities
- To establish and present to end users a privacy policy explaining the information collected and the purposes of use.
- To implement appropriate access controls, enable HTTPS, and change the initial password.
- To manage the personal information it handles in accordance with applicable laws (such as the Act on the Protection of Personal Information) and to set retention periods and a deletion policy.