プライバシーポリシー

Mosaic Trail Stack — App Privacy

Effective 7 September 2026. This section covers the Mosaic Trail Stack iOS and Android game published by Yuki Inaba. It is separate from this website’s cookie, comment and contact practices.

The game does not collect or transmit personal information, gameplay history, device identifiers, location, analytics or advertising data to the developer or third parties. It contains no accounts, advertising, tracking SDKs, in-app purchases, chat, or user-uploaded content.

Completed trails, mosaic restoration, the current trail, language and sound settings are stored locally on your device for gameplay. They are not uploaded to us. Removing the app removes its local save. Device operating systems and their backup services may handle device backups under your own system settings and their privacy policies.

The game provides the same offline, data-free experience for younger and older players. It does not request age, camera, microphone, location or advertising permissions. If you voluntarily contact info@ymha.biz outside the game, we receive the information in your email to respond to your request. Do not send sensitive information or a child’s personal details. For privacy questions or deletion of support correspondence, contact the same address.

Mosaic Trail Stack — Privacy for the usage-measurement update

Prepared 14 September 2026. This section applies to the iOS and Android update published by Yuki Inaba that includes Usage measurement in Pause → Privacy. Earlier sections continue to describe older versions without this feature. This update does not change this website’s own privacy practices.

Your game and your choices

All 40 trails, four mosaics, Undo and Retry remain free. There are no accounts, purchases, chat, media uploads or cloud saves. Your playable save, sound, language, optional frames and privacy choices are stored on your device. Separate usage events described below include stage attempts and results; these are not a restorable copy of your save. Removing the app removes its local save. Operating-system backups follow your device settings and the backup provider’s policies.

Ads are off at first launch. In Pause → Privacy, an adult may choose to enable ads after reading the disclosure. Personalization starts off and “Do not sell or share my data” starts on. An age range must be selected, and supported platform age information must confirm adulthood before the advertising SDK can initialize. Players under 18, players with unknown age, and players who decline keep the full game without initializing the advertising SDK. We do not send the selected age or platform age information to AppLovin. The operating system or app store may process an age-sharing request under its own policies.

Optional advertising

When an eligible adult enables ads, AppLovin MAX may process device and network identifiers, approximate location, ad interactions and diagnostics for advertising, measurement, fraud prevention and improvement of its services and AI technology. AppLovin may share this information with its service providers and advertising partners. Our game does not provide AppLovin with puzzle history, email addresses or age ranges. See AppLovin’s privacy policy for its processing, retention, international transfers and rights information.

Eligible ads may appear below gameplay or between completed trails. Watching a rewarded video is optional and earns a decorative Sunburst frame; that same frame is also earned by restoring the artwork’s 10 trails. Ads never purchase tiles, unlock trails or replace free recovery. Availability varies by device, age-sharing support and network conditions.

Usage measurement

The game includes version 0.1.1 of our shared usage-measurement SDK. Measurement starts off and is separate from the optional advertising choice. In Pause → Privacy, you may allow it from the next launch. We do not reconstruct play before consent. It sends an app-scoped random installation ID, session and event IDs, timestamps, app/build/content versions, stage attempts, results and retries, completion, and applicable advertisement opportunity, request, impression, failure, reward and revenue notifications. Ad revenue notifications can include the placement, format, network, amount, currency and precision supplied by the advertising SDK. It does not send your name, email address, selected age range, IDFA or a copy of the playable save.

Yuki Inaba uses these records to understand first sessions, stage difficulty, return visits and observed ad revenue, and to evaluate bounded game configurations and experiments. Cloudflare hosts the measurement service and stores records on our behalf. The measurement identifier is scoped to this game; it is not used by this SDK to track you across other apps. This is distinct from AppLovin’s optional advertising processing above. Network requests expose an IP address to the hosting service; the measurement backend uses it for rate limiting, while the SDK event schema does not include an IP address or location field.

Unsent events expire after 72 hours and local queues are size-limited. Raw server event records are retained for up to 180 days; short-term duplicate indexes are retained for 35 days. Reports use a 180-day observation window. A deletion ledger is retained to prevent deleted records from being recreated by delayed delivery.

In Pause → Privacy, choose Stop usage measurement to stop collection and clear unsent SDK records on this device. This does not change your game progress or advertising choice and does not automatically delete records already sent. If saving the choice or clearing local data fails, the game reports that limitation and offers retry. For access or deletion of previously sent records, email info@ymha.biz with the support code shown in that same screen. Copy the code before stopping and leaving the screen; the game does not retain it after stopping. The code identifies the app, environment and installation, not your name. No email is sent automatically. Without a code, we may be unable to identify past records after app removal or identifier deletion.

Change your mind or request help

Use Pause → Privacy → Turn ads off to stop new ad requests and remove banners. An ad already displayed may finish. Turning ads off does not erase information previously collected by AppLovin. Personalization and sale/share choices can also be changed here. On iOS, tracking permission is requested only when you choose personalized advertising and permit sale/share; declining does not limit gameplay or the free route to frames. Your device’s tracking settings still apply.

For access or deletion of data held by AppLovin, follow the current instructions under Manage Your Privacy Choices in AppLovin’s policy. For our support correspondence, or questions about this game, email info@ymha.biz. Voluntary emails are used to respond to your request. Do not send sensitive information or a child’s personal details. We receive the ad-event and revenue notifications described under Usage measurement; other records held by AppLovin remain subject to its policy.

Reef Slide Sort privacy

Operator and content owner: 合同会社YMHA. Contact: info@ymha.biz. This section concerns Reef Slide Sort, not other apps covered on this page.

Game data and your choices

The game stores progress, stars, bubble coins, cosmetics, the current board, undo history, language, sound/motion settings and advertising choices on your device. It has no game account. Optional game measurement is described below. Operating-system backups may retain app data according to your device settings. Clearing app data can remove local progress and choices; it does not erase information previously sent to an advertising provider.

Ads start off. Every stage and free recovery is available without advertising or age input. Only an optional ad request can ask for a necessary independent age band and separate advertising, personalization and sale/share choices, when applicable regional and recipient requirements have been established. Unknown age, children, unresolved requirements and obsolete or unavailable choices keep the advertising SDK off. This build currently has unresolved regional/recipient requirements and does not enable advertising. It does not call platform statutory age services for advertising or measurement.

Advertising choices, the displayed notice/version/language, device time and expiry are stored privately in this app, without a consent server, new consent identifier or sharing between apps. A valid age-band choice can be reused while valid. Native advertising permits remain in memory only. Settings → Advertising choices → Turn off advertising stops future requests and attempts to retain the withdrawal in two local slots. If storage fails, the app shows that the choice could not be saved and keeps advertising off in the current process; retry when storage works. If every write and deletion fails until the process is lost, an unpersisted withdrawal cannot be recovered by the next process. Withdrawal does not erase data already received by providers.

Optional game measurement

Usage measurement starts off. Settings → Usage measurement lets you separately enable publisher analytics to improve stages and understand consenting players’ play and advertising outcomes. It records a random app-specific measurement ID, session/attempt/event identifiers, app version and build, session activity, stage attempts/results/retries, hints and content completion, and available ad requests, impressions, failures, rewards and revenue. It does not upload your saved board, name, contacts, photos or precise location. Enabling measurement does not enable ads or grant tracking permission. The service receives network information needed to handle requests; no such information is added to gameplay event properties.

Stopping measurement clears unsent local events and native revenue records. Queued events use a 72-hour retry window; expired stored records are removed during queue maintenance or when you stop measurement. Re-enabling creates a new measurement identity. Already received information is not removed by stopping; use the measurement ID shown in Settings when emailing info@ymha.biz to request access or deletion. The ID remains on your device so you can make that request. Measurement covers consenting installations and is not a count of all installs. Development and recording activity is separated from production reporting.

Optional advertising

If eligible ads are enabled, AppLovin may process device identifiers, IP address and app/ad activity for advertising and measurement. On iOS, system tracking permission is separate. Turn off Allow advertising to withdraw future ad requests. This does not delete previously collected provider data. See AppLovin’s privacy policy, retention information and access/deletion choices.

If you email support, your email address and message are used to respond. Contact the publisher for questions or requests concerning information you send directly. Avoid sending sensitive information.

Orbit Sort Garden privacy

Orbit Sort Garden is a casual garden puzzle operated by 合同会社YMHA. It has no account, chat or user-generated content. Garden progress, language, effects volume, haptics and privacy choices are stored locally on your device.

Your privacy choices, the displayed explanation and its version, and your device time are kept only on your device. Turning a choice off records withdrawal. The gameplay measurement notice version is 2026-10-14-purpose-local.1; the optional advertising notice version is orbit-ad-notice-2026-10-08.2. These local records are not independently verified timestamps, platform permission, or proof of server deletion. Prior choices without corresponding current-version evidence do not restart optional collection.

Valid advertising choices are restored after an ordinary restart without routine reconfirmation. Missing, corrupt, expired or obsolete records keep advertising off. Withdrawal is saved in redundant local records and checked before the app reports success. If it cannot be saved, the app displays an error, keeps ads off in the open app and retries the pending withdrawal when storage recovers. If every persistent write and deletion fails until the app closes, no later launch can recover the unsaved intention; an earlier valid record may still exist. Keep the app open and retry after storage recovers.

Required regional age checks

On supported iOS versions, the app separately asks Apple whether this account and region require an age-range check. When Apple identifies a requirement, complete its system check to continue. This check does not grant advertising or analytics permission. The returned age range is not sent to advertising or gameplay analytics.

On Android, Google Play checks are separate from advertising and handle required regional verification and parental approval for app changes. The app reads those status values only, not age bounds or installation identifiers. A known unmet check is retained as a local flag until resolved. Android advertising is currently unavailable; completing a Play check does not enable ads.

Optional advertising

Optional advertising is currently unavailable on both iOS and Android while data-processing and regional requirements are assessed. Saving a choice does not start AppLovin MAX. Basic play and viewing privacy settings ask for no age. Where regional requirements are established, an optional-ad request combines only the necessary age band and ad choice in one screen. No date of birth is collected. While regional eligibility is unresolved, no age input is requested and ads stay off. Unknown, declined or restricted declarations do not initialize MAX. A new ad-age choice does not authorize gameplay analytics. Earlier restrictions survive restarts. Every garden remains playable.

When ads are enabled, AppLovin and its partners may process device/advertising identifiers, IP address, diagnostics and ad interactions for ad delivery, measurement, fraud prevention and improving their advertising services, including AI technologies. Third-party measurement partners, including Open Measurement partners, may process personal data for ad measurement and related services. Personalization is off and sale/sharing for personalized advertising is opted out. No tracking-permission request is made by the current advertising initializer. You can withdraw optional ad permission in Settings → Advertising & privacy. Withdrawal stops future ad requests and removes banners; it does not erase data already collected by providers.

See AppLovin’s privacy policy and access/deletion choices for provider data handling. Non-personalized advertising still involves ad delivery data. No ad reward or payment is required to complete a garden.

Optional gameplay measurement

Previously recorded gameplay analytics restrictions are retained. New optional-ad age bands do not set analytics eligibility. Analytics consent and its regional processing assessment are separate; platform age-range API data is not used for analytics.

Gameplay measurement is currently unavailable while its purposes, safeguards and service are reviewed. Settings shows four separate purposes: Game improvement, Stage analysis, Ad revenue analysis and Stable game experiments. These controls are currently disabled; an earlier combined analytics choice does not enable them. No experiment is currently running. All gardens remain playable without measurement or advertising.

If measurement later becomes available, each purpose needs its own valid choice. Game improvement would measure first use and return sessions. Stage analysis would measure stage starts, results, retries and content completion. Ad revenue analysis would measure ad opportunities, requests, impressions, failures, confirmed rewards and revenue notifications. Stable game experiments would record exposure to a separately defined experiment. Experiment comparisons would also need permission for the measured outcome purpose. An ad-revenue choice would not permit ads or grant a reward.

Any enabled purpose would use random installation, session and event identifiers, device time, app/build information and the selected purposes. Stage events would also include stage/content versions and attempt identifiers; ad events would include format, placement, amount, currency and provider-reported details. Common first-use and session events remain linked even if only one purpose is chosen. These records are not anonymous. They do not include your email, saved garden state or self-selected age range. The connection exposes an IP address to the hosting service; configuration requests also send the app and build information.

If permitted, events could be queued privately on the device while offline, then sent over HTTPS to the publisher’s Cloudflare-hosted measurement service. Sent records, derived measurements, delivery receipts, deletion-suppression records and connection logs have separate retention and deletion requirements. Current sent-data retention and safeguards remain unresolved; a shorter planned retention period has not been implemented or verified. Processing may occur outside your country. Do not treat the device’s queue limit as a server deletion promise.

Withdrawing measurement stops new collection and attempts to clear unsent events and the native revenue queue. If clearing fails, the app keeps measurement off, displays the pending failure and offers retry; it does not report successful clearing. A later valid opt-in would create a new measurement identifier. Earlier support identifiers remain on the device to help request action on previously sent records. Test and recording events are separated from production metrics. Local choices, including their notice version, language and device time, do not establish independently verified consent or deletion.

For questions or applicable access, correction, deletion, portable-copy, withdrawal or appeal requests, contact info@ymha.biz and identify Orbit Sort Garden and the request. For previously sent measurement data, include all support identifiers available in Settings. An identifier helps locate records; it is not proof of ownership. If you have lost the identifier, or act for another person, explain that so the available verification route and authority can be assessed. Do not send passwords or advertising credentials. Verification, response timing and appeal handling are still being reviewed; contacting support does not itself confirm a completed action.

Advertising providers have separate data procedures linked above. Any action on sent publisher data needs verified individual scope, including earlier identifiers and affected copies. A limited record to prevent deleted events from returning may need to be retained under a separately assessed purpose; its necessity and lifetime are not established by a deletion request alone. Local withdrawal, uninstalling, an empty measurement view or acknowledgment of a request does not confirm server or provider deletion. Completion or a partial result must be supported by the actual service and reviewed scope.

Questions: info@ymha.biz. Removing the app can remove local progress and identifiers; retain all your analytics support identifiers before uninstalling if you want to request deletion.

Optional network region check: only after you choose Allow network region check, this app contacts its existing Cloudflare-hosted service. The connection exposes your IP address to Cloudflare; the request sends the app name, OS, policy version and a fresh random request code, without age, installation identifier or gameplay. The country/subdivision response is an uncertain network estimate, not proof of residence or age. It stays only in app memory for up to five minutes and is invalidated on cancellation, expiry, background/foreground or network changes. The response and request code are not saved. Your request choice, explanation version, language and device time are saved privately on this device. Advertising and gameplay analytics require their own eligibility and choices. You can continue free play without the request. Provider connection logging, retention, deletion and international processing remain under assessment; the five-minute app limit does not establish Cloudflare deletion.

Orbit Sort Garden のプライバシー

Orbit Sort Garden は 合同会社YMHA が提供する庭のパズルです。アカウント、チャット、ユーザー投稿はありません。進行、言語、効果音の音量、振動、プライバシーの選択は端末に保存します。

プライバシーの選択内容、表示した説明と版、端末の日時を端末だけに記録し、オフにした場合は撤回を記録します。プレイ計測の説明の版は2026-10-14-purpose-local.1、任意広告の説明の版はorbit-ad-notice-2026-10-08.2です。日時は第三者が検証したものではなく、プラットフォームの許可やサーバーの削除完了を示しません。対応する現在の版の記録がない過去の選択から、任意の収集を再開しません。

有効な広告の選択は通常の再起動後に再利用し、毎回の再確認は求めません。記録の消失・破損・期限切れ・旧版の場合は広告を停止します。撤回は複数の端末内記録に保存し、確認後に成功と表示します。保存できない場合はエラーを表示し、開いているアプリの広告を停止して、保存領域が回復したら保留中の撤回を再試行します。すべての書込みと削除がアプリ終了まで失敗すると、次回起動では保存できなかった意思を復元できず、以前の有効な記録が残る場合があります。アプリを閉じず、保存領域の回復後に再試行してください。

対応するiOSでは、広告とは別に、このアカウントと地域で年齢区分の確認が必要かAppleへ確認します。Appleが必要と判定した場合はシステムの確認を完了すると続けられます。この確認で広告や分析の許可が有効になることはありません。返された年齢区分を広告やプレイ分析へ送信しません。

AndroidのGoogle Playの確認は広告とは別で、地域で必要な年齢確認やアプリ変更に対する保護者の承認を扱います。アプリは確認状態だけを読み、年齢の上下限やインストール識別子は読みません。未完了と確認された状態は解消されるまで端末内のフラグとして保持します。Androidの広告は現在利用できず、Playの確認完了で有効にはなりません。

データの取扱いと地域の要件を確認中のため、iOS・Androidとも任意広告は現在利用できません。選択を保存しても AppLovin MAX は開始しません。通常のプレイやプライバシー設定の閲覧では年齢入力を求めません。地域の条件が確定した場合、任意広告を希望するときに必要な年齢帯と広告の利用を同じ画面で選択します。生年月日は収集しません。地域の利用条件が未確定の間は年齢入力も求めず、広告を停止します。不明・拒否・年齢制限時はMAXを初期化しません。広告用の年齢選択で分析が有効になることはなく、以前の制限は再起動後も保持します。すべての庭を遊べます。

広告を有効にすると、AppLovin とその提携先が広告配信・測定・不正防止と AI 技術を含む広告サービスの改善のために端末や広告の識別子、IP アドレス、診断、広告操作を処理する場合があります。Open Measurement などの第三者の広告測定パートナーも、広告測定や関連サービスのために個人データを処理する場合があります。パーソナライズは停止し、そのための販売・共有を拒否します。現在の広告初期化処理は追跡許可を要求しません。設定の「広告とプライバシー」で撤回できます。撤回は今後の広告要求を止め、バナーを取り除きますが、提供元の送信済みデータを消す操作ではありません。AppLovin のポリシーとデータ削除の選択をご確認ください。非パーソナライズ広告にも配信データの処理があります。

以前に保存されたプレイ分析の制限は保持します。新しい任意広告用の年齢帯で分析の利用条件を決めません。分析への同意と地域ごとの取扱いの評価は別で、プラットフォームの年齢APIの情報を分析に使いません。

任意のプレイ計測

目的、保護対策、サービスを確認中のため、プレイ計測は現在利用できません。設定には「ゲームの改善」「ステージの分析」「広告収益の分析」「継続したゲーム実験」の4つの目的を別々に表示します。現在は操作できず、以前の一括の分析選択で有効にはなりません。実験は現在行っていません。計測や広告を利用せず、すべての庭を遊べます。

今後計測を利用できる場合も、目的ごとに有効な選択が必要です。「ゲームの改善」は初回利用と再訪、「ステージの分析」は開始、結果、やり直し、最終クリアを計測するものです。「広告収益の分析」は広告の機会、要求、表示、失敗、確認済みの報酬、収益通知を計測するものです。「継続したゲーム実験」は別に定義した実験の表示を記録するものです。実験の比較には、結果を計測する目的への許可も必要です。広告収益の選択だけでは、広告や報酬が有効にはなりません。

有効な目的では、ランダムなインストール、セッション、イベントの識別子、端末の日時、アプリとビルドの情報、選択した目的を使うことになります。ステージの記録にはステージ・内容の版と試行の識別子、広告の記録には形式、表示箇所、金額、通貨、提供元が報告した情報も含まれます。目的を1つだけ選ぶ場合も、共通の初回利用とセッションの記録には関連付けが残ります。匿名の記録ではありません。メール、保存した庭の状態、自己申告の年齢区分は含めません。接続時にIPアドレスがホスティングサービスへ伝わり、設定の要求ではアプリとビルドの情報も送ります。

許可された場合、イベントを端末内に一時保存し、後でHTTPSによりCloudflare上の運営者の計測サービスへ送ることになります。送信済み記録、派生した計測値、送信受付記録、削除済みデータの再取込みを防ぐ記録、接続ログは、それぞれ別の保存・削除条件を持ちます。現在の送信済みデータの保存条件と保護対策は未解決です。計画した短い保存期間は実装・検証されていません。国外で処理される場合もあります。端末の一時保存の制限は、サーバーの削除を約束するものではありません。

計測の撤回は新しい収集を止め、未送信イベントと端末の収益キューの消去を試みます。消去に失敗した場合は計測を停止したまま、保留中の失敗と再試行の操作を表示し、消去成功とは説明しません。後で有効な選択により再開する場合は、新しい計測識別子になります。以前のサポート識別子は、送信済み記録への対応を依頼するため端末に保持します。テスト・録画のイベントは本番の指標と区別します。説明の版、言語、端末の日時を含む端末内の選択記録は、第三者が確認した同意や削除完了を示しません。

ご質問や、適用される開示、訂正、削除、持ち運べる形式でのコピー、撤回、異議申立てのご依頼は、アプリ名と依頼内容を添えて info@ymha.biz へ。送信済みの計測データについては、設定に残るすべてのサポート識別子を添えてください。識別子は記録を探す手がかりで、ご本人の証明ではありません。識別子を失った場合や他の方の代理の場合は、その事情をお知らせください。利用できる確認手段と権限を確認する必要があります。パスワードや広告の認証情報は送らないでください。本人確認、回答時期、異議申立てへの実際の対応手順は確認中です。サポートへの連絡だけで対応の完了が確認されるわけではありません。

広告提供元のデータには、上記の別の手続きがあります。運営者の送信済みデータへの対応では、以前の識別子や影響を受けるコピーを含め、ご本人に関する範囲を確認する必要があります。削除済みの記録が再び取り込まれないよう限定的な記録を保持する場合も、その目的、必要性、保存期間の評価は別に必要です。端末内の撤回、アプリの削除、計測表示が0件であること、依頼の受付だけでは、サーバーや提供元の削除を確認できません。完了や一部の結果は、実際のサービスと確認した対象範囲に基づく必要があります。アプリ削除前に識別子を控えてください。

任意のネットワーク地域確認：「ネットワーク地域の確認を許可」を選んだ場合だけ、既存のCloudflare上の運営サービスに接続します。接続時にIPアドレスがCloudflareへ伝わり、アプリ名、OS、方針の版、新しいランダムなリクエストコードを送信します。年齢、インストール識別子、プレイ情報は送りません。国・地域の結果は不確かなネットワーク推定で、居住地や年齢の証明ではありません。最大5分間アプリのメモリだけに保持し、取消、期限切れ、バックグラウンド・復帰、ネットワーク変更で無効にします。結果とリクエストコードは保存しません。確認の選択、説明の版、言語、端末の日時は端末内に保存します。広告とプレイ分析にはそれぞれ別の条件と選択が必要です。確認せずに無料で遊べます。提供者側の接続ログ、保存期間、削除、国外での処理は評価中であり、アプリの5分制限はCloudflare側の削除を示すものではありません。