Last updated: 2026-10-04 ／ Studio Toriumi
Studio Toriumi (the “studio”) collects only the minimum necessary information on its websites and applications. This page describes exactly what is collected and what it is used for, based on the actual implementation.
For public articles on toriumis.com, we count daily page views, active seconds while the page is visible and within 60 seconds of an interaction, favorite additions/removals, and affiliate-link clicks. Admin/account pages, private developer materials and personal Health Lab records are excluded. Interaction contents, form text, external URL queries, names and email addresses are not sent to this analytics service.
A random temporary ID is created per page view to avoid duplicate counting. It is not linked to an account or advertising identifier and does not track a visitor across pages or devices. Temporary IDs are deleted by daily cleanup after seven days; daily totals are retained. A one-way source-IP hash limits abusive requests. Current member favorites are aggregated from saved lists; guest favorites are counted as additions/removals only. Administrators import affiliate conversion and reward reports without purchaser details.
We save the work ID, vote time and a one-way source-IP hash to deduplicate votes and display your current vote. Each source can vote once per work. People sharing a network may share a vote; a different network can create another vote, so totals do not prove a number of people. Cancelling removes that vote. Voting and saving a favorite are separate actions. A short-lived operation count per source limits repeated requests.
We have applied to use Google AdSense on this website. An application or installed code does not mean that Google has approved the site or that it earns advertising revenue. The following explains how information is handled when ads are served.
The studio does not collect or store identifying information for ad targeting. Information supplied through optional forms and accounts is used for the purposes described above.
Some pages on this website and its subdomains contain links that earn a commission.
Every paid link carries rel="sponsored" and is labelled as an ad or "[PR]" nearby. Commission never changes a verdict, and no supplements or products that promise a cure are listed. The studio receives no personally identifying information through these links. The full editorial policy is on the About page.
Comment posts are published openly on this website, visible to anyone. Please do not include personal information or anything that could identify another person.
To request deletion of a comment, contact info@toriumis.com. Tell us the posting date and the string entered in the name field so we can identify the post; after checking, we will delete it.
Comments are kept until their author asks for deletion. The anti-spam hash is stored on the same row as the comment it relates to.
Accounts are optional. You can continue with Google or register with an email address and password. Google Firebase Authentication handles sign-in, email verification and password resets. It processes the email address and password when email authentication is used, the identity-provider identifier, and security information such as device and IP-address data needed for authentication. Firebase states that Firebase Authentication runs from data centres in the United States.
To provide a cross-device saved list, access control and abuse prevention, this site keeps only the minimal data listed above in Cloudflare D1. The session cookie is issued with HttpOnly, Secure and SameSite=Strict; its server-side validity lasts one hour. The operator receives a notification only that one verified registration was made—never the name, email address or password.
For deletion of saved items or developer-access state, or to request access to or correction of account data, contact info@toriumis.com from the registered email address. After verifying the request, we will delete or address the matching data held by this site. Firebase's own procedures apply to authentication data held by Firebase.
As a rule, the studio's apps require no account registration and do not ask for your name or email address. What each app collects differs from app to app, so please also check each app's listing on the App Store and Google Play.
The studio uses the following third-party services. How each handles information is governed by that provider's own privacy policy.
To request disclosure, correction or deletion of information about you, contact info@toriumis.com. After reasonable identity verification, we will address comments, newsletter data, work enquiries and account data held by this site. Information held directly by a third-party service is governed by that service's own process.
The studio does not knowingly collect personal information from children under 13.
When the content changes, we update the date at the top of this page.
Studio Toriumi
Email: info@toriumis.com