Privacy Policy
Established: March 4, 2026 / Updated: March 12, 2026
Whitelight LLC handles personal information in Onga9 as described below.
1. Operator Information
- Operator: Whitelight LLC
- Representative: Kenta Terunuma
- Contact: support@onga9.jp
2. Personal Information We Collect
- Email address
- Display name and profile information set by the user
- Google account information when Google sign-in is used, such as name, email address, and profile image
- Posted data such as reviews, ratings, and shelf registrations
- Apple Music playback history when integration is enabled, limited to recently played album information
- Access logs, including IP address, browser information, and access time
3. Purposes of Use
- Providing the service and managing accounts
- Providing review, rating, and collection features
- Suggesting album candidates based on Apple Music playback history when integration is enabled
- Displaying profile pages
- Analyzing usage to improve the service
- Responding to inquiries
- Detecting and preventing unauthorized use
4. Provision to Third Parties
We do not provide users’ personal information to third parties except in the following cases.
- When the user has given consent
- When required by law
5. Use of External Services
The service uses the following external services, and information may be sent from users’ devices.
| Destination | Purpose | Information sent |
|---|---|---|
| Supabase | Authentication and database | Authentication cookies, session information, posted data |
| Vercel | Hosting | Access logs, IP address |
| Authentication with Google sign-in | OAuth authentication token | |
| Cloudflare | DNS and email forwarding | DNS request information |
| Apple Music API | Music catalog retrieval and playback history retrieval | Search queries and playback history when integration is enabled, obtained on-device and sent to the server |
| MusicBrainz API | Music catalog supplementation | Search queries and album IDs; no personal information is sent |
| Upstash | Rate limit management | Anonymous request counters; no personal information is sent |
6. Security Management
We take appropriate security measures to prevent leakage, loss, or damage of personal information. Data is transmitted using SSL/TLS encryption.
7. Requests for Disclosure, Correction, or Deletion
Users may request disclosure, correction, or deletion of personal information held by us. Please contact us below. We will respond within a reasonable period after verifying identity.
8. Account Deletion
Users may request deletion of their account. After deletion, we will delete the user’s personal information and posted data within a reasonable period.
9. Cookies
The service uses cookies for authentication and session management. You may disable cookies in your browser settings, but some features of the service may no longer be available.
10. Changes to This Policy
This policy may be revised in response to changes in laws or service content. Revised policies become effective when posted on this page.
11. Contact
- Whitelight LLC
- Email: support@onga9.jp