Privacy Policy

1. Who is the data controller

The data controller for this website (tayutau.app) and the Tayu desktop app is Nono (Makoto Nonoyama), a sole proprietor based in Japan. You can reach us at support@tayutau.app for any privacy-related question.

2. What data we collect on the website

When you visit tayutau.app we collect ordinary website analytics through our analytics provider (PostHog, see section 6): the pages you view, where you arrived from, the actions you take on a page such as starting a download, your browser and operating system, and an approximate location derived from your connection. Full URLs are stripped of query parameters before being stored, and we keep broad source categories rather than raw referrer strings.

We also use session replay to understand how pages are used. A replay reconstructs anonymous page interactions — clicks, scrolling, navigation — from the page structure; it is not a video of your screen, everything you type is masked in your browser before anything is sent, and pages that can display your access code are excluded. Rather than watching replays individually we rely on PostHog’s automated (AI-assisted) summaries of recurring problems. JavaScript errors are reported automatically so we can fix broken pages such as the download or checkout flow.

Events are grouped by a randomly generated session ID kept in first-party storage. It is anonymous, and we never link it to your name or email. If you open the Pricing section from inside the desktop app, your anonymous install identifier is passed once in the URL so the visit can be tied to the upgrade funnel; it is removed from the address bar immediately afterwards.

We honour the Do Not Track and Global Privacy Control browser signals: when either is set, the website skips analytics for your visit.

3. What data we collect when you buy Tayu

Purchases are processed by Paddle.com Market Limited, who acts as the Merchant of Record (MoR) on our behalf. Paddle collects and processes the data needed to complete the transaction: your name, email address, billing address, country, payment method details, and the IP address used to make the purchase. Paddle is the controller of that data; their privacy policy is at paddle.com/legal/privacy.

After payment, Paddle sends us a webhook with your email address and an opaque customer ID so we can grant purchased access. We store this in our own database to issue entitlements; see section 4.

When a purchase originates from inside the Tayu desktop app, our server also records an anonymous purchase event in PostHog against the install identifier, so we can tell in-app upgrades apart from purchases made on the website. We do not send your email address, Paddle customer ID, transaction ID, or any other payment detail to PostHog.

4. What the Tayu desktop app does with your data

The Tayu desktop app is designed to run locally. Your wallpaper library, playlists, and schedules stay on your device — we do not store a server-side copy of your library.

For two specific purposes the app communicates with our services:

• Trial and entitlement checks (api.tayutau.app) — the app sends a per-install device identifier and a device credential issued when a trial starts or a purchase is activated so we can confirm whether access is active. We log these requests for abuse prevention and keep them for up to 90 days.
• Anonymous product analytics (PostHog, see section 6) — the app sends anonymous usage events such as which features are used and whether a wallpaper is running, along with basic technical details like the app version, operating system, performance timing, and the type of any error. When you add a YouTube video, the app records the video’s public ID and the content categories assigned to it, so we can see which kinds of videos people use and improve the catalog — not the title you see or anything about what is in the video. The app also collects masked session replays of its own window: what you type and the content you added yourself are masked or removed on your device first, so a replay shows how the interface is used rather than what your library holds. As on the website, we rely on PostHog’s automated summaries of these masked replays. All of it is tied to a random per-install identifier, never to your name, email, or Paddle customer ID, and it never includes your wallpaper files, file paths, or anything outside the Tayu window.
• Feedback you send from Settings — when you use the “Send feedback” form, the message, an optional category, any screenshots you attach, and your app version, operating system, and current plan are sent to our server, which forwards them to a private Discord channel we use as a support inbox. An anonymous event is recorded in PostHog so we can see what kinds of feedback arrive. An email address is optional and only used if you want a reply; when provided it goes to Discord, never to PostHog.

The app contains no third-party advertising or marketing SDKs.

5. When you contact support

If you email support@tayutau.app, we receive your email address and the content of your message. We use it only to respond to your request and keep the thread for up to 2 years for follow-up support, after which it is deleted.

6. Third-party services we use

• Paddle — payment processing, tax handling, receipts, and refunds. Paddle is the Merchant of Record. (privacy policy)
• PostHog — product and website analytics, hosted in the United States. We use it on an anonymous basis to record page views, basic interaction events, and masked session replays (form input and personal content are masked on your device before being sent), and to run automated (AI-assisted) analysis over those masked replays. Replays are not used to train third-party models. We do not link analytics to your name or email. (privacy policy)
• Cloudflare — website hosting (Cloudflare Workers) and DNS. Cloudflare may receive your IP address as part of routing requests; we do not retain access logs beyond Cloudflare’s standard retention. (privacy policy)
• Discord — used to receive in-app feedback you send from the desktop app’s Settings (see section 4). When you submit feedback we forward the message, any attached screenshots, and an optional email address to a private Discord channel. Discord receives this content in order to display it to us. (privacy policy)

We do not embed YouTube, Google Analytics, advertising trackers, Facebook Pixel, or any social media buttons on tayutau.app.

7. Cookies and local storage

tayutau.app uses a small number of first-party storage entries:

• An anonymous analytics session ID (PostHog) used to group events from one visit. We do not set it when your browser sends a Do Not Track or Global Privacy Control signal.
• A short-lived, first-party session-storage entry containing only the landing path and categorized traffic source, used to connect a download to the site that referred the visit. It expires after 30 minutes of inactivity and is removed when Do Not Track or Global Privacy Control is enabled.
• Short-lived storage used by the Paddle checkout overlay during a purchase, which is necessary to complete that transaction.

We do not use cookies for advertising, retargeting, or cross-site tracking.

8. International data transfers

If you visit tayutau.app from outside Japan, your data is necessarily transferred to and processed in other countries. PostHog stores analytics events on servers in the United States. Paddle processes payment data globally in line with their own infrastructure. We rely on the privacy frameworks each provider has put in place (including Standard Contractual Clauses where applicable to EU/UK residents) to keep transfers compliant.

9. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access — ask for a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data, subject to legal record-keeping obligations on the payment side (Paddle is required to retain transaction records for tax and anti-fraud purposes).
• Portability — receive your data in a machine-readable format.
• Objection / opt-out — opt out of analytics by enabling Do Not Track or by emailing us. Opting out does not affect your access to the website or app.
• Complaint — lodge a complaint with your local data protection authority. EU/UK residents can find their authority via the EDPB; Japanese residents can contact the Personal Information Protection Commission (PPC).

To exercise any of these rights, email support@tayutau.app from the email address you used with us. We respond within 30 days. For payment-related data, we may need to forward your request to Paddle as the data controller for that information.

10. Children

Tayu is not directed at children under 13 (or under 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Security

We use TLS (HTTPS) for all traffic to tayutau.app and api.tayutau.app. Payment data is handled by Paddle on PCI-compliant infrastructure and never touches our servers in raw form. Our backend is hosted on Cloudflare with standard access controls.

12. Information we do not collect

For clarity, Tayu does not collect or process:

• The contents of your wallpaper library, playlists, or schedules — these stay on your device. (For YouTube videos you add, we record the public video ID and its content categories; see section 4.)
• Precise location, contacts, calendar, microphone, camera, or recordings of your screen.
• The text you type into form fields — session replays mask all input on your device before sending.
• Analytics linked to your name or email — your analytics profile stays anonymous.
• Cross-site tracking, advertising IDs, retargeting pixels, or social-media beacons.
• Credit-card numbers, CVVs, or bank-account details — these are handled solely by Paddle on PCI-compliant infrastructure.

13. Lawful basis for processing (EU/UK residents)

If GDPR or UK GDPR applies to you, we rely on the following lawful bases under Article 6:

• Performance of a contract (Art. 6(1)(b)) — processing your purchase, granting entitlements to paid features, and providing customer support you have requested.
• Legitimate interests (Art. 6(1)(f)) — running pseudonymous product analytics (PostHog), including masked session replay and its automated analysis, to understand which features are used, detecting abuse of our entitlement API, and securing our infrastructure. We balance this against your privacy by honouring opt-out signals, minimising what we collect, and keeping analytics unlinked from your identity.
• Compliance with a legal obligation (Art. 6(1)(c)) — retaining transaction records for tax, accounting, and consumer-protection purposes (handled primarily by Paddle as the Merchant of Record).

14. Data retention

• Analytics events: up to 12 months in PostHog.
• Session replay recordings: up to 30 days in PostHog.
• Entitlement API access logs (for abuse prevention): up to 90 days.
• Entitlement records (purchase ↔ install): for the lifetime of the entitlement plus 2 years for tax record-keeping.
• Support email threads: up to 2 years from last reply.
• Feedback submitted from the app (message, attachments, optional email): kept in the private Discord channel we use as a support inbox until we no longer need it to act on the feedback, typically up to 2 years.
• Transaction records held by Paddle: per Paddle’s own retention policy (typically 7 years for tax reasons).

15. Notice for California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), gives you specific rights regarding your personal information.

Categories of personal information we collect. In the past twelve (12) months we have collected the categories of personal information described in sections 2–4 of this policy: identifiers (such as a randomly generated analytics session ID and, for purchases, your name and email handled by Paddle), commerce information (transaction history, also handled by Paddle), internet or network activity (page views and click events), approximate geolocation inferred from your connection, and inferences drawn from the above to improve the product. Until 7 August 2026 this also included email addresses submitted to an optional newsletter signup, which has since been removed; every address collected through it was deleted from our email provider on that date, and we no longer hold any of them.

Sources and purposes. We collect this information directly from you when you visit the website, install the app, or make a purchase. We use it to provide and improve Tayu, fulfil purchases, prevent abuse, and meet legal obligations.

Sale or sharing of personal information. We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the past twelve (12) months and have no plans to do so. We treat the Global Privacy Control signal as a valid opt-out preference signal.

Your rights. Subject to verification of your identity, you may request to (a) know what personal information we hold about you, (b) delete that information (subject to legal record-keeping obligations on the payment side), and (c) correct inaccurate information. We do not collect sensitive personal information. You may exercise these rights by emailing support@tayutau.app with the subject “CCPA rights request”. We will not discriminate against you for exercising these rights. You may use an authorised agent to submit a request on your behalf; we will require reasonable proof of authorisation.

16. Changes to this policy

If we make material changes to this policy, we will update the “Last updated” date at the top of this page and, where appropriate, notify customers by email. Continued use of Tayu after the change means you accept the updated policy.

17. Contact

For any privacy question or to exercise the rights described above, write to Nono (Makoto Nonoyama) at support@tayutau.app.