DualBeats Privacy Policy (Version 1, effective October 18, 2026)

AtelierYuzu ("the developer") handles information in DualBeats as follows.

1. Overview

Except for chart signing, reporting, and fetching the revocation list when receiving charts, DualBeats does not communicate with the developer's server or send any information. Your records, settings and charts are stored only on your device.

(The Steam version communicates with the Steam client, which is governed by Valve's privacy policy.)

2. Information sent when signing

• The chart's content (title, artist, creator name, description, notes, etc.)
• Your author ID and the passphrase stored on your device that proves it
• Steam authentication data (the server asks Steam to confirm your Steam account)
• Your DLC status and the number of charts you have saved

3. Information kept on the server

The registration number, a value computed from the chart's content for matching, the text (title, artist, creator name, description), the song ID, your author ID, a value computed from your passphrase, the platform and account identifier, a marker computed from the account, the date and time, your DLC status, and so on.

Notes and your IP address are not stored. (For rate limiting, a converted value of your IP address is used for 24 hours only.)

4. Information sent and kept when reporting

The reported chart's content and signature, the reason and comment for the report, and the reporter's author ID.

5. Fetching the revocation list when receiving

When you receive a chart, the list of revoked signatures is fetched from the server. No information that identifies you is sent.

6. Purposes of use

Issuing signatures; dealing with impersonation, cheating and inappropriate content; rate limiting; and responding to inquiries and requests such as disclosure.

7. Retention period

Signing records are kept without a set time limit so that reports can be handled for as long as signed images circulate.

However, if the person who signed asks for deletion and we can confirm their identity, we will delete that signing record and add its registration number to the revocation list. From then on, images with that signature will be shown as "signature revoked."

8. Service providers and storage outside Japan

The server uses services from Cloudflare, Inc. (United States), and information is stored in its data centers outside Japan (mainly in the Asia-Pacific region). Cloudflare does not handle the stored information except on the developer's instructions, and the developer manages it so that only the developer can access it; this is therefore not a provision of information to a third party.

As part of our security measures, the developer manages this with an understanding of the personal information protection system of the United States, where Cloudflare is based, based on information published by Japan's Personal Information Protection Commission.

9. Disclosure to third parties

We do not provide information to third parties except as required by law.

10. Security measures

• Only the developer can view the server's records. The keys used for signing are kept only in the server's secret storage and on a limited number of the developer's devices.
• Communication is encrypted (HTTPS).
• Notes and IP addresses are not stored.
• External services are used with an understanding of the systems of the countries where they are based, as described in section 8.

11. Requests such as disclosure

To request notification of the purposes of use, disclosure, correction, suspension of use, deletion, etc. of retained personal data, please email the contact below. We will explain how to confirm your identity (registration number, author ID, etc.). There is no fee. Complaints and questions are also accepted at the same contact.

12. Changes

If this policy is revised, we will ask for your consent again the next time you use the signing or reporting features.

13. Business operator and contact

AtelierYuzu

dualbeats.atelieryuzu@gmail.com

(Our name and address will be provided without delay upon request to the contact above.)

(This English version is a translation of the Japanese original. If there are any differences, the Japanese version prevails.)