# Privacy Policy

Effective date: 2025-09-25

1. Who we are

This website is operated by sssr.red ("we", "us" or "our").
Contact: contact[at]sssr.red

2. What our origin server does (and does not) do

* We do not set any cookies, run advertising trackers, or use analytics scripts on our origin server.
* Our server generates and temporarily retains access logs that may contain technical information such as:
    * IP address of the requesting device
    * User-Agent string of the browser
    * Request time and requested resource
    * Referrer information
* These logs are used solely for:
    * Detecting and investigating attacks or abuse
    * Improving the reliability and security of our services
    * Operating the minimum functionality of the website
* Retention period: up to 6 months, after which the logs are deleted or anonymized.
* We do not sell or share this log information with third parties except as required by law.

3. Cloudflare as our service provider

We use Cloudflare (including Cloudflare Tunnel) to protect and deliver our site.

* As part of providing these strictly necessary security and performance services, Cloudflare may:
    * Process limited data (e.g., IP addresses, request metadata)
    * Set cookies (e.g., __cf_bm, cf_clearance, or other functional cookies) to distinguish legitimate visitors from bots, enable session affinity, and ensure reliability
* For details of the cookies Cloudflare sets and their purposes, please refer to:
    * Cloudflare’s official Cookie Policy: https://www.cloudflare.com/cookie-policy/
    * Cloudflare’s Cookies documentation: https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/
These cookies are classified by Cloudflare as strictly necessary for the requested service.


4. Legal basis for processing

Where required (e.g., under GDPR/EEA/UK law), we process personal data only as necessary for:
    * Providing the requested website service
    * Protecting the security and integrity of the site (our legitimate interests)

5. Data storage and transfers
    * Our access logs are stored within Japan.
    * Cloudflare may process cookie-related data in the United States or other jurisdictions, unless the Cloudflare Data Localization Suite is in effect.
    * For international transfers, Cloudflare relies on appropriate safeguards (e.g., Standard Contractual Clauses).
    * See Cloudflare’s Privacy Policy for details: https://www.cloudflare.com/privacypolicy/

6. Your rights

Your rights depend on your jurisdiction:
    * EEA/UK (GDPR): access, rectification, erasure, restriction, objection, portability, complaint to supervisory authority.
    * Japan (APPI): request disclosure, correction, suspension of use, etc.
    * California (CPRA): rights to know, delete, correct, and opt-out of sale/share (we do not sell or share personal information).

To exercise your rights, please contact us at contact[at]sssr.red.

7. Updates

We may update this Privacy Policy to reflect changes in law, services, or operations.
The "Effective date" at the top will always indicate the current version.