Dixlase Dixlase

Privacy policy

Last updated: July 10, 2026

The Dixlase official website (the "Site") respects the personal data of its users and handles it appropriately in compliance with applicable laws. This Privacy Policy sets out how personal data is collected and used in the operation of the Site.

Data Controller

  • Entity name: exc-D inc.
  • Address: 9F Edobori Center Building, 2-1-1 Edobori, Nishi-ku, Osaka 550-0002, Japan
  • Representative: Tsuyoshi Kashihara
  • Personal Information Protection Manager: Tsuyoshi Kashihara
  • Contact: info@dixlase.org

Personal Data We Collect

The Site does not provide user registration, mailing-list subscription, or paid services. The personal data we collect is therefore limited to the following.

When you submit the contact form

  • Name
  • Email address
  • The content you enter as your inquiry

Information automatically collected on access

  • IP address
  • Browser type and version
  • Referrer URL
  • Access timestamp
  • URL accessed

These are recorded in web server access logs and, where you have consented, also used by Google Analytics for usage analysis. The access logs themselves are used only for security and operational quality purposes.

Cookies

The Site uses the following cookies. See the Cookie Policy for details.

  • Essential cookies: Session maintenance and recording of your cookie-consent choice
  • Analytics cookies: Set by Google Analytics for usage tracking (_ga, _ga_* and similar), only when you consent. See "Service Providers" below for details
  • Other optional cookies: Set only when you consent, to improve functionality

How Personal Data Is Collected

  • Direct input by the user (contact form)
  • Information automatically transmitted by your browser during communication (access logs)
  • Automatic recording via cookies

We do not receive personal data from third parties.

Purposes of Use

We use collected personal data only for the following purposes (Article 17 of Japan's Act on the Protection of Personal Information).

  • Responding to inquiries and keeping records of those responses
  • Communicating site outages or security notices
  • Analyzing site usage and improving service quality (including the use of analytics tools)
  • Responding when required by law
  • Responding to unauthorized access or abuse

If we need to use personal data for any other purpose, we will obtain your prior consent.

Disclosure to Third Parties

Except where permitted by law, we do not disclose personal data to third parties without your consent. Examples of permitted disclosure:

  • When required by a public authority pursuant to law
  • When urgently necessary to protect the life, body, or property of the user or a third party
  • When cooperation with telecom carriers or relevant authorities is required to investigate unauthorized access

We do not sell or lease personal data.

Service Providers (Subprocessors)

To the extent necessary for site operation, we use the following categories of external providers. We enter into personal-data-protection agreements with each provider and require appropriate handling.

  • Hosting / server infrastructure: Provision of server environments
  • CDN / DDoS protection: Content delivery and protection against unauthorized access
  • Email delivery: Automated reply and notification email delivery via an email-sending service
  • Bot protection (Cloudflare Turnstile): To prevent automated submissions to the contact form, we use Cloudflare Turnstile, provided by Cloudflare, Inc. (United States). Turnstile sends IP address, browser information, and behavioral heuristics to Cloudflare to distinguish humans from bots.
  • Analytics (Google Analytics): To understand site usage, we use Google Analytics 4 provided by Google LLC (United States). Google Analytics uses cookies to collect visitor browsing information (IP address, viewed pages, time on page, referrer, etc.). IP addresses are truncated by Google before analysis and are not used to identify individuals.

Individual providers may change. Specific provider names and locations are kept up to date on this page.

Cross-Border Transfer of Personal Data

Some service providers operate servers or processing facilities outside Japan (mainly the United States), so user personal data may be transferred to those countries. Cloudflare Turnstile and Google Analytics, which we use on the Site, are operated by US-based entities, so a portion of data is transferred to processing locations including the United States.

Summary of the regime in the main transfer destination:

  • United States: There is no comprehensive federal personal-data-protection law; state laws (e.g. California CCPA) and sector-specific federal laws apply.

For details, see the following resource from Japan's Personal Information Protection Commission:

Retention Periods

We retain personal data only for the period necessary to achieve the purposes of use.

Type Retention period
Inquiry records 3 years after the inquiry is closed
Web server access logs 90 days (anonymized or deleted after analysis)
Cookie consent records 1 year after consent is given
Records subject to a statutory retention period As required by the relevant law

Once the retention period expires, data is promptly deleted or anonymized.

Safeguards

To prevent leakage, loss, or damage of personal data, we implement the following safeguards.

Technical safeguards

  • Encryption of all communication using HTTPS (TLS 1.2 or higher)
  • Encryption of databases and backups
  • Monitoring of access logs
  • Continuous tracking and patching of software vulnerabilities

Organizational safeguards

  • Designation of a Personal Information Protection Manager and clarification of responsibility
  • Maintenance of personal-data handling procedures
  • Documented incident-response procedures and a stakeholder communication chain

Personnel safeguards

  • Training for personnel who handle personal data
  • Non-disclosure agreements with relevant personnel

Physical safeguards

  • Management of equipment and media used to handle data
  • Verification of physical-security requirements at service providers

Your Rights

Under Japan's Act on the Protection of Personal Information, you may make the following requests with respect to your personal data that we hold.

  • Notification of the purposes of use
  • Request for disclosure (Article 33)
  • Request for correction, addition, or deletion (Article 34)
  • Request for suspension of use or erasure (Article 35)
  • Request for suspension of third-party provision (Article 35)

To make a request, contact the "Contact" address at the end of this Policy. After verifying your identity, we will respond as required by law.

If you are not satisfied with our response to your complaint, you may also file it with Japan's Personal Information Protection Commission.

Minors' Personal Data

If we collect personal data from a minor (under 18 years of age), parental or guardian consent is required. If we learn that personal data was submitted without such consent, we will promptly delete it.

Cookies and Consent

When you first access the Site, we display a cookie-consent banner and obtain your explicit consent to the use of optional cookies. For details see the Cookie Policy.

Changes to This Policy

We may update this Policy in response to legislative changes or service changes. For significant changes, we will post a notice on the Site and notify users through reasonable means. The latest version is always available on this page.

Governing Law and Jurisdiction

This Policy and disputes regarding the handling of personal data on the Site shall be governed by the laws of Japan, with the Tokyo District Court as the court of first instance with exclusive jurisdiction.

Contact

For questions about this Privacy Policy, the requests listed above, or to file a complaint, please contact:

  • Personal Information Protection Manager: info@dixlase.org
  • Postal: 9F Edobori Center Building, 2-1-1 Edobori, Nishi-ku, Osaka 550-0002, Japan — attention to the Personal Information Protection Manager, exc-D inc.

Revision History

  • July 10, 2026: Initial publication