Reach High Studio Privacy Policy

Effective date: November 10, 2026 Reach High Studio (“we”) offers a website and smartphone game apps as a personal hobby creative project. This policy explains how we handle your information in connection with our website, our support page, and the apps we offer (currently “Take to the sky”). This policy has a common part (our website and contact forms) and per-app parts (currently “Take to the sky”). The page registered with the App Store is this policy on our website. We do not include that URL in the text of this policy. If we later offer an app whose data practices differ materially, we may add a section for that app and, where needed, a separate page for it. In short - We do not collect your name, email address, postal address, or phone number for you to browse our website or play our apps. - You can contact us through an in-app form or the form on our support page. Please select an app or topic and a category, then enter your message. These forms are a one-way channel, and we do not send individual replies. Please do not enter personal information such as your name or email address. We may use your feedback as a reference for our work and future updates. - “Take to the sky” has no sign-in or account registration. Game progress is saved only on your device, and we cannot see that data. There are no ads, in-app purchases, or analytics transmissions. Details are in “How we handle Take to the sky.” Common practices 1. Information we receive when you contact us 1. If you send a message through an in-app contact form for an app we offer, or through the contact form on our support page, we receive the selected app or topic, the category, and your message. If you send the form in “Take to the sky,” we also receive that app’s version and the OS version. We do not ask for your name, email address, postal address, or phone number. Please do not enter them in the form. If personal information is included by mistake, we will use it only for the purposes in paragraph 3 and delete it after the period in paragraph 4. This information may be personal information or related data. 2. If you send the form in “Take to the sky,” then, to enforce sending limits, the app creates an identifier on your device for that installation. This value is not shown on the screen. Our endpoint handles only a salted hash of that identifier, as a count record. We do not store the raw identifier. We do not store this hash with the copy of your inquiry. If you send the form on our support page, then, to enforce sending limits, our endpoint may handle only a salted hash of the source IP address, as a count record. We do not store the raw IP address. We do not store this hash with the copy of your inquiry. 3. We use this information only for the following purposes. We do not use it for advertising or for any other purpose, and we do not use it to send an individual reply. - Reviewing your inquiry - Investigating and fixing problems - Using your feedback as a reference for improving our work and our apps, and for future updates - Handling requests for disclosure, correction, or deletion - Addressing abusive or excessive submissions (including sending limits and repeated identical messages) 4. We delete your message, the selected app or topic and category, and any version information from the notification email and from our stored copy when 14 days have passed after the date of receipt. Records used to enforce sending limits and to reject repeated identical messages (hashes and counts) are deleted after 24 hours. A proof or token used only to confirm that the submission came from the app, or that it is not automated, is not retained by us after verification. A submitted inquiry is not kept on the device. If a draft is kept on the device before you send it, it is deleted after the submission succeeds. 5. We use services of Cloudflare, Inc. (United States) to receive and forward inquiries. Your inquiry is delivered as a notification to an email address that we do not publish, and a copy of the message, the selected app or topic, and the category (including version information, if sent from an in-app form) is stored in Cloudflare’s KV storage. This information may be handled outside Japan (Cloudflare’s privacy policy states that information is stored primarily in the United States and the European Economic Area). We also use a service of Google LLC (United States), Gmail, to store the email. The subject line of the notification email includes only the selected app or topic and the category, and does not include the message body. Cloudflare Email Routing (Email Service) Activity log records may retain the subject line and the sender and recipient addresses of the notification email. As a result, the selected app or topic and the category may remain in that log as part of the subject. Official documentation states that these records can be queried, and are retained, for the past 31 days. As part of records of communication with our website and support page, Cloudflare may process the source IP address. These communication records may be retained for up to 31 days in Cloudflare’s analytics features, where they may be viewable in our management dashboard. We do not use these records for any purpose other than responding to misuse and maintaining security. We do not store the raw IP address in the copy of your inquiry or in the notification email. 6. On the contact form on our support page, we use Cloudflare Turnstile to confirm that the submission is not automated. We do not retain the verification token after verification. Cloudflare’s official documentation states that Turnstile processes signals such as IP address, a TLS fingerprint, user-agent information, and a site key and its origin for bot detection; that Cloudflare does not have the ability to directly identify individuals from these signals; and that Turnstile does not access, store, or transmit form entries. 7. We do not publish our email address in our apps, in this policy, or on our website, and we do not display it on the form. 2. Sharing with third parties We do not share information we receive through inquiries with third parties, except in the following cases: 1. When required by law 2. When necessary to protect someone’s life, body, or property, and it is difficult to obtain the person’s consent 3. Other cases permitted by law As described in section 1, we use Cloudflare, Inc. (United States) and Google LLC (United States; Gmail) to receive, forward, and store inquiries. We treat them as our processors (entrusted parties). Our use of Turnstile on the support-page form is included in this. 3. Security measures We take the following measures for information we receive through inquiries. 1. We manage the endpoint’s admin pages and the notification inbox with an account only we can use, and we turn on two-step verification. 2. We delete inquiry content, the selected app or topic and category, and version information once 14 days have passed after receipt. Records used to enforce sending limits and similar controls are deleted after 24 hours. 3. For an in-app form, we use a mechanism to confirm that a submission came from that app, we set a daily sending limit, and we do not accept repeated identical messages. For the support-page form, we use a mechanism to confirm that the submission is not automated. Submissions that exceed a limit, or that we cannot verify, are not accepted. 4. Use of services outside Japan: Inquiry information is received, forwarded, and stored as a copy using services of Cloudflare, Inc. (United States). Email is stored using a service of Google LLC (United States), Gmail. The United States does not have a single federal law that, like Japan’s Act on the Protection of Personal Information, covers all sectors; personal information is protected by state laws and by laws that apply to particular sectors. There are also legal mechanisms that can require a business to provide information to a government agency. We use these services with this in mind. Cloudflare’s official privacy policy states that it will not sell or rent personal information, that it handles information as needed to provide its services, and that it takes reasonable security measures, including encryption. Google’s official privacy policy describes security measures such as using encryption to keep data private while in transit. 4. Users who are minors If you are a minor, please use our website and apps after checking with a parent or other legal guardian. If you send an inquiry, you must obtain their consent first and complete it together with them. 5. Requests for access, correction, or deletion If you ask us to disclose, correct, or delete inquiry information we have received, we will act as soon as we reasonably can. Please use an in-app contact form or the contact form on our support page. Because we do not send individual replies through these forms, we will not respond by email. Records we hold are deleted after the period in section 1. If we can identify the relevant records by matching the content of your request, we will take steps we can complete, such as deletion. The stored copy of an inquiry does not include the device identifier, so we may be unable to identify the records. In that case, we may be unable to act. There is no fee. 6. Changes to this policy 1. We may change this policy to reflect changes in the law or in the features of our website or apps (including how data is stored, adding analytics or advertising, or adding countries or regions where an app is available). 2. If we make an important change, we will let you know in the app or on our website before the change takes effect. If we significantly change the types of information we collect or how we use it, we will obtain your consent when the law requires it. 7. Provider and contact - Provider: Reach High Studio - Contact for inquiries, complaints, and requests such as access or deletion: an in-app contact form or the contact form on our support page (handled as described in sections 1 and 5) - Where to read this policy: in each app, and on our website How we handle Take to the sky In this section, “the App” means “Take to the sky.” How we handle inquiries is described in section 1. 8. Information we do not collect from the App When you play the App, we do not collect the following: 1. Name, email address, postal address, phone number, or date of birth 2. Location (such as GPS), contacts, photos, or microphone or camera information 3. Advertising identifiers (such as an advertising ID) 4. An ID for sign-in or account registration (the App has no such feature) 5. Play data such as game progress (as explained in “9. How game data is stored,” this stays on your device, unless you write and send it yourself in an inquiry) The App does not include any third-party analytics or advertising software. 9. How game data is stored 1. Play data in the App (such as stage progress, the state of coins and hearts, and settings) is stored on your device. 2. This data is not sent to a server of ours. We cannot see it. 3. If you delete the App, or if your device is lost or broken, this play data may be lost. 10. Advertising, purchases, and analytics 1. The App has no ads. It does not track you across other apps or websites, and it does not show a tracking-permission prompt. 2. The App has no in-app purchases. 3. The App does not send play activity or device information to us or to any outside service for analytics. This policy took effect on November 10, 2026, and is updated on the last-updated date above.