Privacy Policy

Operator: Hakki Kai / Last updated: 2026-08-31

Hakki Kai ("the Operator") handles personal information on "サーバー募集掲示板" ("the Service") as described below.

1. What we collect

The Service collects and stores the following.

・Discord account information (user ID, username and avatar URL), obtained when you sign in with Discord. We do not collect your email address

・Discord access tokens, stored only if you use the automatic server-join feature. They are stored encrypted

・Listing content (title, game, server overview, requirements, deadline, Discord invite link, and so on)

・Uploaded server images (logos and banners)

・Application content (channel URL, streaming history, motivation, answers to a listing's extra questions)

・Reports (the listing reported, the reason, and details)

・Contact form submissions (category, message, and an optional email address)

・The date and time you agreed to the Terms of Service, and the version you agreed to

・Cookies (the sign-in session, display language, and colour theme)

・Push subscription details, if you enable browser notifications

・A hash derived from your IP address, used only to rate-limit the contact form. The original IP address cannot be recovered from the hash

・Connection details at the time of posting (IP address, browser type). Recorded only for five actions: creating or editing a listing, applying, reporting, contacting us, and signing in. Simply viewing a page is not recorded

・Outcome reports (whether the server went ahead, whether you were able to take part) and records of failing to take part after being approved

・Records of measures taken by the Operator (hiding a listing; warnings, posting suspensions and account suspensions, together with the reasons)

・Public information retrieved from a listing's Discord invite link (the server's creation date and approximate member count). Member lists and personal information inside the server are not retrieved

The Service does not currently use any analytics tool such as Google Analytics. If one is introduced, this policy will first be updated to name the tool and the information it collects. The connection details listed above are recorded only for the purposes set out below, never for analytics.

2. How we use it

・To operate and display the Service and to identify you

・To show the information listing owners and applicants need from each other

・To add approved applicants to a Discord server automatically, when that feature is used

・To handle reports and rule breaches, and to prevent abuse

・To answer requests made under the law, such as requests to disclose sender information. Connection details are recorded for this purpose only

・To ask for outcome reports and display the result on the Service

・To temporarily restrict the creation of new listings where outcomes have not been reported

・To show the number of no-shows to a listing owner as a reference when reviewing applications

・To answer your enquiries

・To improve the Service

3. Sharing with third parties

The Operator does not share personal information with third parties except where required by law.

Nor does the Operator disclose sender information voluntarily at its own discretion. Sender information is disclosed only where a formal procedure under the law has been followed, such as a court order for the disclosure of sender information or a bar association enquiry, and then only after consulting a lawyer.

Because of how the Service works, the following is visible to other users.

・Listing content and the owner's Discord username and avatar (visible to everyone)

・Application content and the applicant's Discord username and avatar (visible only to that listing's owner and the Operator)

・Reports and the reporter's name (visible only to the Operator)

The only external service the Service uses is Discord. Discord is operated by Discord Inc., a company in the United States, and the Service sends the following to Discord, limited to what each feature needs.

・Signing in - to use Discord for authentication (your Discord user ID and similar)

・Automatic server join on approval - to add an applicant to a Discord server (your Discord user ID and the access token held in encrypted form; only where you have opted in to this feature)

・Direct message notifications - to deliver the notification (your Discord user ID and the text of the notification)

Nothing beyond what those features require is sent. If any other external service is added (email delivery, analytics, CDN, payments, and so on), this policy will be updated before use begins.

4. Where and how long we keep it

The data the Operator stores is held in a database on a server located in Japan. That database is not moved to a server outside Japan. If such a move becomes necessary, this policy will be revised and announced beforehand.

For information sent to Discord in order to run the Service, see section 3 above.

Data is kept while your account exists. See the next section for what happens when you delete it.

Reports and contact messages are deleted once they have been dealt with. Records may be kept beyond that point only to the extent needed to judge repeated breaches by the same user.

Connection details recorded at the time of posting (IP address, browser type) are deleted automatically six months after they are recorded. This period reflects that telecommunications carriers generally keep their own records for three to six months, and that it often takes a victim several months to reach the point of making a disclosure request. No longer period is used, so that the data is not held longer than necessary.

Connection details are shown on screen only when the Operator explicitly chooses to reveal them in the admin screen. That act is itself recorded in the Operator's action log.

Records of measures taken by the Operator (not published to third parties) are kept while the account exists, so that decisions about the same user stay consistent.

5. If you delete your account

Deleting your account from My Page has the following effects.

・Your Discord user ID, username, avatar and access tokens are deleted

・Every application you sent is deleted, including your answers. Listing owners can no longer see them

・Your browser notification subscriptions are deleted

・Listings you posted remain, with the author shown as a deleted user. This is so that people who applied can still follow what happened. If you choose "delete my listings too", they are hidden as well

・Reports you made are kept as a record, with the reporter anonymised

Deletion cannot be undone.

6. Access, correction and deletion requests

To request access to, correction of, or deletion of your personal information, use the contact form. We will verify your identity before responding.

You can also delete your account yourself from My Page.

You can choose how disclosure is made. If you would like the information provided as an electronic record, say so in your request. If you do not specify, we send it to the address you contacted us from, in a form you can read directly.

A statutory representative, or an agent you have appointed, may also make a request. We may ask for a document showing that they are acting for you.

There is no fee for any of these requests.

We reply within two weeks of receiving a request as a rule. If identity checks or investigation take longer, we will tell you and the reply may be delayed.

The Operator's name and address, as they relate to the handling of retained personal data, are disclosed without delay on request from the person concerned, after identity has been verified.

7. Cookies

Cookies are used for the following.

・Keeping you signed in (sign-in does not work without this)

・Remembering your display language and colour theme

These are issued by the Service itself. The Operator does not use them to track your activity on other sites.

When advertising is shown, the advertising provider may set third-party cookies. These are used to count impressions and to show advertisements matched to your interests. Those cookies are controlled by the advertising provider, and the Operator cannot read their contents.

You can turn off personalised advertising yourself: for Google advertising, via Ad Settings (https://adssettings.google.com/); for other providers, via YourAdChoices (https://optout.aboutads.info/) or Your Online Choices (https://www.youronlinechoices.com/). Advertisements will still appear, but they will no longer be selected based on your interests.

You can also refuse cookies in your browser settings. Note that refusing the sign-in cookie means you cannot sign in to the Service.

8. Security

The Operator takes the following measures for the personal data it handles.

・Organisational - only the Operator handles personal data. Actions taken in the admin screens (hiding a listing, sanctions, revealing connection details, and so on) are recorded, showing who did what and when

・Personnel - because the Operator is the only person handling the data, it is not handled by anyone else. If handling is ever outsourced, this policy will be updated before that begins

・Physical - personal data is held only in the database on the server, never on the Operator's own devices

・Technical - traffic is protected with HTTPS. Discord access tokens are stored encrypted. The admin screens can only be opened by an account with administrator rights

・Understanding the external environment - the server holding personal data is in Japan. What is sent to Discord (United States) is set out in section 3 above

The database is backed up regularly, and the backups are kept on the same server that runs the Service. Only a limited period of backups is retained; older ones are deleted in turn. This policy applies to backups in the same way.

Details of these measures that would undermine security if published are not included here. If you would like to know more, please ask through the contact form.

9. If a data breach occurs

If personal data is leaked, lost, or damaged, the Operator reports it to the Personal Information Protection Commission and notifies the people affected, as required by law.

Notice is given by display within the Service, by Discord direct message, or by sending it to a registered contact address. Where notifying a person directly is not feasible, the Operator publishes the matter on the Service instead.

10. Information about minors

The Service does not set a blanket age restriction. If you are a minor, please use it with the consent of a parent or guardian. If you or your parent or guardian ask us to delete an account, we delete that account and the information connected to it (you can also delete it yourself at any time from My Page).

11. Changes

This policy may change. Changes apply from the moment they are published on this page.

12. Contact

Please use the contact form for questions about how personal information is handled.

Revision history

・2026-08-21 First version

・2026-08-22 Added outcome reporting, automatic listing information, and connection details

・2026-08-22 Stopped collecting subscriber counts. Added a section on advertising cookies

・2026-08-31 Removed the blanket age restriction. Added how age-restricted games are handled

・2026-08-31 Added how requests to disclose sender information are handled. Removed the section of operator notes headed Matters still to be confirmed

・2026-08-31 After checking against the Personal Information Protection Commission guidelines, added what is sent to Discord, how disclosure requests work (method, representatives, fees), the security measures taken, and what happens if data is breached

This English version is a reference translation. The Japanese version prevails.