This is an English translation of the Japanese original for reference. If the wording differs, the Japanese original prevails.
Introduction
suisui.fan (the “Site”) is a fan site for the streamer Yukiiri Sui (雪入 睡), operated by fans, known as “すい好い” (Suisui).
This Privacy Policy explains how the fans operating the Site (the “Operators”) access, use, and store users' information. It applies to all pages and features of suisui.fan.
Information accessed and purposes
When you use the following features, we access the information described for each feature and use it only for the stated purposes.
Signing in with X
- Information accessed: Your X user ID, username (starting with @), display name, profile image URL, and the date and time you last signed in
- Information not accessed or stored: We do not access your email address or X password. We do not store the X access token received during sign-in
- We request only permission to read account information and posts (users.read and tweet.read). We do not post, follow accounts, or perform similar actions on your behalf
- Purposes: Maintaining your signed-in session, showing your information on My Page, and identifying your posts so that you can remove them from the Site through My Page
- Sharing with X: We do not send your user information from the Site to X. Sign-in takes place on X's screen, and X's handling of information is governed by X's Privacy Policy
You can also use our contact details for questions about the handling of your X account information.
Profiles and personal milestones
- Information accessed: The display name, profile image, header image, and milestone dates, titles, notes, and images you enter on My Page
- For milestone images, we store both the cropped image and the original uploaded image
- Images are served from the Site's content delivery server (cdn.suisui.fan). Image URLs are difficult to guess, but anyone who knows a URL can view its image
- Purpose: Displaying this information to you when you are signed in
- We also store image upload counts to enforce the daily upload limit
Inquiries
- Information accessed: Your email address when you contact us by email, or your X account when you contact us by X direct message, and the contents of your inquiry
- Purposes: Responding to your inquiry and improving the Site. Your email address is used only to reply to you
Importing posts with the hashtag
The Site imports public X posts tagged with “#かっこいいぞすい” and displays them in Memories (stream recaps, including stream thumbnails and images shown when shared on social media), Suista, and timeline milestone pages. Posts by people who have never signed in to the Site may also be imported. The Operators may additionally specify individual posts to import.
- Information accessed: The author's X user ID, username, display name, profile image URL, the post's text and posting date, the number of entries in its edit history, and its images and videos
- Images and videos are copied to and served from the Site's server
- Purpose: Recording streams on the Site together with fans' posts
- Stopping publication: A post's author can sign in with X and remove the post through the “ポスト” (Posts) section of My Page. If a post is not shown there, or you want to request removal without signing in, please contact us
- Removal deletes the text, images, and videos and stops their publication. We retain the post URL, posting date, number of edit-history entries, and the author's X user ID, username, and display name to prevent reimporting the same post and to maintain a removal record
Apple Music integration
This feature creates a playlist in your own Apple Music library from a stream's setlist. Before first use, we display information about the integration for you to review.
- Information stored: Your Apple Music user token (encrypted), the authorization date, the IDs and URLs of created playlists, their source streams, and the number and dates of creation
- Information stored in this browser: When you authorize access, Apple's MusicKit also stores the user token in this browser's localStorage. Clearing the browser's site data removes it
- Information not stored: Playlist names, track lists, and the contents of your library
- Information sent to Apple: Your user token, the playlist name (“[suisui.fan] 歌枠 | ” followed by the stream date and time, with a number such as “(2)” added when the playlist is created again), a description, and the tracks' Apple Music IDs. Playlists are created as private
- We may read one entry from your library's playlist list to check whether your user token is valid. We do not store the returned contents
- If playlist creation fails, we may record up to 500 characters of Apple's error response in server logs to investigate the cause
- Purposes: Only to create playlists and check whether the integration is valid. Information about created playlists is shown only to you and is not disclosed to third parties
- Retention: Playlist creation records are retained until you delete your account on this site. The user token and authorization date stored on this site are deleted when you disconnect Apple Music from your account page, delete your account, or we learn that the token is invalid. Disconnecting leaves playlists already created in Apple Music and their creation records on this site in place
Apple's handling of information is governed by Apple's Privacy Policy.
YouTube Music integration
This site uses YouTube API Services (YouTube Data API) to create playlists in your own YouTube Music library from stream setlists.
We may temporarily suspend this integration or limit who can use it, depending on usage. Even while it is suspended, the data of users who have already connected is handled as described below.
- Information accessed and stored: Google access and refresh tokens (both encrypted in our server database), the authorization date and expiration time, and the ID, URL, source stream, creation date, creation count, number of tracks added, and completion status of playlists created through this site. These records are associated with your account on this site
- Purposes: Creating playlists at your request, showing the results, preventing duplicate creation and excessive use, and checking and disconnecting the integration. We periodically refresh tokens to check whether you have revoked access through Google
- We do not access your Google name, email address, password, YouTube channel information, watch history, or list of existing playlists. The name and track order for a new playlist are used during processing; we do not store your entire Google library
- Information sent to Google: Information needed to authorize, refresh, and revoke access; the playlist name (“[suisui.fan] 歌枠 | ” followed by the stream date and time, with a number such as “(2)” added when the playlist is created again); the description “suisui.fan のセトリから作成” (created from a suisui.fan setlist); and the YouTube video IDs and order recorded in the setlist. We do not send your X profile or personal milestones
- Requested permission:
youtube.force-ssl, which allows management of YouTube data. Google's consent screen describes broad permissions, including viewing, editing, and deleting videos, ratings, and comments. The only write operations this site performs are creating new playlists and adding tracks to them. We do not upload or delete videos, post comments, rate content, or subscribe to channels - Visibility: Playlists are always created as private. You can change their visibility later in YouTube or YouTube Music
- Retention: Within a maximum of 30 days after authorization, we delete the tokens and YouTube Music playlist records held on this site. Reauthorization is required to continue creating playlists. We check the authorization daily and also delete these records when we detect revocation through Google. Records of partially created playlists are treated the same way
- Deletion and disconnection: Use “連携解除” (Disconnect) in the “YouTube Music” section of My Page. This immediately deletes the site's YouTube Music integration data and sends a revocation request to Google. The same process runs when you delete your account on this site. We show a message if the revocation request fails
- You can also revoke this site's access through your Google Account's connections settings. To delete the site's stored data immediately as well, disconnect through My Page
- Playlists already created on YouTube, including partially created ones, remain after disconnection, expiration, or deletion of your account on this site. Delete unwanted playlists through YouTube or YouTube Music
- YouTube Music tokens, playlist records, and temporary authorization data are excluded from this site's SQL database backups. However, they may be included in snapshots that copy the entire server for disaster recovery. Snapshots are taken daily, kept for seven days, and then deleted automatically. We do not record Google tokens or authorization codes in application logs
Use and sharing of Google user data
In this section, “Google user data” means authorization information, information about created playlists, and data derived from that information, received through the Google integration.
- Use and transfers are limited to what is necessary for the YouTube Music features displayed on this site and consented to by you: creating playlists, showing the results, and maintaining or disconnecting the integration
- Destinations and processing: Google's APIs for authorization and playlist creation; this site's servers, database, and network infrastructure; and your browser for displaying the results. Our production servers and network infrastructure use Amazon Web Services (AWS). Processing by external infrastructure services is also limited to what is necessary to provide this site's functionality
- We do not transfer Google user data to third parties for purposes unrelated to providing this site's functionality, even with your consent. We do not use it for sales, advertising, credit decisions, or disclosure to data brokers. We do not send it to external notification, analytics, or AI services, or use it to train AI models
- If disclosure is required by law, we disclose only the information necessary to fulfill that legal obligation
- Operators may read the data only when you have explicitly agreed to the viewing of specific data, when necessary for a security investigation, or when necessary to comply with the law
These restrictions apply throughout this policy, including the section on “Third-party disclosure and use of external services.” The use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including its Limited Use requirements.
See Google's Privacy Policy for Google's handling of information. Please use our contact details for questions or deletion requests.
Access logs
- Information recorded: The Site's server logs the source IP address, page accessed, date and time, referring page, browser type, and submitted contents (excluding some fields, such as email addresses)
- Purposes: Investigating problems and responding to unauthorized access
Cookies and information stored on your device
- Cookie: We use a cookie (_suisui_session) to keep you signed in. It expires after two weeks. It is issued only on the sign-in page and pages used after signing in, not on other public pages
- Browser localStorage: Your light or dark theme setting, Home slideshow autoplay setting and the slide shown when you paused it (discarded after 7 days), the time you acknowledged the notice about older browsers, and your Apple Music user token when connected (stored by Apple's MusicKit)
- Browser localStorage: The display language you explicitly select in the menu is saved. Japanese is the default when no preference is saved. Clearing your browser’s site data also removes this preference
- Browser sessionStorage: Whether a celebration effect has been shown
- The Site itself does not use cookies for advertising or analytics
Third-party disclosure and use of external services
Google user data is subject to the restrictions in Use and sharing of Google user data. General consent does not permit use or disclosure beyond those restrictions.
- Users' personal data is handled within the purposes and processing necessary for each feature described above. We do not sell personal data or disclose it to third parties for advertising or other purposes unrelated to providing the Site's functionality
- We do not disclose data under an opt-out arrangement in which data is shared unless you object
- We use external services for servers, databases, networking, content delivery, and receiving email. Processing through these services is limited to what is necessary to provide the Site's functionality or respond to inquiries. There is no process that automatically forwards data obtained through the Google integration to inquiry emails or external notifications
- If disclosure is required by law, we disclose only the information necessary to fulfill that legal obligation
Retention and deletion
- Deleted when you delete your account: Your account, profile and header images, personal milestones and their images, Apple Music authorization information, and playlist creation records
- Images are deleted from storage, but cached copies may remain available to anyone who knows their URLs for up to approximately one year
- Retained after account deletion: Imported posts (which you can remove through My Page before deleting your account), playlists created in your own Apple Music library, and server logs
- YouTube Music tokens and playlist records held on the Site follow the retention and deletion rules in the YouTube Music integration section above and are also deleted when you delete your account. Playlists already created on YouTube remain
- SQL database backups: YouTube Music tokens and playlist records are excluded. Other data may remain in backups for up to 90 days after you delete your account and is then deleted
Security measures
- Music service authorization information (user tokens) is stored encrypted
- Only administrators registered by the Operators can access the administration area. Their permissions are divided by role
- Our production servers, networking, and content delivery use Amazon Web Services (AWS), and we also manage access permissions on the Site
- Handling outside Japan: We use Proton, an email service provided by a Swiss company, to receive inquiries. We take security measures with an understanding of Switzerland's personal data protection system
Requests for access, correction, or restriction of use
Please contact us to request notification of the purposes of use, access to your information, correction, addition or deletion, restriction or termination of use, deletion of data, termination of third-party disclosure, or access to records of third-party disclosure. After verifying your identity, we will respond without undue delay.
For minors
If you are a minor, please obtain your parent or guardian's consent before using the Site.
Contact details
Please use either of the following channels for questions about this policy, complaints or concerns about our handling of information, or the requests described above.
- Email: suisuifan@pm.me
- X direct message: @suisui_fansite
Changes
We may revise this policy as laws or the Site's features change. Revisions and their dates will be announced on this page. We will review this policy in connection with the implementation of the amendments to Japan's Act on the Protection of Personal Information promulgated in 2026.
Established: September 13, 2026.
Revision history: September 13, 2026 (removal of the contact form); September 14, 2026 (removal of stored music service preferences for setlists; addition of YouTube Music integration, retention, and deletion rules); September 16, 2026 (clarification of restrictions on the use and transfer of Google user data, processing by external services, and Apple Music retention; addition of an English reference translation); September 19, 2026 (replacement of the in-preparation notice with a description of service availability; end of YouTube channel retrieval following removal of the confirmation screen; change of playlist names; disclosure of disaster-recovery snapshots); September 28, 2026 (disclosure of the language preference explicitly selected in the menu and kept in localStorage).