Privacy Policy

At UKIYO (the “Service”), we believe that great music deserves great transparency. This Privacy Policy explains what information we collect when you use UKIYO, why we collect it, how it is used, and the choices available to you. We are committed to handling your information with care and in compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Service.

1. Information We Collect

We collect information in a limited and purposeful manner. Below is a description of each category of data we interact with.

Browser Local Storage

To provide a seamless and personalized experience, UKIYO stores certain data directly in your browser's local storage. This includes your saved playlist, playback preferences, and notification states (such as whether you have dismissed the cookie consent banner). This data never leaves your device — it is not transmitted to our servers or any third party, and it persists only until you clear your browser's storage.

Analytics — Google Analytics 4 (GA4)

With your consent, we use Google Analytics 4 (“GA4”), a web analytics service provided by Google LLC, to understand how visitors interact with the Service. GA4 helps us identify which features are most useful, diagnose technical issues, and make informed decisions about future improvements. GA4 collects the following categories of information through cookies and similar tracking technologies:

• Page views and time spent on each page
• Device type, operating system, and browser
• Approximate geographic location (country and city level only)
• Interaction events within the Service, such as track plays, playlist additions, and search queries

All data collected through GA4 is anonymized and aggregated. We do not use GA4 to identify individual users. Analytics data is processed by Google LLC in accordance with their privacy policy. For details, please refer to the Google Privacy Policy. GA4 is loaded only after you provide consent through the cookie consent banner. If you later wish to opt out, you may do so at any time via the “Cookie Preferences” link in the footer, or by using the Google Analytics Opt-out Browser Add-on.

Mixcloud Embedded Player

UKIYO uses Mixcloud's official embedded player to stream DJ mix music. The Mixcloud player is a core and essential component of the Service — the primary purpose of UKIYO is to provide a beautiful listening environment for music hosted on Mixcloud, and the Service cannot function without it. Because it is strictly necessary for the delivery of the Service, the Mixcloud player is loaded regardless of your analytics cookie preference.

Mixcloud may independently set cookies or collect data through its embedded player. This is governed entirely by Mixcloud's own privacy practices, which are outside our control. We encourage you to review the Mixcloud Privacy Policy for full details.

2. How We Use Your Information

We use the information described above solely for the following legitimate purposes, and for no other reason:

• Service improvement: Analytics data helps us understand usage patterns and prioritize features that genuinely benefit our users.
• User experience personalization: Local storage data allows us to remember your playlist and preferences across sessions without requiring an account.
• Technical diagnostics: Aggregated analytics help us identify and resolve errors or performance issues promptly.

We do not use your information for advertising, profiling, automated decision-making, or any purpose not explicitly stated in this policy.

3. Sharing with Third Parties

We do not sell, rent, or trade your personal information to any third party. The only third-party sharing that occurs is the transmission of anonymized analytics data to Google LLC as part of the GA4 service described above, and solely when you have provided your consent. We may disclose information if required to do so by applicable law, court order, or governmental authority, but we will notify you of such requests to the extent permitted by law.

4. Cookies and Tracking Technologies

UKIYO does not set any first-party cookies. We rely on browser local storage for essential functionality, and any cookies present in your browser are set by third-party services embedded in or associated with the Service. The table below summarizes the tracking technologies in use. You may manage your analytics cookie preferences at any time by clicking “Cookie Preferences” in the footer of the main page.

5. Data Retention

We retain data only for as long as necessary for the purposes described in this policy. Specifically:

• Local storage: Data stored in your browser persists until you manually clear your browser data or uninstall the browser. You have full control over this data at all times.
• GA4 analytics data: Google retains user-level and event-level analytics data for up to 14 months by default, after which it is automatically deleted. Aggregated reporting data may be retained for longer periods. You can request deletion of your analytics data through Google's My Activity tool.

6. Children's Privacy

UKIYO is not directed at or intended for use by children under the age of 13 (or under 16 in certain EEA jurisdictions). We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information without appropriate consent, please contact us using the details in Section 11 and we will take steps to delete such information promptly.

7. Security

We take reasonable technical measures to protect the integrity of the Service and the information processed through it. However, no method of transmission over the internet or electronic storage is completely secure. We encourage you to take care when sharing information online and to use up-to-date browser software to protect your own device.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acknowledgment of the updated policy.

9. GDPR — Rights of EEA Residents

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent local legislation grants you specific rights with respect to your personal data. This section explains those rights and how we fulfill our obligations under GDPR.

Legal Basis for Processing

Where we process personal data, we do so on the following legal bases under GDPR Article 6(1):

• Consent (Article 6(1)(a)): Analytics data collected via GA4 is processed only with your prior, freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legitimate interests (Article 6(1)(f)): We process limited technical data necessary to operate and maintain the Service securely.

Your Rights

As a data subject under GDPR, you have the following rights, which you may exercise free of charge:

• Right of Access (Article 15): You may request a copy of the personal data we hold about you, along with information about how and why it is processed.
• Right to Rectification (Article 16): You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Article 17): You may request that we delete your personal data where there is no compelling reason for its continued processing (“right to be forgotten”).
• Right to Data Portability (Article 20): You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to Restriction of Processing (Article 18): You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Object (Article 21): You may object to the processing of your personal data where we rely on legitimate interests as the legal basis.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time by clicking “Cookie Preferences” in the footer and selecting Reject.

To exercise any of the above rights, please contact us through the channels listed in Section 11. We will respond to all legitimate requests within 30 days.

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with your local supervisory authority (Data Protection Authority). A full list of EU and EEA supervisory authorities can be found on the website of the European Data Protection Board. We would, however, appreciate the opportunity to address your concerns directly before you contact a supervisory authority.

International Data Transfers

Analytics data collected via GA4 is transferred to and processed by Google LLC in the United States of America. The United States is not subject to an adequacy decision by the European Commission. However, this transfer is carried out under appropriate safeguards, specifically Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to GDPR Article 46. For further details on Google's data transfer mechanisms, please refer to the Google Privacy Policy.

10. CCPA — Rights of California Residents

If you are a resident of the State of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information. This section describes those rights and explains how to exercise them.

Your Rights Under the CCPA

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you over the past 12 months, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law (such as information necessary to complete a transaction or comply with a legal obligation).
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Non-Discrimination: We will not discriminate against you in any way for exercising any of your CCPA rights. You will receive the same quality of service and access to the Service regardless of whether you exercise your privacy rights.

We Do Not Sell or Share Your Personal Information

UKIYO does not sell, rent, or share your personal information with third parties for monetary or other valuable consideration, nor do we use it for cross-context behavioral advertising as defined under the CPRA. Anonymized analytics data is shared with Google LLC solely for the purpose of improving the Service, and only with your prior consent.

To submit a request to exercise any of your CCPA rights, please contact us through the channels listed in Section 11. We will respond to verifiable consumer requests within 45 days, with a possible extension of an additional 45 days when reasonably necessary.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices — including requests to exercise your rights under GDPR or CCPA — please reach out to us through our official social media accounts. We are committed to responding to all inquiries promptly and transparently.