This policy explains what personal information Pushiro collects through pushiro.com, why we use it, when it may be shared, and the choices available to you.

1. Scope and who we are

Pushiro ("Pushiro," "we," "us," or "our") is an independent English-language publication about Japanese gravure. This policy covers the Pushiro website, accounts, private favorites, newsletters and messages sent to us. It does not cover websites or services run by other organizations, even when we link to or embed them.

For questions or privacy requests, email [email protected].

2. Information we collect

Information you provide

  • Account information: display name, email address, password hash, email-verification status, and records showing when and which versions of the Privacy Policy and Terms of Use you accepted.
  • Age affirmation: the date and time you affirm that you are at least 18. We do not ask for or store your birth date as part of ordinary registration.
  • Favorites: your private, ranked model favorites.
  • Messages: information you include in support, editorial, rights, or correction requests.
  • Order information: contact, shipping, order, payment-status, and customer-service information needed to process and support a purchase. Payment card details are handled by the payment provider and are not stored by Pushiro.

Information collected automatically

When you use the site, our application and infrastructure may receive your IP address, browser and device information, requested URL, referring page, date and time, and security or error events. Pushiro stores one-way hashes derived from IP addresses and user-agent strings for account sessions and rate limiting. These hashes are used to recognize repeated activity without retaining those raw values in the related application records.

3. How we use information

We use personal information to:

  • provide, verify, secure, and support accounts and requested features;
  • save and reorder your private favorites;
  • send transactional messages such as verification, email-change, security, and password-reset emails;
  • receive, investigate, and resolve safety, rights, privacy, and correction requests;
  • prevent fraud, spam, unauthorized access, scraping abuse, and other misuse;
  • operate, troubleshoot, measure, and improve the service; and
  • comply with law, enforce our Terms of Use, and protect people, rights, and the service.

Where a law requires a legal basis, we rely as appropriate on performing our agreement with you, your consent or instructions, compliance with legal obligations, and our legitimate interests in operating and protecting the service. You may withdraw consent for future processing where consent is the basis, without affecting processing already carried out.

Creating an account does not subscribe you to marketing. Account details and private favorites are not provided to advertising partners.

4. Private favorites

Your ranked favorites list is private and is available only through your signed-in account. Pushiro does not provide public profiles, unlisted links, or list-sharing controls. List sharing was retired on 3 October 2026.

5. Cookies and similar technology

Pushiro uses essential, first-party cookies:

  • grav_csrf helps prevent forged requests and normally expires after 24 hours.
  • grav_customer_session keeps a reader signed in and normally expires after 30 days. Signing out deletes the current server session and clears the cookie.
  • grav_cart remembers a shopping cart and normally expires after 30 days.

Administrative users have separate strictly necessary security cookies. Legacy browser-only Saved and Following data may be read once to migrate following choices into an authenticated favorites list; Saved data is removed, and migrated Following data is removed only after a successful server response.

The site owner can also save a browser-specific analytics exclusion in the first-party __Host-pushiro_ga4_opt_out preference cookie for up to one year. This preference is separate from advertising and visitor consent choices.

Advertising and consent choices

When advertising is enabled, our public editorial, profile, publication and browsing pages may display ExoClick advertisements on mobile, tablet and desktop. Its provider can receive your IP address, browser and device information and use cookies or similar technology for advertising, personalization, measurement and fraud prevention. This processing may constitute sharing or a sale of personal information under some US privacy laws. See ExoClick's Privacy Policy and the vendor details in the consent preferences for its current purposes and retention periods.

When configured, InMobi's consent management platform stores your privacy choices and provides accept, reject and preference controls. We request advertising permission worldwide and check applicable vendor, purpose and US privacy signals before loading the advertisement provider. Missing or unresolved permission, rejection and Global Privacy Control block advertising. The reserved advertisement space can remain empty.

InMobi uses approximate IP-based location to determine the applicable privacy region. If a returning visit has valid saved advertising consent but an incomplete regional signal, an eligible advertisement may request a fresh country check from InMobi. We keep that check's result only in memory for the current page session; it does not request precise device location.

You can change or withdraw permission using Privacy choices in the footer. Withdrawal removes the active creative and prevents further advertising initialization; it does not undo earlier processing or automatically delete cookies already set. Your browser can delete or block those cookies. Consent preferences are separate from account and newsletter agreements.

Optional Google Analytics

On public pages, Google Analytics 4 measures visits and page use only after you separately allow analytics storage in our consent preferences. Google can receive browser and device information, your IP address and page information, and use first-party analytics cookies. We do not load its tag before this permission, and do not enable Google advertising signals or personalized advertising through this integration. Rejection, unresolved permission and Global Privacy Control block collection. Administrative, account and checkout pages are excluded.

You can withdraw analytics permission using Privacy choices. Withdrawal blocks further collection; it does not undo earlier processing. See Google's Privacy Policy. You can also remove analytics cookies through your browser.

The homepage, some stories and idol profiles embed public Instagram content. When an embed loads, Meta may receive technical information such as your IP address and browser details and may use its own cookies under its policies. You can block third-party content using your browser settings.

6. Service providers and other disclosures

We disclose information only as needed for the purposes above:

  • to vendors that provide hosting, content delivery and security, database and object storage, backups, transactional email, and technical operations;
  • to payment, fraud-prevention, fulfillment, and delivery providers when you make a purchase;
  • to professional advisers where reasonably necessary and subject to appropriate duties of confidentiality;
  • to authorities or other parties when required by law or reasonably necessary to protect rights, safety, and service integrity; and
  • as part of a reorganization, financing, sale, or transfer of the service, subject to applicable law and appropriate protection.

Providers may process information only to perform services for us or as otherwise disclosed in their own terms when you intentionally interact with a third-party feature.

7. Retention and deletion

We keep account information while the account is active and for as long afterward as reasonably necessary for security, legal compliance, dispute resolution, and enforcement. Verification and reset tokens expire. Rate-limit records are short-lived. Support and abuse records are kept only as long as reasonably needed to address the issue and maintain service integrity.

Deleting an account removes the active account, password hash, profile, favorites, account sessions, and verification and reset tokens from the primary application database. Separate newsletter records are not created by registration and must be unsubscribed separately. Completed transaction records may be retained when required for tax, accounting, fraud prevention, or consumer-law obligations and are detached from the deleted account where practical. Limited information may remain for a time in protected backups, infrastructure logs, legal holds, or records that we must retain by law, and is deleted or de-identified under the applicable lifecycle.

8. Your choices and rights

You can update your display name, email address, password, and favorites from your account, or delete the account.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability, to withdraw consent, and to complain to a data-protection authority. Email [email protected] to make a request. We may ask for information reasonably needed to verify your identity and may limit or decline a request where permitted by law.

Pushiro does not make decisions that produce legal or similarly significant effects about readers solely through automated processing.

9. Security and international processing

We protect personal information with encrypted transport, restricted administrative access, password hashing, session controls, CSRF protection, rate limits and audit records. No internet service can guarantee absolute security. If you believe your account or personal information has been compromised, contact us promptly.

Pushiro and its providers may process information in Japan and other countries. Those countries may have privacy laws different from those where you live. Where required, we use an applicable lawful transfer mechanism and require appropriate protection from providers.

10. Contact and changes

The service and accounts are intended only for people aged 18 or older. We do not knowingly create accounts for children.

We may update this policy to reflect changes to the service, law, or our practices. We will post the revised version and effective date here and, when required, provide additional notice or request renewed agreement.

Questions, requests, or complaints may be sent to [email protected].