Privacy Policy
Last updated: 2026-11-07
1. Principles
The VDLGo extension (the “Product”) is designed not to send video data or the URLs you visit to our servers. Video processing happens in your browser. How the extension works and how this website handles information (from section 4) are separate matters.
2. Information handled by the extension
- License activation (paid plans): license key, a hashed device identifier, extension version.
- Purchases: handled by the payment processor Stripe. We do not hold card numbers.
- Failure reports (optional): sent only when you choose. URLs are masked by default and you can review the content first.
- Usage counts (optional): off by default; if on, anonymous feature counts without URLs.
- The extension does not use Google Analytics or other analytics or advertising services.
3. Stored on your device
Settings, free-plan usage counts and the detection list are kept in your browser.
4. This website
- Until you opt in, the Google tag is not loaded and no analytics or advertising cookies are set. Only if you consent is information sent as described in “Use of Google services” below.
- Only on the Contact page (/contact/), a strictly necessary cookie named “ft” is used to prevent abusive submissions. It holds only a signed timestamp and a unique ID, no personal data. It lasts at most 2 hours and is set HttpOnly, Secure and SameSite=Strict. It is treated as a necessary cookie that does not need consent.
- Access logs: the site delivery service (Amazon CloudFront) records access logs: IP address, date and time, requested URL, HTTP status, User-Agent and Referer. Cookie values are not recorded.
- Purposes: investigating faults, countering unauthorized access, and understanding site usage.
- Retention: 30 days, then deleted automatically.
5. Use of Google services (only with your consent)
Services: Google Tag Manager (GTM, which manages the tags enabled in it, such as Google Analytics and Google Ads). Provided by Google LLC and affiliates.
- Information collected (by Google tags; with GTM, by the tags enabled in the container): cookie and other identifiers, the URL of the page viewed (without the query string) and its title, the referrer, device and browser information (OS, browser, screen size, language and so on), approximate location, and ad click identifiers and conversion information for ad measurement.
- IP address: it reaches Google as part of the connection. Google states that GA4 does not log or store individual IP addresses.
- Purposes: analyzing site usage to improve the site, and measuring ad effectiveness.
- Consent and withdrawal: the first-visit banner offers “Accept” and “Reject”, and settings by purpose (analytics / advertising). If you decline, every page and the contact form still work. You can change or withdraw your choice any time from “Cookie settings” in the footer. Withdrawing stops further sending and deletes the cookies this site can delete (data already sent to Google is handled under Google's policies).
- Storing your choice: kept in your browser's localStorage (key vdlgo_consent) for up to 365 days, after which we ask again.
- Data minimization: Google tag settings (Google signals, URL handling and so on) depend on the GTM container configuration. Nothing is sent for a purpose you did not consent to.
- Transfer abroad: Google may process information on servers outside Japan.
- Google's information: Google Privacy Policy / How Google uses information from sites that use its services / Google Analytics opt-out add-on / Ads Settings
6. Cookies and similar storage
In addition to the necessary cookie “ft” above (Contact page, at most 2 hours), the following are used.
| Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| vdlgo_consent (localStorage) | This site | Remembers your consent choice | Up to 365 days | Not needed (necessary) |
| _ga | Distinguishes users (analytics) | 2 years (Google default, configurable) | Analytics | |
| _ga_ | Keeps session state (analytics) | 2 years (Google default, configurable) | Analytics | |
| Google Ads cookies | Ad measurement and optimization | As described by Google | Advertising | |
| Cookies of other tags enabled in GTM | Each tag's provider | Depends on the container | As described by each tag provider | Depends on the container |
7. Information sent to external parties
- Recipient: Google LLC (USA) and its group companies. If third-party tags are added to the GTM container, those tag providers also become recipients.
- Information sent: as listed under “Use of Google services”.
- Purposes: usage analysis, site improvement and ad measurement.
- Sending happens only after your opt-in consent. How to refuse or withdraw is described above.
In consideration of the Japanese rules on external transmission of user information, the recipients, the information sent and the purposes are described above. Sending takes place only after you opt in.
8. Contact form
- Items collected: name, email address, category and message.
- Purposes: replying to your inquiry and handling disclosure requests under the Commercial Transactions Act.
- The system does not store what you submit. It is sent as an email notification to info@vdlgo.com and kept in the receiving mailbox (Google Workspace). Emails are kept for as long as needed to handle your inquiry.
9. Abuse prevention
To prevent repeated submissions, submissions from the same IP address (IPv6 per /64) are limited to 3 per 10 minutes and 10 per day. For this limit, only a keyed hash (HMAC-SHA256) of the IP address and a submission count are stored temporarily on AWS (DynamoDB). The original IP address is not stored. 10-minute records are deleted after about 20 minutes and daily records after about 2 days (actual deletion can lag by up to about 48 hours). The hash is not used for any other purpose.
10. Personal data of users worldwide (GDPR and similar)
Purchasers and users from around the world are welcome. We are a business based in Japan and have no establishment in the EU or the UK. We process information using services of businesses abroad, such as Google, Amazon Web Services and Stripe. For rights granted by the laws of your country or region, please make your request through the “Access and deletion” contact point.
11. Service providers
- Amazon Web Services: hosting, delivery, access logs, email sending and the temporary storage for rate limiting.
- Google Workspace: receiving contact emails.
- Google LLC: Google Tag Manager, Google Analytics, Google Ads and other Google tags (only with your consent).
- These services may process or store data on facilities outside Japan.
12. Sharing
We do not share personal data except where required by law. The providers above are used only as needed to run the site and take payments.
13. Access and deletion
Contact us through the form or the email address on the Contact page to request access or deletion.
14. Changes
Changes will be announced on this page.
15. Operator
Operator (trade name): セラ (Sera); person in charge: Satoshi Nakayama
Contact: info@vdlgo.com