Information processed when you visit
To deliver the site, keep it secure and investigate outages, information such as your IP address, device and browser type, the URLs you view, access date and time, and referrer may be recorded in the hosting provider's logs.
Analytics
This site uses Cloudflare Web Analytics to understand traffic and page performance. Cloudflare Web Analytics does not use cookies; it aggregates information about page views and performance.
On article pages, how articles are read (how far, for how long, and whether the visit came from within the site or outside) and, across the site, where article links were clicked are aggregated only as counts per article per day. Your “Recently read” and “Continue reading” information is stored only in your browser and is never sent. No cookies or personally identifying information are used, and the referring URL itself is not sent.
On pages other than articles (home, lists, the map, apps, the Pokémon tools, PIGPON pages and so on), the number of times a page is opened is also counted, only as daily counts per page type, language, rough device type (phone, tablet, PC) and route of arrival (search, social media, within the site and so on), on the operator's own server (mendoi-apps.com). PIGPON pages (pigpon.mendoi-apps.com) send the same counts to mendoi-apps.com. Cookies, device identifiers, IP addresses and detailed browser information are not stored. You can stop this by using the link in the next paragraph or the browser's Global Privacy Control (GPC) setting.
Some article pages load the Google Analytics 4 tag. Consent defaults to denied (analytics_storage: denied), and no cookie-based measurement is performed. Opening this link stops all measurement on this device (resume).
New article emails
New article notification emails are sent only to people who consented in the sign-up form and then opened the link in the confirmation email they received. Only your email address, language, and sign-up and unsubscribe dates are stored, and you can unsubscribe at any time with one click from the link in any email. Once you unsubscribe, no more emails are sent. The sign-up form is on the contact page.
Advertising and cookies
This site uses Adsterra banner ads and Native Banner. To deliver ads and detect fraudulent access, Adsterra and its ad partners may handle cookies, IP addresses, device and browser information, the URLs you view, and similar data. For details, please see Adsterra's privacy policy.
This site is preparing for, or undergoing review for, ad placement through Google AdSense. The code required for ownership verification is installed, but no AdSense ad units are shown in articles before approval.
If ads begin, third-party vendors including Google may use cookies to serve ads based on your past visits. You can manage ad settings through Google's Ad Settings or your browser settings.
Affiliate links and cookies
Some articles contain affiliate links to shops or services. When you click one, the affiliate network or the merchant may use cookies or similar technologies to record that the purchase or sign-up came through this site.
After an article has displayed, Japanese articles load ValueCommerce LinkSwitch and articles in the other languages load the Awin MasterTag. These scripts turn links to shops into affiliate links and contact the affiliate network's servers when they load. Cookies used to record a purchase are set mainly by the affiliate network or the merchant when you click a link. The scripts are not loaded if your browser sends GPC or if you have turned off ads. How information is handled after that is governed by the privacy policies of the merchant and the affiliate network.
Pokémon Champions simulator: information sent to other companies
The Pokémon Champions battle simulator (/en/pokemon-champions-rank-lab/ and its other language versions) shows Adsterra banner ads below the team and move results. When an ad is shown, your browser may send your IP address, device and browser information, the page URL and cookies to Adsterra and its ad partners (such as www.highrevenueformat.com). See the Adsterra privacy policy. If your browser sends GPC or you have turned ads off, no ad is loaded.
The page's "Ad" card has affiliate links to Amazon search results (Amazon.co.jp on the Japanese page, Amazon.com on the English page). When you follow one to Amazon, Amazon may use cookies to record that a purchase came through this site. Opening the page alone sends nothing to Amazon.
How often the ad slots and the card are shown and clicked is counted on this site's own server only as totals per page language (no page URL and nothing that identifies you; nothing is sent if you use GPC or have turned measurement off).
Contact information
The topic, target page, subject, message and optional reply address sent through the form are used to reply, make corrections, investigate bugs, verify rights claims and respond to safety issues. Their contents are never made public.
Anonymous form submissions are kept for up to 14 days and deleted after review or when the retention period ends. Please don't send passwords, home addresses, phone numbers, payment details or confidential information about your employer.
Sharing with third parties
Personal information received through inquiries is never sold or provided to third parties, except where required by law, where processing is entrusted to contractors necessary to run the site, or with the person's consent.
PIGPON (photo caption game among friends)
The Japanese version prevails. This section translates the PIGPON part of the Japanese privacy policy. If they differ, the Japanese version applies.
PIGPON has no accounts. You are identified by sign-in information the server issues for each device (a cookie that page scripts cannot read); the server keeps only a one-way hash (SHA-256) of it, a coarse device type (for example “iPhone · Safari”) and when it was used, so you can list your devices and sign each one out in the settings. Sign-in information unused for 180 days expires and is deleted. Codes for moving to another device (10 minutes) and recovery codes are also stored only as hashes and deleted when used or replaced. The server keeps only what the game needs, and only for fixed periods. The rules of use are in the PIGPON Terms.
What we store and why: your nickname, your statement that you are 18 or older, and the terms version and time you agreed (to join, display and prove consent); the group name and settings (to run the daily drop); the one photo you submit, resized on your device with location and other EXIF data removed (removed again on the server), and its “OK for share cards” setting (to show it to the group and make share cards); captions, results, PIGPON counts and the days you took part; the list of groups your device belongs to (for the inbox); records of having been in the same group (to show “people you know” only on your own screen; you can turn this off); in-app invitations; if you allow notifications, the push endpoint issued by your browser's push service and send counts (no encryption keys, no message text); counts per IP address or device hash (to prevent abuse and stay within free limits); and anonymous usage counts. Who pressed “LOL” is never shown to anyone and, apart from the totals, is not kept after the round closes. We do not collect contacts, address books, location, date of birth or the contents of your photo folders. Member icons (only if you set one): if you choose “Use my LINE icon” or “Use my Discord icon”, we fetch only the profile picture, once and in a small size, within what you allow on that service's login screen (LINE: profile; Discord: basic user information; no email address is requested), remove its metadata and store it. With “Choose a photo”, we receive only one image made smaller on your device. We do not store LINE or Discord user IDs, display names or login keys (tokens), and the key is revoked right after the picture is fetched. The icon is used only to show you to members of that group who are 18 or older. An image showing a face can be personal information.
Email notices (optional): only if you enter an email address in settings, we store it with your language and the confirmation state and time, and send notices when a drop starts and when results are out (2 a day at most; never photos, captions or nicknames) through Resend, Inc. (USA). Nothing is sent until you click the link in the confirmation email. You can stop at any time in settings or from the link in each email, and the address is deleted at once. Unconfirmed addresses are deleted after 7 days, and the address of a device that has left every group at the next scheduled run. Only if you tick "Also get the Mendoi-chan blog newsletter" do we pass the address, after confirmation, to this site's newsletter sign-up, which sends its own confirmation email (for visitors from the EEA, the UK and Switzerland the box starts unticked).
“Everyone's answers” (public rooms): a caption that won a public-room round (3 or more people pressed “LOL”) may appear in the Operator's official social media posts (Bluesky, Threads, Facebook, Instagram and similar) and promotional videos, without any nickname, room name or device information, but only if the “OK to feature my answers” setting (on at first) was on when it was written. With the caption we keep only that on/off choice, the photo (one of our free photos) and the laugh count — no device hash. Captions that were hidden or reported, or are less than 24 hours old, are never used. These records are deleted after 30 days, like captions. What is posted is sent to that social media company and published under its policies. You can ask for a post to be deleted through the contact form.
How long we keep it: submitted photos are deleted 3 days after the result (at once if they got no caption, were taken down, or their owner left or was removed; after 1 day if storage runs short); captions, results and counts 30 days after the round started; groups nobody opened for 30 days, with all their data; participation days after 35 days; push endpoints after 30 days without opening any group (or at once if the push service reports them invalid); “people you know” records 30 days after leaving; in-app invitations after 7 days; consent records when you leave or the group is deleted; rate-limit counts after about 2 days; anonymous counts after 120 days; feedback after up to 180 days; member icons when you remove yours, when you leave or are removed from the group, or when the group is deleted; records of an icon link in progress after 10 minutes. Exception: a photo that may be illegal (such as child sexual abuse material) may be quarantined, where no one can view it, for up to 90 days so it can be reported to the authorities and an investigation can be assisted.
Third parties and processors abroad: we do not sell or give PIGPON data to third parties, except where the law requires it. Processing is entrusted to Cloudflare, Inc. (USA: servers, database, delivery, sending notifications, bot protection with Turnstile; data may be stored in its data centers in the USA and other countries) and Resend, Inc. (USA: emailing feedback to the operator). If you allow notifications, your browser vendor's push service delivers them: Google LLC (Chrome and others), Apple Inc. (Safari), Mozilla Corporation (Firefox) or Microsoft Corporation (Edge), all in the USA. We send them only the endpoint, an expiry time and a signature identifying the sender — no text, group name, nickname or photo. The USA has no comprehensive federal privacy law like Japan's Act on the Protection of Personal Information (there are state and sector laws); see the Personal Information Protection Commission's survey of foreign systems (Japanese).
Secrecy of communications: photos, captions and group names inside a group are communications between users. Under Japan's Telecommunications Business Act we protect their secrecy and do not view them as part of our work. We look at content only within the consent of a user who reports it or asks for its removal, or where the law allows it (for example, a warrant). Abuse limits are decided by programs from counts, and our admin screens do not show photos or captions. Server logs are kept to the minimum needed for security and troubleshooting and are deleted on schedule.
If data leaks: we first stop the damage (pausing all or part of PIGPON if needed) and investigate. Where Article 26 of the Act on the Protection of Personal Information applies (sensitive data such as sexual images, a possible wrongful purpose, more than 1,000 people, and so on), we report promptly (roughly within 3 to 5 days) and in detail within 30 days (60 days for a wrongful purpose) to the Personal Information Protection Commission, and tell you on this page and in PIGPON, because PIGPON holds no contact details. A leak of the secrecy of communications is reported promptly to the Minister of Internal Affairs and Communications, with a written report within 30 days (Telecommunications Business Act, Article 28).
Requests: because there are no accounts, we may confirm it is you through actions on the device concerned. Send requests through the contact form or PIGPON's “Report a bug / request”. To remove something at once, take down your photo, hide your caption or leave the group.
PIGPON: information sent to other companies
The Japanese version prevails. This is a translation of the Japanese notice under Article 27-12 of Japan's Telecommunications Business Act.
When you open PIGPON pages, your device sends the following information to other companies (this list does not include our own server, mendoi-apps.com). On the game screen (/pigpon/play/), only Google Fonts, Cloudflare Web Analytics, Wikimedia Commons, Cloudflare Turnstile, push services, the LINE Login or Discord sign-in screen (when you tap to link an icon), Adsterra ads (when a screen without photos opens; not for PIGPON+ subscribers, in the EEA, the UK or Switzerland, or when your browser sends GPC), Ko-fi (only when you tap “☕ Support us”) and Amazon (only when you tap the product card) are contacted.
Google LLC (Google Fonts) — IP address, browser and device type, the fonts and characters requested, and the site's domain. Purpose: to show text correctly (the body font; Anton and Zen Antique for the logo and results; per-language display fonts such as Black Han Sans, Noto Sans SC/TC and Kanit). When: every PIGPON page, including the game screen.
Cloudflare, Inc. (Cloudflare Web Analytics) — page URL, referrer, load time, browser and device type, IP address. Purpose: counting views and page speed; no cookies. When: every PIGPON page, including the game screen. To stop: open this link.
Google LLC (Google Analytics 4) — page URL, referrer, time, screen size, browser and device type, IP address, and on-page activity such as how far you scrolled. Purpose: usage statistics. Cookie-based measurement is off by default. When: only on PIGPON's terms of use (/pigpon/terms/ and its language versions) and credits (/pigpon/credits/) pages — not on the game screen (/pigpon/play/), the open-room lobby (/pigpon/play/lobby/) or the offline screen. To stop analytics: the same link as above.
Wikimedia Foundation, Inc. (Wikimedia Commons) — IP address, browser and device type, and the image URL (the referring page is not sent). Purpose: showing free photos and putting them on share cards. When: a free photo is shown.
Cloudflare, Inc. (Turnstile) — IP address, browser and device type, and how the page is being operated. Purpose: blocking bots on the feedback form. When: you open “Report a bug / request”.
Push services (Google LLC, Apple Inc., Mozilla Corporation or Microsoft Corporation — your browser's vendor) — a per-device number issued by your browser for notifications, IP address, browser type and PIGPON's public key. Purpose: delivering PIGPON notifications. When: you allow notifications, and whenever one arrives. To stop: turn notifications off in PIGPON's settings or in the browser.
LY Corporation (LINE Login) / Discord Inc. (Discord) — IP address, browser and device type, PIGPON's app identifier and the return URL (when that sign-in screen opens). You enter and approve your LINE or Discord account details on each company's own screen. Purpose: making your LINE or Discord profile picture your PIGPON icon when you choose to. When: only when you tap “Use my LINE icon” or “Use my Discord icon” — not when icons are shown (images are served from our own server). To stop: don't tap them; you can remove an icon you set at any time.
AD MARKET LIMITED (Cyprus) / ADMEDIA LLC FZ (United Arab Emirates) (Adsterra ads) — IP address, browser and device type, screen size, the page showing the ad (pigpon.mendoi-apps.com), and identifiers Adsterra may store in its own cookies or similar storage. Purpose: showing banner ads, counting their views and clicks, and preventing ad fraud. When: you open a PIGPON app screen without photos (the home list of groups, a group's lobby, settings) on pigpon.mendoi-apps.com. The ad loads inside an isolated frame served by our own server (pigpon.mendoi-apps.com/api/pegppon/ad/…), which loads Adsterra's script (www.highrevenueformat.com) and the ad servers it calls. Ads are never loaded on the screens for picking a photo, writing a caption, judging, the reveal, results with photos or share cards, and not for PIGPON+ subscribers, readers in the European Economic Area (EEA), the UK or Switzerland or whose country is unknown, when your browser sends Global Privacy Control (GPC), or when ads are turned off on this device. To stop: subscribe to PIGPON+ or turn on GPC in your browser.
Ko-fi Labs Limited (UK) (Ko-fi support) — IP address, browser and device type, and the referrer (pigpon.mendoi-apps.com). Any amount and payment details are entered by you on Ko-fi's own screen. Purpose: opening PIGPON's support page when you choose to. When: only when you tap “☕ Support us” after the results or in settings and Ko-fi (ko-fi.com) opens in a new tab. Nothing is sent before you tap (the button is not shown at all while no support page is set). To stop: don't tap it.
Amazon.com, Inc. (USA, amazon.com) / Amazon Japan G.K. (amazon.co.jp) (Amazon Associates) — IP address, browser and device type, the referrer (pigpon.mendoi-apps.com), the search words in the link and the Associates tag showing the visit came from this site. Amazon may record in its own cookies whether a purchase came through this link. Purpose: recommending products that fit the game (party games) and earning a referral fee. When: only when you tap the product card labelled as an ad under the results board (the tally without photos) and Amazon opens in a new tab. Nothing is sent before you tap. The card is shown only with the Japanese screen in Japan (amazon.co.jp) and the English screen in the United States (amazon.com). To stop: don't tap it.
YouTube API Services
PIGPON uses YouTube API Services. They are used only to upload short promotional clips of PIGPON, made by the operator, to the operator's own YouTube channel. The only permission granted by Google is uploading videos (youtube.upload).
Use of YouTube API Services is subject to the YouTube Terms of Service. How Google handles information is explained in the Google Privacy Policy.
Neither this site nor PIGPON asks visitors to sign in to YouTube or Google. We do not access, collect, store, use or share any visitor's YouTube or Google account information (YouTube user data), and we do not store or read cookies or other information on your device for YouTube API Services. The only things stored are the authorization key for uploading to the operator's own account (a refresh token, kept encrypted on the operator's server) and the IDs of the videos uploaded.
Revoking access and deletion: this authorization can be revoked at any time on Google's security settings page (https://myaccount.google.com/permissions). When it is revoked, or on request, we promptly delete the stored authorization key and any information obtained through YouTube API Services. Questions, complaints or deletion requests about this can be sent through the contact form.
Requests about your information
To ask for access to, correction of or deletion of personal information you sent, please use the contact form. The operator (Mendoi-chan) is responsible for how personal information is handled on this site.
External links and changes
How information is handled on external sites is governed by the policies of those sites. If the services used or the way information is handled changes, this page will be updated.
Last updated: October 9, 2026