Privacy Policy

This Privacy Policy explains how personal information and other data are handled by the Karuzip software (“Karuzip” or the “app”) and the website at karuzip.com (the “website”).

1. The Karuzip app

2. The Karuzip website

Server logs

When you visit the website, the hosting provider’s servers may record standard access-log information, such as your IP address, access date and time, requested page, and browser information. Where these logs are available to the operator, the operator uses them only to investigate service problems and prevent unauthorized access or abuse.

Google Analytics 4

The Japanese and English pages use Google Analytics 4, provided by Google LLC, only after you select “Accept analytics” in that browser. If you do not make a choice, select “Decline,” or enable Do Not Track, the website does not load the Google tag or send browser-side analytics events. After consent, Google Analytics may collect information such as the pages you view, referring source, browser and device type, approximate geographic region, and interactions with download links. Google Analytics uses first-party cookies containing pseudonymous client and session identifiers.

The website does not intentionally send your name, email address, file names, file contents, or other information that directly identifies you to Google Analytics. Google states that Google Analytics 4 uses an IP address at collection time to derive approximate location information and discards the IP address before it is logged or stored. Google Signals and advertising-personalization features are disabled for this website.

Download measurement

After you accept analytics, the website may create a server-signed download-context cookie to distinguish a download initiated from the website from an unverified direct request. This cookie contains pseudonymous Google Analytics client and session identifiers, issuance and expiration times, and a one-way digest of the browser’s User-Agent value.

The cookie is valid for five minutes, is marked HttpOnly, Secure and SameSite=Lax, and is sent only to the /download path. JavaScript cannot read it. It does not contain your name, email address, or file information.

A request with a valid signed cookie may be recorded in Google Analytics as a download request attributed to a website session. A request without a valid signature may still be counted in aggregated form as an unattributed download request (download_request_unattributed). This measurement records an installer request, not completion of the download or installation. Before consent, after you decline, or while Do Not Track is active, the page links directly to the installer with ?direct=1 and does not use the measurement redirect.

Language preference

When you explicitly choose Japanese or English, the website stores that choice in your browser’s local storage (localStorage) so that it can show your preferred language on later visits. The stored value is limited to the selected language code.

The language-switching feature does not send that stored value to the website server or to Google. localStorage values do not expire automatically; you can remove the preference by clearing the website’s stored data or by selecting another language.

Fonts

The website’s fonts are hosted on karuzip.com. The website does not contact Google Fonts to display them.

3. Your analytics choices

Your analytics choice is stored in this browser’s localStorage. It does not expire automatically. You can change it below at any time. Declining analytics removes Google Analytics cookies that are readable by the website, switches installer links back to the direct ?direct=1 path immediately, and prevents new browser-side analytics events. Previously transmitted analytics data is not deleted by changing this setting.

Because the signed download-context cookie is HttpOnly, JavaScript cannot delete it directly. When you decline, the site sends a best-effort same-origin request asking the server to expire that cookie. If a network or script failure prevents the request, an already-issued cookie may remain until its five-minute lifetime ends. If your browser sends a Do Not Track value of “1,” Do Not Track overrides a saved consent choice: the website does not load Google Analytics, does not show the consent banner, does not initialize the signed download-context cookie, and does not send download-measurement events.

Analytics choices do not affect access to the website or installer. Standard hosting logs may still be created when pages or files are requested, and declining analytics does not necessarily stop aggregated server-side download statistics that are not tied to a website session. For more information about Google’s handling of data, see the Google Privacy Policy.

4. Contacting us

If you contact us by email or through GitHub Issues, the operator uses the information you provide only to review and respond to your inquiry. Information posted in a public GitHub Issue is publicly visible and is also handled under GitHub’s privacy policies.

Questions about this Privacy Policy may be sent to support@karuzip.com or submitted through GitHub Issues.

5. Changes to this policy

This Privacy Policy may be revised without prior notice when necessary. The latest version will be published on this website.