Privacy policy

宮崎 由茉, a sole proprietor in Tokyo, Japan, trading as Murasaki. Questions and requests go to support@murasaki.ai.

• Your email address, and a password that our authentication provider stores as a hash. The password itself stays invisible to us.
• Your purchases: what you bought, the amount, the currency, the language you were reading in, and the identifiers Stripe gives a payment so a receipt can be matched to an order.
• Your progress: which lessons you opened and finished, so the platform can show you where you are and issue a certificate when a course is complete.
• Your conversations with the AI companion, if you subscribe, so a thread keeps a history you can read back.
• What you did on this site while you were here: the pages you opened, the courses you put in the cart, and whether you reached a payment. This is the advertising measurement described below, and Meta receives it.

Card numbers are typed into Stripe’s own payment form and go directly to Stripe. They never touch our servers, our database or our logs. Through the Stripe dashboard we can see the card brand and the last four digits, which is what lets us find your payment when you write in.

Signing in sets a session cookie. It keeps you logged in and is how the site knows which courses sit on your account.

Your cart lives in your own browser’s local storage until you check out or empty it. It stays on your device.

The Meta pixel described below sets cookies of its own, in your browser, so that a visit and a purchase that happens later read as the same person. Apart from those, the session cookie and the cart are everything this site stores.

We advertise on Facebook and Instagram, and this site carries the Meta pixel so we can tell which of those ads lead to a sale. It runs on this storefront only. The members platform at school.murasaki.ai carries no advertising tag at all.

The pixel tells Meta which pages you opened here, when you put a course in the cart, when you started a payment, and when a purchase completed, along with the amount and the currency. Meta also receives the address of the page, your IP address and your browser’s user agent, which is what any request to any server carries.

When a purchase completes, our server sends Meta a second copy of that same event, so one sale is counted once even if your browser blocked the first copy. That copy carries the amount, the currency, what was bought, and your email address turned into a SHA256 hash. The hash goes one way: Meta can compare it against a hash of an address it already holds, and it cannot read your address back out of it. The address itself is never sent.

To stop it: an ad blocker, a browser’s tracking protection, or a setting that blocks third party requests all keep the pixel from loading, and the site works exactly the same without it. What Meta does with what it already holds is set in your own Meta account, under your ad preferences, where you can also switch off the activity businesses share with Meta. For the data we hold ourselves, the section above still applies.

Stripe takes the payments and holds the payment record. Our database and our authentication run on Supabase. The pages themselves are served by our hosting platform. The AI companion sends your question, and the lesson text it answers from, to the AI provider that runs the model.

Meta receives what the advertising measurement section describes, and it receives it for advertising, which is the whole reason it is there. None of the other providers above do, and we sell your data to nobody.

Account data stays while your account exists. Ask us to delete it and we delete it.

Order records outlive the account, and they have to. A payment, its receipt and the tax record behind it are kept for the period Japanese accounting rules require, so a deleted account leaves behind the order row and the email address it was bought on. The rest goes.

Write to support@murasaki.ai for a copy of what we hold, a correction to something wrong in it, or a deletion. Tell us which email address you bought on so we can find the right records.

The providers above operate servers outside Japan, so your data is stored and processed abroad. Sending us your details means you accept that transfer.

This is sold to adults. If you are under 18, buy with a parent or guardian handling the payment.

This page changes when what we collect changes, and the date at the top moves with it.

support@murasaki.ai