Last updated: August 2026
Hoshika Works (“we,” “us,” or “our”) operates hoshikaworks.com. This Privacy Policy explains what information we collect, how we use it, and what choices you have. We keep things simple: we’re a small brand and we respect your privacy.
We share information with the services that help us run the business, and with the advertising platforms we buy ads on. We do not sell your personal information for money. We do send some of it to advertising platforms so our ads reach the right people, which California law counts as “sharing” and gives you the right to stop. Section 8 sets out exactly what is sent and how to opt out.
What we send to Meta and TikTok: the pages you viewed, the actions you took (viewing a product, starting checkout, subscribing, buying), the order value, and technical details such as your IP address and browser. Where we know who you are, we also send your email address as a SHA-256 hash. That is a scrambled, one-way fingerprint of the address: it lets Meta match you to an account it already has, but it cannot be turned back into your email by us or by anyone who intercepts it. We never send an advertising platform your plain email address, your name, your postal address, or your payment details.
Each of these services has its own privacy policy governing how they handle your data.
Hoshika Works uses the YouTube Data API v3 as part of an internal scheduling tool that publishes our brand’s marketing videos to our official YouTube channel. This tool is used only by the Hoshika Works team: there is no public sign-up, and no data about anyone other than our own brand account is collected.
YouTube API data is used solely to publish Hoshika Works’ own marketing content and to monitor its performance. We do not collect, store, or process any data about YouTube viewers or any third parties through this integration.
YouTube API data is not shared with, sold to, or transferred to any third parties. It is not used for advertising, analytics profiling, or any purpose other than operating our own channel.
OAuth credentials for YouTube are stored server-side in an encrypted database and are never exposed in client-side code or publicly accessible endpoints.
YouTube API credentials can be revoked at any time through Google’s security settings. We delete all stored tokens immediately when the YouTube connection is disconnected from our admin panel.
Hoshika Works’ use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Our use of the YouTube Data API is also subject to the YouTube API Services Terms of Service. You can learn more about how Google handles your data in Google’s Privacy Policy.
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Order records are kept for accounting and legal compliance. If you unsubscribe from marketing emails, we retain only the data needed to honor that preference. You can request deletion of your data at any time (see Section 7).
The Site uses cookies and similar technologies for:
Most browsers let you control cookies through their settings. Blocking third-party cookies, turning on your browser’s tracking protection, or using an ad blocker stops the advertising cookies above. Blocking essential cookies may affect Site functionality.
Depending on where you live, you may have the following rights regarding your personal information:
To exercise any of these rights, contact us using the details in Section 12.
We do not sell your personal information for money, and we never have. We do share it in the narrower sense California law uses. When the Meta or TikTok pixel reports your visit, or when our server reports a signup or a purchase to Meta with a hashed version of your email, that counts as sharing for cross-context behavioural advertising: letting an ad platform use what you did here to decide what to show you elsewhere. California residents have the right to stop it, and we extend that right to everyone regardless of where you live.
To opt out, email [email protected] with the subject “Do Not Sell or Share” and the email address you use with us. We add that address to a suppression list our servers check before every advertising event they send, so from then on nothing tied to your email, no signup and no purchase, is reported to an advertising platform. We do that within 15 business days and write back to confirm. You do not need an account to ask, and we will not treat you any differently for asking: same prices, same products, same service.
Two honest limits.Opting out stops future sharing; it does not reach back and remove what an advertising platform already received before you asked. For that, use Meta’s and TikTok’s own account settings, which let you see and disconnect the activity businesses have sent them about you. And because our suppression list works from your email address, it cannot recognise you when you are browsing without signing in. The Meta and TikTok pixels still run on this Site unless you stop them on your device.
You can stop those yourself, immediately and without contacting us, by turning on your browser’s tracking protection, blocking third-party cookies, or using an ad blocker. Any of those prevents the advertising pixels from loading on your device. If your browser sends the Global Privacy Control signal (Brave, DuckDuckGo and Firefox can, and other browsers offer it as an extension), we honour it automatically and load no advertising pixels at all for that visit. You do not have to email us for that one.
We use reasonable measures to protect your personal information from unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
The Site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.
If you have questions about this Privacy Policy or want to exercise your data rights, reach us at:
Hoshika Works