Skip to main content

Privacy Policy

Last updated: October 23, 2026

1. Overview

The website https://www.vr-avatar.net (the “Site”), operated by Boo Boo Bougainvillea (the “Brand”), introduces VR avatars and guides visitors to BOOTH, where they are sold. The Site does not sell products, process payments, or offer member registration. This Privacy Policy explains how the Site handles information about its users.

2. Information We Collect

2.1 Information Collected Automatically

To improve the Site, we measure how it is used with the following services:

  • Google Analytics 4: pages viewed (URL, page title, and referrer); actions on the Site (buttons pressed, images enlarged, sections read, page scrolling, FAQ items opened, avatars shown or selected in the product list, and clicks on links to external sites such as BOOTH and try-on worlds); and page speed (time taken to display and its breakdown, the location of the largest image or element shown, responsiveness to interactions, and layout shifts during display)
  • Google Ads (conversion measurement): that a link to a BOOTH product page was pressed (what we measure with Google Analytics above is linked to Google Ads; the Site does not send data directly to Google Ads. If you arrive from Google Ads, we add parameters indicating that the visit came from an ad (such as utm_source; they do not include the ad click ID) to links to BOOTH, and use BOOTH's own analytics to count whether the visit led to a purchase)
  • Storing the ad click ID: if you arrive from Google Ads, Google's tag stores the ad click ID contained in the URL in a cookie on the Site. It may also be stored in browser storage (3.1 and 3.4)

We do not use Vercel Web Analytics or Vercel Speed Insights. Information that directly identifies individuals, such as names and email addresses, is not included in our measurements.

In our Google Analytics settings, Google signals data collection and user-provided data collection are turned off (since October 6, 2026).

2.2 Technical Information

The following is information that Google Analytics obtains when measuring:

  • IP address (it reaches Google during communication. Google states that Google Analytics 4 does not log or store IP addresses. Its handling is governed by Google's policies)
  • Browser language settings
  • Browser type and version
  • Operating system
  • Screen resolution
  • Referring site

2.3 Where Information Is Sent

For measurement, your browser communicates with the following domains (all are operated by Google; we confirmed this by browsing the Site on October 10, 2026):

  • www.googletagmanager.com: loading the measurement script (Google tag) and sending data about how the Google tag works
  • analytics.google.com: sending measurement data to Google Analytics
  • stats.g.doubleclick.net, www.google.co.jp: communication made by Google's tag on the first page you open. It still takes place after Google signals data collection was turned off

Depending on Google's response, the communication may be forwarded to other domains operated by Google.

2.4 Information Sent Through Inquiries

Brand inquiries are accepted through a form on an external service (Adobe Portfolio). What you enter in the form (your name, email address, and message) reaches the Brand through that service. The Site's server does not receive the contents of the form. Inquiries about avatars are accepted through BOOTH messages (which you can send from our BOOTH shop page), and those exchanges take place within the BOOTH service.

3. Use of Cookies

The only cookie the Site's server sets is the one that remembers that you closed the language notice (3.1). The other cookies used on the Site are set by Google's tags for analytics and for measuring advertising results. Cookies are small text files that a website stores in your browser.

3.1 Types of Cookies Used

  • Analytics cookies (named vr_avatar_ga and those starting with vr_avatar_ga_, stored on the Site's domain): used for analytics by Google Analytics. They expire 180 days after your last visit.
  • Ad click cookies (named vr_avatar_aw, vr_avatar_ag, vr_avatar_gb, and so on, stored on the Site's domain): only if you arrive from Google Ads, Google's tag stores the ad click ID contained in the URL. They are used to measure Google Ads results. They expire after 90 days, the Google tag's default.
  • Cookies on Google's domains: Google's tag communicates with Google's advertising domains (stats.g.doubleclick.net and www.google.co.jp) (2.3). Cookies on these domains may be read or written by Google. The Site does not read these cookies. Their expiration is governed by Google's policies.
  • Language notice cookie (named locale_banner_dismissed, stored on the Site's domain by the Site's server): when you close the language notice shown when your browser's language differs from the page's language (such as “This site is available in English”), it remembers that you closed it. Its value is only 1, and it is not used for measurement. It expires after 1 year.

3.2 About Personalized Ads

The Site's tags send measurement data with settings under which it is not used for Google signals or ad personalization. Google signals data collection is also turned off in our Google Analytics settings (2.1). However, even after turning it off, communication with stats.g.doubleclick.net and www.google.co.jp still takes place (2.3), and how that data is handled is governed by Google's policies. Ad click cookies are used to measure visits and results from ads (conversion measurement). You can manage ad personalization by Google in Google Ads Settings (opens in a new tab).

3.3 Managing Cookies

You can disable or delete cookies in your browser settings, but some features of the Site may not work properly. You can also turn off measurement by Google Analytics with the Google Analytics Opt-out Browser Add-on (opens in a new tab). Browser storage (3.4) is cleared when you delete the site data in your browser.

3.4 Storage Other Than Cookies

The following items are stored in browser storage (localStorage and sessionStorage), not in cookies. Items stored by the Site's own code (theme-mode and bbb_ad_session) are not sent to the server.

  • theme-mode (localStorage): your display brightness setting (light or dark). It is saved when you press the toggle button and remains until you delete the site data in your browser.
  • bbb_ad_session (sessionStorage): if you arrive from Google Ads, a marker of whether the visit came from an ad (it does not include the ad click ID or any value that identifies you) is stored in your browser's sessionStorage, not in a cookie, until you close the tab.
  • _gcl_ls (localStorage): if you arrive from Google Ads, Google's tag may store the ad click ID contained in the URL. It is used to measure Google Ads results. The value expires after 90 days, and the item remains until you delete the site data in your browser.

4. How We Use Information

We use the collected information for the following purposes:

  • Analyzing and improving how the website is used
  • Optimizing page speed and performance
  • Improving the user experience
  • Identifying and resolving technical problems
  • Creating statistics (in a form that does not identify individuals)
  • Measuring the effectiveness of ads (visits from ads and conversion measurement)
  • Responding to inquiries (information sent through the contact form)

5. Sharing Information with Third Parties

The Site uses services from the following companies, and information is sent to each service:

  • Google LLC: provides Google Analytics 4. Measured data is sent to Google. Google Ads imports the results measured by Google Analytics
    Google Privacy Policy (opens in a new tab)
  • Vercel Inc.: provides hosting (delivery of the Site). As part of delivery, access records remain at Vercel. We also record security violation reports sent by browsers (such as the URL of the page where the violation occurred and the URL of the blocked resource) in Vercel's logs
    Vercel Privacy Policy (opens in a new tab)
  • pixiv Inc.: operates BOOTH. Only if you arrive from Google Ads, we pass parameters indicating “the visit came from Google Ads” in the URLs of links to BOOTH (we do not pass the ad click ID or any value that identifies you). When you press a link to BOOTH, BOOTH learns that you came from the Site (the Site's domain)
    pixiv Inc. Privacy Policy (opens in a new tab)
  • Adobe (Adobe Portfolio): provides the contact form. What you enter in the form reaches the Brand through this service
    Adobe Privacy Policy (opens in a new tab)

How information is handled at other linked sites (such as VRChat and X) is governed by each site's own policies.

6. Rights of EU Residents

EU residents have the following rights:

  • Right of access: to request information about the processing of your personal data
  • Right to rectification: to request correction of inaccurate personal data
  • Right to erasure: to request deletion of your personal data (the right to be forgotten)
  • Right to restriction of processing: to request that processing of your personal data be restricted
  • Right to data portability: to request transfer of your personal data
  • Right to object: to object to the processing of your personal data

Requests are accepted through the contact page below. Requests to disclose, correct, or delete personal information are accepted through the same contact point.

7. Data Retention

  • Google Analytics 4: 14 months (the Google Analytics data retention setting, set on October 10, 2026). According to Google, this period applies to user-level and event-level data, not to the numbers in aggregated reports
  • Cookies: as described in 3.1 (analytics cookies 180 days after your last visit, ad click cookies 90 days, the language notice cookie 1 year; cookies on Google's domains for the period set by Google)
  • Browser storage: as described in 3.4 (localStorage until you delete the site data in your browser; the _gcl_ls value expires after 90 days; sessionStorage until you close the tab)
  • Access records: the Site does not store its own access logs. Records kept by Vercel, which delivers the Site (access records and security violation reports), are kept for the period set by Vercel
  • Inquiry contents: inquiries that reach the Brand are kept for as long as needed to respond to them. Records on the form service (Adobe Portfolio) are kept for the period set by that service

8. Security

The Site takes the following measures:

  • Encryption of communication with SSL/TLS (access over http is redirected to https)
  • Settings that restrict where scripts and other resources can be loaded from (Content Security Policy)
  • A design that does not include information that directly identifies individuals, such as names and email addresses, in measurements (2.1)

9. Changes to This Privacy Policy

We may change this Privacy Policy in response to changes in laws or in our services. When we do, we will update the contents of this page and the last updated date.

10. Contact

Questions about this Privacy Policy and inquiries about the handling of personal information are accepted through the form on our contact page. If you have purchased an avatar, you can also contact us through BOOTH messages:

Boo Boo Bougainvillea
Contact: Contact page

The Japanese version prevails.