Privacy Policy

If you accept cookies on the consent banner, the site loads Google Analytics 4 (GA4), which collects:

• Pages you visit and how long you stay on them.
• Approximate location (country / region level) derived from IP.
• Device and browser information (type, version, screen size, language).
• Referring URL (the page that linked you here, if any) and search terms if you arrived via a search engine.
• Specific interactions we measure — such as when you reach your daily practice goal, sign in for cloud sync, or use the donation and contact options. We use these to understand engagement and whether the app’s features are useful, not to profile individuals.

GA4 assigns each visitor a pseudonymous identifier stored in a cookie. This identifier is not tied to your name or email and is not used to contact you.

If you decline cookies, Google’s Consent Mode v2 sends cookieless pings that contribute to aggregate statistics without identifying you. No cookies are set and no persistent identifier is stored in your browser.

The contact form on /contact does not submit data to this site. It opens your email app with a pre-filled message; the message only leaves your device if you press send in your email client. The site itself never sees the contents.

You can optionally sign in with Google or Apple to back up your practice data (settings, stats, and mistake list) to the cloud. This is entirely opt-in — the app works fully offline without signing in.

If you sign in, your practice data is stored in Cloudflare KV, a key-value store operated by Cloudflare, Inc. Your data is keyed to your provider account identifier (a pseudonymous ID from Google or Apple — not your email address). Cloudflare may transfer data to servers in multiple regions. Their privacy policy: cloudflare.com/privacypolicy.

Authentication tokens (from Google or Apple) are verified server-side but not stored. The only data stored in the cloud is your practice data blob (settings, stats, and mistakes).

You can delete your cloud data at any time from the settings page (“Sign out and delete my data”). This permanently removes your data from Cloudflare KV. See our terms of service for the full usage terms.

Analytics data is processed by Google LLC as the provider of Google Analytics and Google Ads. Google acts as a data processor on our behalf and may transfer data to servers in the United States. Google’s handling of this data is governed by their own privacy policy: policies.google.com/privacy.

If you use cloud sync, your practice data is stored by Cloudflare, Inc.as the provider of Cloudflare KV. Cloudflare's handling of this data is governed by their own privacy policy (linked above).

We do not sell data to anyone. We do not share data with any third party other than those listed above for the purposes described.

Two reasons, both practical:

• Understand what people use. Aggregate usage data tells us which parts of the app are popular and which aren’t worth the maintenance. Without it we’re guessing.
• Measure advertising. If we run a Google Ads campaign to help people find the app, we need to know which ads actually bring useful visitors. Otherwise we’re burning money without learning anything.

On your first visit, a banner asks whether you accept or decline analytics cookies. Your choice is stored in your browser’s localStorage and applies to future visits on the same device and browser. You can change it at any time below:

You can also clear your browser’s cookies and site data for this domain to reset everything, which will bring the banner back on your next visit.

Global Privacy Control (GPC):if your browser sends the GPC signal, this site automatically treats you as having declined analytics cookies and does not show the banner. You can still opt in for this specific site by pressing Accept analytics above — that choice will override GPC for this site only. The older “Do Not Track” signal is not automatically honored because GA4 does not implement it; use the Decline button instead.

Google Analytics retains visitor-level data for a period configured in our GA4 property (currently the default of 2 months). Aggregated reports may be retained longer. You can read Google’s documentation on data retention here.

Questions about this policy, or requests to access or delete your data, can be sent to contact@japanesevocab.app.

If this policy changes materially, the “Last updated” date at the top of the page will change, and in most cases the consent banner will reappear so you can re-confirm your choice.