Privacy Policy

JLPT Mastery ("we," "us," or "our") operates the website at jlptmastery.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using JLPT Mastery, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

2. Authentication

JLPT Mastery uses Supabase Auth to manage user accounts. We support two sign-in methods:

• Google OAuth — When you sign in with Google, we receive your name, email, and profile picture. We do not access your Google contacts, calendar, or any other Google services.
• Magic Link — We send a one-time login link to your email address. No password is stored.

3. Cookies and Local Storage

We use cookies and browser local storage for authentication session management. These are essential for the service to function and keep you signed in. We do not use advertising cookies or third-party tracking cookies. You can configure your browser to refuse cookies, but some features of the service may not function properly.

4. How We Use Your Information

• Provide, operate, and maintain the JLPT Mastery service
• Power the adaptive practice engine and personalized study recommendations
• Track your mastery progress across vocabulary and grammar items
• Generate confusion pair analysis and targeted practice sessions
• Send service-related communications (account verification, security alerts)
• Monitor and analyze usage trends to improve the service
• Detect, prevent, and address technical issues

5. Third-Party Services

We use the following third-party services to operate JLPT Mastery:

6. Data Retention

We retain your account data and study progress for as long as your account is active. If you delete your account, all associated data — including practice history, mastery states, and personal information — will be permanently deleted within 30 days. Anonymized, aggregated statistics (e.g., total sessions completed across all users) may be retained indefinitely.

7. Your Rights

You have the following rights regarding your personal data:

• Access — You can view your study data and account information through the dashboard and profile pages at any time.
• Deletion — You can delete your account and all associated data from the account settings page. Account deletion is permanent and cannot be undone.
• Export — You can request an export of your personal data by contacting us at support@jlptmastery.com.
• Correction — You can update your display name and profile information through the profile settings page.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data. All data is transmitted over HTTPS. Authentication tokens are handled securely through Supabase Auth. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the service after changes are posted constitutes acceptance of the revised policy.