Privacy Policy

You can use the whole game without signing in. Your progress is then kept only in your browser's session storage, on your own device. It never reaches our servers, and your browser discards it when you close the tab.

Your sound and voice preferences are stored in your browser's local storage so they survive a reload. They also stay on your device.

If you choose to save your progress to an account, we ask Google only for the openid, email and profile scopes. We never receive your Google password, and we cannot read your Gmail, contacts, files, or any other Google service.

From your Google profile we store:

• your Google account identifier, which is how we recognise you when you return
• your email address, used to identify your account and to contact you about it
• your display name and the web address of your profile picture, shown in the app

When you are signed in we store your save data: which kanji you have studied, your review schedule, mastery levels, streaks, points, and the regions you have unlocked. A copy is also cached in your browser so the game keeps working offline.

This is study data only. We do not collect anything you write beyond your answers in the game.

We use two cookies, and only after you sign in. One holds your session so you stay signed in; it cannot be read by JavaScript. The other protects against cross-site request forgery. Both expire after 30 days, or when you sign out.

We set no advertising, analytics, or third-party tracking cookies.

Our hosting provider records standard server logs for each request — IP address, browser user agent, the page requested, and the time. These are used to keep the service running and secure, and are kept for 30 days.

The app loads its typefaces from Google Fonts, so your browser contacts Google's servers and your IP address is visible to Google when it does.

• sell or rent your personal information to anyone
• share it with advertisers or data brokers
• use it to build an advertising or behavioural profile
• run analytics, heatmap, or session-recording tools

We rely on three providers, each acting only on our instructions:

• Google Cloud Run hosts the application and the API, in Singapore
• Neon hosts the PostgreSQL database, in Singapore
• Google provides the sign-in service, if you choose to use it

Account information and progress are kept until you ask us to delete them. Sign-in sessions expire after 30 days. Guest progress lives only as long as your browser tab.

You can ask us for a copy of your data, to correct it, or to delete it entirely. Email info@nipporia.com from the address on your account and we will action it within 30 days. Deleting your account removes your profile, sessions, and saved progress permanently.

You can also revoke our access at any time from your Google account permissions, though that alone does not delete data already saved here.

Kanji Dash is suitable for all ages, but accounts require a Google account, and Google sets its own minimum age for your country. We do not knowingly collect information from children below that age. If you believe a child has created an account, contact info@nipporia.com and we will remove it.

If this policy changes materially we will update the date at the top of this page and, where the change affects data we already hold, notify signed-in users by email.

Questions about this policy or your data: info@nipporia.com.