← JLPTCraft
Privacy Policy
Last updated: June 2026
1. Data We Collect
- Email address — when you sign in via magic link
- Study content — text you paste to generate cards (processed, not stored long-term)
- Usage events — page views, card generation counts (via GA4)
- Session recordings — anonymised screen interactions (via Microsoft Clarity)
- IP address — standard server logs, retained 7 days
2. How We Use Data
To provide the service (auth, deck storage), improve the product (analytics), and prevent abuse (rate limiting).
3. Analytics
We use Google Analytics 4 and Microsoft Clarity. These tools may use cookies and collect anonymised usage data. You can opt out via browser settings or extensions.
4. Cookies
sb-*— Supabase session cookie (httpOnly, necessary for login)- GA4 / Clarity cookies — analytics (can be blocked via browser)
5. Data Retention
- Account & decks: retained while account is active
- Server logs: 7 days
- Analytics: per GA4 / Clarity retention settings
6. Third Parties
- Supabase — auth & database
- Stripe — payment processing
- Anthropic — AI card generation
- Google Analytics 4
- Microsoft Clarity
7. Your Rights
You may request deletion of your data at any time by emailing us. We will process requests within 30 days.