1. Introduction

This Privacy Policy (“Policy”) governs the collection, processing, storage, transfer, and protection of personal data by JLPTDrills (“we,” “us,” or “our”) in connection with the operation of jlptdrills.com and associated subscription services (collectively, the “Services”). This Policy applies to all users of the Services, including visitors browsing content without registration, users interacting with quizzes or other interactive features, and registered subscribers and paying customers. By accessing or using the Services, you acknowledge and consent to the terms of this Policy.

2. Information We Collect

We collect personal information to operate the Services, comply with legal obligations, and provide personalized experiences, including:

• Account & Contact Information: Name, email, username, hashed passwords, optional profile data.
• Subscription & Payment: Payment method, billing address, subscription plan, transaction IDs, receipts. We do not store full card numbers or CVV. Payments are processed via third-party processors (Stripe, PayPal).
• User-Generated Content: Feedback submitted via Flag modal, comments, notes, quiz responses and performance data.
• Usage & Analytics: Pages visited, time spent, device/browser info, IP, quiz attempts, scores, aggregated metrics.
• Cookies & Tracking: Session cookies, localStorage, analytics and performance measurement cookies.
• Third-Party Data: Data collected or transmitted via Google Sheets/Forms and analytics providers.

3. Legal Basis for Processing (GDPR/EU)

• Performance of contract: Provide Services & fulfill subscriptions.
• Consent: Explicit consent for marketing, analytics, optional features.
• Legitimate interests: Service improvement, security, fraud prevention, basic analytics balanced with rights.

4. Use of Personal Data

• Account & subscription management.
• Payment processing & receipts.
• Service provision, maintenance, and personalization.
• Responding to feedback and flagged content.
• Fraud detection, security, and support.
• Legal compliance & enforcement.

5. Cookies, Local Storage & Tracking

Used to maintain sessions, retain preferences, and conduct analytics. Browser settings may control cookies, but some functionality may be impaired if blocked.

6. Third-Party Providers

• Google Sheets / Forms: Content & feedback.
• Payment Processors: Stripe, PayPal.
• Analytics Providers: Google Analytics, Plausible.
• Authentication Providers: Optional third-party sign-in.

7. Data Retention

Data is retained as necessary for service, legal obligations, and dispute resolution. Examples:

• Account & billing: subscription duration + 7 years.
• Analytics logs: aggregated indefinite, raw 2 years.
• Flagged submissions: up to 2 years or as required.

8. User Rights

• GDPR: Access, rectification, erasure, restriction, portability, withdraw consent.
• CCPA/CPRA: Know, delete, opt-out, equal service/price.
• Other laws (Japan APPI, etc.): Access, correction, suspension, deletion.

9. Data Security

Administrative, technical, and physical safeguards, HTTPS, hashed passwords, role-based access, periodic audits. No system is completely secure.

10. Children

Services are not directed to children under 13 (or local legal age). Data collected from children is deleted promptly.

11. International Transfers

Data may be transferred outside your jurisdiction. Safeguards are implemented as required by law.

12. Marketing Communications

Marketing emails sent only with consent. Users may opt-out via unsubscribe links or account settings. Personal data is not sold.

13. Changes to This Policy

Material changes communicated to registered users and posted on the site. Continued use constitutes acceptance.

14. Contact Information

Email: admin@jlptdrills.com