Privacy Policy
What we collect, why we collect it, and your rights as a user.
Overview
Who we are
CountingJapanese.com is a Japanese number and counter drilling tool. This policy explains what personal data we collect when you use the site, how we use it, and your rights regarding that data.
If you have questions, contact us at contact@countingjapanese.com.
Effective date: June 1, 2026
Data Collection
What we collect and why
| Data | When collected | Why |
|---|---|---|
| Email address | When you create an account | Account identity and verification |
| Password | When you create an account | Hashed and managed by AWS Cognito — we never see it in plaintext |
| Study session data date, attempts, correct answers, difficulty |
After each drill, if you are signed in | Tracking your accuracy and streak over time |
| Premium status | After a successful payment | Determining which features you have access to |
| Stripe customer ID | After a successful payment | Linking your account to your Stripe payment record |
| Marketing consent + date | If you opt in at sign-up | Sending product updates — only if you explicitly agree |
| Analytics data page views, scroll depth, drill events, device/browser type, approximate location |
All visits | Understanding how the site is used (Google Analytics) |
| Daily Advanced attempt count | When you drill on Advanced without a premium account | Enforcing the free daily limit — stored locally in your browser only, never sent to our servers |
We do not sell your data to any third party.
Third Parties
Services we use
| Service | Purpose | Data shared |
|---|---|---|
| Amazon Web Services Cognito, DynamoDB, Lambda, API Gateway, S3, CloudFront |
Authentication, data storage, and site hosting | Email, hashed password, study sessions, premium status |
| Stripe | Payment processing | Payment details handled entirely by Stripe — we only receive confirmation of success and your Stripe customer ID |
| Resend | Transactional email | Email address — used to send account verification and welcome emails |
| Google Analytics | Usage analytics | Anonymized usage events, device/browser info, approximate location via IP |
| Google AdSense | Advertising (non-premium users) | Google may use cookies to serve relevant ads — see Google's Privacy Policy |
| Google Fonts | Typography | Your IP address is sent to Google when fonts load |
Cookies & Local Storage
What we store in your browser
Google Analytics sets cookies to distinguish unique visitors and track sessions. Google AdSense may set cookies to serve relevant advertisements.
We store the following items in your browser's local storage:
- hardAttempts — your daily Advanced drill attempt count, used to enforce the free tier daily limit. Never sent to our servers.
- cj_isPremium — your cached premium status, written on sign-in and cleared on sign-out. Used by the About page to show the correct header buttons without a server round-trip.
- cj_cookie_consent — your cookie consent choice (EU/EEA/UK users only). Used to restore your consent preference on page load.
We use Google Analytics and Google AdSense on this site. If you are in the EU, EEA, or UK, you will be asked for consent before any tracking cookies are set. Users outside these regions are tracked automatically; no consent banner is shown.
Data Retention
How long we keep your data
- Account data is retained for as long as your account exists
- Study session data is retained indefinitely to support your streak and history
- If you delete your account, all associated data is removed from our systems within 30 days
- Google Analytics data is retained per Google's standard retention settings
In the event of a data breach that affects your personal information, we will notify affected users and, where required, the relevant supervisory authority within 72 hours of becoming aware of the breach.
Your Rights
GDPR (EU users) and CCPA (California users)
Depending on where you are located, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate data be corrected
- Deletion — request that your account and all associated data be deleted
- Portability — request your data in a machine-readable format
- Opt-out of marketing emails — unsubscribe at any time via the link in any email we send
- Withdraw consent — if you consented to marketing emails, you may withdraw that consent at any time
To exercise any of these rights, email us at contact@countingjapanese.com. We will respond within 30 days.
Legal basis for processing (EU/UK users). Under the GDPR, we rely on the following bases (Article 6) for the data described above:
- Email and password — performance of a contract (required to create and provide your account)
- Study session data and premium status — performance of a contract (delivering the service you signed up for)
- Analytics data — legitimate interest (understanding and improving how the site is used)
- Marketing emails — consent (sent only if you explicitly opt in)
- Advertising cookies — consent (set only where you accept them)
Children
Age requirement
CountingJapanese.com is not directed at children under 13. We do not knowingly collect personal data from anyone under 13 years of age. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes
Updates to this policy
We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.
Contact
Questions
If you have any questions about this privacy policy or how your data is handled, contact us at contact@countingjapanese.com.