Privacy Policy

Who is responsible

SparkleSnap is responsible for this service and for the personal information described in this policy. SparkleSnap operates as a sole proprietorship and determines how account information is used (the data controller). Contact hello@sparklesnap.dev about privacy or your account.

This policy covers sparklesnap.dev and account progress in the supported apps on learnjapanese.sparklesnap.dev. Public pages can be read without an account. Separately hosted apps, learning tools and external services may have additional notices for their own features.

Information we handle

Account information: your email address, account identifier, creation and sign-in records, and a password hash if you set a SparkleSnap password. A password hash is a protected representation, not a readable password.
Your profile: the nickname you choose and your seasonal avatar selection. Your account profile is private; it is not a public directory.
Study progress: activity positions, practice collections, activity steps, completion choices and practice results in supported learning apps. This is private to your membership account and lets you continue on another device. Study Shelf provides reference materials without progression tracking.
Google sign-in: Google supplies an account identifier, email and basic profile information such as your name and profile-picture address. Supabase Auth can keep this information with your linked sign-in identity.
Technical information: providers may process IP addresses, browser and device information, request timestamps, errors, security events and authentication cookies to deliver and protect the service.
Messages: your email address and the information you send when contacting us, plus email delivery records for account messages.

We receive account information from you, Google when you choose Google sign-in, and the providers operating the service. An email address is needed for membership and recovery. You can choose email-and-password registration instead of Google.

Why we use it

We use account details, sign-in information and your nickname, chosen seasonal avatar and saved study progress to provide the account service you request, including access, profile changes, recovery and deletion. The legal basis is performing our agreement with you, including steps you request before joining.

We use necessary technical and security records to keep the site available, investigate problems and prevent abuse. The legal basis is our legitimate interest in running a reliable, secure service. We handle support messages to answer your request, on the basis of providing the service or our legitimate interest in responding to enquiries. Information retained to meet a legal requirement is processed on that basis.

Creating an account does not subscribe you to marketing. We do not sell personal information or use account information for targeted advertising. We do not use Google sign-in data to train AI models. This account service does not make automated decisions with legal or similarly significant effects about you.

Google sign-in is used to establish your identity and create or access your SparkleSnap membership. We request basic identity, email and profile access. We do not request permission to read your Gmail, Drive files, contacts or calendar, and we never receive your Google password.

You can review or remove the connection in your Google Account connections. Removing that permission does not itself delete your SparkleSnap account or information already held here. To delete your membership, use My account or contact us.

SparkleSnap's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Cookies and browser storage

When you use membership, necessary session cookies keep you signed in. They can persist for up to 30 days and are renewed as you use your account. A temporary verification cookie, lasting up to 10 minutes, completes sign-in, email confirmation or recovery. Sign out to clear the active session in that browser.

These account cookies provide authentication, not advertising or visitor tracking. You can block or clear cookies in your browser, but sign-in and recovery may stop working. Google may use its own cookies on its sign-in pages under its own privacy policy.

Some public pages load fonts from Google Fonts. Those requests expose technical information such as your IP address to Google. Other linked or embedded tools may have their own storage and privacy notices. We will explain any new optional tracking before enabling it where consent is required.

Who helps operate the service

Cloudflare hosts and protects the website, processes web requests and forwards mail sent to our support address.
Supabase provides authentication and the account database, hosted in Ireland within the European Union.
Resend delivers confirmation and password-recovery messages, processing recipient addresses, message content and delivery information.
Google provides optional sign-in and Google Fonts, and Gmail receives messages forwarded to our support inbox. Google operates its own account services under its own terms and privacy policy.

SparkleSnap manages the membership service. These providers perform their respective hosting, authentication, delivery and account-service roles under their applicable agreements. Access to information is limited to operating, supporting and securing those services. We may also disclose information when legally required or necessary to establish, exercise or defend legal claims. We do not publish your member email or private profile.

Providers and their subprocessors can process information outside the European Economic Area. Their applicable data-processing terms provide transfer safeguards, including adequacy decisions or standard contractual clauses where required. See Supabase's data-processing terms, Cloudflare's data-processing terms, Resend's data-processing terms and Google's privacy policy. Contact us for information about applicable safeguards or a copy where available.

How long information stays

Active account information, your nickname, seasonal avatar preference and saved study progress stay until you delete your account or it is otherwise closed. Deletion removes your live authentication account, private profile, avatar preference and saved progress. It does not delete your Google account.

Security and delivery logs, provider backups and support correspondence can remain separately. We keep correspondence only as long as needed to resolve the request, handle related follow-up or meet a legal obligation. Security records are kept as needed to investigate and prevent abuse; provider logs and backups expire under their applicable retention settings. Copies in backups may remain until those backups expire. Contact us for details about a particular record.

Your choices and rights

You can change your nickname, sign out and request permanent deletion from My account. Deletion requires your SparkleSnap password. If you joined through Google without one, use the password-recovery link to set a SparkleSnap password first, or contact us for help. Do not enter your Google password in a SparkleSnap form.

Depending on the processing and applicable law, you can request access, correction, erasure, restriction or a portable copy of your information, and object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights can have legal limits.

Email hello@sparklesnap.dev to exercise your rights. We may ask for reasonable proof of identity and will normally respond within one month, explaining any permitted extension. You can complain to IMY, the Swedish Authority for Privacy Protection, or your local data-protection authority.

Children and policy changes

If a child has provided personal information without any permission required by applicable law, a parent or guardian can contact us to ask for help or deletion.

We will update this policy when the service or its data use changes and show the revision date here. Significant changes affecting existing members will also be communicated through the service or by email as appropriate. Read the Terms of service for account and service rules.

Business identification

SparkleSnap — sole proprietorship of Cesar Borgenkrans.

Business and privacy enquiries: hello@sparklesnap.dev.