Privacy policy

N2 Traps is a small JLPT N2 practice-and-diagnosis service run by a solo operator in Japan. In this policy, “we” means that operator.

This page explains what we collect, how we use it, and how to request access, correction, or deletion. Contact: n2traps.jp@gmail.com

What we collect

You can answer the 20 free questions anonymously. Submitting your answers for an emailed diagnosis does not require an account, but the submission includes your email address.

Sign-in is optional. Signed-in users can view their past submissions and study progress as a record of progress.

We do not receive your Google password. We count visits, quiz starts, and submissions using first-party records created by our own service only. We do not use third-party advertising or analytics trackers, and we do not set advertising or analytics cookies.

Why we use your information

We use the information you submit to:

• Review your answers and prepare your diagnosis. The operator writes and sends the diagnosis email manually within 48 hours of submission.
• Authenticate you and operate your optional account, including letting you view past submissions.
• Grant and manage free, trial, and paid access to the plan you selected, send the payment request described in our Terms, and process payments and refunds through Stripe.
• Handle your requests about your information.
• Calibrate question difficulty using answer data in aggregate, de-identified form.

Removing an email address alone does not necessarily make information anonymous. Data used for aggregate calibration must not identify individual users.

Information received through Google sign-in—your name and email address—is used only to sign you in and operate your account.

Storage and service providers

Submissions are stored in a submissions table in the operator’s own Supabase project. Supabase is a managed service providing a Postgres database and file storage, and provides Supabase Auth for optional account sign-in. The website itself is hosted on Cloudflare.

The providers involved in delivering the service are:

Google processes your sign-in under its own privacy policy. Email providers process the information needed to deliver the relevant messages, including recipient addresses and message contents.

We use service providers only as needed to provide the service. We do not sell personal information or share it with advertisers or data brokers. We do not publish individual submissions or results.

We do not transfer or disclose information received through Google sign-in except as necessary to provide the service or comply with law. The same limits apply to disclosure of other personal information.

Security

We are responsible for handling your information with reasonable care. Our security commitments include limiting access and use to what is needed to operate the service, protecting account and provider access, and handling personal information requests carefully.

Hosting and authentication rely on the managed infrastructure of Cloudflare and Supabase. No online service can guarantee absolute security.

Cookies

The only cookies we use for sign-in are authentication session cookies needed to keep you signed in if you choose to use an account. We do not use advertising or analytics cookies, and our first-party counting described above does not rely on them.

Separately, when you submit the free diagnosis without signing in, we set an HttpOnly cookie that holds a signed receipt for your own submission, so that your browser can show you your own snapshot. This receipt cookie is different from the sign-in session cookies: it carries no account session, is not used for advertising or analytics, and expires after 7 days.

How long we keep information

We keep submissions and account information while the service operates, unless you request deletion. This supports diagnosis delivery and access to past submissions.

Aggregate statistics that no longer identify anyone may be retained after personal information is deleted.

Your choices and requests

You can use the free questions without signing in. Submitting a diagnosis request requires the information listed above.

To request disclosure of the personal information we hold about you, correction, deletion, or an end to its use, email n2traps.jp@gmail.com, preferably from the address you used for the service.

We handle requests manually. We may need to verify that the information belongs to you before disclosing or changing it. We will confirm the outcome by email. If we cannot fulfill part of a request, including because of a legal requirement, we will explain why.

Children

N2 Traps is not directed at children under 13. If you are under 13, please do not submit personal information. If you believe a child under 13 has submitted information, contact us to request deletion.

Payments

Scope: this section applies whenever you pay us — through a Stripe payment link (including a payment request sent on day 3 of the payment-bridge trial described in our Terms of Service) or through Stripe Checkout once standard checkout opens. It takes effect on the date payments first become available, and we will set the effective date of this policy to that date when it happens.

Payments are processed by Stripe. When you pay, Stripe receives the payment information you enter on Stripe’s own pages (such as your card details), the amount, and the email address you provide there, and processes it under Stripe’s own privacy policy. We never receive or store your full card number or security code on our systems.

From Stripe we receive and keep: the payment confirmation, the Stripe payment identifier, the amount and currency, the plan purchased, and the purchase email address. We keep these to grant and manage your access, handle refunds, respond to payment questions, and meet accounting and legal record-keeping duties.

During the payment-bridge trial, signing up collects no payment information at all, and there is no automatic charge, ever. Paying is always an action you take yourself on a Stripe page; if you do not pay, your trial simply ends and your account returns to the free tier.

Changes to this policy

We will publish changes on this page and update the effective date. Changes describing new collection or uses will be published before those activities begin.