Privacy Policy

Last updated: 12 October 2026

This policy explains what we do with information about you when you use learnjapaneseonlinehub.com. It is written in plain English, because a policy nobody reads protects nobody.

Where things stand today. Free accounts are open. Paid plans and the newsletter are not open yet. If you create an account we hold your email address and your learning progress, and nothing else about you. Without an account we receive only the anonymous analytics and server logs described below, and anything you choose to send us by email. The sections on payments and the newsletter already describe how they will work, so that this policy is correct on the day they open.

The short version

• You can use a large part of the site without an account and without telling us anything.
• If you create an account we hold your email address and your learning progress, so it follows you between devices.
• We never see your card number. Payments are taken by Link, Stripe's payment service.
• We do not sell personal data, we do not run advertising, and we do not share your data with advertisers.
• You can download your progress from your account page at any time, and have your account and everything in it deleted by emailing us.

1. Who we are

Learn Japanese Online Hub is a trading name of Lunar Interactive Arts Ltd, a company registered in England and Wales (company number 12044811), registered office 102 Lady Margaret Road, Flat D, London, England, N19 5EX. For data protection purposes we are the data controller for this site.

Questions about anything in this policy, or any request about your data: [email protected].

2. What we collect, and why

The rows about subscriptions apply only once paid plans open, and support messages only if you write to us. We do not collect special category data. We do not ask for your date of birth, your address or your phone number, and you should not send them to us.

3. Without an account

You can use the charts, the vocabulary, the grammar reference, the practice tools, the situation guides, the printables and days 1 to 7 of the daily course without signing up. If you do, your progress is stored only in your own browser, using localStorage. We cannot read it, we cannot restore it, and it disappears if you clear your browsing data or switch device. That is a deliberate trade: no account means no data with us. The one exception is the newsletter: if you choose to subscribe, we hold the address you gave us, and section 6 explains exactly what that means.

4. Payments

Paid plans are not on sale yet. When they are, they will be sold through Link, a service of Stripe (called Onelink in the UK), which acts as the seller of record. Your card details go directly to Stripe on its checkout page, so we never receive or store your card number. Link and Stripe decide for themselves what they need for the payment, tax, fraud prevention and their own legal duties, as independent controllers, under their own privacy policies at stripe.com/privacy and link.com/privacy.

What we receive back is limited to what we need to run your plan: that a payment succeeded or failed, which plan you are on, when the current period ends, and Stripe's reference for you and your subscription, so a payment can be matched to your account. Stripe's dashboard also shows us the receipt, the country used for tax and the last four digits and type of the card, which we look at only to answer a question about a payment.

To show prices in your currency, the site asks Cloudflare which country your connection comes from. That is worked out for each visit and is not stored.

5. Cookies and local storage

We keep this deliberately small.

• Essential. When you are signed in, your sign-in session is kept in local storage, and a short-lived cookie (ljo_at, lasting an hour and renewed while you use the site) lets the site open the lessons your account includes. Both go when you sign out. Local storage for your progress and your display settings, such as whether rōmaji is showing. These cannot be turned off without breaking the site, and no consent is required for them.
• Analytics. Cloudflare Web Analytics and Ahrefs Web Analytics. Neither sets cookies, and neither tracks you across sites or devices. They tell us which pages are visited, where visitors came from, from which country and city, and on what kind of device and screen, in aggregate. Ahrefs uses your IP address only to work out your city and a visitor count for the day, then discards it without storing it. We do not use Google Analytics. If we ever add it, it will load only after you agree to it, and this policy will say so before it does.
• Advertising. None. There are no advertising or social media tracking cookies on this site.

6. Email we send you

Two kinds, and they are separate. The newsletter is not open yet.

• Service email you cannot unsubscribe from while you hold an account: sign-in links, receipts, renewal notices, changes to these terms, and security notices. There are few of them and they are all necessary to provide the service you asked for.
• The newsletter, which is one short Japanese lesson a week, new guides, and occasionally an offer. It is entirely optional and we send it only to people who ticked the box to ask for it. Our lawful basis is your consent, and you can withdraw it at any time.

You can subscribe to the newsletter without an account. If you do, the only thing we hold is your email address, the date you subscribed, which page you subscribed from, and the wording of the consent you were shown. We do not link it to anything else and we do not use it to profile you.

To stop receiving it, use the unsubscribe link at the bottom of any newsletter. It works immediately, it does not ask you to sign in, and it does not ask you why. You can also email [email protected] and we will do it for you. Unsubscribing stops the emails; ask us to delete the address as well and we will.

We do not use your address for anything you did not ask for, we do not pass it to anyone other than the email provider named below, and there is no version of this where creating an account subscribes you by default.

7. Who else sees your data

We use a small number of service providers, each of which processes data only on our instructions and under a data processing agreement:

• Cloudflare, which hosts the site, serves it and provides the cookieless analytics. In use today.
• Supabase, which stores accounts and progress. In use now, in London.
• Ahrefs, which provides the second set of cookieless analytics described in section 5. In use since 12 October 2026.
• Stripe, through its Link service, which will take payments and handle tax once paid plans open. For the payment itself Link is the seller and an independent controller, as section 4 explains.
• Resend, which sends the sign-in emails now, and will send the newsletter and hold its list, including the record of who has unsubscribed, once the newsletter opens.

We do not sell your data, rent it, or share it with advertisers or data brokers. We would disclose data if we were legally required to, and we would tell you unless we were prohibited from doing so.

8. Where your data is held

We prefer providers that hold data in the UK or the EEA. Some of our providers are based in the United States. Where personal data is transferred outside the UK, it is protected by the UK International Data Transfer Addendum, Standard Contractual Clauses, or a UK adequacy decision, depending on the provider.

9. How long we keep it

• Account and progress data: while your account is open. Delete the account and it is removed within 30 days, including from backups on their normal rotation.
• Payment and tax records: six years, because HMRC requires it. This is the one thing we cannot delete on request.
• Support email: two years.
• Server logs: up to 30 days.
• Analytics: aggregated, and not tied to your account.

10. Your rights

Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, take it with you in a portable format, and to withdraw consent where consent is what we relied on.

You can download your progress yourself, from your account page. To correct or delete your data, or for anything else, write to [email protected] and we will respond within one month. We will not charge you and we will not make it difficult.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority if you are in the EEA. We would rather you told us first so we can put it right.

11. Children

This site is not aimed at children under 13 and we do not knowingly collect their data. If you are under 18, please get a parent or guardian to agree before creating an account or subscribing. If you believe a child has given us personal data, email [email protected] and we will delete it.

12. Security

There are no passwords to leak: you sign in with a one-time link or code sent to your email. The site is served over HTTPS only. Access to the production database is limited to those who need it. No system is perfectly secure, and we will not pretend otherwise, but if there were a breach affecting your rights we would report it to the ICO within 72 hours and tell you without undue delay.

13. Changes

If we change this policy the date at the top changes with it. For anything that materially affects you, such as a new category of data or a new purpose, we will email account holders before it takes effect.