Privacy Policy

1. Who we are

TanoshiGo is operated by TanoshiGo, based in Indonesia. For any privacy question or request, contact [email protected].

2. Data we collect

We collect only what the service needs to function:

• Account data from your sign-in provider (Google, Discord, or GitHub): email address, display name, and avatar. If you set a password, we store only a salted hash.
• Learning data you generate: collected vocabulary, review schedules, quiz and lesson progress, practice history, badges, and XP.
• Competitive data: match results, ratings (MMR), and leaderboard placement, shown under your username.
• A coarse region and optional country, derived once from your device timezone and language at first sign-in, used for matchmaking and regional leaderboards. You can change or clear these in Settings.
• Payment records when you purchase: the product, amount, currency, timestamps, and payment-provider references. Card and wallet details are processed by the payment provider (Midtrans or Paddle) and NEVER touch our servers.
• Technical data required for security: IP address (for rate limiting and abuse prevention) and functional cookies (see below).

3. Cookies and local storage

TanoshiGo uses only functional cookies and browser storage: a session token that keeps you signed in, your language choice, and device-local preferences such as sound volume. We do not use advertising or cross-site tracking cookies. Because these are strictly necessary for the service, they cannot be disabled while using TanoshiGo.

4. How we use your data

• To provide the service: sync your learning progress, schedule reviews, and run matches.
• To process purchases and deliver the access you paid for.
• To keep the platform safe: rate limiting, anti-cheat, and moderation.
• To send service messages (receipts, security notices). We do not send marketing email without a separate opt-in.

5. Third parties we share data with

We never sell your data. We share it only with processors needed to run the service:

• Sign-in providers (Google, Discord, GitHub) when you authenticate.
• Payment providers: Midtrans (Indonesian payment methods) and Paddle (international cards, acting as merchant of record). Each has its own privacy policy.
• Infrastructure providers that host and protect the service (server hosting, content delivery, and DDoS protection).

6. Retention

Account and learning data are kept for as long as your account exists. Payment records are kept for the period required by Indonesian tax and bookkeeping law even after account deletion, in anonymized form (no name or email attached).

7. Your rights

You can exercise all of these yourself in Settings, or by emailing us:

• Access and portability: download a complete copy of your data as JSON (Settings, "Download my data").
• Correction: edit your profile, username, region, and preferences at any time.
• Deletion: permanently delete your account in Settings. This erases your personal data immediately; only anonymized payment records (required by tax law) and, if your account was banned, an anonymized ban marker are retained.

8. Children

TanoshiGo is intended for users aged 13 and older. Users under 18 must have permission from a parent or legal guardian, who should review this policy. If we learn an account belongs to a child under 13 without parental consent, we will delete it.

9. Changes and contact

We may update this policy as the service evolves; material changes will be announced in-app. Questions and privacy requests: [email protected].