Privacy Policy

1. Playing without signing in

• Your progress (cleared stages, the last stage you played and when, and the stages whose hints you closed) is saved in your browser's localStorage (eleclab:progress:v1). It is not sent to the operator's server.
• Which of the warnings about burned-out parts, short circuits, broken capacitors, overheating, reverse voltage, hot semiconductors, back EMF, shoot-through, broken ICs, current pushed back into dry cells, and lithium-ion cells pushed outside their limits have already been shown (only which of those eleven warnings it was, not the stage or time) is saved in the same localStorage (eleclab:cautions:v1). It is used only so that the same warning is not shown twice, and it is not sent to the operator's server. It is saved whether or not you are signed in, and it is not erased when you sign out.
• If you clear this site's data in your browser settings, your progress is erased too.
• Signing in is optional. You can play every stage without signing in.

2. Information we receive when you sign in with Google

• From Google, we receive your display name (the name on your Google account), your email address, whether the email address is verified, and your Google account identifier. We ask Google only for basic information (openid / email / profile) and never access Gmail, Drive, Contacts, or anything else.
• We do not store your profile picture or the tokens Google gives us (access token, refresh token, and ID token).

3. Information we store

• Account: an identifier created by this site (a random string), your display name, your email address, whether the email address is verified, your Google account identifier and the granted scopes (openid / email / profile), and the dates of creation and update.
• Progress: cleared stages, the last stage you played and when, the stages whose hints you closed, and when it was last saved.
• Information to keep you signed in (session): the session identifier and its expiry. We do not store your IP address or browser type (User-Agent). To count sign-in attempts, your IP address is kept only briefly (about a minute) in the server's memory and is never stored in the database.
• In your browser: in addition to item 1, the localStorage records which account the progress belongs to (this site's account identifier), whether you are signed in, and whether there are changes not yet sent to the server.

4. How we use it

• To carry over your progress when you sign in to the same account on another device or browser.
• To keep you signed in.
• Your display name is used only for the "Signed in as …" label on the title screen. Your email address is used only to link to your Google account; it is never shown on screen and we never send you email.
• To prevent abuse, for example by limiting the number of sign-in attempts.
• To find and fix the causes of failures.
• There are no features, such as rankings, that show your information to other people.

We do not use the information we receive for advertising. Except as required by law, we do not provide or sell it to third parties. Our use of information received from Google follows the Google API Services User Data Policy, including the Limited Use requirements.

5. Where it is stored and handling outside Japan

• Accounts and progress are stored in a database (D1) of Cloudflare, Inc., a company in the United States. The database runs in the Asia-Pacific region, but Cloudflare does not disclose the country and does not guarantee that it stays in that region, so we cannot identify the country where the server is located.
• This site is processed in Cloudflare's data centers around the world.
• In its Data Processing Addendum, Cloudflare agrees to process personal data only as needed to provide its services and only on the operator's instructions, and it is certified under the Global CBPR System, an international privacy certification.
• For the personal information protection system of the United States, see the survey by the Personal Information Protection Commission of Japan (in Japanese).
• When a failure occurs, its details (which process failed and how) may be written to Cloudflare's logs. If your saved progress cannot be read, this site's account identifier is included.

6. Cookies on this site

We use the following cookies. The two for signing in are set only when you sign in, and the one for language only when you choose a language on screen. All of them are set only on eleclab.takushio2525.com and are not shared with other sites.

The analytics cookies (_ga, _ga_<ID>) and your cookie consent choice (tk_consent) are explained in the site-wide privacy policy (in Japanese, with a summary in English).

7. Information sent to outside services when you open a page

Even if you are not signed in, opening a page makes your browser connect to the following companies.

Requests for Google Analytics 4 and the cookie consent banner are explained in the site-wide privacy policy (in Japanese, with a summary in English).

8. Retention and deletion

• Accounts and progress are kept until you delete your account.
• "Delete account" on the title screen immediately deletes your account, the link with Google, your sessions, and your progress from the database. If more than a day has passed since you signed in, you sign in with Google again first, for safety.
• When you sign out, the progress saved in that browser is erased (it remains in your account).
• Records of expired sessions (the identifier and the expiry) may remain until you delete your account.
• You can also remove ElecLab from Third-party apps & services in your Google account. This site's data remains after that, so use "Delete account" to erase it.

9. What we do to keep your information safe

• Only the operator handles the stored information, and the database is never shown to anyone else.
• Connections are encrypted with HTTPS. The sign-in cookie cannot be read from JavaScript and cannot be set by any other site, including the other sites under takushio2525.com (HttpOnly, Secure, __Host-).
• We never receive passwords (you sign in with Google). We do not store Google's tokens, your profile picture, your IP address, or your User-Agent (sections 2 and 3).
• The database can be operated only from the operator's Cloudflare account. The secret keys used for signing in are not written in the source code; they are kept in Cloudflare's encrypted settings.
• For handling outside Japan, see section 5.
• If a leak or a similar incident occurs, we will report it to the Personal Information Protection Commission of Japan and notify you as required by law.

10. Requests for disclosure, correction, deletion, and more

• Under Japan's Act on the Protection of Personal Information, you can ask us to tell you the purposes of use of the information this site stores about you, to disclose it (including records of provision to third parties), to correct, add to, or delete it, to stop using or erase it, and to stop providing it to third parties.
• You can delete your account and progress at any time with "Delete account" on the title screen (section 8).
• For other requests, send an email describing your request to contact@takushio2525.com from the email address of the Google account you use to sign in. We may ask you for more information to confirm that you are the account holder. There is no fee. We will reply by email without delay.
• If you contact us there, we will tell you the operator's name and address without delay.
• GitHub issues can be read by anyone, so please do not use them for requests about your personal information.

11. For younger users

• Signing in is optional. You can play every stage without signing in.
• If you are under the age at which you can manage your own Google account (13 in Japan), your parent manages it with Family Link. Please read this page with your parent before signing in.
• Google accounts provided by a school may be unable to sign in, depending on the school's settings. In that case, you can keep playing as a guest.

12. Revisions and contact

When we change the information we store or how we use it, we will revise this page and update the revision date above. Complaints and questions about how we handle personal information are accepted at the contact in section 10. For other inquiries, see "お問い合わせ" (Contact) in the site-wide privacy policy.