Privacy

What Yomikit keeps, and what it doesn't

Yomikit keeps only what it needs to save your notes and send the lessons you sign up for. There's no advertising and no tracking tied to you.

Last updated November 2026

What's kept

When you create an account

  • Your email address, to identify your account and log you in.
  • Your password, stored only as a one-way hash (PBKDF2, 100,000 rounds). Nobody can read it back, including Yomikit.
  • Your notes, the Japanese text you choose to save, so it's there next time.

Automatically

  • A login cookie: a secure session token that expires after 7 days. It's only for keeping you logged in.
  • Your settings: theme, text size, and display mode, kept in your browser and, if you have an account, with it.

If you choose to

  • Your email for lessons: if you sign up in the footer, for the quiz printable or for a word card, or tick the box when you create an account, it's kept to send you what you asked for, then small Japanese lessons now and then, and added to the email provider's list. You can unsubscribe any time.

Anonymous counts

  • Quiz scores: which of the 20 words were marked as known, with a timestamp only. Never with your email, account, or IP address.
  • Book link clicks: which page a book link was clicked from, stored the same way.

What's never collected

Embedded videos

Yomikit videos are hosted on YouTube. The player loads only after you press play, in YouTube's privacy-enhanced mode (youtube-nocookie.com). Until then nothing is requested from YouTube, and the preview image is served from Yomikit. Once you press play, YouTube sees your request under its own privacy policy.

Where it's stored

Accounts and notes are stored in Cloudflare D1, a database on Cloudflare's global network. Yomikit has no other server.

Deleting your account

You can delete your account and everything in it at any time. It's immediate and permanent: every note and your account record are removed.

Contact

Questions or data requests: privacy@yomikit.pages.dev