Privacy Policy
minamisyou (“the Service”) provides Blog, Games, CodeTest, and shared Google account sign-in. Personal information is processed only as needed to provide these features and is not sold.
1. Information we process
- Google sign-in information: Google account identifier (sub), email address, display name, profile image URL, and email verification status.
- Session information: A random session token used to keep you signed in. The browser stores it in an HttpOnly, Secure cookie; the server stores a hash rather than the raw token.
- CodeTest activity: User identifier, attempts and progress, code you create or edit, review decisions and notes, AI usage, and related timestamps.
- Basic access logs: For security and troubleshooting, the web server may temporarily record standard request data such as time, path, IP address, and User-Agent.
2. Purposes
We use this information for authentication and sessions, saving CodeTest progress, enforcing AI usage limits, preventing abuse, security and incident analysis, and improving the Service.
3. Google API data
Google sign-in uses only the openid, email, profile scopes. The Service does not access content in Gmail, Google Drive, or other Google services. Information received from Google is used only for sign-in and account display.
4. Retention and deletion
Account and usage records are retained as needed to provide the Service. Login sessions are normally valid for up to 30 days and expired sessions are periodically cleaned up. Database backups may be retained for a limited period for security and recovery. On an account-deletion request, related account information will be deleted within a reasonable period except where retention is required for legal or security reasons.
5. Third parties
We do not sell personal information. Google OAuth/OpenID Connect is used for sign-in. Some pages may use Google Fonts and Google Analytics for service statistics; those providers' policies may apply to their processing.
6. Security
We apply reasonable technical safeguards including HTTPS, Secure/HttpOnly/SameSite cookies, server-side session-token hashing, request-origin validation, access controls, security headers, and restricted database permissions.
7. Your choices
You can use publicly available features such as Blog, Games, and the CodeTest problem list without Google sign-in. Signed-in users can sign out and may request deletion of their account or personal information from the service operator.
8. Changes
This policy may be updated when features or processing practices change. Material changes will be reflected on this page with an effective date.