Privacy

Last updated: 3 October 2026. GATAN is operated by Kotaro Design Lab. Contact: okuyama.kotaro@gmail.com.

What we store and why

• When you try as a guest: a random profile identifier, language, vehicle and sound preferences, timezone, answers, hint use, practice duration, dates, review schedule, earned/spent points, continue history, your in-game nickname and leaderboard visibility choice.
• When you sign in with Google: Google’s account identifier, email address and display name, to identify your account and connect it to your saved learning history. We request only openid email profile. We do not access Gmail, Drive, YouTube, contacts or your password.
• A necessary session cookie keeps you signed in for up to 30 days. A short-lived OAuth cookie helps protect login. Session storage remembers whether the logo animation has played.
• Cloudflare processes requests and technical information to deliver and protect the service. A short-lived hash derived from the connecting IP address is used for rate limiting. Application error logs may contain endpoint names and technical error messages; we do not intentionally log OAuth tokens or answer payloads.

Service providers

Cloudflare hosts the website, database and request logs. Google provides sign-in. Voice audio is generated in advance with VOICEVOX: your microphone is not accessed and your answers are not sent to VOICEVOX or an AI model. There are no advertising trackers or marketing analytics in this version.

Leaderboard

If you choose to appear in the leaderboard, other GATAN players can see your in-game nickname, vehicle, total earned points, cleared runs and rank. Your Google account name, email and account identifier are not included. Participation is off until you enable it in Profile; disabling it removes your entry from subsequent leaderboard requests. Saved copies or screenshots made by other people cannot be recalled.

Sharing

Sharing is optional. A share link exposes only your run’s score, total questions, vehicle, mode and completion status. It does not expose your name, email or answers. Anyone with the link can view it. Images and text sent through your device’s share sheet are handled by the destination you choose. Search engines are instructed not to index result pages, but recipients can copy them.

Retention and control

Learning records remain with your profile until you delete it. In Profile you can delete the profile, its runs, answers, points ledger, sessions and share links. Copies recipients made of shared images cannot be recalled. Provider recovery backups may remain temporarily under their retention settings. Expired login state and rate-limit records are removed periodically when the service receives requests. Guest records are also stored on the server; losing the cookie can make them inaccessible to you.

You may contact okuyama.kotaro@gmail.com to request a copy of your learning data, correction, deletion or other rights that apply to you. Please do not send passwords. Data may be processed outside your country through Cloudflare and Google’s infrastructure.

In breve, in italiano

Salviamo preferenze e risultati per riprendere lo studio. Google fornisce solo identificativo, nome ed email. Non leggiamo Gmail e non usiamo il microfono. Non vendiamo dati e non mostriamo pubblicità. In Profilo puoi modificare il soprannome, scegliere se apparire in classifica o eliminare l’account. Per una copia dei dati, contattaci. La condivisione rende pubblico solo il riepilogo della corsa. Per assistenza: okuyama.kotaro@gmail.com.