Privacy Policy

To provide an authentic CBT examination simulation and personalized score reports, we collect minimal and necessary information: • Account Credentials: Full name, username, email address, and encrypted password hash (via secure Argon2/PBKDF2 algorithms). • Exam Performance Data: Answers submitted for each question, scaled scores (10–250 for JFT, percentage scores for SSW), time spent per question, and completion timestamps. • Nationality & Exam Country: Used exclusively to personalize your local test venue guides, local voucher payment tips, and national leaderboard standings. • Technical & Device Diagnostics: IP address (used for approximate country detection and anti-cheating protection), browser type, and screen viewport dimensions to ensure proper CBT simulator rendering.

When you visit or register on Gakkou No Shiken, our server queries your client IP against local offline GeoIP2 database tables to detect your candidate region (e.g., Bangladesh, Nepal, Vietnam, Indonesia, Japan). • Purpose: To show relevant local test center locations (e.g., UTC Dhaka / Chittagong), local voucher payment methods in BDT, and rank you on your national candidate leaderboard. • User Control: You always have the right to confirm or override your country via your Profile Settings or the Country Confirmation Dialog. We never share or sell physical GPS or pinpoint coordinates.

When you complete a mock exam: • Your answers are evaluated on our secure server, and an official CEFR scaled score is calculated. • The score report and downloadable high-resolution PDF certificate are stored in your private Candidate Dashboard under "My Results". • You can review your past answers, view explanations, and track your progress toward the 200-point JFT passing benchmark. • Staff and test administrators can view aggregate, anonymized test performance statistics to improve exam question quality and calibrate item difficulty.

We utilize lightweight, secure browser storage: • JWT Authentication Tokens: Secure tokens stored in HTTP cookies or local storage to keep you signed in between study sessions. • Theme Preferences: Local storage saves your preferred Light or Dark mode setting. • Dismissed Banners: Session storage remembers if you dismissed the Country Confirmation dialog so you are not interrupted repeatedly. • We do NOT employ third-party behavioral tracking cookies or sell your browsing history to advertising networks.

We employ enterprise-grade security measures to safeguard candidate data and protect exam questions from unauthorized extraction: • SSL/TLS 256-bit encryption for all data in transit across our web endpoints. • Anti-Capture Watermarks: During actual exam runs, subtle dynamic watermarks are embedded into the CBT canvas to deter unauthorized redistribution of question banks. • Strict Staff-Only Permissions: Draft mock tests and administrative bulk question uploaders are protected by role-based access control and rate throttles.

We integrate only with trusted, industry-standard service providers: • Google Authentication: For optional 1-click candidate login (Google ID token verification only; we do not access your Google contacts or private files). • Transactional Email Delivery: For 6-digit registration OTP verification codes and password reset links via encrypted SMTP. • Cloudflare & LiteSpeed: For DDoS protection, CDN asset caching, and web application firewall security.

Because our tests prepare candidates for employment and residency under Japan's Ministry of Justice immigration standards, we observe principles aligned with Japan's Act on the Protection of Personal Information (APPI) as well as global GDPR principles: • Lawful, fair, and transparent data processing. • Purpose limitation: candidate data is used solely for educational assessment and certification preparation. • Data minimization: we never ask for sensitive financial credit card details directly on our servers.

As a registered candidate, you hold full authority over your data: • Right of Access: View all your personal details and exam attempt histories at any time from your profile. • Right of Rectification: Update your name, Japanese level, bio, and country anytime. • Right of Erasure (Right to be Forgotten): You may request complete deletion of your account, email, and historical test attempts by contacting our administrative team at support@gakkounoshiken.site.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your candidate information is handled, please reach out to us: • Official Email: privacy@gakkounoshiken.site / support@gakkounoshiken.site • Facebook Official: facebook.com/Gakkou.No.Shiken • WhatsApp Support Channel: Available via official link in footer • Data Controller: Gakkou No Shiken CBT Systems Team