法律 · hōritsu
What is stored on your device, what needs your permission and how to change what you chose.
A cookie is a small file that a website stores in your browser to recognise you on your next visit. Alongside cookies, sites can store information in the browser's local storage, which for the purposes of this policy works the same and is explained the same. Here is everything Hanasuka stores on your device, without exception.
Hanasuka uses storage that is strictly necessary to provide the service you asked for: keeping your session open, making the application work, keeping the contact form from becoming a spam channel and remembering what you chose about cookies. Article 22.2 of the Spanish LSSI exempts this kind of storage from prior consent.
The only thing that is not necessary is measuring visits to the public website with Google Analytics, which is why the website asks you first, in a notice with «Accept» and «Reject» on an equal footing. Until you accept, the Google Analytics script is not loaded and none of its cookies are set, and if you reject, it is not loaded. The application never loads it, so you are not asked anything inside it. There are no advertising or social network cookies, and you are not followed across sites.
The notifications' service worker falls under the same case: it is only installed when you turn them on, which is requesting that service, and without it they cannot reach you.
| Name | Type | What it's for | Duration |
|---|---|---|---|
| hanasu_sesion | First-party cookie, technical | Keeping your session open so you're not asked for your password on every screen. It is signed, HttpOnly, SameSite=Lax and Secure under https | 180 days, or until you sign out |
| hanasu-cache:… | First-party local storage | A copy of your progress in this browser, so the application responds instantly without waiting for the network and keeps working offline | Until you sign out or clear the site data |
| hanasu-v2 | First-party local storage | Progress saved by versions prior to accounts. It is read once, so that anyone already studying doesn't start from scratch, and then deleted | Consumed on first sign-in |
| sw.js | First-party service worker | A small program the browser keeps so it can receive and show notifications even when Hanasuka isn't open. It stores no data about you and does nothing else. It's only installed if you turn on notifications | Until you turn them off or clear the site data |
| _GRECAPTCHA | Google cookie, technical | Set by reCAPTCHA when the contact page of the public website is opened, to tell a person from an automated program. Only on that page: no screen of the application loads it | Six months, according to Google |
| hanasu_app | First-party cookie, technical | Remembering that you are using the Android app or the Apple one, or a store review account, so you aren't shown the invitation to donate there. It only stores «android», «ios» or «revision», and the public website and the application both read it | One month |
| hanasu_cookies | First-party cookie, technical | Remembering whether you have accepted or rejected visit measurement, so you aren't asked on every page of the public website. It only stores «si» or «no» (yes or no) | One year |
| _ga | Google Analytics cookie, measurement | Telling one browser from another with a random identifier, to count people and not just visits. It is only set if you accept measurement | Two years, or until you withdraw your consent |
| _ga_… | Google Analytics cookie, measurement | Keeping track of the current visit: when it started and how many pages it has covered so far. It is only set if you accept measurement | Two years, or until you withdraw your consent |
Your preferences, voice, text size and romaji, are not stored separately: they travel inside your progress, so they follow you from one device to another.
If you use the Google sign-in button, its script (accounts.google.com) sets its own cookies to recognise you and for its security. They are Google's cookies, not Hanasuka's: the owner can neither read nor control them, and they are governed by Google's cookie and privacy policies. They only load when the sign-in screen is shown; once you're signed in, that script is not downloaded.
The same goes for the Apple sign-in button: on the web, its script (appleid.cdn-apple.com) loads with the sign-in screen and, if you press it, Apple's window (appleid.apple.com) sets its own cookies. They are Apple's, not Hanasuka's, and are governed by Apple's privacy policy.
And if you write through the contact form on the public website, its anti-spam (reCAPTCHA, at www.google.com) does the same: it loads its script and sets the _GRECAPTCHA cookie. They are also Google's and governed by its policies. It is the only page on the site that loads it, and the form itself says so with links to those policies.
If you turn on notifications, your browser stays connected to its maker's notification service so it can receive them. That connection is opened and managed by the browser itself, installs no Hanasuka cookies and is governed by that maker's policy.
If you accept visit measurement, the pages of the public website load the Google Analytics script (www.googletagmanager.com), which sets the _ga and _ga_… cookies on this site and sends Google the data on each visit. The application does not load it. Google acts as a data processor and is governed by its privacy policy. Google signals and ad personalisation are turned off.
And there are no other third parties: the typeface is served from this same site and not from a CDN, so outside those cases there is no other domain your browser has to request anything from or to which it communicates your IP address.
To change what you chose about visit measurement, press «Cookie preferences» at the bottom of any page of the public website and the notice appears again. If you withdraw your consent, the Google Analytics cookies are deleted and it is no longer loaded.
The most direct way is to sign out from your avatar menu: that deletes the session cookie and the local copy of your progress. Your progress is not lost, because it remains stored on the server.
You can also clear and block storage from your browser's settings, under privacy or site data. Every browser calls it something different, but they all have it.
If you completely block storage for this site, your session cannot be kept open and the application will not be able to show you your progress. Here it is not a frill: it is the piece that holds up access.
If Hanasuka ever added other storage that was not strictly necessary, this page would be updated and you would be asked for consent before it was installed.
Last updated: 17 October 2026.
