Effective date: May 13, 2021
User Responsibilities for Privacy
Each User is required to create a unique Login ID and secret Password to verify the User’s identity when they access their account. Each User is solely responsible for the creation and maintenance of their Login ID and secret Password. Once a student User Login ID is created it cannot be changed. A User’s secret password may be changed on the Settings page of their account.
Each student User is responsible to enter their own nickname for their student User’s account. Nicknames are visible on certain public pages within the Services. To protect your privacy, do not enter your real name as your nickname.
Student Users of the Services are NOT required to enter an email address to use the services. If a student User chooses to enter an email address for account recovery purposes, that information is never disclosed to third parties in any way for any reason. Email addresses are used only by Lexxica and only to provide the Services.
To be able to recover a lost account, a student User may choose to enter an email address on their Settings page. If a student User does not enter a working email address, Lexxica is under no obligation to make any effort to help recover a lost student User account regardless of any circumstances.
Those persons who utilize Lexxica’s free WAM Admin Learning Management Service to monitor student User progress with one or more of Lexxica’s learning applications will be required to enter their real name, school or company name, and a working email address as their Login ID. This information will never be disclosed to third parties in any way for any reason. Personally identifiable information is used only by Lexxica and only to provide the Services.
Any User of Lexxica’s Services may see their personal data inside the applications and edit their personal data or delete their account at any time on the Settings page of the application they are using. If a User chooses to delete their account, their nickname, real name, school or company name if any, and email address if any, will be permanently deleted from the Company’s database and records. Account recovery is not possible after account deletion.
After 360 consecutive days without login, a User account is automatically scheduled for deletion. No personally identifiable data shall be retained. All personally identifiable data shall be deleted. Users are required to login to their account at least once each year to maintain their accounts.
About joining WAM Admin groups and Team Challenge tournaments
If you are a student User and you choose to join a group that is part of a WAM Admin LMS account, you should enter at least part of your real name for example, Maria S., so your teacher or group leader can know who you are.
In any case, your real name will only be shown to your teacher or group leader. Other group members will not be able to see your real name in the Services Lexxica provides. Other group members will only be able to see your nickname.
If you are a student User and you quit a group, your account will continue to exist but your Login ID, nickname, real name and progress data will no longer be shown to your teacher or group leader.
If you delete your User account, your Login ID, nickname, real name, and email address, if any, will be completely deleted from our database. Account recovery is not possible after account deletion.
If you are using the WAM Admin LMS Services and you choose to create a group for other people to join, you must enter your real name, school or company name if any, a name for your group, and a working email address. All student Users who join your group will be able to see your real name and the group name but they will not be able to see your email address. As the owner of a WAM Admin LMS account, you alone will be able to see the real names of student Users who join one of your groups. You will NOT be able to see any email addresses that your student Users may have entered for account recovery purposes.
If you choose to have one or more of your groups compete in a global, regional, or intramural tournament, keep in mind that all participating groups will be able to see the names of the other participating groups, as well as the nicknames of top players in a top ranked group. During tournaments, your school or company’s name will not be shown to the other participants. To protect your privacy we suggest you do not include your school or company’s name as a part of the name you create for any group.
Lexxica’s Commitment to Security
Lexxica does not willingly disclose real names or email addresses to any third parties without User permission, except as required by Japanese law. While we cannot ensure the security of personal information as it is being transmitted to Lexxica via the Internet, once we actually receive the transmission of personal information we make all commercially reasonable efforts to maintain the security and privacy of that data. This is not a guarantee that your personal information and progress data will not be accessed, disclosed, altered, or destroyed by a security breach. If Lexxica learns of a serious security breach, we may post a message in the Services, and we may send you an announcement and email so you can take protective steps.
Lexxica maintains a comprehensive security program designed to protect the security, privacy, confidentiality, and integrity of all User personal information against risks of unauthorized access, use, or unintended or inappropriate disclosures. Lexxica’s security program involves administrative, technological, and physical safeguards appropriate to the degree of sensitivity of the personal information that is collected and maintained.
About Children’s Privacy
Children under age 13 may only use the Services with the full consent of their parent, authorized teacher, or legal guardian. If you are under 13 years of age your parent, authorized teacher, or legal guardian must complete the User account registration process. If Lexxica discovers that a person under 13 years of age has registered an account without a parent or legal guardian’s consent, Lexxica may delete the account immediately, and without notice to the User.
Note to International Users
As of the effective date written below, the Services are hosted in Japan, a country that maintains very strict consumer privacy protection laws. If you access the Services from anywhere outside of Japan, be advised that your use of the Services indicates specific consent to the transfer of your personal information to Lexxica’s cloud servers located within Japan and operating under Japanese law.
Data Encryption Security
Access to all Words & Monsters services occurs via HTTPS encrypted connections. User data, both personal and non personal, is encrypted before it leaves our servers and it remains encrypted as it transits via the internet. Our transmissions of content to each User is also key encrypted. Personal User data such as passwords are stored on our servers in encrypted formats.
Lexxica uses Sakura Internet Incorporated, to host the Words & Monsters infrastructure on a dedicated server network. Sakura Internet Incorporated (SII) is located in Japan. SII maintains a comprehensive Web Application Firewall designed to protect Lexxica’s data infrastructure against unauthorized access from threats including but not limited to: SQL injection, XXS cross-site scripting, OS command injection, directory traversal, HTTP header injection, and brute force entry. SII undergoes strict ongoing security assessments from external audit firms to ensure compliance with international security standard ISO 27001.
Data Access Security
Lexxica’s data infrastructure is designed to ensure that only authorized traffic over approved ports is allowed. Access to our data infrastructure requires the use of strong passwords and multifactor authentication. We limit data infrastructure access to only our directly employed engineers and every access records the engineer’s name, the time, and their activity.
Backups and Physical Security
We maintain automated data backup and recovery systems designed to provide complete restoration of Words & Monsters Services with minimal data loss in the case of a system failure. Our backup files are encrypted and stored on separate servers. Additional technical measures to ensure that User data is protected against misuse or accidental loss include:
- Uninterruptible power supply (UPS);
- Remote storage; and
- WAF firewall systems
Physical measures employed by SII to prevent unauthorized persons from gaining access to SII’s data infrastructure hardware include:
- Security authorization is required for all SII employees and third parties;
- Access control locks use magnetic and chip card ID readers;
- Data center doors lock automatically; and
- Complete video surveillance and alarm systems
How Lexxica Collects Information
When you use the Services, you may be asked to provide personal information such as your real name and a working email address.
When you use the Services, we may send one or more cookies – a small text file containing a string of alphanumeric characters – to help identify your device and browser type. Lexxica uses both session cookies and persistent cookies. A session cookie is temporary and it disappears after you close the application or browser. A persistent cookie remains after you close an application or browser. Persistent cookies allow automatic login each time you reopen an application. Some features of the Company Services may not function properly if the ability to accept cookies is disabled.
When you use the Company Services, our servers may automatically log certain information about your device or web browser such as your Internet Protocol (“IP”) address, device type, operating system, browser type, browser language, entry and exit screen or URL, platform type, domain names, the amount of time spent on particular pages, and the date and time of a request. In addition we may use web beacons in emails sent to Users so we can track if the emails were opened.
How Lexxica Uses Information
If the Company has your email address on file, we may use it without advance notice to notify you about server maintenance work or technical upgrades. We may also send announcements and or email messages with links to information about additional Company Services. You will be able to opt out of future emails in the footer of each such email.
When Lexxica Discloses Personal Information
We release personal information only to comply with the laws of Japan, or international laws (such as international Copyright Law), or to respond to a Japanese court order.
Third Party Advertisers and Links to Other Sites
Lexxica may partner with other companies called third parties to provide advertisements and or links to other services. Such content and links may appear within the Lexxica applications and websites. Such third parties may use technology including cookies and web beacons to measure and enhance the effectiveness of their advertisements.
Lexxica does not engage in any form of behavioral targeting of advertisements. Lexxica does not share any User personal data with any of its third party advertisers. Lexxica does not allow its third party advertisers to engage in any form of behavioral targeting of advertisements.
In the Event of Merger, Sale or Dissolution
If you do not agree to any of the terms and conditions then you should stop using the Services and delete your account.
The Words & Monsters game, and the WAM Admin services are made available to Users free of charge; however, in app purchases are available at the User’s option.
The Services are designed to operate with Android’s version 4.1 or higher; and Apple’s iOS 9.0 or higher, however, the Company cannot provide assurance the Services will operate on any particular device. User hereby accepts this fact and understands that newer hardware, operating systems, or other elements may be required of the User in order to gain access to, and utilize all features of, the Services. Any User that encounters a problem accessing the Services should report the specific nature of the problem to the Company so we may consider appropriate remedial action.
To maintain optimal high speed Services for the benefit of active Users, the Company reserves the right to suspend the calculation of account data for inactive Users who have not logged in to their account within a 3-month consecutive time period. Furthermore, the Company reserves the right to delete Login IDs and account data for inactive Users who have not logged in to their account within a 6-month consecutive time period. In any case, the Company will schedule for deletion any User account that has not been used within any 360 consecutive days period. If you do not login to your account at least once a year, it may be deleted without notice to you.
User agrees that all information and content published by the Services has been prepared with the utmost care using the Company’s proprietary systems and algorithms. User assumes full responsibility for all risks that may exist through use of the Services. User accepts that the Company may need to change aspects of the Services from time to time and that changes may occur without prior notice to the User and that such changes may inadvertently result in the deletion or loss of existing User files and progress data. User accepts that the Services may experience interruptions and or discontinuance of account access. Additionally, User accepts that in providing the Services via the Internet, data exchanges are exposed to various security risks.
The Company shall make efforts consistent with industry standards to protect the security and privacy of User account records and, in particular, to protect real names, email addresses and organization names against misappropriation and misuse. User hereby agrees to hold the Company harmless from any and all claims of material damage related to the integrity and security of the Services and web sites. User agrees that under no circumstance shall User publish false assertions or make derogatory claims, or make direct or indirect derogatory claims against the Company based on any perceived form of damage alleged to have been caused by representations, or lack of representations, by the Company about the Services.
Company maintains that all copyrights, trade names, registered trademarks, patents, and content including but not limited to: text, documents, graphic images, audio recordings, video programs, etc that are published or displayed by the Company through the Services are protected intellectual property presented under the auspices of the Company and subject to all relevant legal protections under international Copyright, Trademark, and Patent Laws, and by the relevant laws of Japan. Any User who desires to reproduce or reuse the intellectual property of the Company must first seek written approval from the Company or risk prosecution under applicable laws. The proprietary systems and methods utilized in the Services have been submitted for trademark and patent protection in all countries that are members to the international patent cooperation treaty.
User hereby acknowledges and agrees to respect the Company’s copyrights, trade names, registered trademarks, patents, and proprietary systems and methods as the exclusive property of the Company. User accepts that the Company may, from time to time, post and display hyperlinks on the Services and in messages sent to User regarding the Services, and that the hyperlinks may lead to web sites and applications that are not owned or controlled by the Company. Furthermore, User accepts that the Company shall bear no responsibility for any content or quality issues or problems encountered by User when accessing or using any such external hyperlinks.
User hereby accepts that all responses and interactions entered by User may be analyzed by the Company, and that such analysis may result in the publication of research and findings based on such analysis. User hereby accepts that any responses and interactions User enters into any portions of the Services shall become the intellectual property of the Company. Under no circumstances will research published by the Company disclose a User’s personally identifiable information such as actual name, school name, or email address, unless User has specifically permitted such disclosure.
The Company may from time to time request to publish a User’s comment and or endorsement of the Services. Any such request may include a request for permission to disclose User’s name and or organizational affiliation. Users are under no obligation whatsoever to grant any such approval to the Company.
If you do not agree to any of the terms and conditions then you should stop using the Services and delete your account.
Effective date: May 13, 2021