DATA

Handling of Personal Data

Last updated: August 5, 2026

Data We Collect

Data type
Details and purpose

Email address

Used for member registration and login authentication. Notification emails are off by default and are only sent if you turn them on yourself.

Email preferences

Whether you turned delivery on, when you turned it on, an unsubscribe token, the last month we emailed you, and the date you last filed a payslip together with the pay day estimated from it. Pay days differ by country and employer (around the 25th in Japan, month end in the Gulf, twice a month in the US), so rather than fixing a send date we use that estimate.

Username

Used as your display name in the community. It does not have to be your real name.

Browsing logs

Used for access analytics to improve the service and prevent abuse. Processed in a form that does not identify individuals.

Cookies / LocalStorage

Used to store user preferences such as theme settings (dark/light), and to maintain your authentication session.

Posted content

Posts and comments submitted to the community. Content that violates the Terms of Service is subject to removal.

Payslip images

Used only to read the pay figures for auto-fill. The image is redrawn on your own device first (location and other attached details are dropped there), and then the whole payslip page is sent to be read. The reading extracts only the pay items, amounts, period, currency and duty hours; your name, staff number, account number, address and similar are not part of what is returned or stored (the shape of what we extract has no field for them). If you drop a PDF, only its first page is turned into an image on your device before it is sent — later pages are never sent. The image is read in server memory only — we never write it to storage or to a database, and never to logs — and it is discarded as soon as it has been read. How Anthropic, who runs the reading, handles it is set out under “Overseas Transfer of Data” below. Please do not send documents that show a national ID or tax number (such as Japan’s My Number).

Pay reports

The figures, hours and airline you submit. They are stored without being linked to who submitted them (we keep an irreversible hash rather than your account ID, purely to detect duplicate submissions). Used to produce aggregate statistics.

IP address (hashed)

Used only to count payslip reads against the daily limit (one per day when signed out). The IP address itself is never stored: it is converted into an irreversible hash and kept for 30 days only, then deleted.

Email We Send You

  • Who receives it: only members who switched on the monthly reminder on their own page. It is off by default, and until you switch it on we send you nothing.
  • How often: at most once a month. Never twice in the same month. It goes out only when your pay day has passed and that month's payslip has not been filed yet.
  • What it says: the days of data access you have left, your streak, how many payslips you have filed, and a link back to your page.
  • What it never says: no amounts at all. No airline name, no fleet, no position, no payslip line items. Email lives on in your inbox and in a delivery provider's logs, so anything to do with your pay stays behind the login.
  • How to stop it: press "Unsubscribe" at the foot of the email and it stops there and then (no login needed, one press). Turning the switch back off on your page does the same. Either action takes effect immediately.

Data Retention Periods

  • Member account data: deleted within 30 days of a withdrawal request
  • Access logs: retained for up to 90 days, then deleted
  • Community posts: may remain in anonymized form even after you withdraw
  • Payslip images: not retained by us — discarded immediately after being read (for Anthropic, see “Overseas Transfer of Data” below)
  • Hashed IP addresses used for rate limiting: deleted after 30 days
  • If you answer questions or add a hotel, restaurant, place or town without signing in, a key that lets only your device see your own posts is stored in this browser (the server keeps only an irreversible value made from it). To count additions from one connection, a value derived from your IP address is kept for one day and then deleted. We do not ask for an e-mail address, a name or a location.
  • Email preferences: deleted when you withdraw (the date you gave consent is kept until then, as the record of that consent)

Overseas Transfer of Data

This site is operated primarily from within Japan. In the course of providing the service, some data processing may take place on servers located overseas. Where this occurs, we implement appropriate protective measures.

Specifically, the following processing involves providers outside Japan.

  • Reading payslips: the image of the whole payslip page is sent to Anthropic's API (United States) to read the pay figures. Your name, staff number, bank details and similar are not part of what is returned or stored, and we do not store the image. How Anthropic handles it: under its terms, content received through the API is not used to train its models and is deleted within 30 days (it can be kept for up to 2 years if automatically flagged as a possible breach of its usage policy, among other exceptions). We do not have a Zero Data Retention agreement with Anthropic.
  • Translating reviews: review text is sent to the same API to be translated between Japanese and English.
  • Authentication and database: provided by Supabase.
  • Sending email: handled by Resend (United States). Your email address and the message body pass through them in order to be delivered (the body contains no amounts and no airline name).

Requesting Deletion of Your Data

If you wish to have your data deleted or disclosed to you, please contact us via the withdrawal request form on your profile page or the inquiry form on the community page. We will respond promptly once we have verified your identity.

Data Relating to Minors

This site is not intended for persons under 18 years of age. If a person under 18 has registered in error, please notify us promptly.