DATA

Handling of Personal Data

Last updated: August 5, 2026

Data We Collect

Data type
Details and purpose

Email address

Used for member registration and login authentication. Notification emails are off by default and are only sent if you turn them on yourself.

Email preferences

Whether you turned delivery on, when you turned it on, an unsubscribe token, the last month we emailed you, and the date you last filed a payslip together with the pay day estimated from it. Pay days differ by country and employer (around the 25th in Japan, month end in the Gulf, twice a month in the US), so rather than fixing a send date we use that estimate.

Username

Used as your display name in the community. It does not have to be your real name.

Browsing logs

Used for access analytics to improve the service and prevent abuse. Processed in a form that does not identify individuals.

Cookies / LocalStorage

Used to store user preferences such as theme settings (dark/light), and to maintain your authentication session.

Posted content

Posts and comments submitted to the community. Content that violates the Terms of Service is subject to removal.

Payslip images

Used only to read the figures for auto-fill. What is sent is only what is inside the “sent area” frame you approved. Everything outside the frame is cropped away on your own device before sending and never leaves it. The frame is placed automatically over the pay tables and you can move it yourself. Inside the frame, your name, staff number and account number are also found and blacked out automatically on your device, and the image is sent only after you have checked it (the un-redacted image never leaves your device). Automatic detection can miss things, so there is a step where you check the image before it is sent. If you drop a PDF, only its first page is turned into an image on your device and goes through the same steps — later pages are never sent. The image is read in server memory only — it is never written to storage or to a database, and never written to logs — and is discarded as soon as it has been read.

Pay reports

The figures, hours and airline you submit. They are stored without being linked to who submitted them (we keep an irreversible hash rather than your account ID, purely to detect duplicate submissions). Used to produce aggregate statistics.

IP address (hashed)

Used only to count payslip reads against the daily limit (one per day when signed out). The IP address itself is never stored: it is converted into an irreversible hash and kept for 30 days only, then deleted.

Email We Send You

  • Who receives it: only members who switched on the monthly reminder on their own page. It is off by default, and until you switch it on we send you nothing.
  • How often: at most once a month. Never twice in the same month. It goes out only when your pay day has passed and that month's payslip has not been filed yet.
  • What it says: the days of data access you have left, your streak, how many payslips you have filed, and a link back to your page.
  • What it never says: no amounts at all. No airline name, no fleet, no position, no payslip line items. Email lives on in your inbox and in a delivery provider's logs, so anything to do with your pay stays behind the login.
  • How to stop it: press "Unsubscribe" at the foot of the email and it stops there and then (no login needed, one press). Turning the switch back off on your page does the same. Either action takes effect immediately.

Data Retention Periods

  • Member account data: deleted within 30 days of a withdrawal request
  • Access logs: retained for up to 90 days, then deleted
  • Community posts: may remain in anonymized form even after you withdraw
  • Payslip images: not retained at all — discarded immediately after being read
  • Hashed IP addresses used for rate limiting: deleted after 30 days
  • Email preferences: deleted when you withdraw (the date you gave consent is kept until then, as the record of that consent)

Overseas Transfer of Data

This site is operated primarily from within Japan. In the course of providing the service, some data processing may take place on servers located overseas. Where this occurs, we implement appropriate protective measures.

Specifically, the following processing involves providers outside Japan.

  • Reading payslips: what is sent to Anthropic's API (United States) is only what is inside the “sent area” frame you approved. Anything outside the frame never leaves your device — it is cropped away before sending — and the redaction inside the frame is burned into the pixels on your device first. It is sent solely to be read and is not stored by us.
  • Translating reviews: review text is sent to the same API to be translated between Japanese and English.
  • Authentication and database: provided by Supabase.
  • Sending email: handled by Resend (United States). Your email address and the message body pass through them in order to be delivered (the body contains no amounts and no airline name).

Requesting Deletion of Your Data

If you wish to have your data deleted or disclosed to you, please contact us via the withdrawal request form on your profile page or the inquiry form on the community page. We will respond promptly once we have verified your identity.

Data Relating to Minors

This site is not intended for persons under 18 years of age. If a person under 18 has registered in error, please notify us promptly.