Privacy Policy

Who we are

Japan Trip (your-japan-trip.com) is run by its operator, who is responsible for the personal data described here. Write to privacy@your-japan-trip.com about anything in this policy.

What we keep

• Your account: your name, email address, an optional profile photo, and your password. We never keep the password itself — only a protected fingerprint of it, from which the password cannot be recovered.
• Sign-in sessions: a session cookie in your browser, and on our side the session’s expiry, your IP address and your browser’s user-agent string.
• Your trips: dates, days, stops, route edits, bookings and notes — including anything you paste or import, such as booking confirmations.
• Each trip’s checklist and tax-free ledger: passport holders’ names and countries, refund-method labels, shops, purchases, amounts and times.
• Receipt photos you attach to purchases.
• Booking references you enter, and the tickets and vouchers you attach to bookings — PDFs and pictures, with the names you uploaded them under.
• Who is on each trip and with what role, and the trip’s share link if one has been made.
• Which version of these documents you agreed to, and when.
• The language you read the planner in, and which of a trip’s booking deadlines have been marked done.
• If you connect Google Calendar: the access Google gives us to the one calendar we create there, kept until you disconnect.
• Short-lived rate-limit counters keyed by IP address, which stop sign-in guessing and limit use of the AI features.

Why we keep it

To provide the service you asked for: signing you in, storing and syncing your trips across your devices and with the people you share them with, and keeping the service secure and within its costs. We do not use your data for advertising or profiling, and we do not sell it.

Who else sees it

People on a trip with you see that trip’s contents and the name, email address and photo of everyone on it. Anyone holding a trip’s share link can join it with the role the link carries, until the owner resets or removes the link.

We use these services to run Japan Trip. Each receives only what it needs:

• Cloudflare hosts the app and stores everything above (Workers, D1 database, R2 storage), and runs the AI models (Workers AI) that read notes and bookings you paste or import during trip setup — the text of an imported PDF is extracted in your browser and sent as text — and that suggest places for a day, from that day’s stops.
• Resend sends password-reset emails and the reminders that go out before a trip’s booking deadlines, so it receives your email address and the text of those messages.
• Google, only if you connect Google Calendar: we create a calendar in your Google account and write the trip’s booking deadlines into it. The permission we ask for covers calendars we created and nothing else in your account; disconnecting removes that calendar and gives the permission back.
• OpenStreetMap Nominatim and the FOSSGIS routing service receive the names and coordinates of places in your trip to place them on the map and draw routes. Open-Meteo and the Japan Meteorological Agency are asked for weather and warnings by location. Rakuten Travel is asked for photos of the hotels in your trip. These requests come from our server and do not include your name, email address or IP address.
• Your browser loads map tiles from OpenFreeMap, fonts from Google Fonts, and place photos from Wikimedia Commons and Rakuten, so those services see your IP address as any website you visit would.
• If the operator enables it, Better Auth’s hosted dashboard receives sign-in events (account and session details) to help manage accounts.
• Sentry receives technical error reports and a sample of performance timings to help us find and fix failures. We disable session replay and exclude account details, cookies, request headers and bodies, URL query parameters, component props and recorded interactions. Error messages and code stack traces are included; browser requests also expose your IP address to Sentry as any connection would.

On your device

So the planner works without signal, your browser keeps a copy of the trip you have open, its checklist, its ledger and receipt photos, its booking references and attached tickets, plus a note of which account last signed in and until when. Signing out deletes that account’s copy from the browser; if some changes have not reached the server yet, you are asked first. Your language and a few display preferences are also remembered on the device.

The only cookie is the sign-in session cookie, which the service needs to work.

How long we keep it

• Your account and profile: until you ask us to delete your account.
• A trip and everything in it, including its receipt photos and attached tickets: until its owner deletes it. Deleting a trip removes it for everyone on it.
• A ticket or booking reference you remove: deleted at once.
• A receipt photo you remove, or one that never gets attached to a purchase: deleted within a day or two.
• Sessions: until you sign out or a week passes without use; an expired one is deleted within a day.
• Rate-limit counters with IP addresses: up to two days.
• Password-reset links expire after an hour.
• Database backups used for recovery hold earlier copies for up to 30 days, after which deleted data is gone from them too.

Your choices and rights

You can change your name, photo and password in Account settings, delete trips you own, leave trips you are on, and remove purchases and photos. To get a copy of your data, correct something you cannot change yourself, or delete your account, write to privacy@your-japan-trip.com from your account’s email address. We answer within 30 days. Deleting your account deletes the trips you own and removes you from the others.

Depending on where you live you may also have the right to object to or restrict our use of your data and to complain to your data protection authority.

Where it is stored

Cloudflare runs its network worldwide, so your data may be stored or processed outside your country.

Children

Japan Trip is not meant for anyone under 16, and we do not knowingly keep their data.

Changes

When this policy changes in a way that matters, we will change its date above and ask you to agree again before you continue.