Privacy Policy

1. Data We Collect

Sign-up/login: email address, password (stored in an irreversibly hashed form), nickname. For social login, the provider’s identifier and email.

Non-member features: an anonymous identifier (UID) and recovery code stored in cookies/local storage.

During use: location (only when you use "current location" in route search — used transiently on your device and not stored separately), seat-view photos you upload, and activity such as bookmarks and reviews.

Collected automatically: access logs, cookies, device/browser info, and visit analytics (e.g., GA4).

2. Purpose

To identify members and maintain login, provide member-only features such as reviews, personalize settings (bookmarks, language), operate and improve the Service and run analytics, and prevent abuse and respond to inquiries.

3. Retention

Member data is destroyed without delay upon account deletion (delete all data), except where retention is required by law. You can rotate your UID or delete all data yourself from My Page.

4. Sharing with Third Parties

The operator does not provide your personal data to third parties, except where required by law or with your consent. Information you enter or pay on external sites reached via links (ticketing, transit, lodging) is governed by those providers’ privacy policies.

5. Processing on Our Behalf

To run the Service, the operator may use processors such as cloud hosting (e.g., Vercel) and external map/route/weather APIs, ensuring personal data is handled securely under applicable law.

6. Your Rights

You may access, correct, delete, or restrict processing of your personal data. Nickname edits, review deletion, UID rotation, and full data deletion can be done within the Service; other requests can be made via the contact below.

7. Cookies

Cookies are used for login sessions, language settings, and analytics. You may refuse cookies in your browser settings, but some features such as login may then be limited.

8. Security

Passwords are stored using one-way hashing (PBKDF2), sessions are managed with signed tokens, and access is minimized, among other reasonable safeguards.

9. Contact

For privacy inquiries, access, or deletion requests: aweduck.help@gmail.com

10. Notice of Changes

Any changes to this policy will be announced within the Service with their effective date.