Privacy Policy.

1. Information we collect

We collect the following categories of information:

• Account data — email address and any information you choose to associate with your account.
• Itinerary data— the trip plans you build and the optimiser's output, stored against your account.
• Payment data — processed by our third-party payment provider. We receive limited transaction metadata for accounting, fraud prevention, and customer support. We do not receive or store full card numbers.
• Technical data — automatically collected when you use the service, including device, network, and request information used for service operation, security, and abuse prevention.
• Communications — the contents of any reports, support requests, or feedback you send us.

2. How we use it

We use the information described above to operate, secure, and improve the service, authenticate you, process payments, prevent abuse, respond to your requests, and meet our legal obligations. We may also use aggregated or de-identified data for any purpose.

3. Third-party services

We rely on third-party providers for things like payment processing, account authentication, hosting and data storage, transactional email, and the Japan rail data that underpins the service. Each provider operates under its own privacy policy. We may add or change providers over time, including analytics, error monitoring, or advertising technologies, and this page will be updated to reflect material additions.

4. Sharing

We do not sell your personal information. We share information with the service providers above only to the extent necessary for them to perform their function, and we may disclose information when required by law, to enforce our terms, or to protect the rights, property, or safety of us, our users, or others.

5. Cookies and similar technologies

Hanabi uses cookies and similar technologies that are necessary to operate the service, including keeping you signed in and completing a checkout. We may add other cookies in future and will comply with applicable consent requirements.

6. Data retention

We retain account data, itinerary data, and payment records for as long as needed to provide the service, comply with our legal and accounting obligations, resolve disputes, and enforce our agreements. Technical logs are retained for a limited period appropriate to their purpose. When data is no longer needed, we delete or anonymise it.

7. Security

We take reasonable technical and organisational measures to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

Hanabi is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International transfers

Our service providers may process data in countries outside your own. Where required, those transfers rely on standard contractual clauses or equivalent safeguards offered by the provider.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect the most recent revision. For material changes that significantly expand the categories of information we collect or how we share it, we will take reasonable steps to notify users. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Disclaimer of fare accuracy

Hanabi's fare and route information is provided for planning purposes only. Train fares, pass prices, and coverage rules are set by independent rail operators and can change without notice. We make reasonable efforts to keep the data current but provide no warranty as to its accuracy or completeness. You should confirm fares with the operator or an official source before purchasing tickets.

12. Contact

Questions about this policy: blitzlabs at gmail dot com.