Privacy Policy.

Sakura Seats (sakuraseats.com) is operated by CIEL ZORA TECH CO., LTD., a company registered in Thailand. CIEL ZORA TECH CO., LTD. is responsible for the information we collect through the service. For privacy questions or data requests, email support@sakuraseats.com.

You can search award seats without signing in. We do not use advertising trackers. We measure how the site is used with Amplitude only as described under Usage analytics below, including the choice you have about it.

Google shares your name, email address and profile picture address with us, along with an account identifier. We ask for nothing else: no access to Gmail, Drive, contacts or your calendar, and we never see your Google password. We keep no Google access or refresh tokens after sign-in.

A signed-in session is kept in our database with the network address and browser name it started from, so a session can be recognised and ended. It lasts at most seven days. We set one sign-in cookie for this; it is not used for tracking.

We use Amplitude, Inc. as our service provider to measure, in aggregate, how the site is used, so we know what to improve. While analytics is on in your browser (see Your choice about analytics below), Amplitude records the pages you visit (the page address without anything after the “?”, and with numbers in the address replaced), the airports and cabin you search, and when you start signing in, save an alert, pick a plan, send a bug report or submit an idea. It also records when a visit starts and ends. It does not record your clicks in general, what you type into a form, or the content of a bug report or idea.

Amplitude also receives your browser and operating system, language, and your network (IP) address, which it stores with the events and uses to work out an approximate location (country, region and city). It records how you reached the site: the address of the page that linked here and its domain, and any campaign tags or ad click identifiers in the link you arrived by (for example utm_source or gclid). If you are signed in, it also receives your plan and a pseudonymous account ID: a one-way hash of our internal account number, never your name or email address. This ID is not anonymous, because we can match it to your account, and it lets Amplitude connect your visits from different browsers.

Only once analytics is on, and so that it can recognise the same browser between visits, Amplitude sets first-party cookies on this site whose names start with AMP_ (including AMP_MKTG_ for how you arrived), holding a random device identifier, and keeps events not yet sent in your browser's local storage. The cookies last up to a year. Signing out resets the device identifier. We do not use this data for advertising. Amplitude processes it on our behalf in the United States (see International transfers).

Your choice about analytics. If you visit from the European Economic Area, the United Kingdom or Quebec, or we cannot tell where you are visiting from, analytics is off and Amplitude is not loaded until you choose “Allow analytics” in the banner or turn analytics on in Privacy choices. Elsewhere, analytics is on unless you turn it off. If your browser sends a Global Privacy Control signal, analytics is turned off wherever you are and we save that as your choice, so it stays off even after your browser stops sending the signal, until you turn analytics on in Privacy choices. You can change your choice at any time under Privacy choices at the bottom of every page; turning analytics off stops Amplitude from collecting anything more from this browser and removes its cookies. Saying no, or turning it off, does not change any feature.

We save your choice in your browser's local storage, not in a cookie: whether analytics is on, whether you chose in the banner or in Privacy choices, the version of the request, and when you chose. The record stays on this browser. When you allow analytics, Amplitude receives one 'Analytics Consent Given' event carrying only the version of the request you agreed to, so we can show which wording you accepted; nothing is sent when you decline. The choice applies only to this browser, so on another browser or after you clear this site's data you will need to choose again. A choice lasts 12 months. After that, or if we change what analytics collects, we treat it as not yet made: where we ask for permission we ask again, and elsewhere analytics is on unless you turn it off.

You can also block Amplitude's cookies, or requests to amplitude.com, in your browser or with a content blocker. Turning analytics off does not delete what was already collected. To have the analytics data linked to your account deleted, email support@sakuraseats.com and we will ask Amplitude to delete it. We keep analytics data only while it is useful for improving the site and delete it on request.

Cloudflare, which carries traffic to the site, also runs Cloudflare Web Analytics on every page. It records the page address, the page you came from, your browser type and how long the page took to load, without cookies, so we can see how fast pages load and which pages are used. You can block requests to static.cloudflareinsights.com in your browser or with a content blocker.

• to identify your account and keep you signed in;
• to save the award alerts you create, and email you when one matches;
• to understand how the site is used, in aggregate, so we can improve it;
• to protect the service against abuse, as described in our Terms of Service.

We do not sell your data, share it for advertising, or send you marketing email.

If you send a bug report, we keep the name, email address, description, page and any screenshot you attach, plus a one-way hash of your network address to limit abuse. Ideas you submit are kept with their text.

Bug report screenshots are kept for up to 30 days, and report text and contact details for up to 180 days.

For new purchases, Creem (Armitage Labs OÜ, Estonia) is the merchant of record. We send Creem your account email before payment to prefill checkout, and our account and checkout identifiers to link the purchase. On Creem's checkout you give your name, email, billing address and payment details. Creem uses them as an independent controller to sell Pro, take payment, issue invoices, handle tax, refunds and disputes, and prevent fraud and financial crime, under the Creem Privacy Notice. Creem and we are separate controllers for the purchase data it shares with us.

Creem shares buyer name, email address and country, and checkout, order, customer, subscription and product identifiers. We keep purchase identifiers, plan, amount, currency, payment, refund and dispute status, and access and renewal dates to link purchases to your account, provide Pro, support and legally required accounting records. We never receive your full card number or security code. Webhook bodies and payment identities are not retained in the event inbox.

We keep the connection country Cloudflare reports when you start checkout, not your full IP address. We store your account, product, price, consent time, disclosure text and version/hash, and browser user agent as proof of purchase consent. Consent proof is retained for at least three years or one year after the contract ends, whichever is longer. Billing and consent records are retained for seven years where accounting, tax, refund or dispute obligations require, including after account deletion.

Existing Stripe purchases remain processed by Stripe under the Stripe Privacy Policy. CIEL ZORA TECH CO., LTD. is the seller for those purchases. Stripe receives card, email and billing address data and shares purchase identifiers, amounts, currency and payment state with us; it handles card details without sharing full card numbers or security codes.

• DigitalOcean hosts the site and its database;
• Cloudflare carries traffic to the site, measures page loads with Cloudflare Web Analytics (no cookies) and stores encrypted backups;
• Creem (Armitage Labs OÜ, Estonia) sells new Pro purchases as an independent controller under its Privacy Notice; Stripe processes existing Stripe purchases.
• Resend delivers alert emails;
• Sentry receives error reports, with credentials and personal details removed before they are sent;
• Amplitude, Inc., in the United States, receives the usage analytics described above as our service provider, under a data processing agreement.

CIEL ZORA TECH CO., LTD. is based in Thailand, and your account data is stored on servers in the United States (DigitalOcean, San Francisco). Our service providers in the United States are DigitalOcean, Cloudflare, Resend, Sentry and Amplitude, each under a data processing agreement. Creem (Armitage Labs OÜ, Estonia, in the European Union) sells new Pro purchases, and Stripe (United States) processes existing Stripe purchases. Your information may be processed outside the country where you live. Where required by law, appropriate safeguards are needed for these transfers. Contact support@sakuraseats.com for information about the safeguards applicable to your data.

You can delete your alerts at any time and sign out from the account menu. To have your account and its data deleted, or to ask what we hold about you, email support@sakuraseats.com from the address you sign in with. You can also remove the app's access in your Google account settings.

We may update this policy. The date above shows the latest version.