Privacy Policy
Effective: November 6, 2026
Who is responsible
The operator’s legal identity and contact details will be confirmed before launch.
See our Business information page for contact details and how to request seller information. Email — to ask about your personal information.
What we collect and why
| Information | Purpose |
|---|---|
| Route points, map area and any names or labels you choose | Create your preview and print, fulfill your order and investigate printing problems |
| Name, email, delivery address and any required delivery contact details | Take payment, make and deliver your order, send order updates and provide support |
| Order, payment and refund records | Fulfill the contract, handle disputes and meet accounting or legal obligations |
| Messages and photos you send for support | Answer your request and resolve the issue |
| Limited technical information, including IP addresses and security events | Run the site, prevent abuse and diagnose failures |
You choose what route and optional labels to include. A route can reveal places you visit, so avoid including details you do not want printed. We do not collect continuous device location. We do not use your route to target advertising. We do not receive or store your full payment card details; Stripe handles payment information.
We need the design, delivery and payment information necessary to complete an order. If you do not provide it, we may be unable to fulfill that order. Optional design labels can be left out.
Service providers and overseas processing
We share the information needed to provide the service with our hosting, map, payment, printing, delivery and email providers. Some payment and delivery providers also use information for their own legal, fraud-prevention or delivery responsibilities.
Your information may be processed outside Japan or your country of residence, including in the countries listed above. We use applicable legal arrangements and review the safeguards for these transfers. Contact us for information about those arrangements and our oversight measures.
We may also disclose information when legally required or to establish or defend a legal claim. We limit those disclosures to what is needed. We do not sell personal information or share it for cross-context behavioral advertising.
Cookies and measurement
We use necessary browser storage for editing, checkout, security and access to your order. An unfinished design in the current browser tab expires after two hours. We do not use advertising pixels, session recording or fingerprinting. Order emails do not track opens or clicks.
We do not collect optional analytics or link visits to advertising campaigns. Necessary order processing, security and accounting records are kept separately.
How long we keep information
We use delivery details to prepare your shipping estimate, take payment and send your order to Gelato. After we verify that Gelato has accepted the order, we delete the delivery details saved with our shipping estimates. We may keep them while an order’s submission is unresolved or when specific records are needed for a documented dispute or legal obligation. For later order emails, we retrieve the email address from Stripe when needed rather than keeping another contact list.
We normally delete paid-order artwork and route data 30 days after the order is completed. Unpaid-order data is deleted within 24 hours after checkout has expired and payment status is resolved. Support messages and attachments are normally deleted within 30 days after the case is resolved. We handle individual deletion requests separately.
Ordinary application logs are kept for up to seven days. Deleted information may remain in provider-managed backups until those copies expire. Restored data is checked against deletion records before normal processing resumes. Stripe, Gelato and other providers have their own retention arrangements, including legal requirements.
We keep the transaction documents needed for accounting for the applicable legal retention period. We use freee for our books and keep the original evidence needed to support them. We do not keep your route or artwork for accounting. We keep only the information needed to handle and document a privacy request, and delete it when it is no longer needed.
We may retain specific records longer when required by law or needed for a documented dispute. We limit that retention to the relevant information and review when it can be deleted.
Your requests and choices
You can ask to access, correct or delete your information, restrict its use, or receive information about overseas transfer safeguards. Depending on where you live, you may have additional rights. An authorized representative may contact us on your behalf.
We verify identity and authority before disclosing information or making changes. We ask only for what is needed and do not ask you to send full card details. Requests are normally free. We aim to acknowledge them within two business days and provide a substantive response within 30 calendar days, while meeting the deadlines that apply by law.
If we cannot fulfill a request, we will explain the reason, including any records we must retain. You can ask us to review that decision by replying to our response. We aim to answer an appeal within 30 calendar days and can provide the relevant regulator’s contact information. We will not penalize you for exercising privacy rights.
Children and changes to this policy
The store is intended for adults and is not directed to children under 13. If you believe a child has provided personal information, contact us so we can review and remove it as appropriate.
We show the effective date of this policy above. If we materially change how we use information, we will provide the notice and choices required before applying that change.