Current information · Updated 5 August 2026
Who is responsible
The private individual responsible for Japan Booking Calendar is the controller of personal data sent through the contact form. The dedicated contact form is also the channel for privacy requests; it does not require the owner's personal address to be published.
Data stored only on your device
Trip dates, selected cities and experiences, favourites, completed tasks, recent searches, recently viewed experiences, language and the cookie choice are stored in your browser's localStorage. This information is not sent to a Japan Booking Calendar account or database.
You can delete this information with the controls provided in the website or by clearing site data in your browser. Removing browser data may also remove saved plans and preferences.
Contact messages
When you submit the contact form, the project processes the name, email address, message, privacy acknowledgement and the technical anti-spam information generated by the submission. Netlify Forms receives and stores the submission so it can be read and answered.
The purpose is to answer your request and protect the form from abuse. The legal basis is the action you request by sending the message and, where applicable, the legitimate interest in maintaining a secure contact channel.
Contact submissions are deleted no later than six months after the matter is resolved, unless they must be retained for longer to establish, exercise or defend a legal claim.
Hosting, logs, analytics and advertising
Netlify hosts the website and may process network, device, security and access-log information needed to deliver and protect the service under its own documented retention and security practices.
Google Analytics is prepared but remains disabled unless a measurement ID is configured and you explicitly accept analytics. When enabled, it is configured without advertising signals or ad personalisation and with a maximum analytics-cookie lifetime of twelve months.
When a valid AdSense publisher ID is configured in production, the official Google AdSense script and account meta tag are loaded so Google can verify the site and, after approval, serve Auto ads. Consent Mode v2 starts with analytics and advertising storage denied. In regions covered by Google's consent requirements, advertising choices must be collected through a Google-certified consent management platform.
The website has no user accounts, payment processing or newsletter subscription list.
Recipients and international processing
Information is not sold. Netlify acts as the website and form infrastructure provider. Google acts as an analytics provider only if analytics has been configured and accepted, and as an advertising technology provider when AdSense is configured. These providers may process information outside the European Economic Area using the safeguards described in their privacy and data-processing documentation.
Your rights
Depending on the circumstances, you may request access, rectification, erasure, restriction, portability or objection, and withdraw consent at any time without affecting earlier lawful processing. Use the contact form and describe the request clearly; identity may be verified when necessary to protect your information.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security and policy changes
Reasonable technical and organisational safeguards are used, but no internet transmission or storage system is completely risk-free. This policy will be updated when the website's processing, providers or legal requirements materially change. The current update date is always displayed at the top of this page.