Privacy Policy | Tabibito Port – Japan Theme Park Crowd Forecasts

Last updated: May 10, 2026

Tabibito Port (hereinafter “this Site”) respects the personal information of all users—including international visitors to Japan and domestic users—and complies with applicable laws and regulations. The following Privacy Policy (hereinafter “this Policy”) sets out how we handle your information.

1. Site Operator / Data Controller

  • Site name: Tabibito Port
  • URL: https://tabibitoport.com/
  • Operator (Data Controller): Yukimaru (sole operator, pen name)
  • Data Protection Officer: Yukimaru (the operator serves in this role)
  • Contact: Contact form

As this Site is a solo operation, we do not have a dedicated Data Protection Officer. The operator personally handles all data management inquiries.

2. Types of Personal Information We Collect

This Site may collect the following information.

2-1. Information Collected Automatically

  • IP address
  • Browser type and version
  • Operating system
  • Referrer information (the URL you came from)
  • Access date, time, and duration of stay
  • Pages viewed and browsing history
  • Identifiers assigned via cookies and similar technologies
  • General geographic information (country and region level only—we do not collect precise location data beyond city level)

2-2. Information You Provide Directly

  • Name, email address, subject, and message body submitted via the contact form

3. Purpose of Use

We use the information we collect for the following purposes:

  1. Operating, maintaining, and improving this Site
  2. Analyzing traffic via Google Analytics 4 (GA4) to improve content quality
  3. Measuring the effectiveness of affiliate advertising (conversion tracking)
  4. Optimizing ad delivery (Google AdSense and similar services)
  5. Responding to inquiries
  6. Detecting and preventing unauthorized access and spam
  7. Complying with legal obligations

4. Data Retention Period

We retain personal information only for as long as necessary to achieve the purposes above.

Information type Retention period
Access logs / cookie identifiers (GA4) Up to 26 months (Google Analytics 4 default)
Inquiry content (via form) Generally deleted within 1 year after the reply is sent
Advertising cookies (Google AdSense) Per each provider’s retention policy
Information subject to legal retention requirements The statutory retention period

If you request deletion, we will delete your data as promptly as reasonably possible, even before the periods above expire (see “Data Subject Rights” below).

5. Use of Cookies and Similar Technologies

5-1. Purposes of Cookie Use

  • Maintaining sessions
  • Traffic analysis (GA4)
  • Personalizing ad delivery (Google AdSense)
  • Measuring affiliate conversions

5-2. Cookie Consent for EU Users (GDPR Article 7)

When you access this Site from the EU (EEA and UK), a cookie consent banner appears on your first visit. Analytics and advertising cookies are only set if you click “Accept.” If you click “Reject,” only essential cookies (required for basic site functionality) will be used.

You may withdraw your consent at any time. To do so:

  • Delete cookies in your browser settings
  • Re-display the consent banner and select “Reject”
  • Request withdrawal via the contact form

5-3. How to Disable Cookies (All Users)

You can disable cookies through your browser settings. Note that some site features may not work properly if cookies are disabled.

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Safari: Preferences → Privacy → Cookies and website data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Edge: Settings → Cookies and site permissions

6. Web Analytics (Google Analytics 4 / GA4)

This Site uses Google Analytics 4, a web analytics service provided by Google. GA4 uses cookies to collect anonymized user information.

How to Opt Out of GA4

For more on GA4: Google Analytics Terms of Service, Google Privacy Policy

7. Advertising (Google AdSense and Others)

This Site uses Google AdSense and other third-party ad networks. In compliance with Google AdSense’s privacy policy requirements, we disclose the following.

7-1. Cookie Use by Third-Party Vendors

Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this Site and other websites.

7-2. Advertising Cookies and Personalized Ads

Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this Site and other websites on the internet (known as personalized advertising).

7-3. How to Opt Out (Google Ads Settings)

You can disable personalized advertising via the following:

7-4. How to Opt Out (aboutads.info / youronlinechoices)

You can opt out of personalized advertising based on third-party cookies via:

7-5. Links to Third-Party Vendors / Ad Networks

8. Affiliate Program Participation

This Site participates in the following 9 affiliate and advertising programs. If you make a purchase through one of our links, we may receive a referral commission.

  1. A8.net
  2. ValueCommerce
  3. Moshimo Affiliate
  4. Amazon Associates
  5. Google AdSense
  6. Rakuten Affiliate
  7. Yahoo! Shopping
  8. LinkShare (Rakuten Advertising)
  9. Others (disclosed individually when applicable)

Each affiliate program operator may use cookies to track link clicks and conversions on this Site.

Amazon Associates required statement:

As an Amazon Associate, Tabibito Port earns from qualifying purchases.

For more, see our Affiliate Disclosure.

9. Disclosure to Third Parties

We will not disclose personal information to third parties except in the following cases:

  1. You have given consent
  2. Disclosure is required by law (formal disclosure requests from courts, law enforcement, etc.)
  3. Disclosure is necessary to protect a person’s life, body, or property, and consent is difficult to obtain
  4. Provided to outsourced service providers (servers, analytics, advertising) within the scope necessary to fulfill the stated purposes

10. Cross-Border Data Transfers

Some services used by this Site may transmit data to servers located outside Japan (primarily in the US and globally).

Service Data destination Legal basis
Google Analytics 4 United States (Google LLC) Google’s Standard Contractual Clauses (SCCs), etc.
Google AdSense United States (Google LLC) Google’s SCCs, etc.
Cloudflare (CDN) United States / globally distributed Cloudflare’s SCCs, etc.
Each affiliate ASP Each provider’s location (Japan, US, EU, etc.) Each provider’s cross-border transfer terms

These transfers are conducted under Standard Contractual Clauses (SCCs) or other appropriate safeguards established by each service provider. For EU residents’ personal data, we comply with the cross-border transfer rules under GDPR Article 44 and onward.

Note: For advanced international legal matters (e.g., GDPR Adequacy Decisions, SCC compliance), please consult a qualified attorney as needed—the operator is not a legal professional.

11. Data Subject Rights

11-1. Rights of Japan Residents (Act on the Protection of Personal Information)

Under Japan’s Act on the Protection of Personal Information (Act No. 57 of 2003, as amended effective April 1, 2022), users have the following rights:

Right Legal basis Description
Right to be informed of the purpose of use Article 32 Request notification of the purpose of use of personal information held by this Site
Right of disclosure Article 33 Request disclosure of personal information held by this Site
Right of correction, addition, or deletion Article 34 Request correction, addition, or deletion of incorrect personal information
Right to halt use or erase Article 35 Request that use be halted or data erased if personal information was unlawfully obtained
Right to halt third-party provision Article 35, Paragraph 3 Request that disclosure to third parties be halted

11-2. Rights of EU Residents (GDPR)

Under the GDPR (Regulation (EU) 2016/679), EU residents have the following rights:

Right Article Description
Right of access GDPR Article 15 Right to confirm purpose, categories, retention period, etc., of personal data
Right to rectification GDPR Article 16 Right to request correction of inaccurate personal data
Right to erasure (“right to be forgotten”) GDPR Article 17 Right to request deletion of personal data under certain conditions
Right to restriction of processing GDPR Article 18 Right to restrict processing of personal data under certain conditions
Right to data portability GDPR Article 20 Right to receive personal data in a structured, machine-readable format
Right to object GDPR Article 21 Right to object to certain processing (e.g., direct marketing)
Right to withdraw consent GDPR Article 7(3) Right to withdraw consent for consent-based processing at any time
Right not to be subject to automated decision-making GDPR Article 22 Right not to be subject to decisions based solely on automated processing, including profiling

11-3. Rights of UK Residents (UK GDPR)

Under the UK GDPR and Data Protection Act 2018, UK residents have substantially the same rights as those listed for EU residents above.

11-4. Rights of California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to know: Request what personal information we collect, use, disclose, or share about you
  • Right to delete: Request deletion of personal information we have collected from you
  • Right to opt-out of sale/sharing: We do not sell your personal information to third parties for monetary consideration. We do not “share” personal information for cross-context behavioral advertising as defined under CPRA
  • Right to correct: Request correction of inaccurate personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights

We will respond within 45 days as required by CCPA. To exercise these rights, see Section 11-5 below.

11-5. How to Exercise Your Rights

To exercise any of the above rights, please follow these steps:

  1. Submit a request via the contact form (https://tabibitoport.com/en/contact/) and clearly note “Request regarding personal information”
  2. Cooperate with identity verification (e.g., email confirmation)
  3. We will respond within 30 days as a general rule (per GDPR standards)
  4. Some requests may not be fulfillable due to legal exceptions

We will respond free of charge, but for clearly excessive or unfounded requests, we may charge a reasonable fee or decline to act (per GDPR Article 12(5)).

12. Filing a Complaint with a Supervisory Authority

If you are dissatisfied with how this Site handles your personal information, you have the right to file a complaint with the relevant supervisory authority:

Region Supervisory authority URL
Japan Personal Information Protection Commission (PPC) https://www.ppc.go.jp/en/
EU Member States National Data Protection Authorities (DPAs) https://edpb.europa.eu/about-edpb/about-edpb/members_en
United Kingdom Information Commissioner’s Office (ICO) https://ico.org.uk/

13. Children’s Personal Information

As a general rule, we do not knowingly collect personal information from individuals under 16 years of age (in line with GDPR-K and common COPPA standards).
If we learn that we have collected such information without parental or guardian consent, we will delete it promptly as appropriate.

Note: Since this Site provides crowd forecasts useful for family travel, parents and guardians are naturally expected to use the Site.

14. Revisions to This Privacy Policy

We may revise this Policy in line with changes in laws, services, or operational policies. For material changes, we will provide advance notice on the Site or homepage.
The most recent revision date appears at the top of this Policy.

15. Security Measures

We take the following measures to prevent leakage, loss, or damage of personal information:

  • HTTPS (SSL/TLS) encrypted communications throughout
  • Access control and DDoS protection via Cloudflare
  • Two-factor authentication and strong passwords for the admin panel (WordPress)
  • Regular backups
  • Prompt deletion of personal information that is no longer needed

16. Contact

For inquiries about this Policy or our handling of personal information:

タイトルとURLをコピーしました