Legal
Privacy Policy
Last updated: April 2026JapanDori (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using JapanDori at japandori.com, you agree to the practices described here.
1. Information We Collect
Account information. When you create an account, we collect your email address, display name, and — if you sign in with Google — your Google profile name and profile picture URL.
Trip and itinerary data. We store the trips you create, including destination names, day-by-day itineraries, notes, budgets, and any other content you add to your plan.
Usage data. We automatically collect information about how you interact with JapanDori, including pages visited, features used, search queries entered, and time spent on the service. This data is aggregated and used to improve the product.
Device and technical data. We collect standard web log data including your IP address, browser type, operating system, referring URL, and device type. This information is used for security and analytics purposes.
Communications. If you contact us by email, we retain the content of those communications to respond to your request.
Cookies and local storage. We use cookies and browser local storage to remember your preferences (such as dark mode), keep you signed in, and understand how you use the site. See Section 5 for more detail.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate you securely
- Save, sync, and display your trip itineraries across devices
- Enable collaboration features such as sharing trips with other users
- Improve and personalise the JapanDori experience based on aggregate usage patterns
- Send transactional emails (e.g., account confirmation, password reset) — we do not send marketing emails without your explicit consent
- Detect and prevent fraud, abuse, or security incidents
- Comply with our legal obligations
We will not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.
3. Third-Party Services
JapanDori uses the following third-party services to operate. Each has its own privacy policy that governs how they handle data.
Supabase — our backend platform. Supabase stores your account information, authentication tokens, and trip data on secure servers. Data is stored in the EU (Ireland) region. See supabase.com/privacy.
Google OAuth — if you choose to sign in with Google, Google shares your name and email address with us. See Google's Privacy Policy.
Google Maps API — used to display maps, search for places, and show route information within the trip planner. Your map interactions are subject to Google's Privacy Policy.
Vercel — our hosting and deployment platform. Vercel processes web requests and may log IP addresses and request metadata. See vercel.com/legal/privacy-policy.
Vercel Analytics — we use Vercel's privacy-friendly analytics to understand traffic patterns. Data is aggregated and does not identify individual users.
Sanity — our content management system, used to manage travel guides and editorial content. Content data (not personal user data) is stored with Sanity. See sanity.io/legal/privacy.
Booking.com affiliate programme — we display accommodation recommendations that link to Booking.com. When you click these links, Booking.com may set cookies and collect data in accordance with their own privacy policy.
Klook affiliate programme — we display activity and experience recommendations that link to Klook. The same affiliate cookie disclosure applies.
Stay22 — we use Stay22's “Let Me Allez” script to automatically surface accommodation options near destinations you're viewing. Stay22 may set cookies on your device. See stay22.com/privacy.
Travelpayouts — an affiliate network we use for flight and travel product links. Travelpayouts may set tracking cookies when you click affiliate links.
4. Affiliate Links & Commission Disclosure
Some links on JapanDori are affiliate links. This means we may earn a small commission if you make a purchase or booking after clicking one of these links — at no extra cost to you. We only recommend services we genuinely believe are useful for your Japan trip. Affiliate revenue helps us keep JapanDori free. Our editorial recommendations are never influenced by commercial relationships.
5. Cookies and Local Storage
We use the following types of cookies and browser storage:
- Essential cookies — required for authentication (set by Supabase). Without these, you cannot stay signed in.
- Preference storage — we store your theme preference (light/dark mode) in
localStorage. This is local to your device and never transmitted to our servers. - Analytics — Vercel Analytics uses anonymised, aggregate metrics and does not set persistent tracking cookies.
- Third-party affiliate cookies — affiliate partners (Booking.com, Klook, Stay22, Travelpayouts) may set their own tracking cookies when you click their links. These are governed by the respective third-party privacy policies.
Most browsers allow you to control cookies through their settings. Disabling essential cookies may affect your ability to sign in.
6. Data Retention
We retain your account and trip data for as long as your account is active. If you delete your account, we will permanently delete your personal information and trip data within 30 days, except where we are required to retain it by law (e.g., for tax or fraud prevention purposes). Anonymised, aggregated analytics data may be retained indefinitely.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request that we correct inaccurate or incomplete data
- Deletion — request that we delete your personal data (the “right to be forgotten”)
- Export / portability — request an export of your trip data in a machine-readable format
- Objection — object to how we process your data in certain circumstances
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, email us at harry@japandori.com. We will respond within 30 days.
8. We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Ever. Our business model is based on affiliate commissions and, in future, optional paid features — not advertising or data sales.
9. Children's Privacy
JapanDori is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, by sending an email notification. Your continued use of JapanDori after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: