Last updated: April 24, 2026

Privacy Policy

1. Who We Are

Guide2Japan.com is operated by OnestoMedia B.V., a company registered with the Dutch Chamber of Commerce (KvK) under number 90709063.

Address: Heerjansdampad 9, 6843HT Arnhem, Netherlands
Email: nick@onestomedia.nl

For the purposes of the General Data Protection Regulation (GDPR), OnestoMedia B.V. is the data controller.

2. What Data We Collect

Guide2Japan.com is an informational travel website. We do not require you to create an account or provide personal information to use our site. However, certain data is collected automatically:

• Analytics data (Google Analytics 4): page views, session duration, approximate location (country/city level), device type, browser, operating system, and referring website. Google Analytics uses IP anonymization.
• Advertising data (Google AdSense): ad interaction data, including impressions and clicks. AdSense may use cookies to serve personalized advertisements based on your browsing history.
• Embedded content (YouTube): when you play an embedded YouTube video, YouTube may collect data about your interaction, including cookies.
• Server logs (Vercel): our hosting provider Vercel may log your IP address, request timestamps, and pages visited as part of standard server operations.
• Affiliate click tracking: when you click an outbound link to an accommodation partner, we log an anonymous click record to our own database (Supabase). This record contains only a hashed (SHA-256, truncated) IP address, country code, user-agent string, referring page, and the partner/product identifiers. We use this data to measure which content drives bookings. The hashed IP cannot be reversed to identify you.

3. Legal Basis for Processing

We process personal data based on the following legal grounds under the GDPR:

• Consent (Article 6(1)(a)): for analytics cookies (Google Analytics), advertising cookies (Google AdSense), and embedded content cookies (YouTube). These are only activated after you provide consent via our cookie consent mechanism.
• Legitimate interest (Article 6(1)(f)): for essential server operations (security, abuse prevention, server logs). Our legitimate interest is maintaining a secure and functional website.

4. Cookies

We use cookies and similar technologies on our website. For detailed information about the types of cookies we use, their purpose, and how to manage them, please see our Cookie Policy.

5. Third Parties

We share data with the following third-party services:

• Google Analytics (Google LLC): website analytics. Google Privacy Policy
• Google AdSense (Google LLC): advertising. Google Privacy Policy
• YouTube (Google LLC): embedded video content. Google Privacy Policy
• Vercel Inc.: website hosting. Vercel Privacy Policy
• Supabase Inc.: database hosting for affiliate click tracking (hashed IP, no direct identifiers). Supabase Privacy Policy
• CJ Affiliate (a Publicis Groupe company): affiliate network used to track accommodation referrals. When you click a booking partner link, you are redirected through CJ's domain (anrdoezrs.net), which may place a cookie to attribute any subsequent booking to Guide2Japan.com. CJ Privacy Policy
• Booking.com B.V.: accommodation partner reached via our affiliate links. After redirect, Booking.com processes your visit under its own privacy policy. Booking.com Privacy Policy

Affiliate partnerships do not influence our editorial content. We may earn a commission on bookings made through our partner links at no additional cost to you.

6. Data Retention

• Google Analytics: data is retained for 14 months (Google default), after which it is automatically deleted.
• Server logs (Vercel): retained according to Vercel's standard data retention policy.
• Cookies: see our Cookie Policy for specific cookie lifetimes.

We do not maintain our own databases containing your personal data.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: request correction of inaccurate data.
• Right to erasure: request deletion of your data ("right to be forgotten").
• Right to restriction: request that we limit the processing of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to the processing of your data, including for direct marketing purposes.
• Right to withdraw consent: withdraw your consent at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at nick@onestomedia.nl. We will respond within 30 days.

8. Supervisory Authority

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You may do so in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page indicates when the latest changes were made. We encourage you to review this page periodically.

10. Contact

If you have any questions about this privacy policy or our data practices, please contact us:

OnestoMedia B.V.
Heerjansdampad 9, 6843HT Arnhem, Netherlands
Email: nick@onestomedia.nl