Privacy Policy

1. Information We Collect

We collect the following types of information:

• Access logs: IP address, browser type, access timestamps, and pages viewed (collected via Cloudflare).
• Cookies: Browsing and usage statistics collected via Google Analytics (GA4). Analytics cookies are not set unless you accept on the cookie banner.
• Local storage: Favorites, reactions, and search filters stored in your browser's local storage. This information is not transmitted to our servers.
• Feedback: Content you submit through the on-site feedback widget. We do not collect your name or email through this widget.
• Profile preferences: Information you optionally enter on the My Page (preferred area, departure point, budget, age, companions, transportation, experience style, food preferences, dietary restrictions, accessibility, etc.). Used to pre-fill the course generator and to pass conditions to the AI.
• Child age band: When you select "child" as a companion, you may optionally enter an age band (infant / preschool / lower elementary / upper elementary). This is intended for adults and trip planners. A child age band may be entered by a parent or guardian only as part of trip personalization. The band is used only to generate a course and is not retained as a persistent profile entry. We do not knowingly collect personal information from children under 16, and child age bands are never linked to identifying data such as name, email, account ID, or precise location.
• Location (optional): When you explicitly use the "generate a course from spots near my current location" feature, we obtain your latitude and longitude through the browser's Geolocation API. Location is requested per use only; we do not perform continuous tracking, do not associate location with device identifiers, and do not persist location on Hareto servers. Location is referenced from server memory during the course-generation API call only and is never written to logs or databases. Location alone is not personally identifiable, and we do not combine it with other identifiers (such as a LINE account ID or email address).

2. Purposes of Use

We use the information above for the following purposes:

• To operate, maintain, and improve the Service.
• To pre-fill the course-generation form and pass your conditions to the AI for personalization.
• To include nearby spots in course generation when you explicitly enable the location-based feature.
• To produce aggregate usage statistics and analytics.
• To detect and prevent abuse or unauthorized use.
• For administrators to review login history and usage patterns for service operation and improvement.

3. Third-Party Services

We do not sell or rent your personal information. We use the following third-party services to operate the Service. Each provider processes data under its own privacy policy.

• Google Analytics (GA4): Used for usage analytics. The GA4 tag is loaded only after you accept the cookie banner. Data is processed under Google's privacy policy.
• Cloudflare: Used for content delivery and security.
• LINE Login (LY Corporation): Used for social login. When you sign in with LINE, your display name and profile image are obtained. Data is processed under LY Corporation's privacy policy.
• Google AI (Gemini API): When you generate a course, the conditions you entered (area, companions, budget, preferences, etc.) are sent to Google's generative AI service. We do not include user identifiers in the prompt. Data is processed under Google's privacy policy.

4. Cookies and Cookie Consent

We use Google Analytics (GA4) cookies for usage analytics. We do not load the GA4 tag or set analytics cookies until you accept on the cookie banner. If you reject, the GA4 tag is not loaded and no analytics cookies are set during your session.

You can change your choice by clearing the hareto_cookie_consent entry in your browser's local storage, then reloading the page to see the banner again. You may also use the Google Analytics Opt-Out Browser Add-on .

5. Location Data

Location is collected only when you explicitly use a feature that requires it (such as "generate a course from spots near my current location"), and only after you grant the browser's location permission for that request.

• We do not perform continuous location tracking.
• Location is used only for the request you initiated and is not persisted on Hareto servers.
• Location is sent to Google LLC (Gemini API) as part of the course-generation query. Only latitude, longitude, and the conditions you entered are transmitted; user identifiers are not included. Google LLC processes the data under its privacy policy.
• For signed-in users, location is never linked to a LINE account ID, email, or other identifier.
• If you decline the browser's location prompt, location-based features are unavailable but the standard area-based course generator remains usable.

External transmission summary:

• Recipient: Google LLC (Gemini API)
• Data transmitted: Latitude, longitude, and the user-entered course conditions (preferences, companions, budget, etc.)
• Purpose: AI inference for course generation
• Hareto retention: None (referenced from server memory during the API call only; not written to logs or databases)
• Recipient retention: Per the recipient's privacy policy

6. AI-Generated Content

The Service uses generative AI to produce course suggestions. The conditions you enter when generating a course (area, companions, schedule, etc.) are used solely for that course-generation request and are not stored as a personal record.

7. Data Retention

Access logs are retained for up to 14 months (the GA4 default). Feedback submissions are retained for a reasonable period for service improvement.

8. Affiliate Disclosure

Some external links on the Service may become paid or affiliate links once our partner programs (such as Viator, GetYourGuide, or Klook) are active. Such links will be clearly labeled near the booking option, and we may receive a commission if you book through them at no additional cost to you. Affiliate relationships do not influence editorial selection or scoring; we do not accept payment for inclusion or ranking.

9. Role of Hareto / Booking and Contracts

Hareto provides curated information and links to third-party booking platforms or operator websites. Hareto is not a party to any reservation, ticket, or service contract between you and the operator or platform. Bookings are made directly with the operator or third-party platform of your choice. Hareto does not arrange, sell, or take payment for any reservation, tour, or experience, and does not act as an agent under the Japanese Travel Agency Act (旅行業法).

10. Children's Information

Hareto is intended for adults and trip planners. We do not knowingly collect personal information from children under 16. If a child age band is entered for trip personalization, it must be entered by a parent or guardian, and we do not link such bands to identifying information (name, email, account ID, or precise location). If you believe a child has provided us with personal information, please contact us at the address below and we will delete it.

11. International Data Transfers

The Service is operated from Japan. Some service providers (including Google LLC) may process data in the United States or other countries. Where required, we rely on the providers' standard contractual mechanisms for cross-border transfers.

12. Your Choices and Rights

Depending on your location (such as the EEA, UK, or California), you may have rights to access, correct, delete, restrict, or port your personal information, or to object to certain processing. To exercise these rights, contact us at the address below. We will respond within a reasonable time and may need to verify your identity before fulfilling your request.

For California residents: we do not "sell" personal information as defined by the CCPA/CPRA. We use cookies for analytics only, and you can reject them on the cookie banner.

13. Changes to This Policy

We may revise this Policy from time to time. The revised Policy is effective when posted on this page. Material changes will be highlighted on the Service.

14. Contact

For questions or requests regarding this Policy, please contact:

Operator: Tribe Media Inc.
Email: info@hareto.net