Legal

Privacy Policy

Effective date: November 1, 2026

TravelSafe Japan (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our website at travelsafejapan.com.

1. Information We Collect

There are no accounts. The free tools need no personal details. If you buy one of our paid products, we collect what is needed to deliver it.

1.1 Allergy Card Inputs

When you generate an allergy card, the allergens and restrictions you select or type are sent to Google AI (Gemini) to produce the Japanese card text. A free card is not stored on our servers. If you buy, the card is stored with your purchase (see 1.2). Please do not type names or other personal details into the allergy fields.

1.2 Purchases

When you buy the allergy card or the Japan Offline Pack:

  • Payment: Stripe collects your email address, card details and billing country to take the payment. We never see your full card number. We receive your email address and the order details from Stripe.
  • Your purchase: we store your email address, your allergy card and a private access link in our database so you can open your purchase on any device during the 30 days.
  • Details you choose to add (Offline Pack): the emergency information card (for example name, date of birth, blood type, allergies, medical conditions, medicines, emergency contact, hotel and insurance details), your taxi destinations and your checklist ticks. Every field is optional. Some of this is health information; by typing it in, you agree to us storing it for the sole purpose of showing it back to you on your cards. Leave out anything you would rather not store.
  • Email: we send your access link, and resend it if you ask, through Resend.

The card images and PDFs are made in your own browser; the files you save stay on your device.

1.3 Rate-Limit Counters

To prevent abuse, we count requests per IP address (allergy cards generated per day, checkouts started per hour) and per purchase (saves per day), and limit how often a link can be resent to one email address. These counters expire automatically within 48 hours. We also keep anonymous monthly totals (for example, the number of cards generated site-wide) that contain no IP address.

1.4 Data Stored in Your Browser

Some tools remember your selections (for example, allergens you picked) in your browser’s local storage. After a purchase, your browser also remembers your private access link so you can reopen it. This stays on your device. You can clear it at any time in your browser settings.

1.5 Cookies and Analytics

We do not use advertising cookies or sell your data. We use Google Analytics 4, which sets first-party cookies (e.g., _ga) to measure aggregate traffic and feature usage (such as how many allergy cards are generated and how many purchases are made, with the product and price). Google Analytics does not receive your allergy details, your emergency details or your email address. You can opt out with the Google Analytics Opt-out Browser Add-on.

We also use Microsoft Clarity to understand how pages are used (where people tap, how far they scroll, where they get stuck). Clarity records page interactions and sets first-party cookies (e.g., _clck, _clsk) with a pseudonymous identifier. It does not record what you type into fields, the text of your generated allergy card, or anything on your purchase page; it can see which allergy buttons were tapped. We use these recordings only to improve the site.

Some pages link to partner companies (see our Affiliate Disclosure). We record in Google Analytics only that a partner link was clicked, with the partner name and the page position. If you follow the link, the partner or its affiliate network may set its own cookie on its own site to credit us for the visit; that is governed by the partner’s privacy policy.

1.6 Former Accounts

Earlier versions of the Service offered sign-in accounts and subscription plans. These have been retired. If you created an account before September 2026 and want its data deleted, email us (see section 6).

2. How We Use Your Information

  • To provide the Service: make allergy cards and run the travel tools
  • To deliver what you bought: open your purchase, save your edits, and email your link
  • To handle refunds and support requests
  • To apply fair-use limits and prevent abuse
  • To understand aggregate usage so we know which tools to maintain
  • To comply with legal obligations, such as keeping payment records

3. Legal Bases (UK and EU visitors)

  • Contract: processing your purchase, delivering it and emailing your link
  • Explicit consent: health details you choose to type into the emergency card. You can remove them at any time by clearing the fields, or ask us to delete them
  • Legitimate interests: rate limits, security and aggregate usage statistics
  • Legal obligation: keeping payment and tax records

4. Third-Party Services

We share data with the following third parties only as necessary to provide the Service:

We do not sell your personal data to any third parties.

5. Data Retention

  • Your purchase and the details you saved in it (email, allergy card, emergency details, taxi destinations, checklist): deleted automatically from our database 31 days after purchase
  • Payment records: kept by Stripe, and by us as required for tax and accounting
  • Purchase emails: Resend keeps delivery logs under its own retention policy
  • Rate-limit counters: expire automatically within 48 hours
  • Free allergy card inputs: not stored — used only to generate your card
  • Browser storage: stays on your device until you clear it
  • Analytics: Google Analytics data is retained for 14 months

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of any data associated with you, including your purchase before it expires
  • Portability: Request your data in a portable format
  • Objection and withdrawal of consent: Object to processing, or withdraw consent for health details at any time

To exercise any of these rights, contact us at [email protected] from the email address you used. You can also complain to your local data protection authority.

7. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

8. International Data Transfers

Our service is hosted and operated with infrastructure primarily based in the United States and Japan. If you are located in the UK or EU/EEA, your data may be transferred to countries outside them. We rely on our providers (Cloudflare, Google, Stripe, Resend, Upstash) to provide appropriate data transfer safeguards.

9. Security

We implement reasonable technical and organizational measures to protect your data, including HTTPS encryption, a long random access link for each purchase, and secure credential management. However, no method of transmission over the internet is 100% secure. Keep your purchase link private.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will post material changes on this page with a new effective date. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

For privacy-related requests or questions, contact us at: [email protected]

Or visit our Contact page.