Your data, briefly

Summary first

You can read every page of Sapporo Day Trip without an account. The site sets no cookies and runs no analytics, advertising or tracking scripts. What does reach us is the connection data that any web server sees when it sends you a page, and it is described below.

Booking never happens on this site. Pick a tour and you complete the booking on GetYourGuide or Viator, where their own privacy rules govern.

Who is behind this site

Sapporo Day Trip
[email protected]

We have no legal duty to appoint a data protection officer, so no one holds that role. Questions about your data can go to [email protected].

What the Sapporo server writes

Whenever your browser requests a page or a file, our web server notes the IP address of the request, the date and time, the address asked for, the page you were on before and the identification text your browser sends about itself and your operating system.

These records let us deliver the site, keep it running, spot attacks and misuse, and count how often each page is read. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a site that works and stays safe. Raw records are deleted after 90 days at the latest; counts without any IP address are kept longer. The server belongs to a hosting company that processes this data for us and only on our instructions.

The delivery layer ahead of the site

Pages and email on this domain are routed through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), which speeds up delivery, blocks attacks and passes email on to our mailbox. For that, Cloudflare handles your IP address and technical connection data.

The legal basis is Article 6(1)(f) GDPR: our interest in a quick and well-protected site. Cloudflare holds certification under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses apply in addition. Cloudflare describes its own practice at cloudflare.com/privacypolicy.

Photos of each tour

Tour photos load directly from GetYourGuide's image servers (GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany). To display one, your browser contacts those servers and hands them your IP address. We have no influence over that exchange.

The legal basis is Article 6(1)(f) GDPR: we want every tour to appear with the provider's latest pictures.

As you tap a booking link

Each booking link ends up at GetYourGuide or Viator and holds our partner number, which is how the platform knows to credit the sale to us.

After you land on GetYourGuide or Viator, that platform sets its own cookies and handles your data under its own privacy policy. All we get from them is commission statements showing totals: no names, no contact details, no payment data.

Embedded clips

Videos use YouTube's privacy-enhanced mode and remain a still image until you press play; until then your browser makes no contact with YouTube. Once you press play, the video loads from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which receives your IP address and may set cookies.

Your click on play is your consent: Article 6(1)(a) GDPR and Section 25(1) TDDDG. Read Google's privacy policy at policies.google.com/privacy.

Small items stored in your browser

Your browser stores a handful of small notes so the site can remember what you chose. They stay on your own device, and we have no way to read them:

• which boxes you ticked on a checklist, so they remain ticked on your next visit (local storage, kept until you clear it);
• the currency you choose in the menu, so every page keeps showing prices in it (local storage, kept until you clear it);
• if you open a chat: its reference number, an access key, your email address and a copy of the conversation, so you find it again later (local storage, kept until you clear it);
• a note that the chat bubble has already appeared, so it stays away afterwards (session storage, removed when you close the tab);
• a note that the window shown as you are leaving has already appeared, so it is not repeated (session storage, removed when you close the tab).

These small notes are strictly necessary for features you switch on yourself (Section 25(2) No. 2 TDDDG). Clearing your browser data removes them whenever you wish.

Chatting with the desk

Starting a chat means giving us your name, your email address and your messages. The chat service also notes which country your connection is in, a scrambled version of your IP address (a salted hash that cannot be turned back into the address) and the page and language you wrote from.

Chat records sit with Cloudflare (named above), and every message you type is relayed to our account on the messenger Telegram, which handles it outside the European Union; our replies return along that route. Read more: telegram.org/privacy. Replies are the only use of your email address.

The legal basis is Article 6(1)(b) GDPR, since you ask and we reply, and Article 6(1)(f) GDPR for the scrambled IP address, used only against abuse and spam. A conversation is deleted automatically 180 days after its last message.

Email to us

An email to us is used only to reply to you. The legal basis is Article 6(1)(f) GDPR, plus Article 6(1)(b) GDPR when your message concerns a contract. We delete the exchange when it is finished, unless the law obliges us to keep it.

Fonts and map images

Our fonts come from our own server, so no font service hears about your visit. The maps are images kept on our server and drawn from OpenStreetMap data; viewing or zooming them contacts no map service. A "Google Maps" link opens Google only when you press it.

Links out to sources

Where we mention official and expert sources, we link straight to them. Those sites learn nothing about you until you follow a link, and from that point their own privacy rules apply.

Your choices and rights

You can ask which data we keep about you (Article 15 GDPR), have it corrected (Article 16) or erased (Article 17), limit its processing (Article 18) and obtain it in a portable form (Article 20). Where our legitimate interest is the basis, you can object at any time (Article 21), and a consent you gave can be withdrawn for the future. Simply email [email protected].

You may also complain to a data protection supervisory authority, especially in the EU country where you live, work or where you think the violation happened (Article 77 GDPR).

We take no automated decisions about you and create no profiles. Giving us data is not required, though without technical connection data a page cannot reach your screen.