Privacy policy
Last updated ·
In short
This site is a showcase. It has no accounts, no cart, and no form that sends anything to a server. What follows describes the only data that actually moves, all of it technical and none of it advertising.
- No cookie is set when you visit.
- No analytics tool, no advertising script, no embedded social network.
- No access log is kept on our server: no IP address, no requested page.
- One external resource loads on its own: the OpenStreetMap map at the foot of the two house pages.
Who is responsible for what
Two parties are involved, and their roles do not overlap. Kokoro Nest is answerable for the messages you send it and for everything concerning your stay. Grizzlu is answerable for the site itself and its technical infrastructure.
Contact details for both appear in the legal notice.
As the site is hosted in the European Union and read from Europe as well as from Japan, it follows the General Data Protection Regulation (GDPR) for the part that falls to Grizzlu, and the Japanese Act on the Protection of Personal Information (個人情報保護法) for the part that falls to the house.
The contact form sends nothing to this site
The form on the house pages transmits nothing to a server. It prepares a message in your own mail application: it is a plain mailto link. What you write leaves your device only when you press “send” yourself, and it then goes straight to the house’s mailbox, without passing through this site.
You can therefore reread and edit the message before sending it, or choose not to send it.
Those mailboxes are hosted at Google (Gmail): the content of your message is handled there under Google’s own rules.
※ We recommend not writing sensitive information in it.
Grizzlu, which operates the site, has access to none of these messages.
What this site stores on your device: nothing
No cookie, no local storage, no browser fingerprinting. The site is made of static pages: it has no information to retain from one page to the next.
One exception may occur, on Cloudflare’s part: if its protection service determines that it must check you are not an automated program, it sets a security cookie. That exception is described below.
Cloudflare, which delivers the site
Every request to this site passes through the network of Cloudflare, Inc. before reaching our server: that is what makes it fast and protects it from attacks. For each page requested, Cloudflare therefore sees your IP address, your browser and its language, the page requested, the referring page, and the date and time. It keeps these for a limited period, defined by its own privacy policy (opens in a new tab), for security and statistics.
On the plan this site runs under, retention of raw request logs is not even offered, and the statistics drawn from them remain viewable for only seven days, or twenty-four hours for security events. We neither export nor keep any of these logs on our side.
As a result, we hold no data that could identify you, not even an IP address.
Cloudflare, Inc. is established in the United States (101 Townsend Street, San Francisco, CA 94107) and its network is worldwide; a visit from Japan is served from a Japanese datacentre, with no guarantee of European localisation. Transfers outside the European Union are governed by the European Commission’s standard contractual clauses and by Cloudflare’s certification under the EU-U.S. Data Privacy Framework. Its data protection officer can be reached at [email protected].
Two further mechanisms fall to Cloudflare. They are not visible from the page and are therefore set out here:
- Network error reporting (NEL): your browser is asked to report to Cloudflare any connection errors it meets on this domain. Successful visits are never reported, only failures. ※ This mechanism is enabled by default by Cloudflare and cannot be switched off on our plan.
- Email address protection: Cloudflare replaces the addresses shown on the pages with an encoded form, and adds a small script, served from this domain, to restore them for display. It protects the addresses from harvesting robots, sets no cookie and calls no external service.
Our server keeps no logs
The site is served from a dedicated server located in Germany. No access log is written there: no IP address, no requested page, no browser, no referring page. This is not a short retention period but an absence of recording: the feature is enabled for none of the sites on that server.
The server writes only its own operating events, such as restarts and certificate renewals, which contain no visitor data.
The OpenStreetMap map
The Kyoto and Osaka pages embed a map served by openstreetmap.org. It loads as you approach the footer. At that moment, your browser contacts the OpenStreetMap Foundation’s servers, which receive your IP address, your browser, and the address of the page the request comes from.
This map sets no cookie. It is the only external resource loaded without any action on your part, and it was chosen for that reason.
The OpenStreetMap Foundation is a British non-profit, which publishes its own privacy policy (opens in a new tab).
Links to other sites
The site links to Booking.com, Airbnb, Instagram, LINE, WhatsApp, Google Maps and Apple Maps. These are plain links: nothing is sent to those services until you click.
The addresses used are stripped of every tracking parameter before publication. Booking links provided by the house frequently carry affiliate and session identifiers; these are removed, and the destination page remains identical.
After a click, browsing continues on a third-party site, subject to its own rules.
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of data concerning you, as well as a right to portability.
In practice this site keeps nothing about you: there is no file to consult and no data to erase on its side. These rights therefore apply in two cases. First, any messages you have sent to a house, in which case write to that house’s address, given in the legal notice. Second, the data Cloudflare processes on its own account, described above.
For any question about the site itself, its hosting or this policy, write to Grizzlu.
You may also lodge a complaint with the data protection authority of your country of residence: in France, the Commission nationale de l’informatique et des libertés (CNIL); in Japan, the Personal Information Protection Commission (個人情報保護委員会).
Changes to this policy
This page describes the site’s actual configuration as of the date given at the top. If a setting changes, whether an analytics tool is added or a protection enabled that would set a cookie, this page is corrected along with it and the update date says so.