Last updated: May 2, 2026
This is the privacy policy for Okinawa Insider (okinawa-insider.com), operated by an individual based in Japan (“we”, “us”, “our”). It explains what data we collect, why, how we use it, and your rights — written in plain English so you can actually read it.
If you don’t want to read all of it, here’s the one-paragraph version: We collect very little personal data. We use Google Analytics 4 to see what’s popular. We use cookies for affiliate tracking and to remember your preferences. We never sell your data. You can opt out of analytics at any time.
1. Who we are
Okinawa Insider is a personal travel blog covering Okinawa, Japan. The site is operated by Daisuke (an individual sole-proprietor in Japan). For privacy questions, contact us via the Contact page.
If you are an EU/UK resident under GDPR, the data controller is the same individual.
2. What we collect
We collect three categories of data:
a. Information you give us voluntarily
- Email address (only if you subscribe to our newsletter or send us a contact form)
- Name (only if you fill it in on a contact form)
- Any message you send through the contact form
When I first launched the newsletter in early 2024, I was surprised how many readers wanted to stay in touch — but also how few actually needed to provide sensitive information. A quick form and an email address is all we need to stay connected.
b. Information collected automatically
- Anonymized IP address (truncated)
- Browser type, language, screen size
- Pages you visit and how long you stay
- Referring website
- Approximate location (country/region, not precise location)
All of this happens in the background without any action from you. Google Analytics 4 lets me see which articles about Okinawa beaches get the most interest, so I know what to write about next. Your precise location is never tracked — only the country or region.
c. Cookies and similar technologies
- Essential cookies for the site to work
- Analytics cookies (Google Analytics 4)
- Affiliate-tracking cookies (set by partners like Booking.com, Klook, Amazon Associates)
- Preference cookies (e.g., remembering you’ve dismissed a notice)
3. Why we collect it (legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Sending the newsletter | Consent (you signed up) |
| Replying to your contact form | Legitimate interest / consent |
| Site analytics | Legitimate interest (anonymized) |
| Affiliate commission tracking | Legitimate interest |
| Security and abuse prevention | Legitimate interest |
We do not use your data for profiling, automated decisions, or targeted advertising on this site.
4. Who we share data with
We share data only with these processors, and only as needed:
- Google Analytics 4 — anonymized site analytics
- Google Search Console — search performance data
- WordPress.com / Jetpack (if used) — caching, security
- Mailchimp / ConvertKit / similar email service (if used) — sending the newsletter
- Cloudflare (if used) — DDoS protection and CDN
- Affiliate partners (Booking.com, Klook, Agoda, Amazon Associates, Skyscanner, etc.) — only when you click an affiliate link
My neighbor runs a hotel here and asked once how I was making money from the site. The honest answer: affiliate commissions when readers book hotels or tours through my links. That’s why those partners see a cookie on your browser — but only if you click one of my links, and only to track the booking commission (not to build a profile of you). We never sell or rent your personal data.
5. International data transfers
Some of our processors (Google, Mailchimp, etc.) are based in the United States. By using this site, you understand that your data may be processed outside Japan/EU. Where applicable, we rely on Standard Contractual Clauses (SCCs) and other GDPR-approved transfer mechanisms.
6. How long we keep data
- Newsletter subscribers: until you unsubscribe (one click in every email)
- Contact form messages: 24 months, then deleted
- Analytics data: Google Analytics retention is set to 14 months
- Server logs: 30 days
7. Your rights
Depending on where you live, you have some or all of these rights:
GDPR (EU/UK residents)
- Right of access — request a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure (“right to be forgotten”) — request deletion
- Right to restrict processing — limit how we use your data
- Right to data portability — download your data in a portable format
- Right to object — opt out of analytics, marketing, or certain processing
- Right to lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France)
To exercise any of these rights, contact us via the Contact page. We will respond within 30 days.
California residents (CCPA/CPRA)
- Right to know what personal information is collected
- Right to delete personal information (with limited exceptions)
- Right to opt out of the sale or sharing of personal information
- Right to non-discrimination — we won’t penalize you for exercising your rights
We do not sell your data, so there is nothing to opt out of. You can still request access or deletion by contacting us.
Other jurisdictions
If you live outside the EU/UK and California, local privacy laws may still grant you similar rights. Contact us and we’ll do our best to accommodate your request.
8. Security
We take reasonable steps to protect your data, including SSL encryption (HTTPS), firewalls, and regular backups. However, no system is 100% secure. If we discover a data breach that affects you, we will notify you within 72 hours (as required by GDPR).
9. Third-party links and services
This site contains links to other websites (hotels, booking platforms, social media, etc.). This privacy policy applies only to okinawa-insider.com. When you visit external sites, their own privacy policies apply. We are not responsible for their practices.
10. Children’s privacy
We do not knowingly collect data from children under 13 (or under the digital age of consent in your country). If we become aware that a child has submitted data without parental consent, we will delete it immediately. Parents or guardians can contact us to request deletion.
11. Changes to this policy
We may update this policy from time to time to reflect changes in law, technology, or our practices. Material changes will be announced on this page, with the “Last updated” date revised accordingly. Your continued use of the site after updates constitutes acceptance of the new policy.
12. Contact us
Questions about this privacy policy? Use the Contact page or send an email. We typically respond within 2–3 business days.
Data controller: Daisuke, sole proprietor of Okinawa Insider, based in Japan.