Privacy policy

Established September 29, 2026 / Updated October 20, 2026

The Ueda Map operator (the Operator) handles personal information on this website according to the following policy.

1. Information collected and its purposes

For inquiries, we collect your name, reply email address, optional shop or facility name and message to respond, check facts, correct or remove listings and handle account matters. We do not use them for advertising emails. Listing inquiries may also include a shop address, website or other URLs, photo URLs and descriptions, optional photos and consent to publish photos. These are used to prepare and check listings. Photos are converted before transmission and during storage to remove location and other capture metadata.

For shop management, we process account email addresses, contact names, authentication information, assigned facilities and editing, approval and login histories for authentication, listing management and prevention of misuse. Passwords are stored as hashes. Public shop information is managed separately from private account information.

2. Device information, cookies and location

We use session cookies for authentication and secure inquiry submission. Saved places, demo settings and similar preferences are stored in your browser. You can delete them through browser settings, although some functions may then become unavailable.

Your location is obtained only when you select the location feature and grant device permission; it is used to display the map. Your location is not automatically attached to inquiries. Map providers may receive your IP address, viewed area and related connection information. We use map and geographic data from OpenFreeMap, OpenStreetMap, the Geospatial Information Authority of Japan and other sources.

The server may record access logs. Submission limits use hashes derived from the connecting IP address. These are used for stable operation and prevention of misuse.

On-site click counts

To understand interest in place details and the Sanada Story and improve our guidance, we send the target ID, date of the action (Japan time) and click count to our server, storing totals by date and target. This counting uses no dedicated cookies or persistent user IDs and sends no names, email addresses, locations or search terms. It does not track individual browsing histories or count unique users.

To limit abusive submissions, we create keyed hashes from connecting IP addresses with keys that change by time period. IP addresses themselves are not stored in the counting data. Regular cleanup removes rate-limit data after about two hours, temporary duplicate-prevention identifiers after two days and daily totals after 25 months. Ordinary server access logs may be recorded separately. General click totals are visible only to administrators. When a page is opened from a shop-specific QR code, visits to that shop, saved-place actions and directions or news button actions are counted in the same way. Each type of action is counted once within that page view; actions for other shops do not count toward that shop's QR results. Visits through shared QR URLs are included. Only administrators and the shop's assigned accounts can view its QR totals for the latest 30 days. These figures do not represent unique people or actual visits to the premises. Administrators may register excluded IP addresses in settings to omit their own checks from the counts.

Analytics (Google Analytics)

The public map and information pages use Google Analytics 4 (GA4), provided by Google LLC, to understand usage and improve the site. Cookies and similar technologies collect visited pages, device and browser information, referrers and related data and send them to Google. We do not install analytics tags on the inquiry form or shop dashboard. Names, email addresses and inquiry messages are not sent as analytics data. Advertising personalization and Google signals are disabled.

For Google's handling of information, see How Google uses information from sites that use its services and Google's Privacy Policy. In supported browsers, you can stop collection using the Google Analytics Opt-out Browser Add-on. Cookies can also be managed through your browser settings.

3. Storage and security

Inquiry messages are stored in a private database. General inquiries are visible only to administrators. Inquiries and replies sent through the shop dashboard are visible only to the sending account, while it remains assigned to that shop, and administrators; they are not shared with other accounts for the same shop. Shop users can choose whether to receive reply notifications at their account email address. Notifications are off by default. Notification emails contain the reference number and directions to the dashboard, not the inquiry or reply text. Received photos are stored privately and viewed only by administrators. After consent and the shop are checked, photos may be incorporated into published shop information. When the inbox is opened, general inquiries older than one year from receipt, and dashboard conversations older than one year from the last message, are deleted together with their replies and received photos. Photos already incorporated into listings are managed separately and are not removed when the inquiry is deleted. Contact us to correct or remove published photos. Administrators may also delete inquiries after handling them. Backups and server logs are kept for operationally necessary periods and deleted when no longer needed. Shop accounts are retained as necessary for administration and business records.

We use access controls, authentication, encrypted communications and other measures to help prevent disclosure of personal information.

Game rankings and usage counts

At game start and end, the game type, result and in-game playing time are sent to help assess and improve usage. Actions and positions are not continuously transmitted. Random participant information is stored in the browser and a matching hash is stored on the server. Only when a user enters a nickname and consents to publication are the name, personal best, defeat count and achievement date published on the game introduction page. Submission limits use hashes derived from connecting IP addresses. Cleanup after expiry progressively removes per-play records after roughly seven days, daily totals after 400 days and rate-limit information after two hours. Personal bests remain while listed in public rankings. Inappropriate names may be rejected and records hidden. Using a different device or deleting browser storage creates a different participant. Contact us about published records.

4. Service providers and third-party disclosure

We use external providers for hosting, sending and receiving email and other services. Gmail is used as an initial notification destination. When we reply by email, the reply address and content are processed by the email service. We seek to select and supervise providers appropriately. We do not disclose personal information to third parties except with consent, where required by law or in other legally permitted circumstances.

5. Requests concerning your information

To request notification of purposes, disclosure, correction, restriction of use or deletion of your information, contact our personal information inquiry desk. We will verify your identity and respond under applicable law. Do not send identity documents through the form.

6. Revisions

Changes will be published on this page. Important changes will also be announced on the site where necessary.

Contact: Ueda Map operator (Contact）