# Privacy at What to Buy in Japan

> This notice describes the first-party request and interaction data processed by What to Buy in Japan as of August 23, 2026.

## Page requests

The service can record a successful document request with its time, path, coarse country, browser locale, referring host, campaign label, and a broad traffic class such as human search, direct visit, assistant fetch, monitor, or crawler. This helps separate genuine use from automated traffic and find broken or missing pages.

## On-site actions

The service can record a search, item open, or origin change. A search phrase is limited in length and common email, phone, token, password, and secret patterns are redacted before storage. Do not place personal, payment, medical, account, travel-document, or confidential information in a search field.

## Network data

Cloudflare provides an IP address for short-lived abuse-rate limiting and coarse country information for routing. The application does not write IP addresses to its event ledger. Raw visibility events are scheduled for deletion after 30 days. Rate limits and deletion jobs are safeguards, not guarantees against every infrastructure log held by the hosting provider.

## Sharing and choices

The site does not sell personal data and has no advertising profile or active payment product. Public pages link to independent sellers and sources, whose privacy terms apply when you visit them. A verified privacy-contact channel and formal entity address are not yet public; this notice will be updated when those business details or data practices change.