Last updated: 2026-11-10.
Privacy Policy — Tabiji
Effective date: 2026-11-10 Operator: Tabiji
1. Information we collect
Tabiji is a local-first application. The Service is designed to store your data in your browser, not on our servers.
| Data | Where it's stored | Why | Retention |
|---|---|---|---|
| Itinerary data (trip name, dates, destinations, notes) | Your browser (LocalStorage, IndexedDB) | Provide itinerary building functionality | Until you clear browser data or export/delete |
| Budget/expense data | Your browser (LocalStorage, IndexedDB) | Provide budget tracking functionality | Until you clear browser data or export/delete |
| Saved destinations | Your browser (LocalStorage, IndexedDB) | Provide destination discovery and saving | Until you clear browser data or export/delete |
| Beta banner dismissal | Your browser (LocalStorage) | Remember your preference across sessions | Until you clear browser data |
Reference and route data: The Service loads versioned curated content, map tiles from OpenFreeMap, and railway reference data from the MLIT-derived ArcGIS service. Map panning/zooming sends the displayed viewport to the railway service; station search sends the text you enter. These sources do not receive your saved trip, budget, notes, or exported files, and the Service does not use automatic routing.
Place search and place details: Your browser contacts the following services directly (there is no Tabiji server in between):
- Photon (photon.komoot.io, operated by komoot): when you type in the place search box (two or more characters), it receives the text you type and your current map centre rounded to two decimal places (about 1 km) to bias results.
- Overpass API mirrors (overpass-api.de, overpass.kumi.systems, overpass.private.coffee): when you open a place card, one of these OpenStreetMap data servers receives the OpenStreetMap type and id of the place, or, if it has none, the place's coordinates.
- Wikidata (wikidata.org) and Wikipedia (en.wikipedia.org, ja.wikipedia.org; Wikimedia Foundation): when you open a place card, they may receive the place's Wikidata id, name, coordinates (for a nearby-article search) and article title to fetch a summary. If an article has a photo, your browser also loads that thumbnail from Wikimedia servers.
These requests do not include your saved trips, budget or notes. Each provider sees normal network metadata (such as your IP address and browser details) and handles it under its own policy. Tabiji does not control those providers.
Lawful basis (GDPR): Since personal travel-planning data is stored locally in your browser and not transmitted to our servers, processing by us is minimal. Aggregate visit statistics (see section 4) are processed on the basis of our legitimate interest in keeping the Service working and improving it. Any later routing or sync feature requires this policy and its lawful basis to be reviewed before release.
2. How we use your information
- To provide the itinerary building, destination discovery, budget tracking, and map features.
- To load curated reference data and display locally calculated route options.
- To record aggregate affiliate-offer click counts on your device.
- To count visits in aggregate so we can keep the Service working and improve it.
3. How we share your information
We do not sell your personal data. Your itinerary, budget and notes stay in your browser; the only things sent to outside services are the requests described in section 1 and the services listed below.
External services and sources:
| Processor | Purpose | Country | Privacy policy |
|---|---|---|---|
| Cloudflare Pages | Hosts and delivers the site (normal network metadata such as IP address and browser details) | Global network | https://www.cloudflare.com/privacypolicy/ |
| Cloudflare Web Analytics | Aggregate, cookieless visit statistics (page visited, referring site, browser type, country, page load timing) | Global network | https://www.cloudflare.com/privacypolicy/ |
| OpenFreeMap / OpenMapTiles / OpenStreetMap | Map style, tiles, sprites, and glyphs | Hosted service; see provider policy | https://openfreemap.org/privacy/ |
| Photon by komoot | Place search suggestions (search text, rounded map centre) | Germany / provider infrastructure | https://www.komoot.com/privacy |
| Overpass API mirrors (overpass-api.de, overpass.kumi.systems, overpass.private.coffee) | OpenStreetMap place details (OSM id or coordinates) | Hosted services; see each operator | https://wiki.openstreetmap.org/wiki/Overpass_API |
| Wikimedia Foundation (Wikipedia, Wikidata, Wikimedia thumbnails) | Place summaries and photos (Wikidata id, name, coordinates, article title) | United States / provider infrastructure | https://foundation.wikimedia.org/wiki/Policy:Privacy_policy |
| Esri Japan ArcGIS service using MLIT National Land Numerical Information railway data | Railway station search and viewport reference data | Japan / provider infrastructure | https://www.esri.com/en-us/privacy/privacy-statements |
| Booking partner selected by you | Complete a booking outside the app | Varies by partner | Shown on the partner site |
Opening an affiliate link tells that partner your normal browser/request information and any tracking identifier embedded in the offer URL, but Tabiji does not append personal itinerary or budget data. The map, place and railway providers receive normal network metadata needed to answer their requests; review their policies before use.
4. Cookies and tracking
We do not use cookies, and we do not use advertising or cross-site tracking.
The Service uses LocalStorage and IndexedDB to store your itinerary, route selections, budget, preferences, and local affiliate-click totals in your browser. These are not cookies and are not transmitted to any Tabiji server.
Visit statistics: The site uses Cloudflare Web Analytics to count visits. It does not use cookies, does not store anything in your browser, and does not build a profile of you. It records aggregate information such as the page visited, the referring site, browser type, country and page load timing. It never receives your trips, budget or notes.
5. Your rights
Because your data is stored locally in your browser, you have direct control over it:
- Access: Your data is visible in the app. You can export it via PDF or Excel at any time.
- Delete: Clear your browser's LocalStorage and IndexedDB, or delete trips from the Trips page.
- Portability: Export your itinerary (PDF) and budget (Excel) at any time.
You can back up, restore, and delete your trips with the app's local data controls.
6. Data security
Since your data is stored locally in your browser:
- You control your data. We cannot access or recover it if you clear your browser.
- Export regularly. Use the PDF and Excel export features to back up your trip plans.
- Browser security. Your data is protected by your browser's security model.
The site is served over HTTPS.
7. International data transfers
Since your personal itinerary data is stored locally and not transmitted to our servers, international data transfer concerns are minimal.
If you access the Service from the EU, UK, or Japan, your personal trip data remains in your browser. Map, place-search and railway reference requests may be processed by their providers outside your country; see their linked policies above. Any future sync, routing, or new map provider requires this policy to be reviewed before release.
8. Children's privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If a child has entered personal information, you can delete it with the app's delete controls.
9. Japan APPI disclosure (Act on the Protection of Personal Information)
Under Japan's APPI:
- Purpose of utilization: We provide a travel planning tool. Your local data is used only for this purpose.
- Third-party transfer: We do not transfer personal itinerary data to an application server. Normal network metadata may be processed by the hosting provider, the map, place-search and place-detail providers, or a booking partner you choose; they are listed in section 3.
- Anonymously processed information: Not applicable — we do not create anonymized datasets from user data.
10. Changes to this policy
We will notify you of material changes via a notice in the Service. Continued use after notice constitutes acceptance.