Privacy Policy

Last updated: May 17, 2026

Introduction

This Privacy Policy explains how Anime Pilgrimage (“we,” “us,” or “our”) collects, uses, stores, and manages information when you use our map-based anime pilgrimage website (the “Site” or “Service”). We are committed to protecting your privacy and handling your data responsibly.

1. Information We Collect

We collect the following types of information:

Account Information (if you register)

  • Email address — collected via Firebase Authentication for account creation and login
  • Display name — chosen by you during registration or in account settings
  • Profile image — optional, uploaded by you
  • User ID (profile slug) — assigned or chosen during account registration

User-Generated Content

  • Photos, location data, and other content you submit to the Site
  • Photos submitted by users are automatically converted to WebP format and compressed during upload to optimize storage and delivery performance. The original file format is not retained after processing.
  • GPS coordinates and map location data associated with your posts

Automatically Collected Technical Data

  • Browser type and version
  • Device information
  • IP address (used for security monitoring and rate limiting; not stored directly by us, but may be retained in access logs by our infrastructure providers such as Vercel and Cloudflare)
  • Pages visited and activity on the Site

Data Stored Locally on Your Device

  • Map preferences, saved locations, bookmarks, and map data (GeoJSON) — stored in your browser’s localStorage and not transmitted to our servers

2. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Performance of a contract (Article 6(1)(b)): Processing necessary to create and manage your account, authenticate your identity, and deliver the core features of the Service, including user-generated content functionality
  • Legitimate interests (Article 6(1)(f)): Processing of technical and usage data for security monitoring, fraud prevention, rate limiting, and service improvement, where such interests are not overridden by your fundamental rights
  • Legal obligation (Article 6(1)(c)): Processing required to comply with applicable laws and regulations

3. Use of Information

Collected data is used for:

  • Account authentication and identity verification
  • Displaying your profile and user-generated content to other users
  • Providing and improving the posting and community features of the Service
  • Improving Site performance and user experience
  • Security monitoring and preventing unauthorized access or abuse
  • Enforcing our Terms of Service and Community Guidelines
  • Complying with applicable legal obligations

4. Cookies and Browser Storage

The Site uses session cookies and authentication tokens solely for the purpose of maintaining your login session. These are strictly necessary for the operation of authenticated features. We do not currently use advertising cookies, behavioral tracking cookies, or third-party analytics cookies.

The Site uses browser localStorage to store your map preferences (such as saved locations, bookmarks, and map data) locally on your device. This data is not transmitted to our servers. You can clear this data at any time through your browser settings. Disabling cookies may prevent you from logging in or using certain features of the Site.

5. Third-Party Services

The Site uses the following third-party services. Each operates under its own privacy policy, and we encourage you to review them:

  • OpenFreeMap / MapLibre GL — map display and rendering
  • Google Maps (Google LLC) — Street View and navigation links
  • Firebase Authentication / Firestore (Google LLC) — account authentication, user data storage, and content database. Data may be processed on servers located in the United States and other countries operated by Google.
  • Cloudflare R2 / CDN (Cloudflare, Inc.) — image storage and content delivery. Data may be stored and processed globally via Cloudflare’s network.
  • Vercel (Vercel Inc.) — website hosting and server-side request processing. Access logs may be retained by Vercel.

The Site may also display links to external third-party platforms (such as streaming services or membership platforms). When you follow such links, you leave this Site and your interaction is governed solely by the third party’s own terms and privacy policy. We are not responsible for the privacy practices of any third-party website or service.

6. International Data Transfers

Some of our third-party service providers are located outside of the EEA, including in the United States. When personal data of EEA residents is transferred to these providers, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted by the European Commission or other valid transfer mechanisms recognized under applicable law. For further information on the transfer safeguards used by each provider, please refer to their respective privacy policies.

7. Data Sharing

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data only in the following circumstances:

  • With our infrastructure and service providers listed in Section 5, to the extent strictly necessary to operate the Service
  • When required by applicable law, regulation, court order, or lawful request from a government or law enforcement authority
  • To protect the rights, property, or safety of Anime Pilgrimage, our users, or the public
  • In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets, provided that the successor entity agrees to honor this Privacy Policy or provide you with prior notice

8. Data Retention and Deletion

We retain your account information for as long as your account remains active. You may delete your account at any time using the account deletion feature in your account settings. Upon account deletion, your personal account data and associated posts will be removed from the Site. Deleted content may remain on our infrastructure (including CDN caches and backup systems) for up to 30 days before it is fully purged.

Certain data may be retained beyond the above period as required by applicable law or for legitimate operational purposes, such as records necessary for fraud prevention, abuse monitoring, or compliance with legal obligations, generally for a period not exceeding two (2) years from the date of account deletion unless a longer retention period is required by law.

We also reserve the right to permanently discontinue the Service at any time. In such an event, we will make reasonable efforts to notify users in advance, but we are not obligated to retain or export user data beyond the date of discontinuation.

9. Data Security and Breach Notification

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encrypted data transmission (HTTPS), and use of reputable infrastructure providers. However, no method of data transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with applicable data protection law. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users through the contact information associated with their account or via a prominent notice on the Site.

10. Your Rights — EEA Residents (GDPR)

If you are located in the European Economic Area, you have the following rights under the GDPR:

  • Right of Access (Art. 15): Request a copy of the personal data we hold about you
  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data
  • Right to Erasure (Art. 17): Request deletion of your personal data, subject to our legal obligations
  • Right to Restriction of Processing (Art. 18): Request that we limit how we use your personal data in certain circumstances
  • Right to Data Portability (Art. 20): Request your personal data in a structured, commonly used, machine-readable format
  • Right to Object (Art. 21): Object to processing of your personal data based on legitimate interests
  • Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request. You also have the right to lodge a complaint with your local data protection supervisory authority.

11. California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom we share it
  • Right to Delete: Request deletion of personal information we have collected about you, subject to certain exceptions
  • Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising
  • Right to Correct: Request correction of inaccurate personal information we maintain about you
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

To submit a CCPA/CPRA request, please contact us at [email protected].

12. Children’s Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information. If you believe we may have inadvertently collected information from a child under 13, please contact us at [email protected].

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify registered users via email or a prominent notice on the Site. Continued use of the Site after the updated Privacy Policy has been posted constitutes your acceptance of the revised Policy.

14. Contact

If you have any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us:

By email: [email protected]