Privacy policy
Tanuki Trip tracks how airfares between Europe and Japan move over time, and sends a weekly summary by email to the people who ask for one. This page sets out what data is collected, why, how long it is kept, and how to exercise your rights.
1. Who is the data controller
The data controller is Thomas Battistonni, sole trader registered in France as an entrepreneur individuel and trading under the name Tanuki Trip, SIREN 938 602 968, 12 allée des Orchidées, 38240 Meylan, publisher of tanukitrip.com.
Contact for any question about your data: thomas@tanukitrip.com
2. What is collected, and why
Only what the service needs. In practice:
| Data | Why | Legal basis |
|---|---|---|
| Email address | to send you the weekly summary and the confirmation email | your consent |
| Departure airports and destinations you pick | to match the email to your route | your consent |
| Target departure period, length of stay | to match the email to your trip | your consent |
| Confirmation and unsubscribe tokens | to let you confirm your subscription and leave in one click | performance of the service you asked for |
| Sign-up date and consent timestamp | to prove that consent was actually given | legal obligation |
| Separate consent to partner offers | to send you offers from third-party travel services, if you accepted them | your consent |
No account, no password, no payment details. Tanuki Trip neither sells nor books trips: bookings happen with the providers we link to, under their own privacy policies.
Consent to partner offers is separate from the price alert itself. You can have one without the other, and withdraw one without losing the other.
3. Double confirmation
Once you sign up, a confirmation email is sent to you. Until you have clicked the link it contains, nothing else is sent to you and your subscription stays inactive.
4. How long your data is kept
Your data is kept until you unsubscribe. Every email carries an unsubscribe link: clicking it deletes your row for good, with no archive and no suppression list kept behind it.
Sign-ups that are never confirmed are deleted automatically after 30 days.
Consent records are kept for as long as it takes to answer a possible complaint, then deleted.
5. Who has access to your data
Your data is never sold, rented or handed over. It is processed by a small number of technical providers, only to keep the service running:
| Provider | Role | Location |
|---|---|---|
| Supabase | database hosting | to be confirmed |
| Resend | sending the emails | United States |
| Netlify | hosting the site and its functions | United States |
| Google (Analytics, through Google Tag Manager) | audience measurement, only if you accept cookies (see section 6) | United States |
Some of these providers sit outside the European Union. Those transfers rely on the safeguards set out by the GDPR: standard contractual clauses, or the Data Privacy Framework, depending on the provider.
6. Cookies and trackers
This site uses Google Analytics, through Google Tag Manager, to measure its traffic and understand how it is used. Those audience measurement cookies load only with your consent: on your first visit, a window asks you to accept or refuse before anything loads at all. You can change your mind at any time through the "Manage cookies" link at the foot of every page.
If you refuse, no audience measurement cookie is placed and no data goes to Google.
Apart from those audience measurement cookies, which depend on your consent, no other third-party script loads on the pages you read before you click a link that takes you to a partner: a flight comparison site, a booking platform. From that point on, the partner applies its own cookie policy on its own site, independent of ours.
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, and the right to withdraw your consent at any time.
- The simplest route: the unsubscribe link in every email deletes your data immediately and for good.
- For anything else: write to thomas@tanukitrip.com. We answer within one month.
If you consider that your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority, at 3 place de Fontenoy, 75007 Paris, www.cnil.fr.
8. Changes to this policy
This policy may be updated as the service changes. If a substantial change affects your rights, subscribers are told by email. The date of the last update sits at the top of this page.