Privacy notice

Updated September 30, 2026 (hashed email with measured reservations) · Updated October 16, 2026 (shipping carrier: DHL) · Updated October 21, 2026 (steps toward an order measured) · Updated October 22, 2026 (pages delivered by Cloudflare; cart and checkout steps in usage logs) · Updated October 26, 2026 (taps, tap positions, choices, section viewing time and page versions in usage logs) · Updated October 29, 2026 (comparing two versions of a page; enb_ab cookie)

This reservation page is operated by Pachi Pachi Inc. (N&E BLD. 7F, 1-12-4 Ginza, Chuo-ku, Tokyo, Japan; contact: [email protected]). The pages are delivered by Cloudflare, Inc. (Cloudflare Pages), and the usage logs described below are stored with Cloudflare. Reservations, survey answers and the server functions for measurement run on private servers provided by Xserver in Japan.

What we collect

When you reserve a box we store your email address, the plan you picked, the date, and, if you answer it, your reason for reserving. We use this only to contact you about your reservation and the first box. We do not send automated marketing emails and we do not sell your address. If advertising measurement is on when you reserve, a one-way hash of your address is shared with Meta as described in the measurement section below; opting out or Global Privacy Control stops this.

Orders, payments and delivery

When checkout is available, purchases are processed as described below. This notice also covers reservations made before paid checkout opens.

When you buy a plan, Stripe processes your payment on its secure checkout page. Stripe collects your email, name, shipping and billing address, phone number and card details. We receive your name, email, shipping address, phone number, your plan and its payment status, but never your full card number. We use them to pack and ship your deliveries, send order and shipping emails, handle cancellations, refunds and support, prevent fraud, and keep business and tax records. We give DHL, its delivery partners and customs authorities your name, delivery address, phone number and the parcel contents so each delivery can ship and clear U.S. customs. Stripe’s own notice: stripe.com/privacy.

If you answer the 5 questions after paying, we store your answers and optional comment with your Stripe checkout reference, to pack your chopstick gift and to improve Oishii Sweets Tokyo. We don’t store your IP address with them; to limit abuse, a salted hash of your network address is kept for up to 2 hours.

We keep order and payment records for as long as your plan is active and then for 7 years, as Japanese tax law requires. We keep survey answers for up to 2 years. To see, correct or delete your information, email [email protected]; we may need to keep records the law requires.

Age and reservations

This reservation service is for US adults aged 18 or older buying for themselves or their families. Before opening the email form, we ask you to select an age range in your browser. We do not send the selected range or date of birth to our server. An adult eligibility confirmation is sent when an adult opens the reservation form. We do not request your precise location. Visitors who select an age below 18 can browse, but cannot submit a reservation or enable optional measurement. A local browser-session flag remembers an ineligible selection.

Optional measurement

Visitors in the United States. If our server determines from your IP address that you are in the United States, Meta advertising measurement is on from page load and a notice is shown at the bottom of the page (see “Advertising measurement for visitors in the United States” below). Elsewhere, or when the country cannot be determined, measurement stays off until you explicitly allow it. Existing refusals, Global Privacy Control and test visits stay off. You can use Opt out in the notice, the Off choice under “Ad measurement with Meta” in the reservation form, or the footer button to stop measurement without losing access to the service. Declining is remembered in this browser using a privacy-preference cookie and browser storage. If those preferences cannot be read or saved reliably, optional measurement stays off.

While measurement is on, Meta Pixel directly collects visit and completed-action events, page information, device/network information and its cookie identifiers. We do not add your email or form answers to these browser events. A completed reservation is sent as a Lead with an event ID derived from a random reservation reference, to support duplicate removal when browser and server events arrive within Meta’s deduplication window. For a completed reservation made with measurement on, our server also sends that Lead to Meta (Conversions API) with the same event ID, the IP address and browser user agent of the request, and Meta’s cookie identifiers (_fbp/_fbc) if present. For reservations made on a page that shows this notice, that server-side Lead also includes a one-way SHA-256 hash of your email address (lowercased, with surrounding spaces removed) so Meta can match the reservation to our ad. Hashing hides the address in transit, but it is not anonymous: Meta can recognize a hashed address that is already linked to a Meta account. We never send your readable email address or your survey answers, and reservations made before this update did not include the hash. Opting out, Global Privacy Control, test visits and choosing an age under 18 stop this sharing. When measurement is allowed, we may also retain an actual Meta ad-click identifier in this browser session and use it to supply _fbc if the Pixel has not set that cookie; it is not sent for test visits or when Global Privacy Control is on. We do not use Microsoft Clarity or any other session-recording or third-party heatmap service. Events from before measurement starts are not replayed. Stopping measurement prevents new browser events and cancels unsent server events once our server receives the change. A request already in transit may complete; stopping cannot erase information already received by Meta. Meta may use information under its Privacy Policy, including advertising and other personalization. Some US state laws treat this disclosure as sharing for cross-context advertising. Use the measurement control to opt out of sale/sharing for advertising; we also respect GPC.

We do not create a reservation session before the age check. Meta events are PageView beginning when measurement starts, and Lead for a new completed reservation. We do not record or replay sessions.

Activity and service records

While measurement is enabled under either choice above, we record limited usage events such as sections viewed and how long each section stays on screen, scrolling, the buttons and links you tap (by their name and the section they are in), where within a section you tap (as a position relative to that section, with the width of your screen, so we can draw heatmaps), the choices you make on the page (for example which box you open first, a season, a plan or a quiz answer, as a short label), form activity and the steps you take in the cart and checkout (for example opening the cart, ticking the two confirmations and continuing to payment). We never record what you type into a field. These logs also note which version of the page you saw. We keep them in our own database hosted by Cloudflare and do not send them to Meta or to any analytics provider. These usage logs contain a short browser-session reference, time, broad device class, browser language, the country Cloudflare determines from your connection (we do not store your IP address in these logs) and campaign codes, not email addresses or free text, and are deleted after 30 days. To compare two versions of a page, we may show each new visitor one of them at random; a cookie (enb_ab) remembers for 30 days which version you were shown, so the page stays the same when you come back. It contains only a short label for the comparison and the version you were shown, and it is set even when measurement is off because it only decides which version of the page to show. On the thank-you page we keep the checkout reference with these logs so we can see which visit led to an order. Without measurement, we still save the information needed to operate a reservation you submit, your optional survey answers, and changes to your measurement choice. We also record whether a submitted reservation qualifies for measurement, the applicable notice version, and a limited reason when it does not. From September 28, 2026, we also keep the page version and the reported source of a refusal (a control used on the current page or a saved preference), so we can diagnose measurement problems. This does not reveal why a person made that choice. These operational fields are linked to the reservation; they are not anonymous browsing records. Apart from the reservation Lead described above, we do not send these service records to Meta. Our hosting services (Cloudflare, which delivers the pages, and Xserver, which runs our server functions) necessarily receive network information to deliver pages and protect the service; web-server and security logs may contain IP addresses.

Cookies and browser storage

After an adult opens the reservation form, an essential session cookie protects submissions and expires after 30 days. While we compare two versions of a page, our own cookie enb_ab remembers for 30 days which version you were shown. It only decides which version of the page to show, so it is set even when measurement is off (see “Activity and service records” above). Your age selection itself is not retained; a browser-session flag can prevent an ineligible visitor from opening the form. While measurement is enabled, Meta may set its own measurement cookies. Turning measurement off does not erase records already received by Meta.

Retention

Reservations are kept for up to 180 days or until the first box ships, whichever comes first, unless you confirm an order. Usage logs and server delivery records are kept for up to 30 days. Reservation measurement status is kept with the reservation. Server event details are removed after successful delivery; events delayed for 48 hours are held for review rather than automatically resent. Encrypted database backups are kept for 7 days.

Contact

Pachi Pachi Inc., [email protected].