Cookie Policy

Cookie Policy

This Cookie Policy explains how Sanrio Company, Ltd. ("we", "us", "our") uses cookies and other technologies that store information on, or access information stored on, your end device when you use the HELLO KITTY MAP website at https://hellokittytogetherness.com/ (including the Japanese pages under /jp/, the English pages under /en/ and the French pages under /fr/) (the "Website").

We use cookies for a variety of purposes set forth in this Cookie Policy.

Cookies are small files that are stored on your end device. Cookies that are set by us are called first-party cookies. We also use third-party cookies - which are cookies from a domain different than the domain of the website you are visiting - for bot detection, as described in this Cookie Policy.

In addition to cookies, we use other technologies that store information on, or access information stored on, your end device, in particular the local storage function of your browser (HTML5 Web Storage). Unless stated otherwise, references to "cookies" in this Cookie Policy include such similar technologies. The items that we currently store in the local storage of your browser are set out in the section "LOCAL STORAGE AND OTHER SIMILAR TECHNOLOGIES" below.

You can prevent cookies from being saved, and review or change your choices at any time, using the cookie preferences panel of this Website ("Cookie Preferences"). You can open that panel from the "Manage Preferences" button in the notice that is displayed when you first access the Website, or at any time from the "Cookie Settings" link in the footer of each page or from the settings icon displayed in the lower left of each page. The panel shows, for each category, the purpose, the legal basis and the retention period, and allows you to switch off any category other than strictly necessary cookies. You can also accept or reject all categories other than strictly necessary cookies at once using the "Accept All" or "Reject All" button in the notice or in the panel. Your choices are stored in the local storage of your browser together with the date and time of your choice, and are applied when you access the Website again from the same browser.

You can also prevent cookies from being saved on your end device by setting your browser to not accept cookies. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org. Please note that you can delete cookies stored on your end device at any time, following the instructions in the manual of your browser or end device.

Cookies used on the Website are assigned to three categories, depending on their function and intended purpose, which correspond to the categories displayed in the cookie preferences panel: strictly necessary cookies, performance and analytics cookies, and targeting and marketing cookies.

STRICTLY NECESSARY COOKIES

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions taken by you which amount to a request for services, such as managing your privacy settings, selecting the display language or reacting to a comment.

You can set your browser to block or alert you about these cookies, but some parts of the website may not then work.

To the extent that information belonging to a user in the EEA or the United Kingdom processed in connection with strictly necessary cookies should, in a given case, qualify as personal data, that processing will be lawfully conducted based on our legitimate interests to operate the website as provided in Point (f) of the first subparagraph of Article 6 of the GDPR, as the legal basis.

This website uses the following strictly necessary cookies:

Cookie Name

First Party/Third Party

Purpose of Use/Explanation

Lifespan

NEXT_LOCALE

First Party

Remembers the language (Japanese, English or French) of the pages that you are viewing, so that the Website is displayed in that language.

Session (deleted when you close your browser)

hk_visitor

First Party

A signed, pseudonymous identifier that is set only when you react to a comment on the map. It is used to prevent the same reaction from being counted more than once and to detect abusive use. It does not contain your name, e-mail address or any other information that directly identifies you.

1 year

cf_chl_rc_i, cf_chl_rc_ni and cf_chl_rc_m (set by Cloudflare Turnstile)

Third Party (challenges.cloudflare.com, Cloudflare, Inc.)

Set only when you open the comment box. Used by Cloudflare Turnstile to verify that a comment is being submitted by a human and not by an automated program (bot), in order to prevent spam and abusive posting. Cloudflare also uses these cookies to identify technical issues on end devices.

As determined by Cloudflare

The following services are used for purposes that are strictly necessary for the operation and delivery of the Website. Except for Cloudflare Turnstile, which stores information on your end device as described in the table above, they do not, by themselves, store information on your end device, but your IP address and browser information are transmitted to the respective provider so that the Website can be delivered to you:

Service

Provider / Country

Purpose of Use/Explanation

Privacy Policy

Google Tag Manager

Google LLC / United States

Manages and delivers the measurement tags used on the Website, and controls whether each tag is executed in accordance with the choices you make in the cookie preferences panel.

https://policies.google.com/privacy

Google Cloud CDN

Google LLC / United States

Content delivery network used to deliver the pages, images and scripts of the Website.

https://cloud.google.com/terms/cloud-privacy-notice

Cloudflare Turnstile

Cloudflare, Inc. / United States

Verifies that a comment is being submitted by a human and not by an automated program (bot), in order to prevent spam and abusive posting. It is loaded only when you open the comment box.

https://www.cloudflare.com/privacypolicy/

Sanity

Sanity Inc. / United States

Delivers images displayed on the Website, such as the event images on the landing page and the images displayed on the map pages.

https://www.sanity.io/legal/privacy

PERFORMANCE AND ANALYTICS COOKIES

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

The information collected by these cookies is aggregated and therefore can normally not be linked to a specific natural person. To the extent that information belonging to a user in the EEA or the United Kingdom processed in connection with performance and analytics cookies should, in a given case, qualify as personal data, that processing will be lawfully conducted based on the user's consent as provided in Point (a) of the first subparagraph of Article 6 of the GDPR, as the legal basis.

This website uses the following performance and analytics cookies:

Cookie Name

First Party/Third Party

Purpose of Use/Explanation

Lifespan

_ga

First Party

Used by Google Analytics (provided by Google LLC) to distinguish users. The information collected is transmitted to Google LLC and used to analyse how the Website is used, to understand browsing trends and to identify and resolve errors.

13 months

_ga_KPNNLL8ESQ

First Party

Used by Google Analytics to persist session state.

13 months

The information collected by these cookies, together with your IP address and browser information, is transmitted to Google LLC (United States), the provider of Google Analytics. For details, please see https://policies.google.com/privacy.

TARGETING AND MARKETING COOKIES

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.

They do not store directly personal information, but are based on identifying your browser and internet device. If you do not allow these cookies, you may experience less targeted advertising.

The processing of personal data belonging to a user in the EEA or the United Kingdom in connection with targeting and marketing cookies will be lawfully conducted based on the user's consent as provided in Point (a) of the first subparagraph of Article 6 of the GDPR, as the legal basis.

As at the date of this Cookie Policy, the Website does not use any targeting and marketing cookies.

LOCAL STORAGE AND OTHER SIMILAR TECHNOLOGIES

As explained above, in addition to cookies we store the following items in the local storage of your browser. Unlike cookies, these items are not transmitted automatically with each request to our servers, and they do not expire automatically; they remain on your end device until you delete the site data of the Website through your browser.

To the extent that information belonging to a user in the EEA or the United Kingdom processed in connection with the items listed below should, in a given case, qualify as personal data, that processing will be lawfully conducted based on our legitimate interests to operate the Website and to record your privacy choices, as provided in Point (f) of the first subparagraph of Article 6 of the GDPR, as the legal basis.

Name

First Party/Third Party

Purpose of Use/Explanation

Lifespan

cookieConsent

First Party

Stores the choices that you make in the notice or in the cookie preferences panel - that is, whether you have permitted performance and analytics cookies and targeting and marketing cookies - together with the date and time of your choice, so that your choices can be applied when you access the Website again.

Until you delete the site data of the Website through your browser

hk_gifts_seen

First Party

Records which rewards you have already seen on the Website, so that the same reward is not displayed to you again.

Until you delete the site data of the Website through your browser

Comments that you post on the map are published on the Website and are retained as public content. A hashed (irreversibly converted) value of your IP address is stored on our server together with each comment, and is used, together with the identifier stored in the hk_visitor cookie, to prevent abusive posting and duplicate counting of reactions. The hashed IP address is deleted after 30 days, and the identifier is deleted after one year.

EXTERNAL TRANSMISSION OF INFORMATION (JAPAN)

Where you access the Website from Japan, information stored on or relating to your end device is transmitted to the external services set out below. The following items are published in accordance with Article 27-12 of the Telecommunications Business Act of Japan.

Service

Provider (recipient) / Country

Information transmitted

Purpose of Use

Google Tag Manager

Google LLC / United States

IP address, browser information (such as the user agent) and the URL of the page viewed

Management and delivery of the measurement tags used on the Website (strictly necessary)

Google Cloud CDN

Google LLC / United States

IP address, browser information and the URL of the page or file requested

Delivery of the pages, images and scripts of the Website (strictly necessary)

Cloudflare Turnstile

Cloudflare, Inc. / United States

IP address, TLS fingerprint, browser information (user agent), and the site key and domain of the Website

Verifying that a comment is being submitted by a human and not by an automated program (strictly necessary; only when you open the comment box)

Sanity

Sanity Inc. / United States

IP address, browser information and the URL of the image requested

Delivery of images displayed on the Website (strictly necessary)

Google Analytics

Google LLC / United States

Cookie identifiers (_ga and _ga_KPNNLL8ESQ), IP address, browser information, the URLs of the pages viewed, the referring URL, the date and time of access, and information about how you use the Website

Analysis of how the Website is used, understanding of browsing trends, and identification and resolution of errors (performance and analytics cookies; transmitted only if you permit this category)

Information transmitted to Google Analytics, which is not strictly necessary for the operation of the Website, is transmitted only if you permit "Performance & Analytics Cookies", and its transmission can be stopped at any time by switching off that category in the cookie preferences panel.

USERS IN CALIFORNIA

If you are a resident of California, you may have the right under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA/CPRA"), to opt out of the sale or sharing of your personal information. The use of targeting and marketing cookies as described in this Cookie Policy may constitute the sharing of personal information under the CCPA/CPRA. You can exercise your right to opt out at any time by selecting "Reject All" or switching off the "Targeting & Marketing Cookies" category in the cookie preferences panel of the Website, or by using the "Do Not Sell or Share My Personal Information" link in the footer of the Website.

Strictly necessary cookies and the items stored in local storage that are described in this Cookie Policy are necessary for the operation and security of the Website and are not used for the sale or sharing of personal information.

This Cookie Policy does not cover third party websites

Please note that this Cookie Policy does not apply to, and we are not responsible for, the privacy practices of third party websites which may be linked to this website.

Changes to this Cookie Policy

Please note that, to increase the visitors' usability and user experience of our website, we may change the cookies we use as necessary. Therefore, we advise you to check our cookies list regularly. This Cookie Policy was last updated on 8 October 2026.

Contact

If you have any questions regarding this Cookie Policy or the handling of your personal information, please contact us as follows. The handling of personal information by us is described in our Privacy Policy at https://hellokittytogetherness.com/en/privacy_policy/ (Japanese version: https://hellokittytogetherness.com/jp/privacy_policy/; French version: https://hellokittytogetherness.com/fr/privacy_policy/).

・General enquiries: sanrio-kojinhogo@sanrio.co.jp

・Requests concerning rights under the GDPR: overseas@sanrio.co.jp / Tel: +81-3-3779-8163

・EU and UK representative under the GDPR: DataRep / datarequest@datarep.com / Web form: www.datarep.com/data-request

・Requests concerning rights under the CCPA/CPRA: customercare@sanrio.com / Tel: +1-866-957-0006