<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    
    <meta http-equiv="Content-Security-Policy" content="
      default-src 'self';
      script-src 'self' 'unsafe-inline' 'unsafe-eval' 
        https://*.supabase.co 
        https://www.gstatic.com 
        https://www.googletagmanager.com
        https://www.google-analytics.com
        https://ssl.google-analytics.com
        https://js.stripe.com 
        https://maps.googleapis.com
        https://www.clarity.ms
        https://connect.facebook.net
        https://googleads.g.doubleclick.net
        https://scripts.clarity.ms
        https://cdn.iframe.ly;
      worker-src 'self' blob:;
      style-src 'self' 'unsafe-inline' 
        https://fonts.googleapis.com;
      font-src 'self' data:
        https://fonts.gstatic.com 
        https://fonts.googleapis.com
        https://r2cdn.perplexity.ai;
      img-src 'self' data: blob: 
        http://localhost:54321
        ws://localhost:54321
        https://*.supabase.co 
        https://maps.googleapis.com 
        https://maps.gstatic.com
        https://c.bing.com
        https://*.clarity.ms
        https://placehold.co
        https://*.microcms.io
        https://images.microcms-assets.io
        https://www.google.com
        https://www.google.co.jp
        https://*.googletagmanager.com
        https://cdn.iframe.ly;
      connect-src 'self'
        http://localhost:54321
        ws://localhost:54321
        https://*.supabase.co 
        wss://*.supabase.co 
        https://api.stripe.com 
        https://www.google-analytics.com
        https://ssl.google-analytics.com
        https://analytics.google.com
        https://stats.g.doubleclick.net
        https://*.googletagmanager.com
        https://maps.googleapis.com
        https://c.bing.com
        https://*.clarity.ms
        https://*.microcms.io
        https://www.google.com;
      frame-src 'self' 
        https://js.stripe.com
        https://www.google.com
        https://maps.google.com
        https://www.youtube.com
        https://www.googletagmanager.com
        https://cdn.iframe.ly;
      object-src 'none';
      base-uri 'self';
      form-action 'self';
      upgrade-insecure-requests;
    " />
    
    <!-- セキュリティヘッダー -->
    <meta http-equiv="X-Content-Type-Options" content="nosniff" />
    <!-- Remove X-Frame-Options DENY to allow permitted iframes via CSP -->
    <meta http-equiv="X-XSS-Protection" content="1; mode=block" />
    <meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin" />
    
    <link rel="icon" type="image/x-icon" href="https://lxnkiipxzsdpwledlbkp.supabase.co/storage/v1/object/public/public-assets//favicon.ico" />
    
    <!-- フォントのプリロード - FOUC防止 -->
    <link rel="preconnect" href="https://fonts.googleapis.com" />
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
    <link rel="preload" href="https://fonts.googleapis.com/css2?family=Old+Standard+TT:ital,wght@0,400;0,700;1,400&family=Playfair+Display:wght@400;500;600;700&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'" />
    <noscript><link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Old+Standard+TT:ital,wght@0,400;0,700;1,400&family=Playfair+Display:wght@400;500;600;700&display=swap"></noscript>
    
    <!-- Production Only -->
    
    <title data-static-ogp="true">Origami Concierge | Private Tours & Experiences in Japan</title>
    <meta name="description" content="Discover exclusive private tours and unforgettable experiences across Japan with Origami Concierge. Personalized itineraries tailored to your preferences, ensuring a unique journey through Japan's rich culture and history." data-static-ogp="true" />
    <link rel="canonical" href="https://origamiconcierge.jp/" data-static-ogp="true" />
    <link rel="alternate" href="https://origamiconcierge.jp/" hreflang="en" data-static-ogp="true" />
    <link rel="alternate" href="https://origamiconcierge.jp/ja/" hreflang="ja" data-static-ogp="true" />
    <link rel="alternate" href="https://origamiconcierge.jp/" hreflang="x-default" data-static-ogp="true" />
    <meta property="og:title" content="Origami Concierge | Private Tours & Experiences in Japan" data-static-ogp="true" />
    <meta property="og:description" content="Discover exclusive private tours and unforgettable experiences across Japan with Origami Concierge. Personalized itineraries tailored to your preferences, ensuring a unique journey through Japan's rich culture and history." data-static-ogp="true" />
    <meta property="og:type" content="website" data-static-ogp="true" />
    <meta property="og:url" content="https://origamiconcierge.jp" data-static-ogp="true" />
    <meta property="og:image" content="https://lxnkiipxzsdpwledlbkp.supabase.co/storage/v1/object/public/public-assets/OGP.png" data-static-ogp="true" />
    <meta property="og:site_name" content="Origami Concierge" data-static-ogp="true" />
    <meta property="og:locale" content="ja_JP" data-static-ogp="true" />
    <meta name="twitter:card" content="summary_large_image" data-static-ogp="true" />
    <meta name="twitter:title" content="Origami Concierge | Private Tours & Experiences in Japan" data-static-ogp="true" />
    <meta name="twitter:description" content="Discover exclusive private tours and unforgettable experiences across Japan with Origami Concierge. Personalized itineraries tailored to your preferences, ensuring a unique journey through Japan's rich culture and history." data-static-ogp="true" />
    <meta name="twitter:image" content="https://lxnkiipxzsdpwledlbkp.supabase.co/storage/v1/object/public/public-assets/OGP.png" data-static-ogp="true" />
    

    <!-- Development Only -->
    
    
    <!-- Firebase SDK -->
    <script src="https://www.gstatic.com/firebasejs/10.7.1/firebase-app.js" type="module"></script>
    <script src="https://www.gstatic.com/firebasejs/10.7.1/firebase-analytics.js" type="module"></script>
    <script type="module" crossorigin src="/assets/index-l2P6goAi.js"></script>
    <link rel="modulepreload" crossorigin href="/assets/vendor-DvzgDUr4.js">
    <link rel="stylesheet" crossorigin href="/assets/index-DaL_G7ig.css">
  </head>

  <body>
    <div id="root"></div>
  </body>
</html>