When you read a guide
The site runs first-party aggregate usage statistics. A page path and page title are sent to our own tracking endpoint. Server code derives a visitor key from connection information and estimates a country from network information; deduplication means these counters are not exact visitor totals. Browser Do Not Track requests are respected. Your web server or hosting provider may also keep access logs.
When you search this site
We record a non-empty search after its results have been displayed briefly, or when you select a result. The record includes the search text, time, number of results, the titles and paths returned, selected results and whether a destination page reported loading. This helps the administrator find missing guides and improve relevance. For an article opened from a search result, we also estimate how long its tab is visible and its window has focus, plus the deepest part of the article shown in the viewport. Background tabs and unfocused windows pause the timer. Periodic updates and a final update on leaving may be missed if the connection or browser closes abruptly. Timing stops when you leave or refresh; each search can be matched for up to 30 minutes, with up to 10 measured openings of each article. These measurements do not prove attention, understanding or that the article was read. Direct article visits are not included in this search-reading report.
Common email addresses, long number sequences and some credential-like strings are masked before the search text is stored. This is not a guarantee that every personal detail will be detected: do not enter private account details in search. The application stores a keyed, per-search verification value derived from connection information to match events; it does not put a raw IP address, account identity or browser fingerprint in the search report.
Search records are kept in a private server file, available through the authenticated administration area. The application retains up to 90 days and 10,000 searches, removing older records when the store is next accessed; the oldest records are also removed if the file reaches 4 MB. Administrator sessions, recognised automated clients and requests carrying Do Not Track or Global Privacy Control are excluded. Blocking measurement does not prevent searching. These search records are not sent to advertising services.
A temporary reference in session storage connects a result click to a destination opening in the same browser tab. It is removed after a matching opening, or on a later check after 30 minutes; closing the tab clears session storage. Search text also appears in the search page URL and may remain in your browser history or hosting logs. A missing opening confirmation may reflect a new tab, privacy settings or a network interruption.
Your checklist and address card
Checklist progress is stored in your browser on this device. Use Reset checklist to remove those choices. The address card runs in memory in your browser; its hotel name, address, entrance and telephone fields are not submitted to our server and disappear when you refresh or close the page. Copying, downloading and printing are actions you choose. Keep saved travel documents on a device you control.
Feedback and administration
Feedback you submit is stored for the site operator to review, including your message, any name or email you provide, the page reference, submission time, connection IP address, browser information and estimated country. Include only details needed to explain a correction. Do not submit passport numbers, card numbers, passwords or verification codes. Administration uses session and CSRF cookies, and login attempts are recorded to protect the editor.
Administrator Google Search Console connection
An administrator can authorise read-only access to this website's Google Search Console property. The integration reads property availability and search performance, including queries, page URLs, dates, countries, devices, impressions, clicks and average positions. The administrator uses these reports to understand discovery of the site and improve its content. This is separate from visitors' searches inside this website, and it does not access visitors' Google accounts.
The OAuth client configuration, access and refresh credentials, and the latest successful report are encrypted in a private server file. They are used to request the authorised data from Google; access credentials are renewed when needed. Credentials are not included in report exports. Report downloads are saved by the administrator on their own device.
Disconnecting in the administration area clears the current stored authorisation and report, keeps the client configuration, and attempts to revoke the Google grant. If revocation fails, the administrator is told to remove the connection in their Google account. Server backups may retain earlier encrypted records until the operator removes those backups. This integration has no permission to edit Search Console or automatically publish articles.
External services
Official-source links open other websites with their own privacy practices. Loading external images, where shown, also contacts the image publisher. App stores and travel providers make their own decisions about account eligibility and personal data.
Contact
For a correction, privacy question or deletion request relating to information you supplied, use Feedback or the Contact link in the footer. This notice describes this release's application behavior; the operator controls server logs and backups.