سياسة الخصوصية
Last updated: 2 October 2026
هذه السياسة متاحة حاليًا باللغة الإنجليزية فقط.
This Privacy Policy explains what personal data Wanderistan collects, why, who handles it, how long we keep it and what your rights are. You can browse the site without an account. If you create an account or subscribe to our emails we collect more, and section 2 says exactly what.
1. Who we are
Wanderistan is published by Avenmark Media, which is the controller of the personal data described in this policy. You can reach us at [email protected] or through our Contact page.
2. What we collect, why, and on what legal basis
Browsing the site
When you load a page our servers, and Cloudflare (our content delivery and security provider, see section 8), receive your IP address and browser details. We use them to deliver the site and keep it secure, and we infer your country from your IP address to show the right country version of the site (see section 5 for the cookie this sets). Basis: our legitimate interest in running and protecting the site. We also keep our own usage statistics, described in section 6.
Your account
You can create an account with an email address and password, with a one-time sign-in link sent to your email, or with Google. We store your email address, an optional display name and your password (kept by our authentication service only in hashed form). If you use Google, Google tells us your email address, name, profile picture link and Google account ID. Our authentication service also records the IP address and browser of each signed-in session, to keep your account secure, and keeps them while your account exists. Your profile holds the choices you make: language, resident or visitor view, home and destination city, interests, the family-friendly filter and whether you agree to notifications (off unless you turn it on). Basis: performing the service you asked for by creating an account. You do not need an account to use the site.
Saved and followed items
Saving an event or trip, or following a city, artist, festival or team, works without an account: the items are kept in your browser. Saving a place needs an account. If you are signed in we also store your saved and followed items against your account so they sync between your devices, and when you sign in, items saved on that device are copied into your account. Basis: performing the service you asked for.
The newsletter
If you subscribe we store your email address, your language, the country version of the site you subscribed on and the time. To be able to show what you agreed to, we also record the version of the consent wording you saw, which form you used, any campaign parameters (utm_) in the link you arrived from and, where this is switched on, a keyed hash of your IP address (a hash made with a secret key that only we hold, never the address itself). We email you a confirmation link first and add you to the weekly email only after you click it. The weekly email lists upcoming events in your country and contains an unsubscribe link. Basis: your consent, which you can withdraw at any time by unsubscribing.
Email click measurement
Links in our emails go through our own redirect, which counts the click: the time, the link, your approximate country, your device type and one-way hashes of your IP address, browser and email address. We use this to see which events people find useful, and only in aggregate. We do not record whether you open an email. Basis: our legitimate interest in understanding which content is useful.
Alerts and reminders
We may offer flight price alerts and event reminders. If you set one up we store your email address and what you asked us to watch (for example a route and dates), email you when there is something to report, and every such email has a link to stop it. You will not receive these unless you set one up. Basis: performing the service you asked for.
Push notifications
We do not send push notifications today. If we add them, they will be off unless you enable them in your browser, and we will update this policy first.
When you contact us
If you email us we use your message and address to reply. Basis: our legitimate interest in answering you, or your request for us to act on your data rights.
3. Location data
Features such as "Near Me" and finding the nearest on-duty pharmacy use your device's location. Your browser asks for your permission first, and then sends your coordinates to our server only to look up nearby results. We do not store your precise location or share it with third parties. Separately, the approximate, city-level location that Cloudflare derives from your IP address is held only in your browser session and is never written to a cookie or database.
4. Sharing, selling and partners
We do not sell your personal data and we do not give your email address or account data to advertisers or partners. Our service providers (section 8) process data for us under their own terms. Some pages carry affiliate links; clicking one takes you to the partner's site, and the partner then handles whatever you do there under its own privacy policy.
5. Cookies and data kept on your device
We use first-party cookies and browser storage that the site needs to work: your country and language, the resident or visitor view, light or dark theme, your cookie choice, items you save before signing in, the last page you visited (so we can return you to it), your home airport for flight prices, and, when you are signed in, the session that keeps you signed in. They are stored in your browser, are not used to identify you across other sites, and you can clear them at any time in your browser settings. The country cookie is set from the country your IP address indicates. Analytics and advertising cookies are separate and only load if you accept them, see sections 6 and 7.
6. Analytics
We use analytics to understand how the site is used in aggregate, for example which pages are popular, so we can improve it.
Our own usage statistics. Each page view and each click on a link that leaves the site is recorded by our own analytics system, not by a third party: the page address, the referring page, a random session identifier kept in your browser's session storage for that tab (not a cookie), any campaign parameters in the link you arrived from, your approximate country, your device type and one-way hashes of your IP address and browser. This does not depend on your cookie choice, is not linked to your name, email address or account, and is used to produce aggregate statistics and to detect automated traffic. Basis: our legitimate interest in measuring and securing the site.
Our own signup and save measurement. In the same way, we record a small set of events about our own signup and save features: that the newsletter form was shown or submitted, that the sign-in prompt on the saved-events page was shown or clicked, that an event was saved, and that a newsletter confirmation link was opened. Each record holds only the type of event, the type of page it happened on (for example an event page or a country home page), the site language, your approximate country and the same random session identifier kept in your browser's session storage (not a cookie). It holds no email address, IP address, browser details or account ID, and nothing you type. This does not depend on your cookie choice, is used only to produce aggregate figures on how many visitors sign up or save, and is never sold or shared. Basis: our legitimate interest in measuring and improving these features.
Third-party analytics, which load according to your cookie choice. The tools are:
- Google Analytics, delivered through Google Tag Manager. Once you accept analytics cookies, this sets cookies and processes pseudonymised usage data (including a truncated IP address, pages viewed and approximate location) with Google acting as our processor.
- Microsoft Clarity, a session-recording and heatmap tool, also delivered through Google Tag Manager.
We do not use analytics data to identify individual visitors, and we do not sell it. Microsoft Clarity loads only if you accept analytics cookies.
Before you make a choice, Google Analytics may still receive a very limited, cookieless measurement signal from this site — no cookies are set, no advertising identifiers are used, and Google does not store your IP address against it — used only to produce aggregated, modelled statistics about overall site usage. Accepting analytics cookies (see section 10) switches Google Analytics to full, cookie-based measurement. If your browser sends a Global Privacy Control or "Do Not Track" signal, Google Tag Manager does not load at all, so this cookieless signal is not sent either.
7. Advertising
Wanderistan is supported by advertising. We use Google AdSense to serve ads on this site.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and to other websites.
- Google's use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads to you based on your visit to this and other sites on the internet.
- You may opt out of personalised advertising by visiting Google Ads Settings (
g.co/adsettings). - You can opt out of personalised advertising by many other third-party vendors at aboutads.info/choices or youronlinechoices.eu.
Advertising cookies load only if you accept marketing cookies. Some pages also carry affiliate links, which earn us a commission on purchases at no extra cost to you — how that works is set out in our affiliate disclosure.
8. Who processes your data
These providers handle personal data on our behalf or as part of how the site works:
- Our own servers. The database that holds accounts, saved items and the newsletter list (a self-hosted Supabase installation), our authentication service, our usage statistics and the mail server that sends our emails all run on virtual servers we administer ourselves. We do not use a third-party email-sending service.
- Cloudflare delivers and protects the site and therefore sees visitors' IP addresses and requests.
- Google (Tag Manager, Analytics and AdSense, as described above, and Google sign-in if you choose it) and Microsoft (Clarity), according to your cookie choice where cookies are involved.
- Maps and links to external accommodation, ticketing and travel services load or open providers' own sites, and their privacy policies apply from then on.
Some of these providers are based outside the European Economic Area and the UK. Where your data is transferred there, we rely on the safeguards those providers offer, such as the EU–US Data Privacy Framework or standard contractual clauses.
9. How long we keep data
- Account, profile, saved and followed items: until you ask us to delete your account, when we delete them with it.
- Newsletter: until you unsubscribe. After that we keep your email address on a do-not-contact record, so that we do not email you again and can show that you opted out. Ask us if you want it erased as well. An address that is never confirmed is never sent the weekly email.
- Signup and save measurement events (section 6): 400 days, then deleted automatically.
- Our own page-view and outbound-click statistics, and email click records: kept in pseudonymised form for aggregate reporting. We do not yet delete these on a fixed schedule; we will set a retention period and update this policy when we do. We delete them on request where we can identify them as yours.
- Google and Microsoft analytics and advertising data: kept by those providers under their own retention settings.
- Messages you send us: as long as needed to deal with them and a reasonable time afterwards.
10. Your rights and choices
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. You can withdraw consent at any time: unsubscribe using the link in any email, or change your cookie consent using the Cookie settings link in the footer of every page. Declining analytics cookies prevents Google Analytics and Microsoft Clarity from loading; declining marketing cookies prevents advertising and partner content from loading. The rest of the site continues to work either way.
There is no self-service deletion or export yet. To use any of these rights, email [email protected] with "Privacy request" in the subject line from the address you signed up with, and we will reply within one month. If you are not happy with our answer you can complain to your local data protection authority.
You can also decline location access, clear cookies and local storage, or use your browser's privacy controls and tracking protection at any time. Declining location only disables the location-based features.
11. Changes
We may update this policy from time to time. The date above shows when this version was last updated. If a change affects how we use your email address we will tell subscribers and account holders by email.
12. Contact
Questions about privacy, or a request relating to your data, can be sent to [email protected], or through our Contact page. Wanderistan is published by Avenmark Media.