Privacy policy
Last updated:
Traveliac ("we", "us") is a guide to the places worth visiting in India, city by city. This policy explains what personal data reaches us when you use traveliac.com, what we do with it, and the rights you have over it.
In brief
- There are no accounts, logins, newsletters or comments on Traveliac. The one form, for feedback and corrections, is optional and asks for no personal details unless you want a reply.
- We run no advertising, no analytics and no tracking scripts, and the site sets no cookies.
- Our web server keeps standard request logs, with your IP address anonymised, to run and secure the site.
- Photos are served from traveliac.com itself, so your browser normally doesn't connect to Wikimedia or any other photo service.
- If you email us, we keep your message so we can reply.
- We do not sell or share your personal data, and we don't build profiles of visitors.
Who is responsible
Traveliac runs traveliac.com from India and is responsible for the personal data described on this page. For any question about it, or to use your rights, email editorial@traveliac.com.
What we collect and why
Server logs
Like almost every website, our web server (nginx, on a virtual private server) records each request it receives. A log entry holds:
- your IP address with its last part removed, so it is anonymised;
- the date and time;
- the page or file requested;
- the page you came from (the referrer), if your browser sends it;
- your browser's user-agent, which names the browser and operating system.
We use these logs only to run, secure and debug the site: to find broken pages, fix errors and spot abuse. We never combine them with other data and never use them to profile visitors. We keep them only as long as we need them for those purposes, then delete them.
Search
The search box downloads a public index of our pages (/search-index.json) and matches what you type inside your own browser, so the words you type are not sent to us as you type them. If you open the full results page, your search becomes part of that page's address (for example /search?q=jaipur) and is recorded in the server logs like any other address. Please don't type personal information into the search box.
Your country choice
The site remembers the country you choose by saving one small item in your own browser. It stays on your device and is never sent to us. The cookies and browser storage page explains it.
The feedback form
The feedback form lets you report a mistake or send a suggestion. It stores what you choose and type (the kind of message, your message, the page it is about) and, only if you fill them in, your name and email address. We don't store your IP address or browser details with it. To stop automated spam, the server counts recent messages per anonymised network address in memory for ten minutes; that count is never written down. We use what you send only to check and correct our pages and, if you gave an email address, to reply. We keep it while we act on it and as a record of the corrections we have made; ask us at any time to delete it.
Emails you send us
If you write to us, we receive your email address, your name if you give it, and whatever your message contains. We use them only to reply to you and to keep a record of the corrections and requests we have dealt with. We never add you to a mailing list.
Other services your browser connects to
Photos. Our photos come from Wikimedia Commons, but we keep our own copies on our server and your browser loads them from traveliac.com, so nothing about you is passed to Wikimedia. Only if a photo is so new that we haven't stored it yet, and our server can't fetch it at that moment, is your browser sent to that one photo on Wikimedia Commons instead; Wikimedia then receives your IP address and may set its own cookie, under the Wikimedia Foundation privacy policy.
Fonts. The site uses fonts already installed on your device, so no font service (such as Google Fonts) is contacted.
Links to other sites. We link to Google Maps, official tourism and ticketing sites and other sources. When you follow a link, the other site may be told you came from traveliac.com, and from then on its own privacy policy applies. We don't pass any personal data to those sites.
Who else can see your data, and where it is kept
Our server logs are stored on the server that runs the site, and your emails are held by our email service; both are used only for the purposes above. We don't give your data to anyone else unless the law requires it, for example under a valid order from a court or government authority.
Traveliac is run from India. If you visit or write to us from another country, your data is handled in India and in the countries where our server and email service are located.
Legal basis (GDPR and UK GDPR)
If you are in the European Union or the United Kingdom, we rely on our legitimate interests: for server logs, our interest in running a secure, working website; for emails, our interest in answering you and keeping a record of what we have done. You can object to either at any time (see below).
How long we keep it
- Server logs: only as long as we need them to run, secure and debug the site.
- Emails: as long as we need them to reply and to keep a record of corrections and requests. You can ask us to delete your messages sooner.
- Your country choice: on your own device, until you clear it.
Security
Every page is served over an encrypted HTTPS connection, and access to our server and its logs is restricted. No system is perfectly secure, but because we collect so little, very little personal data is at risk.
Your rights
In India, under the Digital Personal Data Protection Act, 2023, you have the right to:
- get a summary of the personal data we hold about you and what we do with it;
- have it corrected, completed or updated;
- have it erased;
- raise a grievance with us about how we handle it, and have it addressed;
- nominate another person to use these rights on your behalf if you die or become unable to act.
If you are not satisfied with how we deal with a grievance, you can complain to the Data Protection Board of India.
In the European Union and the United Kingdom, under the GDPR and UK GDPR, you have the right to access your personal data, and to rectification, erasure, restriction of processing, objection to processing and data portability. You can also complain to the data protection supervisory authority in your country; in the UK, that is the Information Commissioner's Office.
In California, under the CCPA as amended by the CPRA, you can ask to know, correct or delete the personal information we hold about you, and we will not treat you differently for doing so. We do not sell or share personal information, as those laws define those terms.
How to use your rights. Email editorial@traveliac.com and say what you are asking for. We may ask for information to confirm the request is yours, for example by replying from the address you wrote to us from. We reply within 30 days, free of charge. Our server logs contain no names and no full IP addresses, so we usually cannot tell which entries, if any, relate to you.
Children
Traveliac is not directed at children, and we do not knowingly collect personal data from children. Under India's data protection law, a child is anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.
Changes to this policy
When we change this policy, we update the "Last updated" date at the top. If a change is material, we also say what changed on this page.
Contact
Questions, requests and grievances about your personal data: editorial@traveliac.com. See also our cookies and browser storage page and terms of use.