Privacy Policy

1. Information We Collect

Automatically Collected Information

• Basic server logs for security and performance (IP address, timestamps, requested pages)
• General location information (city/country level from IP address)
• Privacy-focused performance metrics via Vercel Analytics (page views, referrers, device type — no personal tracking or cookies)
• Google Analytics 4, with your consent: page views, referrers, device type, approximate location, and a randomly assigned client ID stored in cookies (_ga, _ga_*). See the "Analytics" subsection below for details.

Information You Provide

• Email address (if you contact us via hello@hersafevoyage.com)
• Any information in emails or messages you send to us
• Your email address and destination city, if you sign up for a free checklist
• Your email address and purchase details, if you buy a guide. Payment is handled by Stripe; we never see your card details.
• Your quiz answers, if you buy a guide: travel style, budget, comfort level, trip timing and anything you write in the free-text field. Please don't include health or other sensitive details unless you want them used in your guide.

2. How We Use Your Information

• To respond to your inquiries and provide customer support
• To prevent abuse and ensure site security
• To monitor site performance and uptime
• To send the checklist and the emails you signed up for
• To process your purchase, create your guide and email it to you
• To keep the records Swiss accounting law requires

3. Cookies and Tracking

Essential Cookies

If you create an account or log in, we use essential cookies to maintain your session. These are strictly necessary for the site to function and do not require consent.

Analytics

Vercel Analytics: a privacy-focused analytics service that does not use cookies or collect personal information. It provides aggregate data about page views, referrers, and device types without tracking individual users.

Google Analytics 4: we use Google Analytics 4 to understand how visitors use the site so we can improve our content. Google Analytics sets cookies (_ga,_ga_*) and collects information such as pages visited, referring site, device type, browser, and approximate location.

We use Google's Consent Mode v2. For visitors in the European Economic Area, the United Kingdom, and Switzerland, all analytics and advertising consent categories default to denied until you click "Accept" on the cookie banner. While denied, Google Analytics sends only cookieless pings used for aggregate measurement modelling and does not set tracking cookies. For visitors outside these regions, defaults are granted; you can decline at any time using the cookie banner or the "Cookie Settings" link in the footer.

Information collected by Google Analytics is processed by Google LLC and may be transferred to the United States. For more information on how Google uses this data, see Google's Privacy Policy.

To decide whether to ask for your consent, we check which country your request comes from, using a country code provided by our network provider Cloudflare. We do not store it.

Affiliate Content and Links

Our site contains affiliate links to travel services. These are ordinary links and set nothing on your device. Clicking one sends you through our affiliate network, Travelpayouts, which forwards you to the partner; the partner may then set cookies on their own site to track the referral.

We also display tour recommendations from third-party partners. For visitors in the EEA, UK and Switzerland this widget loads only after you accept cookies. Elsewhere it loads by default and you can disable it using "Cookie Settings" in the footer. It may set cookies on your device to provide personalised recommendations and track referrals.

Withdrawing Consent

You can change your cookie preferences at any time using the "Cookie Settings" link in the footer. Withdrawing consent will prevent these third-party features from loading in future visits. However, cookies previously set by third-party services cannot be deleted by us - you may clear these through your browser settings if desired.

4. Information Sharing

We do not sell or rent your personal information. Information may be shared with:

• Service Providers, who process data only on our behalf:
  • Vercel (website hosting) and Fly.io (application servers, Frankfurt)
  • MongoDB Atlas (database) and Cloudflare R2 (storage for guides)
  • Stripe (payments)
  • Mailgun (guide emails) and Loops (checklist and newsletter emails)
  • Anthropic (the AI model that writes your guide from your quiz answers; it does not use them to train its models)
  • Google Analytics 4 (only with your consent in the EEA, UK and Switzerland)
• Legal Requirements: If required by law or to protect our rights
• Business Transfer: In case of merger, acquisition, or sale of assets

Some of these providers are based in the United States. Where data leaves Switzerland or the EEA, we rely on their certification under the Data Privacy Framework or on standard contractual clauses.

5. Data Retention

We retain different types of data for different periods:

• Contact Emails: Retained until your inquiry is resolved, or until you request deletion
• Server Logs: 30 days for security and performance monitoring
• Checklist Signups: Until you unsubscribe or ask us to delete them
• Purchase Records (email, amount, date): 10 years, as Swiss accounting law requires
• Quiz Answers and Your Guide: Kept so we can resend or fix your guide, until you ask us to delete them
• Google Analytics Data: Retained according to our Google Analytics property settings (currently up to 14 months for user-level and event data; aggregate reports are retained indefinitely)

6. Data Security

We implement reasonable security measures to protect your information, including:

• Secure HTTPS encryption for all communications
• Limited access to personal information
• Regular security updates and monitoring
• Secure hosting with reputable providers

Important: While we take reasonable security measures, no online service is 100% secure. Please be mindful of the information you share.

7. Your Rights

In general, you have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Object to processing of your information

For specific rights under GDPR or CCPA, see sections 10 and 11 below.

To exercise these rights, please contact us at hello@hersafevoyage.com.

8. Third-Party Links

Our site may contain affiliate links to hotels, travel services, and other resources. These third-party sites have their own privacy policies. We are not responsible for their practices and encourage you to review their privacy policies.

9. Children's Privacy

This service is intended for adults (18+). We do not knowingly collect personal information from children under 18. If you are a parent and believe your child has provided personal information, please contact us.

10. GDPR Rights (European Union Residents)

If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

Your GDPR Rights

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limited processing of your data
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent

You also have the right to lodge a complaint with a data protection authority: in Switzerland the FDPIC, in the EU the authority of your country.

Legal Basis for Processing

• Consent: Google Analytics and the tour recommendations widget in the EEA, UK and Switzerland; email communications and newsletter subscriptions everywhere
• Contract: Processing your purchase, quiz answers and guide
• Legitimate Interests: Site security, server logs, and privacy-focused performance metrics (Vercel Analytics)
• Legal Obligations: Record-keeping and legal compliance

Data Protection: Her Safe Voyage is operated from Switzerland, which provides strong data protection under the Swiss Federal Data Protection Act (FADP) and has adequacy decisions from the EU Commission.

Your data is processed in Switzerland and may be stored on servers in the EU or US (through service providers like hosting and analytics). All data transfers comply with Swiss and EU data protection standards.

11. CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Your CCPA Rights

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of exercising your rights

Categories of Information We Collect

• Identifiers: Email address (if you contact us)
• Internet Activity: Website usage, pages visited, device information
• Geolocation Data: General location (city/country level from IP)

To exercise your CCPA rights, please contact us at hello@hersafevoyage.com with "CCPA Request" in the subject line.

12. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be posted on the website with an updated "Last Modified" date. Your continued use of the service constitutes acceptance of the updated policy.

13. Disputes and Jurisdiction

This Privacy Policy is governed by Swiss law. This does not limit your rights under the data protection law that applies to you, including the GDPR, or your right to complain to a data protection authority or go to court where you live.

14. Contact

If you have questions about this privacy policy or our data practices, please contact us at: