Privacy

When you browse

Two measurement tools load on every page: Vercel Web Analytics and PostHog.

PostHog starts after the page has painted and sends one pageview event carrying the site name and its register. Click autocapture is off, session recording is off, surveys are off, and a person profile is created only for a signed-in user, which visitors are not. PostHog and Vercel receive the IP address and browser type that come with the request, as any internet request carries.

PostHog stores a random identifier in your browser, in a cookie and in local storage, so repeat visits count as one visitor. The site sets no other visitor cookie; the one remaining cookie is set when signing in to the editing panel, which is closed to visitors.

Contact and correction forms

What you typed is stored: the message, the site path it refers to if given, and your name and email if you entered them. Name and email are optional; the message alone is enough. A copy of the message is emailed to the operations address.

The message enters an internal review queue. When a correction is applied, the corrections log shows its date, the page path and the correction note, without your name or email.

Directory: adding a listing, reviews, ownership claims

Adding a listing stores what you enter in the form: name, city, area, address, phone, WhatsApp, Instagram, website, email, owner name, coordinates, description and photos. The listing is published after approval. The contact detail you leave as the submitter is stored with the listing and is not shown on its page.

A review stores the name you type, the star rating and the comment, and is published after approval. Stored with it is a one-way hash derived from the IP address and browser type; the IP address itself is not stored. That hash stops two reviews of one listing from the same source and surfaces rating bursts.

An ownership claim stores the name, contact detail and message, and none of it is published.

Anti-spam

Before a form is accepted, your browser solves a signed computational challenge, the fill time is measured, and a hidden field only a script fills is checked. Where Cloudflare Turnstile keys are configured, Turnstile replaces the computational challenge, and the IP address then reaches Cloudflare for that check.

Where the data is stored

Rows sit in a Postgres database on Neon, uploaded images in Vercel Blob, and the sites run on Vercel.

What does not happen here

No advertising network and no third-party ad trackers. No sale of data and no sharing with data brokers. No session replay and no click maps. No visitor accounts.

Deleting what you sent

A message, correction request or review you sent can be deleted: ask on the contact page and say what you sent and roughly when.