Privacy Policy

Who we are

SeyyahLab (also shown as TravelLab in English and ViajeLab in Spanish) is an independent travel-information site. We are the data controller for the personal data described here. You can reach us at seyyahlabtravel@gmail.com for any privacy request.

What we collect

Automatically: pages you view, approximate country/city derived from your IP address, browser and device type, referring page, and a random session identifier. We do not store your full IP address in our analytics records.

When you choose to give it: your email address and name if you create an account, write a forum post, ask a question or contact us; the content you submit; and your language and passport selection if you use our tools (these are stored in your own browser, not on our servers).

We never ask for: payment card details, passport numbers, government identifiers, or copies of documents. If a page ever asks you for these, it is not us.

Why we are allowed to process it (GDPR Article 6)

Consent — analytics and advertising cookies. You can withdraw it at any time and nothing is loaded before you agree.

Contract — running your account and the features you asked for.

Legitimate interests — keeping the site secure, preventing abuse, and understanding aggregate usage. We balanced this against your rights and limited what we keep.

Legal obligation — where a law requires us to retain or disclose something.

Cookies and similar technologies

We use a small number of cookies and browser-storage entries. Strictly necessary ones (keeping you signed in, remembering your consent choice, security) always run. Analytics and advertising ones only run after you accept them.

Until you make a choice, Google Consent Mode is set to denied for advertising and analytics storage, and no Google script is downloaded in regions that require opt-in. See our Cookie Policy for the full list.

Advertising

We may show advertising supplied by Google AdSense. If you accept advertising cookies, Google and its partners may use cookies and similar technologies to serve and measure ads, including personalised ads.

You can review and change Google's use of your data at adssettings.google.com and see how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

If you reject advertising cookies, we do not load the advertising script at all.

Affiliate links and sponsorship

Some links to third-party services are affiliate links: if you sign up or buy through them, we may receive a commission at no extra cost to you. Every such link is marked and carries the technical attribute rel="sponsored".

We do not accept payment to change what our data says. Visa information, route budgets and country data are never altered for a commercial partner. See our Advertising and Affiliate Disclosure for details.

Who we share data with

Hosting and delivery: Vercel Inc. (United States). Database and authentication: Supabase (hosted in the EU). Analytics: Google Analytics — only with your consent. Advertising: Google AdSense — only with your consent.

We do not sell your personal data. We do not share it for cross-context behavioural advertising unless you have accepted advertising cookies.

International transfers

Some of these providers process data outside your country, including in the United States. Where that happens for people in the EEA or the UK, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision, together with the providers' own safeguards.

How long we keep it

Analytics records: up to 14 months, then deleted or aggregated. Account data: while your account exists, plus 30 days after you delete it. Content you published (forum posts, questions): until you remove it or ask us to. Contact messages: up to 24 months. Consent records: 12 months, then you are asked again.

Your rights

If you are in the EEA or the UK (GDPR / UK GDPR): you may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent at any time. You may complain to your national data-protection authority.

If you are in California (CCPA/CPRA): you may request to know what we collect, request deletion or correction, and opt out of "sale" or "sharing" of personal information. We do not sell personal information for money. Rejecting advertising cookies on this site acts as your opt-out of sharing for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.

If you are in Türkiye (KVKK): the rights in Article 11 apply; see our Turkish-language policy for the full text.

To exercise any of these, email seyyahlabtravel@gmail.com. We reply within 30 days.

Children

This site is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

Security

Traffic is encrypted in transit (HTTPS). Access to the database is restricted by row-level security rules. No system is perfectly secure, and we do not claim otherwise; if a breach affects your rights we will notify you and the relevant authority as required.

Changes

If we change this policy in a way that affects your rights, we will say so on this page and update the date below. Continuing to use the site after a change means you accept the updated policy.