🌴
THAI TROPIC
Your destination, your escape
⚠️ Not legal advice. This document was written as a comprehensive, current template (including Google's requirements for future ad integration), but is not a substitute for review by a qualified lawyer — particularly if the site serves users in the EU (GDPR) or if new services are added in the future.

Privacy Policy

Last updated: October 4, 2026

THAI TROPIC ("the site", "we") respects your privacy. This policy explains what data we collect, how we use it, who may get access to it — including through third-party services like Google and Agoda — and what rights you have regarding that data. Browsing or using the site constitutes agreement to the policy detailed here.

1. What Data We Collect

We collect three types of information:

  • Anonymous usage data: which pages were viewed, which tabs/games were clicked, and which hotel links were clicked — collected to understand how the site is actually used, not linked to personal identity.
  • IP address and basic technical identification: collected temporarily by the site's server (nginx) and a rate-limiting anti-flood mechanism — for security purposes only, not stored alongside the rest of the analytics data.
  • Search data you enter: destination, dates, number of guests — used only to show you relevant results for that same search, and not stored under a name or identifying details.
  • Email address, if you sign up for updates: stored solely to notify you about new guides and destinations. Not currently connected to an external email service. You can request removal at any time by contacting us.

Beyond that, we do not collect or request: full name, phone number, payment details, or any other identifying information — unless you choose to provide it on your own initiative (for example, by contacting us directly).

2. Optional Accounts, Saved Trips and Share Links

You never need an account to use the site; trip journals are kept in your own browser by default. If accounts are available and you choose to create one, we store on our server:

  • Your email address — to identify your account. We do not send you email (no email service is connected) and we do not verify the address.
  • A password hash (never the password itself) and a hash of your personal recovery code, which lets you reset your password without email.
  • Your trip journals — everything you enter in them (titles, dates, events, notes, costs, hotels, checklist choices, and any optional personal details you type in, such as traveler names, passport and phone numbers, booking and insurance details) — plus a limited history of earlier versions of each trip, so an accidental change or deletion can be undone.
  • Hotels you save (♥) — the hotel's id and name, its destination, when you saved it and the price shown at that moment, so your list is the same on every device.
  • Your consent — when you create the account we record that you agreed to this policy (its version and the time).
  • Sign-in sessions — a random token kept in a cookie; on our server only its hash is stored, with an expiry date.

We use this only to provide the account and keep your trips safe: no advertising, no analytics profile, no selling or sharing of it, other than with the hosting provider that runs our server. The site administrator can access account and trip data to give support and to restore data after a request or a technical failure. We keep periodic backups of the database; backups are rotated and old ones are deleted automatically, so deleted data can remain in a backup until it is rotated out.

Your control: from the account panel you can download your data and delete your account with all its trips at any time; deletion removes them from the live database immediately. Trips you delete from a journal on their own stay recoverable for a limited period (90 days by default) so a mistaken deletion can be undone, and are then erased permanently.

Share links: if you create a view-only link for a trip, a snapshot of that trip is stored on our server and can be seen by anyone who has the link, until you stop sharing it. By default costs, notes and personal details (passport and phone numbers, booking and insurance details, traveler names) are left out of the snapshot unless you choose to include them. Share links do not require an account.

3. Cookies and Similar Technologies

The site uses technical cookies (language, currency, session state) and analytics cookies. If and when ads are added to the site (for example via Google AdSense), the following clarification applies to them, in accordance with Google's requirements:

Third-party vendors, including Google, may use cookies (including the DoubleClick DART cookie) to serve ads to users based on their prior visits to this site and other sites on the web. Google's use of the DART cookie enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the internet. Users may opt out of the use of the DART cookie by visiting Google's advertising policy.

For a full breakdown of cookie types, how long they're stored, and how to block them — see our separate Cookie Policy.

4. Sharing Information with Third Parties

We do not sell personal information to anyone. The data that does flow to third parties is:

  • Agoda — when you click a hotel link, you go to the Agoda site under our affiliate program (see our Affiliate Disclosure). Agoda operates under its own privacy policy, not ours.
  • Google Fonts — font loading (Rubik, Heebo) happens against Google's servers, which may log an IP address solely to serve the font.
  • Google AdSense (in the future, if and when activated) — see section 3 above regarding advertising cookies specifically.

5. Data Retention

Analytics data (clicks, page visits) is stored in the site's internal database, and is not transferred or sold to any external party. We reserve the right to prune old data from time to time.

6. Children's Privacy

The site is not intended for use by children under 13. As detailed in section 1 above, the site does not collect personally-identifying information (such as a name, email address, or phone number) from any user — adult or minor alike — as part of its normal operation. As a result, in the site's ordinary use we do not collect personal information from minors.

The only exception is a case where a visitor chooses to provide identifying information on their own initiative (for example, by contacting us directly via the email address in section 8). If we learn that such information was provided by a minor, we will act to delete it immediately, and will contact the parent or guardian if necessary. A parent or guardian who believes their child provided us with personal information is welcome to contact us using the details in section 8 for immediate deletion.

7. Your Rights

Subject to applicable law (including Israeli privacy law, and EU GDPR regulations where relevant), you have the right to request access to, correction of, or deletion of information concerning you, and to object to certain processing of data. Since we do not collect personally-identifying information by default, most requests will relate at most to anonymous usage history.

8. Contact Us

For privacy questions, you can reach us at: mybiz2723@gmail.com.

9. Changes to This Policy

We may update this policy from time to time, particularly if advertising services are added. Material changes will be noted in the "Last updated" date at the top of the page.