Collect less. Explain what remains.

• Hosting, database, media-storage, and security providers may process standard technical request data such as IP address, device information, requested URL, timestamps, and error data to deliver and protect the service.
• Travistello does not intentionally store raw public-visitor IP addresses in its editorial product database.
• Compare selections are stored locally in the visitor's browser and are not a public account profile.
• After analytics consent, PostHog may receive page paths, named interaction events, an anonymous browser identifier, and the technical context attached to those events. Automatic click capture, session replay, and person profiles are disabled.
• After the same choice, first-party measurement stores an anonymous landing path, explicit campaign labels, referrer domain and session times, and can link that session to a merchant click. It does not store raw IP addresses or arbitrary query text. The session cookie expires after 30 minutes without activity and is cleared on withdrawal. Vercel Web Analytics may receive page-view events with query strings and fragments removed. These measurements are not advertising profiles.

• Authorized CMS accounts contain the information needed to authenticate and manage editors.
• Outbound merchant redirects may record the public offer token and first-party attribution context needed to understand link performance, without placing research conclusions inside analytics records.
• A destination merchant or affiliate network applies its own privacy policy after a visitor leaves Travistello.

Technical data is used only for service delivery, security, debugging, aggregate performance understanding, and legal obligations. Retention should be limited to what those purposes require.

Depending on applicable law, a person may have rights to access, correct, erase, restrict, or object to certain processing. The published contact channel is the route for privacy requests.

• Vercel Speed Insights may report anonymous page-loading measurements so that slow pages can be found and fixed. It sets no cookie, stores nothing in the visitor's browser, identifies no individual, and is not used for advertising.
• Google Search Console reports how Travistello pages appear in search results. It receives aggregate search data from Google rather than a record of an individual visit, and its verification is only a static meta tag.
• Consent-gated PostHog product analytics are separate from these performance and search tools and can be declined or withdrawn through Privacy choices.

Travistello currently relies on Vercel for application hosting and field performance measurement, a Vercel-managed Neon PostgreSQL database for content, Supabase for private media storage, Google Search Console for search performance reporting, and PostHog's European service for optional product analytics. These providers may process data in locations described by their own service terms and data-protection documentation.