This policy explains what happens to your data when you visit javasunrise.com. In short: we don't use analytics or advertising trackers, we don't sell data, and we keep as little as we can.
Who is responsible
This website is run by JavaSunrise. For any privacy question or request, use our contact form.
What we collect and why
Cookies that keep the site working
We set two cookies. Both are needed for the site to work and do not track you across other websites:
- javasunrise-session: a session cookie. On our server it is linked to your IP address and browser type, which helps protect the site against abuse. It expires after 120 minutes without activity, and the session data is then deleted.
- XSRF-TOKEN: a security token that protects forms against forged requests. It expires together with the session.
Clicks on booking links
When you click a booking link (for example "Book Now" or "Check prices"), we record that the link was clicked, so we can see which hotels, tours and restaurants are useful to visitors. We store:
- which listing was clicked and on which part of our site (for example a destination page or the trip planner);
- the address of the page you were on (without anything after the "?");
- your browser type (user agent) and the date and time;
- a shortened IP address: the last part is removed (for example 203.0.113.0), so it can no longer be traced to your connection.
We use these records only for our own statistics, never to build a profile of you. The legal basis is our legitimate interest in knowing which content is useful (Article 6(1)(f) GDPR).
Messages you send us
If you use our contact form, we store your name, email address and message so we can read and answer it. We use them only to reply to you, and delete them when they are no longer needed. The form is protected against spam by limiting how many messages can be sent in a short time.
Server logs
Like every website, our hosting server keeps technical logs (IP address, page requested, time, browser type) to keep the site secure and to fix errors. These logs are deleted automatically by the hosting provider.
Other companies involved
- Booking partners (Agoda). When you click a booking link you leave our site. The partner's own privacy policy and cookies apply there, and the partner uses a cookie or link code to see that you came from us. We do not receive your name, contact details or payment details. See our affiliate disclosure.
- Google Fonts. Our fonts are loaded from Google's servers, which means your browser sends your IP address to Google. See Google's privacy policy.
- Google Maps. Restaurant and hotel pages show an embedded Google map. Google receives your IP address and may set its own cookies when the map loads.
- Share buttons. The Facebook, X and WhatsApp share buttons are plain links. Nothing is sent to those services unless you click one.
Your rights
Under the GDPR you can ask us to see, correct or delete your personal data, to limit how we use it, or object to its use. Send your request through our contact form and we will reply within one month. You also have the right to complain to the data protection authority in your country.
Changes
If we change how we handle data, we will update this page and the date at the top.