Privacy-By-Design Architecture
At Travel Insight (accessible via itravel.fyi), privacy is not an afterthought or compliance checklist; it is the core foundation of our technical architecture.
Unlike conventional travel search engines that enforce user registration, capture contact books, and monetize browsing history through programmatic ad exchanges, Travel Insight operates as a pure stateless utility. You do not need to create an account, verify a phone number, or disclose your identity to research seasonal climate profiles, analyze flight routing models, or evaluate destination crowding alternatives.
Data We Collect & How We Use It
We adhere strictly to the principle of data minimization under Article 5(1)(c) of the General Data Protection Regulation (GDPR). We only process information that is technically required to deliver our services:
- Zero Behavioral Profiling: We do not track you across other websites or construct personal advertising profiles.
- No Financial Data Storage: We do not process or store credit card details, billing addresses, or bank accounts.
- Explicit Consent: Personal communication details (such as your email) are collected only when you explicitly opt in to receive a travel brief.
Specifically, our services interact with the following data points:
- Email Delivery for Travel Briefs: When you click "Export PDF" and enter your email, we temporarily process your address to generate and dispatch your personalized travel brief. If you check the optional box for destination weather alerts, we record this preference. You can revoke this permission at any time with a single click.
- User Feedback Submissions: If you submit corrections, bug reports, or feature recommendations via our Feedback Form, we log your comments and optional contact address solely to verify data accuracy and improve our algorithms.
- Server Infrastructure Logs: Standard web server connection logs (IP address, user-agent string, timestamp, requested URI) are generated automatically. These logs are used strictly for threat prevention, DDoS mitigation, rate-limiting, and error diagnosis.
LocalStorage & Cookies Breakdown
We do not use invasive third-party tracking cookies or advertising pixels (such as Meta Pixel or Google Ads Remarketing). We utilize standard HTML5 localStorage purely to remember your ergonomic preferences between browsing sessions:
| Storage Key | Purpose | Classification | Duration |
|---|---|---|---|
ti_units |
Stores preferred temperature format (Celsius vs. Fahrenheit). | Functional Preference | Persistent (Device Only) |
ti_dist_unit |
Stores preferred distance format (Kilometers vs. Miles). | Functional Preference | Persistent (Device Only) |
ti_theme |
Maintains your Dark Mode or Light Mode visual selection. | Ergonomic Preference | Persistent (Device Only) |
ti_pocket_itinerary |
Caches bookmarked attractions and experiences so you don't lose trip ideas. | Application State | Persistent (Device Only) |
Because these values are stored exclusively inside your browser's local sandbox, they are never uploaded to our servers, shared with third parties, or accessible across different domains. You can clear this data at any moment through your browser's "Clear Site Data" settings.
Your Rights Under GDPR & CCPA
Regardless of where you reside, Travel Insight extends full data sovereignty rights in compliance with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):
- Right to Access (GDPR Article 15): You have the right to request confirmation of whether we hold any personal information regarding you, and to receive an exported copy.
- Right to Erasure / "Right to be Forgotten" (GDPR Article 17): You may request the permanent deletion of your email address from our delivery records at any time.
- Right to Rectification (GDPR Article 16): You may request immediate correction of inaccurate contact information.
- Right to Restrict or Object to Processing (GDPR Articles 18 & 21): You may restrict the processing of your data for specific tasks.
- Right to Non-Discrimination (CCPA): We never deny service, alter pricing, or degrade quality if you choose to exercise your privacy rights.
Send an email request to our Data Protection Officer. We fulfill all verified requests within 7 business days.
Third-Party Links & Travel Affiliates
Travel Insight provides deep links to verified external travel services, including airline flight booking portals, hotel aggregators, local transit agencies, and airport authority alerts.
Some of these destination links are affiliate links. As disclosed on our About & Affiliate Disclosure page, we may receive a small referral commission if you complete a booking on an external platform, at zero additional cost to you.
Please note that external platforms operate under their own independent privacy statements and cookie protocols. When navigating away from itravel.fyi, we encourage you to review their respective privacy practices.
Data Security & Retention Standards
We implement industry-grade technical and organizational safeguards to ensure confidentiality, integrity, and availability:
- HTTPS & TLS 1.3 Encryption: All transit communication between your browser and our infrastructure is strictly encrypted using modern SSL/TLS 1.3 certificates.
- Automated Server Log Rotation: Technical server logs are retained for a rolling maximum of 30 days before being automatically purged and overwritten.
- No Plaintext Credentials: In compliance with security standards, we do not store customer passwords or authentication secrets because accounts are deliberately omitted from our architecture.
Data Controller & Contact Inquiries
If you have questions, regulatory inquiries, or feedback regarding our privacy commitments, you can reach our operating team directly:
Email: info@itravel.fyi
Platform: https://itravel.fyi
Response Guarantee: All inquiries addressed within 7 business days.