Last updated: July 24, 2026
Xplore Attractions is designed to help people discover places and plan trips without requiring them to create a traditional account. Some features, such as My Trips, saved routes, suggested places, location tools, and partner links, still require us to process limited information.
This Privacy Policy explains what we collect, why we use it, who may receive it, how long we keep it, and the choices and rights available to you. It should be read together with our Terms of Use.
Xplore Attractions is operated by Xplore Travel Network, an Ontario company. Xplore Travel Network is responsible for the personal information processed through Xplore Attractions, except where a third-party provider independently collects information under its own privacy policy.
Privacy questions and requests can be submitted through our contact form.
We collect only the information reasonably needed for the features you use.
You can browse attractions and much of Xplore without providing your name or email address. Our servers and security systems may still process technical information such as your IP address, browser and device type, timestamps, request paths, response status, and diagnostic or security events.
When you use My Trips, save a route or attraction, verify a suggested place, recover access, or request a magic link, we process your email address and information needed to issue, validate, expire, and audit the link or verification code.
We do not store your email address in ordinary readable form in our primary user records. It is protected before storage, and we may retain a masked version for display, support, recovery, or auditing. We do not use your email address for unrelated marketing unless you separately choose to receive it.
If you use My Trips, we may store attractions you save, route endpoints and geometry, travel mode, route settings, trip-planning preferences, units and language preferences, and other information needed to restore and manage your saved trip content.
If you suggest a place or submit a correction, we may collect the attraction name, description, coordinates, source notes, location information, uploaded photographs, verification status, and communications about the submission.
Uploads may be scanned, sanitised, resized, converted, quarantined, or otherwise processed before review or publication. If your verified submission is linked to My Trips, we may retain internal messages between you and Xplore about its review. We may send an email telling you that a message is available, but the message itself may remain inside Xplore.
When you contact us, we collect the information you provide, such as your name, email address, message, and any details needed to respond. We may also process anti-spam and rate-limit information associated with the request.
Some features can use your device's location to show nearby attractions, dining, accommodation, luggage storage, routes, or other travel services. We receive this location only when you grant browser or device permission or otherwise choose a location on the map.
Depending on the feature, coordinates may be processed temporarily, sent to a map, search, geocoding, routing, or nearby service provider, or stored as part of a route or location you choose to save. You can deny or revoke device-location permission through your browser or device settings.
We use Plausible Analytics to understand aggregate website usage. Plausible does not use cookies, create persistent visitor identifiers, track people across websites, or provide us with personal advertising profiles. It may process page URL, referrer, browser, operating system, device type, and an approximate location derived from the request. IP addresses are not retained by Plausible as part of its analytics data.
We may also maintain internal product metrics, such as destination views, attraction-detail opens, route-planning use, nearby-service actions, My Trips access, and aggregate save or remove counts. These metrics help us improve Xplore and are not used to create advertising profiles.
Some partner links pass through an Xplore redirect before sending you to a tour, ticket, accommodation, insurance, luggage storage, transfer, connectivity, or other third-party provider. We may record the partner or offer, placement, page path, date and time, device category, relevant destination or attraction identifier, referrer path, and whether the request appears automated.
The partner may use its own cookies or tracking technology after you leave Xplore. Its own privacy policy governs the information it collects from you.
A third-party provider may collect information needed to quote, book, pay for, or deliver its service. Depending on the service, this can include identity, contact, payment, passport, residency, trip, insurance, health, or eligibility information. That information is collected by the provider under its own terms and privacy policy unless the Xplore interface expressly tells you otherwise.
In particular, Xplore does not ask you to provide medical information or insurance-risk answers merely to follow a HelloSafe or other insurance-partner link. Do not send health, payment-card, passport, or government-identification information through Xplore's general contact, contribution, or message fields.
We use information to:
We seek meaningful consent where consent is required and explain the purpose of a collection at or before the time information is collected. Some processing is necessary to provide a feature you request, such as saving a route or sending a magic link. Other processing supports legitimate operational needs, such as security, fraud prevention, service improvement, record keeping, and legal compliance.
Where European or United Kingdom data-protection law applies, our legal grounds may include your consent, steps taken at your request or performance of a contract, our legitimate interests, and compliance with legal obligations. You may withdraw consent where processing depends on consent, although this does not affect earlier lawful processing.
Xplore uses limited cookies, local storage, session storage, or similar browser technologies to provide requested functionality and remember choices such as selected locations, filters, language, display settings, guide state, cookie choices, and temporary trip-planning state.
We do not currently use Xplore cookies for behavioural advertising or cross-site advertising profiles, and Plausible Analytics does not use analytics cookies. Third-party sites may use their own cookies after you follow a partner link. If Xplore introduces non-essential cookies, we will update this Policy and request consent where required.
Information is available only to people and organisations that need it for a legitimate purpose, including:
We do not sell personal information or rent it to data brokers. We do not disclose your email address to a travel partner merely because you click an affiliate link unless the particular service clearly requires and discloses that handoff.
Xplore is operated from Canada and serves international travellers. Our service providers and partners may process information in Canada, the United States, the United Kingdom, the European Economic Area, or other countries. Information processed in another country may be subject to that country's laws and lawful access by its authorities.
Where applicable law requires additional safeguards for an international transfer, we will use an appropriate lawful mechanism or contractual protection.
We retain information only for as long as reasonably necessary for the purpose for which it was collected, for a compatible operational purpose, or to meet legal, accounting, security, dispute-resolution, and enforcement obligations.
When identifiable information is no longer needed, we delete it, anonymise it, or securely isolate it where practical. Backup copies may remain for a limited period until they are overwritten under normal backup processes.
We use administrative, technical, and organisational safeguards designed for the sensitivity of the information we process. These may include HTTPS, protected email storage, restricted administrative access, access controls, secrets management, logging and monitoring, review workflows, and safeguards for uploaded files.
No internet service can guarantee absolute security. You are responsible for protecting access to your email account, device, magic links, and verification codes.
Depending on where you live and the law that applies, you may have the right to:
You can also disable device-location access in your browser, clear browser storage, or choose not to use optional features. Some requests may require us to verify that you control the relevant email address or account information. We may refuse or limit a request where permitted or required by law and will explain the reason where appropriate.
To make a privacy request, use our contact form.
Xplore is intended for general travel planning and is not directed to young children. We do not knowingly collect personal information from a child contrary to applicable law. A parent or guardian who believes a child has submitted personal information can contact us so that we can review and address the matter.
We may update this Privacy Policy when Xplore's features, partners, business practices, or legal obligations change. The current version will be posted on this page with a revised "Last updated" date. Where required, we will provide additional notice or obtain consent for a materially different use of personal information.
Privacy questions, requests, or complaints can be submitted through our contact form. We will review the request and respond within the period required by applicable law.
You may also have the right to contact the Office of the Privacy Commissioner of Canada, a provincial privacy authority, or the data-protection authority in the country where you live.