Privacy Policy

Last updated: January 20, 2026

This Privacy Policy explains how Xplore Attractions collects, uses, stores, and protects information when you use our website.

We aim to collect as little personal information as possible.

1. What We Collect

A. Email address for magic-link features

If you choose to use features such as saving favorites, creating itineraries, or recovering access through a magic link, we may collect and store your email address for those limited purposes.

We do not use your email address to create a traditional profile for advertising, and we do not use it for unrelated marketing unless you separately opt in.

B. Preference cookies or similar browser storage

We use limited browser storage technologies, such as cookies or similar storage, to remember your explore bar settings, including items such as:

• selected location;
• selected filters;
• similar user preferences needed to provide the browsing experience you requested.

These technologies are used only to support requested functionality and improve continuity of use.

C. Technical and operational data

Like most websites, our hosting, security, or server infrastructure may automatically process limited technical information such as IP address, browser type, device type, timestamps, or basic request logs as needed for security, fraud prevention, debugging, system integrity, and reliable delivery of the website.

We do not use this information to build advertising profiles.

2. What We Do Not Intend to Collect

We do not intend to collect or store more personal information than necessary for the limited features we provide.

In particular, we do not intend to collect:

• payment card information;
• government-issued identification information;
• sensitive personal information;
• detailed personal profiles;
• personal information unrelated to the website’s core functionality.

3. How We Use Information

We use the limited information we process to:

• provide and maintain the website;
• remember explore bar settings and filters;
• enable favorites, itineraries, and related user features;
• send or verify magic links;
• recover access to user-linked saved data;
• protect the website against abuse, misuse, and technical failures;
• comply with legal obligations.

4. Legal Bases for Processing (for EEA/UK users)

If European data protection law applies, we process personal data only where we have a valid legal basis, including:

• performance of a contract or taking steps at your request;
• legitimate interests, such as maintaining website security, preventing abuse, and operating core site functionality;
• compliance with legal obligations where required.

Where consent is required by law, we will ask for it.

5. Cookies and Similar Technologies

We use only limited cookies or similar technologies necessary to remember settings you have chosen and to provide requested functionality.

At this time, we do not use cookies for:

• behavioral advertising;
• cross-site tracking;
• ad personalization.

If we add non-essential cookies in the future, such as analytics, advertising, or similar tracking technologies, we will update this Privacy Policy and, where required, request consent before using them.

6. Data Retention

We keep information only as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• maintaining your access to favorites and itineraries;
• supporting magic-link recovery;
• meeting security, operational, and legal obligations.

When information is no longer reasonably needed, we will delete it or de-identify it where practical.

7. Sharing of Information

We do not sell personal information.

We may share limited information only in the following circumstances:

• with service providers that help us host, secure, or operate the website;
• where necessary to deliver the features you request;
• where required by law, legal process, or valid governmental request;
• to protect the rights, safety, security, and integrity of the website, our users, or others;
• in connection with a business transfer such as a merger, acquisition, or sale of assets.

8. International Users and Cross-Border Processing

Because the website may be used by people in multiple countries, information may be processed in countries other than the one where a user is located.

Where required, we will take appropriate steps to protect personal data involved in international transfers.

9. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No system can be guaranteed 100% secure, but we try to minimize both the amount of data we collect and the risks associated with it.

10. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, such as the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your personal data;
• object to or restrict certain processing;
• request portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a privacy regulator or supervisory authority.

To exercise any applicable rights, contact us at privacy@xploreattractions.com.

11. Children’s Privacy

The website is not intended for young children, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us and we will address it as appropriate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the “Last updated” date.

13. Contact

Privacy inquiries: privacy@xploreattractions.com

General inquiries: contact@xploreattractions.com