Skip to main content

Privacy policy

Effective date: 19 July 2026

Who we are

Code Foundry, LLC (“we”, “us”) operates Travel Timing Guide at traveltiming.guide.

Mailing address: 304 S. Jones Blvd #4603, Las Vegas, NV 89107

Privacy contact: [email protected]

We have not appointed a Data Protection Officer. For privacy matters, use the privacy contact above.

Overview

Travel Timing Guide helps you search destinations by typical weather for your travel dates. We do not offer public user accounts or marketing newsletters.

This policy explains what personal data we process, why, who we share it with, how long we keep it, and your rights under the UK GDPR and EU General Data Protection Regulation (GDPR).

Data we process

Depending on how you use the site, we may process:

  • Search preferences you enter (dates, weather filters, countries, location radius)
  • Place names you type in location autocomplete
  • Technical data in server logs (truncated IP address, requested URL, browser type via User-Agent)
  • Analytics data if you consent (page views, referrer, device/browser signals processed by Cloudflare)
  • On-page advertising measurement when enabled (page views, referrer, device/browser signals, cookies set by advertising partners such as Google AdSense)
  • Browser local storage for theme preference and consent choices
  • First-party HTTP cookie for metric or imperial unit preference
  • HttpOnly admin session cookie for authorised control-panel operators only

Purposes and legal bases

We process data on the following bases:

  • Provide search, maps, and weather content you request — legitimate interests (Article 6(1)(f))
  • Remember theme preference (local storage) and unit preference (HTTP cookie) — strictly necessary storage / legitimate interests
  • Measure site usage with Cloudflare Web Analytics — consent (Article 6(1)(a)) where required; you can enable analytics in cookie preferences
  • Show on-page advertising scripts (Google AdSense) — consent (Article 6(1)(a)) in the UK/EEA/Switzerland and similar regions; elsewhere these scripts may load by default with opt-out via cookie preferences
  • Load a Travelpayouts affiliate link-conversion script (emrldco.com) — consent (Article 6(1)(a)) where required; elsewhere it may load by default with opt-out via cookie preferences
  • Show affiliate booking links on destination pages (activities, transfers, eSIM, travel insurance) — legitimate interests (Article 6(1)(f)) with transparency; partner sites process data when you follow a link (no on-page script required for those links)
  • Infer general location from IP (via Cloudflare) to apply regional cookie rules — legitimate interests (Article 6(1)(f))
  • Protect the service and investigate abuse — legitimate interests (security logging with truncated IP)
  • Operate the internal admin control panel — legitimate interests / contractual need for operators

Recipients and processors

We use service providers who process data on our instructions or deliver content to your browser:

  • Cloudflare, Inc. — Web analytics (with consent) and infrastructure. Privacy: https://www.cloudflare.com/privacypolicy/
  • DigitalOcean, LLC — Application and API hosting, server logs. Privacy: https://www.digitalocean.com/legal/privacy-policy
  • OpenFreeMap / OpenStreetMap contributors — Map tile delivery (IP and User-Agent sent when maps load). Privacy: https://openfreemap.org/
  • Travelpayouts (tp.media) — Affiliate booking link redirects when you follow partner offers (Tiqets, Kiwitaxi, Yesim, EKTA); with consent, on-page link-conversion script delivered via emrldco.com. Privacy: https://www.travelpayouts.com/en/privacy_policy
  • Google AdSense (Google Ireland Limited / Google LLC) — Display advertising on destination pages (with consent). Privacy: https://policies.google.com/privacy

International transfers

Some providers are located outside the UK/EEA (for example the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses included in vendor data processing agreements.

Retention

We keep data only as long as needed for the purposes above:

  • Web server access logs (truncated IP): up to 90 days
  • API and application logs: up to 90 days (target; see API operator)
  • Search or suggest query logs, if any: up to 30 days
  • Browser preferences and consent choices: until you clear site data or we publish a new consent version
  • Analytics: per Cloudflare retention settings when you have consented
  • Advertising: per our advertising partners (including Google AdSense) when you have consented; withdraw consent in the banner and clear site data to remove cookies on your device

Your rights

If GDPR applies to you, you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability where applicable. Where we rely on consent, you may withdraw consent at any time without affecting prior processing.

To exercise your rights, email [email protected]. We respond within one month. You may also lodge a complaint with your local supervisory authority.

  • UK: Information Commissioner’s Office (ico.org.uk)
  • EU: your national data protection authority (edpb.europa.eu)

Cookies and browser storage

We use browser local storage for theme preference and consent choices, and a first-party HTTP cookie for unit preference. Analytics and advertising are controlled through cookie preferences; rules differ by region (see our Cookies page). Location is inferred from your IP address to apply the correct rules.

Children

The site is not directed at children under 16. We do not knowingly collect personal data from children.

Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. When you consent to advertising, third-party partners may use automated processing to deliver and measure ads.

Changes

We may update this policy. Material changes will be reflected on this page with an updated effective date. We may ask for renewed consent if required.