Privacy

Mac & Wen is a personal travel blog. You can read all of it without signing in, and if you do, we collect nothing about you — there are no analytics, no advertising and no tracking cookies anywhere on the site.

Signing in with Google is optional, and only needed to manage your own packing lists. This page explains what that stores. For anything below, write to macnwen@gmail.com.

Who is responsible

Mac & Wen runs this site and decides how the data described here is used — the "controller", in the words of the GDPR. Contact: macnwen@gmail.com.

What is stored when you sign in

Google tells us, and we keep:

• your name and email address
• a link to your Google profile picture
• the identifier Google uses for your account

Signing in also creates a record containing:

• the IP address and browser the sign-in came from
• a session token, which is what keeps you signed in
• the times your account and session were created and last updated
• the access tokens Google issues, so the sign-in can be completed and renewed without asking you again

We never see or store your Google password. Signing in happens on Google's own pages.

Why it is stored

To sign you in, keep you signed in, greet you by name, and attach your packing lists to your account. That is all of it — the data is not profiled, analysed, sold, or used to send you anything. There is no mailing list.

The lawful basis is that you asked for an account and this data is what providing it requires. If you would rather not, simply don't sign in; the blog works exactly the same either way.

Who else can see it

• Google — because you chose to sign in with them. Their handling of your Google account is covered by Google's privacy policy.
• Cloudflare — hosts the site and the database on our behalf, and processes it only for that purpose.

Nobody else. The data is stored in Cloudflare's Western Europe region and is not transferred elsewhere by us.

How long it is kept

Your account details are kept until you delete your account. Sessions expire 30 days after they are created, and are removed when you sign out, when an expired one is next presented, or when the account is deleted.

Deleting your account

Go to your account and choose "Delete account". This immediately and permanently removes your details, your sessions and the tokens from Google. It cannot be undone, and nothing is kept behind.

For security you need to have signed in within the past day to do this. If you are asked to, sign out and back in, then try again.

Deleting your account here does not change anything on Google's side. You can review which apps have access in your Google account settings.

Your rights

You can ask for a copy of your data, ask for it to be corrected or erased, object to it being used, or ask for it in a portable form. Email macnwen@gmail.com and you will get an answer within a month. Deletion you can do yourself, immediately, on the account page.

If you think your data is being handled wrongly, you can complain to your national data protection authority.

Cookies

One cookie, set only after you sign in, holding the session token that keeps you signed in. It is removed when you sign out.

One more, set if you look at places and activities, remembering whether you were on the map or the list so that leaving an entry returns you to the same one. Its entire value is the word map or the word list. There are no analytics or advertising cookies, which is why this site has no cookie banner.

Changes

If what we collect changes, this page changes with it and the date at the top is updated.