Privacy policy

Effective date: 18 September 2026 Updated: 21 September 2026

TravelerOutlook ("we", "us", "our") respects visitor privacy. This policy explains what data we collect when you visit traveleroutlook.com, how we use it, who we share it with (limited third parties), and your rights under applicable privacy laws including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Singapore's Personal Data Protection Act (PDPA).

Who we are

TravelerOutlook is based in Singapore. For publication details see our about page. For editorial standards see our editorial standards page. For contact see our contact page.

What data we collect

TravelerOutlook is a read-only publication. We do not offer user accounts, comments, forums, or interactive features that require personal data. What we do collect is limited to standard website analytics and technical operations data:

Automatically collected data:

  • Our origin request logs record the public page path, timestamp, request method, response status, response duration, and a broad traffic category.
  • We inspect the user agent to distinguish claimed AI crawlers, user-triggered AI fetchers, other bots, browser-like requests, and unknown clients. These categories do not verify bot identity or identify individual people.
  • These application logs do not store IP addresses, full user agent strings, cookies, referrers, or query strings. Unrecognized request paths are grouped rather than stored verbatim.
  • We also keep private daily origin-request totals in Replit PostgreSQL, grouped by broad traffic category, resource type, and response-status class, with collection-coverage timestamps. These aggregates contain no raw IP addresses, user agent strings, query strings, cookies, or request paths.
  • Replit's hosting infrastructure and enabled browser analytics separately process technical network and browser information to deliver the site and report aggregate visits, pages, and traffic sources.
  • Custom browser events measure guide-link clicks, reading-position milestones, external source-link clicks, and email contact-link clicks. Event properties include public page paths, source hostnames, milestone percentages, and interaction categories, not email addresses, message contents, or URL query strings.

Data you voluntarily provide: If you email us via any of the addresses on our contact page, we retain that email correspondence in our editorial inbox for record-keeping and follow-up. You can request deletion of your correspondence at any time.

What we do not collect: We do not use user accounts. We do not collect names, physical addresses, phone numbers, or payment information from ordinary site visitors. We do not build persistent user profiles across visits. We do not use advertising trackers or cross-site tracking cookies.

Cookies

TravelerOutlook uses a minimal set of cookies:

  • Functional cookies: none required. The site works without cookies.
  • Analytics: Replit-hosted browser analytics measures aggregate visits. Our origin request logger does not set cookies or assign visitor identifiers. Hosting infrastructure may use its own operational cookies.
  • Advertising cookies: none. We do not run advertising on the site and do not deploy advertising trackers.

If we ever introduce cookies that require consent under GDPR or the ePrivacy Directive, we will present a consent banner and honor your choice.

Third-party services

We use a small number of third-party services to operate the site:

  • Replit (hosting and analytics): Replit serves the site and provides deployment logs and browser analytics. Its infrastructure receives technical request information as part of delivering the site. See Replit's privacy policy for its data practices.

We do not share visitor data with advertisers, marketing platforms, or data brokers.

Legal basis for processing (GDPR)

For visitors from the European Economic Area (EEA), UK, or Switzerland, our legal basis for processing the limited data we collect is our legitimate interest in operating a website (Article 6(1)(f) of GDPR): understanding aggregate traffic patterns, preventing abuse, and delivering content quickly. This legitimate interest is balanced against your rights and does not include any profiling or automated decision-making.

For visitor correspondence (emails you send to us), the legal basis is your consent (you chose to email us) and our legitimate interest in editorial record-keeping.

Your rights

Depending on your jurisdiction, you have some or all of the following rights over your personal data:

  • Access: request a copy of the personal data we hold about you (typically limited to any email correspondence you sent us).
  • Rectification: request correction of inaccurate personal data.
  • Deletion: request deletion of your personal data ("right to be forgotten" under GDPR; "right to delete" under CCPA).
  • Restriction of processing: request that we limit how we use your data.
  • Data portability: request your data in a machine-readable format.
  • Objection: object to our processing on legitimate-interest grounds.
  • Withdrawal of consent: where processing is based on consent, withdraw it at any time.
  • CCPA-specific rights: California residents have the right to know what personal information is collected, to know if it's sold or disclosed and to whom (we do not sell personal information), to say no to the sale of personal information, and to non-discrimination for exercising CCPA rights.
  • PDPA-specific rights: Singapore residents have rights to access and correct personal data under Singapore's Personal Data Protection Act 2012.

To exercise any of these rights, email us via our contact page with a description of your request. We aim to respond within 30 days.

Data retention

  • Server logs: retained in Replit's deployment logging system according to the provider's available retention. We do not maintain a separate permanent request-log database.
  • Daily origin totals: available for a rolling 13-calendar-month window. Older totals are removed during regular collector cleanup; cleanup may be delayed while the service is stopped or storage is unavailable. The collection-start timestamp is retained separately. Hosting backups follow the provider's policies.
  • Email correspondence: retained in our editorial inbox for record-keeping unless you request deletion.
  • Browser analytics data: separate aggregate browser analytics follows the provider's retention policies; the 13-month limit above applies to our origin totals.

International data transfers

TravelerOutlook is based in Singapore. Our hosting and analytics provider may process data in other jurisdictions. See the provider's privacy policy for its data-transfer practices.

Children's privacy

TravelerOutlook is not directed at children under 13 (or under 16 in some jurisdictions). We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will delete it promptly. Parents who believe their child has provided us with personal data should contact us via our contact page.

Changes to this policy

We may update this privacy policy from time to time. Material changes will be noted with an updated date at the top of this page. Substantial changes may be announced on the about page or via a banner. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact for privacy inquiries

For any privacy-related question, correction, or rights request, email us via our contact page. Please include enough detail for us to identify your request and respond appropriately.