Deal alert emails
If you join the deal alert list, we store your email address, the place you asked about (or “anywhere”), the page you signed up on and the date. We use them only to send you last-minute Edit deal emails. We don’t sell or share the list.
Deal emails haven’t started yet. When they do, they will go out through an email delivery service that receives your address only to deliver them. The first email will ask you to confirm you still want them, and every email will have an unsubscribe link.
Accounts
If you create an account, we store your email address, the page you signed up from and a scrambled (hashed) copy of your password so you can sign in. We use the email only for your account and, while the trip planner is in private beta, one access invite.
Requests you send us
When you ask to use one of our photos or ask about the hotel list API, the name, email and message you enter are stored on this site so we can reply.
Analytics
We use Google Analytics and Microsoft Clarity to see which pages people visit and how they use them, so we can fix what isn’t working. Clarity also records clicks, scrolling and mouse movement on our pages. Both set cookies: Google’s names start with _ga, Clarity’s with _clck and _clsk, and Microsoft may add its own, such as MUID.
You can block these cookies in your browser settings, or use Google’s Analytics opt-out add-on. Their own policies: Google, Microsoft.
Partner links
Some links to travel booking sites are partner links, handled by Travelpayouts. If you book through one, we may earn a commission at no extra cost to you, and Travelpayouts may set a cookie to record that the booking came from this site. Links to Chase Travel are not partner links, and we don’t earn anything from credit card applications.
Maps, fonts and place search
Maps load their tiles from Esri, and the site’s fonts come from Google Fonts. Like any service your browser loads files from, they can see your IP address. When you search for a place we don’t list, our server looks it up with OpenStreetMap’s Nominatim service and sends only the words you searched, not your IP address.
Security
To block spam and abuse, the site records IP addresses in its security plugin (Wordfence) and in short-lived rate limits, which expire within a day.
Changes
If any of this changes, we’ll update this page and the date at the top.
