Privacy.

Last updated: 8 November 2026. This page explains what we do; it is not legal advice.

What happens when you visit

• Hosting: the site is served by Cloudflare. Like every web server, Cloudflare processes your IP address to deliver the page.
• Visitor statistics: we count visits with Umami, run on our own server – no cookies, no cross-site tracking, IP addresses are not stored. We see country/city, device type, browser language and which pages are read. We also count events: which kind of button or link was used (for example “share”, “directions”, “open the chat”), how far a page was scrolled (25/50/75/100 %) and rough reading time (30 s, 1 min, 3 min). We never record who clicked, and never what you type – no search words, no form or chat text.
• Switch statistics off: open any page with ?intern=1 at the end of the address (for example bantayan.org/?intern=1). Your browser then stops sending statistics; ?intern=0 turns them back on.
• Light/dark mode: your choice is saved in your browser (local storage), not on our server.
• Search: the site search runs entirely in your browser. Your search words are not sent to us or anyone else.
• Share: the share button uses your device’s own share menu or copies the link. There are no social media buttons on the site.
• Offline copy: your browser saves key pages (a service worker), so they open without internet, marked with the date they were saved. The copy stays on your device; you can delete it by clearing this site’s data in your browser settings.
• Live weather and tides: your browser requests data from Open-Meteo. Open-Meteo receives your IP address for this request.
• Storm tile: your browser asks GDACS (the UN/EU disaster alert service) directly for tropical storms, so GDACS receives your IP address. The PAGASA wind signal is fetched by our own server, so PAGASA does not see you.
• Google map: the map with ratings loads only when you tap “Map & rating”. From then on Google receives your IP address and its privacy policy applies. “Directions” and “Reviews & photos” are plain links to Google Maps.
• Speed test: Google PageSpeed Insights measures our pages at night to show the speed grade. This uses no visitor data.
• No tracking cookies, no ads, no social media trackers.

Forms

• Report a mistake, contact, add a place: what you write, the page, any photos you add and – only if you enter it – your email address go to the private team chat of bantayan.org (Slack). We do not store them anywhere else. We use them only to fix the site, check a place or answer you. Submissions are never published automatically.
• Spam protection: Cloudflare Turnstile checks your browser before a form is sent; Cloudflare processes your IP address for this.

Chat assistant

If you use the chat:

• Answers: your question, the page you are on, your recent messages in this chat and the saved chat notes (details you told the assistant, such as your first name or travel dates, and a short summary of earlier messages) are sent through OpenRouter to Anthropic, which runs the Claude AI model that writes the answer. The assistant is an AI and can be wrong.
• Team check: questions and answers are also mirrored into our private team chat (Slack), so we can check the answers and improve the guide.
• Abuse protection: Cloudflare Turnstile checks your browser when you send a question. To limit abuse we count requests per connection for at most 24 hours, using a scrambled code, not your IP address.
• In your browser: the current chat is kept in this tab only (session storage) and is gone when you close the tab. To let you continue later, your browser keeps a signed chat ID (local storage). It works for 30 days, but stays in your browser until you tap “New chat” or clear this site’s data. “New chat” clears both from your browser and ends the chat.
• On our storage: each chat – questions, answers, the pages you asked on and details you chose to tell the assistant (for example your first name or travel dates) – is kept on our own Cloudflare storage. Each message is kept for 90 days from when it was sent. The chat record itself – including the saved chat notes and a copy of your recent messages, with older ones condensed into a short summary – is kept for 90 days after your last message. Expired records are removed by the next automatic clean-up. We do not store your IP address or browser details with it.
• Please do not enter phone numbers, payment details or other sensitive data.
• Delete a chat: ask us any time through the contact form.

Your rights

Under the Philippine Data Privacy Act of 2012 (RA 10173) and the EU General Data Protection Regulation (GDPR) you can ask what data we hold about you, and ask us to correct or delete it. We do not keep personal data from ordinary visits. If you send us a message through a form, we keep your message, photos and any email address you give in our private team chat (Slack). Chats are kept as described above.

Contact

Use our contact form for questions about this page or to have your data deleted.