Privacy Policy

Last updated: 2026.04.01

This privacy policy explains what data is collected when you use SriGuide (the “Site”), how it is used, and which third-party services are involved. The Site is operated as an open-source project, initiated under ‘Camino’, an online startup foundation focused on tourism sector in Sri Lanka and is not a commercial entity.

---

1. The Short Version

The Site is built to be as privacy-respecting as possible. There are no advertising trackers, no Google products, no invasive analytics, and no data sold to third parties. Most of the tools used here do not collect personal data at all. Where optional personal data is collected — such as via feedback or testimonial forms — it is always optional and used only for the stated purpose.

---

2. Analytics: Simple Analytics

The Site uses Simple Analytics to understand how visitors find and use the Site. Simple Analytics was chosen specifically because it collects no personal data, uses no cookies, and performs no fingerprinting.

What Simple Analytics collects:

• Page views and referrer sources (aggregated, not individual)
• Country-level location (not city or precise location)
• Browser type and device category (no device identifiers)

What Simple Analytics does not collect:

• IP addresses
• Cookies or persistent identifiers
• Any personally identifiable information

Simple Analytics is based in the EU, processes all data within the EU, and is fully compliant with the GDPR, ePrivacy Directive, the UK GDPR, and the PECT. No cookie consent banner is required for Simple Analytics because no personal data is processed. For more information, see Simple Analytics’ privacy documentation.

The data retained is limited to a 30-day rolling window and traffic data older than 30 days will be automatically deleted from their servers. The Site respects the Do Not Track (DNT) browser setting. Visitors with DNT enabled are excluded from analytics entirely.

---

3. Forms: Tally.so

The Site uses Tally for feedback and contact forms. Tally is based in Belgium (EU) and complies with the GDPR framework. All form data is encrypted in transit and at rest, and stored on servers within the European Union. For more information, see Tally’s privacy documentation

The following forms will automatically detect and store your country (derived from your IP address). Tally.so may also record your IP address as submission metadata.

We retain shared data such as approved testimonials and associated photos on the Site for as long as needed. If you request removal, your content will be deleted from the Site and we will also delete any copies held in our Tally.so’s system.

3.1 Feedback Form

The feedback form collects your ratings and any written feedback you choose to provide. You may also be asked what best describes your relationship to Sri Lanka (e.g. visitor, local, planning a trip) — this helps us better understand and act on your feedback. Providing an email address is entirely optional and only used to respond to your message directly. If you do not provide an email, no identifying information is collected.

3.2 Testimonial Form

If you choose to submit a testimonial, the form will ask for your first name, photo, location, and a written testimonial. Your first name, photo, and testimonial text are required fields. You may also be asked what best describes your relationship to Sri Lanka (e.g. visitor, local, planning a trip) — this helps us better understand and act on your feedback.

Before submitting, you will be asked to agree to one or both of the following:

• Website use: your first name, location, photo, and testimonial may be published publicly on this site.
• Extended media use: your photo and testimonial may additionally be used in promotional materials, including social media posts and other online channels.

The first consent is required to submit. The second is optional and only applies if you choose to tick it. By submitting a photo, you confirm that you own the rights to it. All submissions are reviewed before publishing. We reserve the right to edit, remove, or decline testimonials that contain personally identifiable information (PII) or violate our guidelines. Please avoid sharing sensitive personal data (e.g., full home address, financial details, government IDs) in your testimonial. You can request removal of your published testimonial at any time by contacting humble-calm-knoll (-at-) duck.com.

3.3 Your Rights as a Form Respondent

Under GDPR, you have the right to:

• Request access to the personal data you submitted
• Request correction or deletion of your data
• Withdraw consent at any time

To exercise any of these rights, contact humble-calm-knoll (-at-) duck.com.

---

4. Currency Converter: ExchangeRate-API

The currency converter tool on the Site makes client-side API calls to ExchangeRate-API to fetch current exchange rates. These requests are originated directly from your browser and therefore include standard request metadata (for example, your IP address) visible to ExchangeRate-API; the tool does not send form inputs or other personal data from the page. ExchangeRate-API may log request metadata according to its policies. Please refer ExchangeRate-API’s Terms & Privacy Policy for more information.

---

5. Audio: Google TTS Recordings

Some pages include audio pronunciations of Sinhala phrases. These audio files are pre-recorded MP3s stored directly on the Site. No API calls are made to Google or any external service during playback. No data is transmitted to Google when you interact with those audio recordings.

---

6. Progressive Web App and Local Storage

The Site is installable as a Progressive Web App (PWA) and configured with automatic updates. This means the app may periodically download updated resources (service worker, JavaScript, other assets such as images) in the background to keep the app current without requiring manual action.

Certain features, such as packing checklists save their state using your browser’s localStorage. This data is stored only on your device in your own browser. It is never transmitted to the Site’s servers or any third party. You can clear this data at any time by clearing your browser’s site data or local storage for this domain.

---

7. Third-Party Links and Services

The Site contains links to external services including:

• Buy Me a Coffee (buymeacoffee.com) - for voluntary financial support
• GitHub (github.com) - for the open-source repository and issue tracker
• Forms made with Tally - data collection forms (feedback, testimonials)
• App store links - links to apps on the Apple App Store and Google Play Store
• Government and official websites - such as the Sri Lanka ETA portal
• Other informational websites

Clicking any of these links takes you to an external site governed by its own privacy policy. The Site has no control over and accepts no responsibility for the data practices of external sites. The apps listed in the Apps section are not affiliated with the Site and are included solely on merit.

---

8. No Advertising or Affiliate Links

The Site displays no advertising and contains no affiliate links. No third-party advertising networks have access to the Site or its visitors.

---

9. Hosting

The Site is currently hosted on Vercel. Vercel may process server-level request logs (including IP addresses) as part of standard infrastructure operation. These logs are handled in accordance with Vercel’s privacy policy. Vercel analytics have been explicitly disabled on the Site.

---

10. Children’s Privacy

The Site is not directed at children under the age of 16 and does not knowingly collect personal data from children under 16; if we become aware that we have collected personal data from someone under 16, we will delete it promptly.

---

11. Changes to This Policy

This policy may be updated from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the Site after an update constitutes acceptance of the revised policy.

---

12. Contact

For any privacy-related questions or requests, contact:

📧 humble-calm-knoll (-at-) duck.com