Privacy Policy

Last updated: August 4, 2026

Short version: Grumpy Dad Travel Tales is a one-man travel blog, not a data business. I collect as little as possible, I do not sell your information to anyone, and the only reason I ever ask for your email is so I can send you the newsletter you asked for. The long version is below, because lawyers and regulators like the long version.

Who is responsible for your data

This site — grumpydadtraveltales.com — is operated by the author of Grumpy Dad Travel Tales (“I”, “me”, “we”, “the site”). If you have any question about this policy, or you want to exercise a privacy right described below, use the contact page and I will handle it personally.

What I collect

Information you give me directly. If you subscribe to the newsletter, I collect your email address. If you send a message through the contact form, I collect whatever you put in it — typically your name, your email address and the content of your message. If you leave a comment, I collect the name, email address and comment text you submit, plus your IP address, which WordPress records automatically for spam prevention.

Information collected automatically. Like every website on the internet, this site runs on a web server that keeps standard access logs. Those logs may include your IP address, browser type and version, operating system, device type, the pages you requested, the page that referred you, and the date and time of the request. This data is used to keep the site running, diagnose problems and detect abuse.

Information I do not collect. I do not ask for and do not want your payment card details, your passport number, your home address, your date of birth, your health information, or any other sensitive personal data. The site does not take payments directly. Nothing on this site requires you to create an account.

Cookies and similar technologies

Cookies are small text files a site stores in your browser. This site uses:

  • Essential cookies. Set by WordPress and by the site’s caching layer so pages load correctly and so form submissions and comments work. The site cannot function properly without them.
  • Security cookies. Forms on this site are protected by Google reCAPTCHA, which sets cookies and collects device and usage signals in order to tell humans apart from bots. That processing is governed by Google’s Privacy Policy and Terms of Service.
  • Analytics cookies. If and when aggregate traffic measurement is enabled on the site, it is used only to see which articles are worth writing more of. It is never used to build a personal profile of you or to target advertising at you.
  • Affiliate cookies. When you click an affiliate link — most often an Amazon link — the destination site may set a cookie so that any purchase you make is credited to this site. Those cookies are set by the merchant, on the merchant’s domain, and are governed by the merchant’s privacy policy, not this one.

You can block or delete cookies in your browser settings at any time. Blocking essential cookies may break parts of the site; blocking affiliate cookies costs me a commission but costs you nothing.

Affiliate links and advertising

This site participates in the Amazon Services LLC Associates Program and other affiliate programs, which means I may earn a commission when you buy something through a link here, at no extra cost to you. Full details are on the Affiliate Disclosure page. I do not run third-party ad networks on this site and I do not build advertising profiles of readers.

Why I process your data, and on what legal basis

  • To send the newsletter you signed up for — on the basis of your consent, which you can withdraw at any time by clicking unsubscribe in any email.
  • To answer your message when you write to me — on the basis of your consent and my legitimate interest in replying to readers.
  • To publish and moderate comments — on the basis of your consent and my legitimate interest in keeping the site free of spam.
  • To operate, secure and improve the site — on the basis of my legitimate interest in running a website that works and does not get taken over by bots.
  • To meet legal obligations where the law requires me to keep or disclose something.

Who your data is shared with

I do not sell your personal information. I never have and I do not intend to. I do not share it for cross-context behavioural advertising. Your data is handled by a small number of service providers who process it on my behalf and only for the purpose of running this site:

  • the web hosting company that stores the site and its database;
  • the email service used to store subscriber addresses and deliver the newsletter;
  • Google, for the reCAPTCHA anti-spam protection on forms;
  • anti-spam and security services used to filter comment and form spam.

Beyond that, I will only disclose personal data if I am legally required to — for example in response to a valid legal request — or if it is necessary to protect the rights and safety of readers or of the site.

How long data is kept

Newsletter subscriptions are kept until you unsubscribe, after which your address is removed from the active list. Contact form messages are kept for as long as needed to deal with your enquiry and for a reasonable period afterwards in case you follow up. Comments and their metadata are kept indefinitely so that follow-up replies still make sense, unless you ask for removal. Server logs are rotated and deleted on the host’s normal schedule, typically within a few months.

International transfers

This site is operated from and hosted in the United States, and the service providers listed above are largely based in the United States. If you are reading this from outside the United States, your data will be transferred to and processed there. Where that transfer involves personal data protected by the laws of the European Economic Area or the United Kingdom, it is made under appropriate safeguards, such as the standard contractual clauses used by the relevant service providers.

Your rights

If you are in the EEA, the UK or Switzerland, you have the right to request access to the personal data I hold about you, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. You also have the right to lodge a complaint with your national data protection authority.

If you are a California resident, you have the right to know what personal information is collected and how it is used, to request deletion of it, to request correction of it, to opt out of its sale or sharing, and not to be discriminated against for exercising any of those rights. As stated above, this site does not sell or share personal information as those terms are defined by the CCPA/CPRA, so there is nothing to opt out of.

Wherever you are, you can ask me to delete your data and I will do it. Use the contact page. I will respond within thirty days, and I may need to ask you to confirm your identity before acting on a request — usually just replying from the email address the request concerns.

Do Not Track and Global Privacy Control

This site does not track readers across other websites, so there is nothing meaningful to disable. Browser signals such as Do Not Track and Global Privacy Control are respected in the sense that no cross-site tracking or sale of data happens here in the first place.

Children

This site is written for adults who travel for work. It is not directed to children, and I do not knowingly collect personal information from anyone under 16. If you believe a child has submitted personal information here, contact me and I will delete it.

Security

The site is served over HTTPS, kept updated, and protected against automated abuse. No system is perfectly secure, and I cannot guarantee absolute security — but the less data a site holds, the less there is to lose, which is one of several reasons I keep collection to a minimum.

Links to other sites

Articles here link out to airlines, hotels, retailers, booking tools and other travel resources. Once you follow a link, you are on someone else’s site and under someone else’s privacy policy. I have no control over what they collect. Read their policy if it matters to you.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new “last updated” date. Material changes will be reflected here before they take effect. Continuing to use the site after an update means you accept the revised policy.

Contact

Questions, corrections, deletion requests or complaints about privacy: use the contact page. A real person reads it.