Legal & trust
Privacy policy
We collect only what is needed to run the travel tools, secure accounts and measure clearly disclosed partner placements. We do not sell personal information.
- Effective and updated
- 25 September 2026
- Contact
- [email protected]
Information we collect
- Name, email address and a password hash when you register; Google account identifier, name and verified email when you choose Google sign-in.
- Saved items, itineraries, community posts, comments, reports and guide corrections that you choose to submit.
- Session identifiers, login time, IP address, browser or device information used for account security.
- Anonymous partner-card impressions and clicks, including offer, placement, source page, device category and time. These records are not tied to a traveller account.
How we use it
- To provide accounts, synced saves, itinerary planning, sharing and community features.
- To authenticate users, prevent abuse, investigate faults and secure the service.
- To respond to corrections and reports and maintain content quality.
- To measure whether partner placements are useful and reconcile them with partner reports; a click is never presented as an order or revenue without evidence.
Sharing and third parties
We do not sell personal information. Hosting, database, object-storage and identity providers may process data for us. Current infrastructure includes DigitalOcean, Cloudflare and Google sign-in. If you follow a clearly labelled affiliate link, the partner’s own privacy policy applies on its site.
- We disclose only what is necessary to operate the service, meet legal obligations, protect users or act with your permission.
- We do not send your identity, precise location or complete itinerary to affiliate partners for attribution.
Retention and security
We retain information only as long as needed for the purposes above, security records or legal duties. Account sessions normally last no more than 30 days. We use encrypted transport, hashed passwords, restricted access and server-side authorization, but no internet service can promise absolute security.
Your choices and rights
- You can sign out, revoke a public share link, or stop submitting community content.
- You may ask to access, correct or delete your account and associated personal data. Some security, transaction or legal records may need to be retained.
- Browser-only saved items can be removed by clearing site data.
- Where local law grants additional rights, contact us to exercise them. We may need to verify your identity.
Children and international processing
The service is intended for general travellers capable of planning their own trip and is not directed specifically to children. Contact us if you believe a child submitted personal information without appropriate consent. Because the site serves international travellers, information may be processed outside your country, subject to applicable law and contractual safeguards.
This page describes China Travel Kit’s current practices in clear language. We will update the text and date when features, partners or applicable requirements change.