What this site collects, and who sees it.

Who runs this site

The Itinerary Wala is a personal travel-itinerary site run by Nitesh Parasher Parasher. For anything on this page, including a request to delete your data, write to hello@theitinerarywala.com and it reaches me directly.

What gets collected

When you read. Google Analytics records that a page was opened, roughly where from, and on what kind of device. It is measurement, not profiling: I use it to see that the Japan itinerary is read ten times more than the Bolivia one, and write accordingly. The measurement ID is G-9BNKKY6SWJ, in case you want to block it specifically.

When you write. The contact form and the Plan My Trip form send exactly what you type — your email and your trip details — through Web3Forms to my inbox. There is no database behind this site; those messages live in my email and nowhere else. A successful send also records one anonymous event in Analytics so I can count how many people ask. For the Plan My Trip form that event includes the destination you typed — it tells me which countries get asked for, including ones this site does not cover yet — and nothing else from the form. Your email address, your dates and your message never reach Google. Please do not put passport numbers, payment details or anything else sensitive into a form that does not ask for it.

Who receives data

Everything below was found by auditing what the site actually loads. If that list changes, this page changes with it.

• Cloudflare Web Analytics

  static.cloudflareinsights.com

  Does Counts page views without cookies. Cloudflare adds it to the page as it is served, so it is present whether or not you block the Google tag.

  Receives The page opened, the referring site, and a coarse country. No cookie, no identifier, and nothing that persists between visits.

• Google Analytics 4

  googletagmanager.com

  Does Counts visits and shows which itineraries people read, so I know what to write next.

  Receives A randomly generated ID stored in a cookie, your approximate location, device and browser, and the pages you open.

• Web3Forms

  api.web3forms.com

  Does Delivers the contact form and the Plan My Trip form to my inbox.

  Receives Only what you type into the form — your email address and whatever trip details you choose to include.

• Open Exchange Rates API

  open.er-api.com

  Does Fetches live currency rates so prices can show in your chosen currency.

  Receives Your IP address. No cookie, and nothing about you is sent with the request.

• Cloudflare Pages

  theitinerarywala.com

  Does Hosts and serves the site.

  Receives Standard server logs, including IP address, kept briefly for security and abuse prevention.

Two of those are worth calling out plainly. Google Fonts is served from Google, which means your IP address reaches Google on every page even if you block analytics. And the currency rates are fetched from an external API by your browser, so that service sees your IP too. Neither is avoidable without changing how the site is built, and both are listed here rather than buried.

Cookies and what is stored in your browser

• _ga, _ga_*

  Cookie · Up to 2 years

  Google Analytics. Distinguishes one returning browser from another; it does not identify you by name.

• tiw:currency

  Local storage · Until you clear it

  Remembers whether you chose rupees, dirhams or dollars, so every price stays in that currency as you browse.

• tiw:rates

  Local storage · Refreshed daily

  Caches the exchange rates so the site does not re-fetch them on every page.

The two tiw: entries are local storage, not cookies: they never leave your browser and are never sent to me or anyone else. Clearing your site data removes all of it, and the site works normally without any of them — you will just be asked to pick a currency again.

Your cookie choice

Visitors in the EEA, the UK and Switzerland are asked before any analytics cookie is set, and nothing is stored until they answer. Everywhere else the cookies are set by default, because the law there does not require asking first — but the switch below works for everyone, and turning it off is as easy as turning it on.

The choice is remembered in your browser, not on a server, so it is per-device and clearing your site data resets it. Turning analytics off stops the cookies; Cloudflare’s cookieless counting continues either way, because it never identifies you.

Your rights

If you are in the UK, the EU or the EEA, the GDPR gives you the right to ask what data exists about you, to have it corrected or deleted, to object to it being processed, and to complain to your national data protection authority.

In practice there is very little to request. I hold no accounts and no database. The only place your details sit is my email inbox, if you have written to me — and one message asking me to delete a thread is enough. For analytics data, Google holds it rather than me; you can opt out across every site using the Google Analytics opt-out add-on, or block the domains listed above in your browser.

How long things are kept

• Analytics: retained by Google for 14 months, then deleted automatically.
• Form messages: kept in my inbox while the conversation is useful, and deleted on request.
• Newsletter signups: there is no mailing-list platform behind that box. Your address arrives in my inbox like any other message and stays there until you ask me to remove it.
• Server logs: held briefly by Cloudflare for security, then rotated out.

Children

This site is written for adults planning trips. It is not directed at children, and I do not knowingly collect anything from anyone under 16. If you believe a child has sent me something through a form, write to me and I will delete it.

Changes to this page

If the site starts using something new — a different analytics tool, a booking partner, a comments system — this page is updated at the same time, and the date at the top changes. There is no version history, so the date is the honest signal.