Legal
Privacy Policy
Last updated 7 September 2026
This site collects as little as it possibly can. There are no accounts, no analytics, no advertising and no tracking across other websites. This policy explains the little that does happen, and what your rights are.
Who is responsible
The controller of any personal data described here is [ NOT YET PROVIDED ], trading as Malta Audio Guide, of [ NOT YET PROVIDED ], Malta.
For anything in this policy, including a request to exercise your rights, write to [ NOT YET PROVIDED ].
What we do not do
It is worth stating plainly, because it is unusual:
- There are no user accounts, so we hold no name, email address or password for you.
- There is no analytics package of any kind — no Google Analytics, no pixel, no heatmap, no session recording.
- There is no advertising and no profiling, and nothing about you is sold or shared for marketing.
- We set no cookies of our own.
What is stored on your device
The guide keeps a few things in your browser’s local storage and cache so that it works as you expect. This information stays on your device. It is not transmitted to us and we cannot read it.
- Which tours you have purchased, so the audio plays without asking again.
- Which stops you have listened to, so your progress survives closing the page.
- Your language and playback-speed preferences.
- A cached copy of the pages, map tiles and audio you have opened, so the guide works without a signal.
Location
If you turn on the guided walking mode, your browser asks for permission to use your location. Your position is used only on your device, to work out which stop you are near and to move the map. It is never sent to us and never sent to anyone else. Turning the feature off, or refusing permission, stops it immediately and the rest of the guide continues to work.
Data collected automatically by others
Some things cannot be done without your browser contacting another company, and that company will see your IP address as a result. These are the only ones:
- Netlify, our host, which serves every page and keeps standard server logs (including IP address and browser type) for security and troubleshooting. Netlify is based in the United States and transfers are covered by its data processing terms and the European Commission’s standard contractual clauses.
- OpenFreeMap and the OpenStreetMap Foundation, which serve the map tiles. Your browser requests tiles directly from them when you open a map, and they receive your IP address in doing so.
- Stripe, if and when you make a payment. Stripe handles the payment itself — your card details are entered on Stripe’s own pages and never reach this site or our servers. Stripe acts as an independent controller for that processing under its own privacy policy.
Why we are allowed to do this
Under the GDPR, storing what you have purchased and what you have listened to is necessary to provide the service you asked for, so the legal basis is performance of a contract with you, and for the free parts of the guide, our legitimate interest in making the site work. Server logs are kept on the basis of our legitimate interest in keeping the site available and secure. Payment records are kept because tax and accounting law requires it.
How long anything is kept
What is stored on your device stays until you clear it — you can remove all of it at any time from the About page, or by clearing site data in your browser. Netlify’s server logs are kept for a short period under their retention policy. Payment records held by Stripe and by us are kept for as long as tax law requires, which in Malta is generally ten years.
Your rights
Under the GDPR you have the right to ask what personal data we hold about you, to have it corrected or erased, to restrict or object to how it is used, and to receive it in a portable form. Because we hold no account for you, in most cases we will hold nothing that identifies you at all, and we will tell you so.
To make a request, write to [ NOT YET PROVIDED ]. If you are not satisfied with the response, you may complain to the Office of the Information and Data Protection Commissioner in Malta (idpc.org.mt), or to the supervisory authority in the country where you live.
Children
This guide is not aimed at children and we do not knowingly collect anything about them. It is a walking tour of a city; children are very welcome to listen to it with an adult.
Changes
This policy was last updated on 7 September 2026. If it changes materially, the date at the top of this page changes with it.