Privacy Policy

1. Introduction

Cyprus.BZ ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our event discovery platform.

2. Information We Collect

We may collect the following types of information:

• Account information: If you create an account, we collect your email address and authentication details.
• Usage data: pages viewed, outbound link clicks, and internal site searches, processed by our own first-party analytics as described in Section 4.
• Cookies: we use essential cookies for core functionality and Google Analytics 4, which sets its own cookies. Our first-party analytics is cookieless.
• Device information: country code, device class (mobile, tablet, or desktop), and interface language, derived for analytics purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide and improve the Cyprus.BZ platform
• Personalize your experience (e.g., saved favorites)
• Analyze usage patterns to improve our service
• Communicate with you about your account if applicable

4. Cookies and Analytics

We run our own first-party, cookieless traffic analytics on our own infrastructure. It stores no identifiers in your browser and does no cross-site tracking. Separately, we use essential cookies for core functionality and Google Analytics 4, which sets its own cookies; you can control cookies through your browser settings.

Internal site search queries, result counts, and the identifier of a selected result are logged under the same pseudonymous daily session identifier to improve content coverage; they are not linked to any account.

Retention: raw page-view records are kept for 90 days, outbound-click and search records for 180 days. Only aggregated daily statistics are kept longer.

The legal basis for this processing is our legitimate interest in understanding how the site is used and demonstrating referral value to event partners.

We honor the Global Privacy Control and Do Not Track browser signals: when either is enabled, no analytics records are created for your visit.

For each page view and outbound click, our first-party analytics processes:

• A short-lived pseudonymous session identifier derived from your IP address, browser user agent, language, and current day via a salted one-way hash; the identifier changes daily and the IP address itself is never stored.
• The referring site (origin and path only, with query strings removed) and the page visited.
• The outbound link destination (scheme, host, and path only, with credentials, query strings, and fragments removed); for phone and email links only the link type is recorded, never the number or address.
• Country code, device class (mobile, tablet, or desktop), interface language, and whether the visitor is an automated crawler.

5. Third-Party Services

We use Google Analytics 4 and third-party services for authentication. These services have their own privacy policies governing how they handle your data.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share anonymous, aggregated data for analytics or business purposes.

7. Data Security

We take reasonable measures to protect your information from unauthorized access, alteration, or destruction. However, no method of transmission over the internet is 100% secure.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Opt out of analytics by enabling the Global Privacy Control or Do Not Track signal in your browser
• Delete your account and associated data

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page.

10. Contact

If you have questions about this Privacy Policy, please contact us through the platform.