Privacy policy

What this site stores on your device

CruiseFare uses exactly two cookies that the site needs to work: currency, which remembers the currency you picked, and NEXT_LOCALE, which remembers the language you picked.

Both are strictly necessary to deliver the service you asked for, so they are not gated by consent and keep working whether you accept or reject analytics. We do not use cookies for advertising or for tracking you across other websites.

What we record when you go to a platform's site

When you use a go-to-site button we write one record, so that affiliate commission can be reconciled and so that we can show afterwards which price you were looking at. That record holds:

• the platform you went to;
• the sailing, the cabin type and the number of guests per cabin;
• the price shown on screen, its currency and its basis (cruise fare only, or including taxes and fees), plus the exchange rate used if anything was converted;
• the language you were using and the time you clicked;
• the page you clicked from, and your browser's user agent string;
• your IP address, stored only as a one-way salted hash rather than as a raw address.

Your IP address and how it is hashed

We never store your raw IP address in our database. We store only a one-way salted hash (HMAC-SHA256) computed from your IP address together with a secret key that is kept outside the database. The hash cannot be turned back into the original address.

We use it only to tell whether several clicks came from the same visitor, which is what makes commission reconciliation and bot detection possible at all.

This hash is pseudonymised data. It is still personal data under Thailand's Personal Data Protection Act (PDPA), because we can reproduce it from an address, so we do not call it anonymous and we protect it like any other personal data.

How long we keep it

We keep the identifying fields of a go-to-site record for 24 months from the moment you clicked.

Once a record is older than 24 months we delete exactly three fields from it: the hashed IP address, the user agent string and the page you clicked from. The click counts, the platform, the price shown and the time are kept, because they are the evidence a commission dispute rests on.

This deletion runs automatically every day on Bangkok time, not only when someone asks for it.

Website analytics

We load website analytics only after you accept. If you reject, or have not chosen yet, the analytics script is not present on the page at all — it is not merely prevented from sending data.

The tool we use is cookieless and builds no cross-site profile of you. We still ask for consent first, because the PDPA governs the collection of usage data, not only the writing of cookies.

Your consent record

When you accept or reject, we record your choice, the time you made it, the version of this policy, the language you were using, and a random id that is not tied to your name or your email address.

The policy version shown at the top of this page is the version your consent would be recorded against. If we change this policy the version changes with it, and we ask again.

Changing your mind writes a new record. We do not edit or delete the earlier one, so it stays possible to show which version of this policy you agreed to, and when.

Contacting us about your data

To ask about, see or delete the data we hold about you, email us at the address on the About & contact page.

CruiseFare has no user accounts yet, so what we hold about you is limited to the go-to-site records and the consent records described above.