Legal

Privacy Policy

Last updated: 21 September 2026

When you create an account, write to us or save a place, we process personal data. Below is what we collect, why, and what you can ask for. This text covers the faurit-in-dobrogea.ro site (Dobruja guide, itineraries, places and the user account).

1. Who processes the data

The controller is the faurit-in-dobrogea.ro project, Dobruja, Romania. For any GDPR request write to contact@faurit-in-dobrogea.ro. We usually reply within 24 working hours, and at the latest within 30 days.

2. What data we collect

• Account: name, email, password (stored hashed, if you set one), optional username (chosen once), bio, starting county (Constanța or Tulcea), Google identifier if you sign in with Google, date of last sign-in.
• Your content: saved places, visited places, journal notes, collections, itineraries, quiz results, reviews, comments, uploaded photos.
• Contact: name, email, subject and the message sent from the form.
• Reports: the error or correction message, plus the user if you are signed in.
• Technical: session and CSRF cookies; on the device, saved places and the last quiz may stay in localStorage until you move them into the account.
• Analytics: Google Analytics receives pages visited, device type and, through Google, the IP address, so we can see what is useful on the site.
• Ads: Google AdSense may receive data about the page, device and IP in order to show ads on public pages.
• Server logs: IP and user-agent, for a short time, for security and debugging.

We do not ask for a national ID number, home address or payment data. We have no newsletter: news is on RSS and on the public pages.

3. Why we process them

• Contract / account: to create your account, sign you in, and keep itineraries and saved places on any device (Art. 6(1)(b) GDPR).
• Consent: reviews, comments, photos and public profile, plus the “Remember me” cookie if you tick it (Art. 6(1)(a)).
• Legitimate interest: contact messages, reports, content moderation, abuse prevention and aggregated traffic statistics (Art. 6(1)(f)).
• Legal obligation: to answer GDPR requests and keep minimal evidence when the law requires it (Art. 6(1)(c)).

4. What is public

The username, display name, bio, itineraries and collections marked public can be seen by anyone with the link. Reviews, comments and photos appear only after approval. What stays private: email, password, saved places, visits, journal notes and quiz history.

5. How long we keep them

Account data stays as long as the account exists. Deleting from Settings removes saved places, visits, collections, itineraries, reviews, photos and quiz history. We keep contact messages as long as needed to reply, then archive or delete them. Server logs rotate automatically.

6. Who we share them with

We do not sell data. Only we see it, to run the site. It may reach:

• the hosting provider in Romania, so the site can run;
• the email provider, when we send the account confirmation or password reset;
• OpenStreetMap and CARTO, only if you open a map: their servers receive the IP to deliver map tiles;
• Google, if you sign in with Google: we receive the identifier, email and name from the Google account. Google applies its own policy on their login page.
• Google Analytics, for traffic statistics (identifier G-WJ202KN998).
• Google AdSense, for ads on public pages (identifier ca-pub-7990372915453543). Google may use advertising cookies; you can adjust preferences at adssettings.google.com.

We do not use Facebook Pixel. AdSense does not run in the account area, at login or in the newsroom.

7. Your rights

You can ask for access, rectification, erasure, restriction, portability and objection. You can withdraw consent without affecting processing already done. Delete the account from Settings or write to us. If you are not satisfied, you can complain to ANSPDCP.

8. Children and security

The site is not meant for children under 16. Passwords are hashed, the session is protected with a CSRF token, and uploaded photos do not keep EXIF on the public sheet. No transmission on the internet is 100% safe; if you see something wrong, write to us.

9. Cookies

Details are in Cookie Policy. We use necessary cookies for the session, the form and, optionally, “Remember me”, plus Google Analytics cookies for traffic measurement and Google AdSense cookies for ads.

Related documents: Terms and Conditions.