Travel Hacker Girladventures with Eni
Menu

your privacy matters

Privacy Policy

Last updated: 5 November 2026

Hi, I’m Enikő, the person behind Travel Hacker Girl. I want you to enjoy this blog without worrying about your privacy. Here is a plain-English explanation of what information is collected when you visit, why, how long it is kept and what you can do about it.

Who is responsible for your data

Travel Hacker Girl (travelhacker.hu and travelhackergirl.com) is a personal blog run by Enikő, who is the data controller. If you have any question about your data, email me at krixeniko93@gmail.com. I reply within one month, usually much sooner.

The short version

  • Reading the blog needs no account and no cookies.
  • Visitor statistics are counted without cookies and without storing your IP address.
  • Ads, Google Maps and YouTube only load if you agree in the cookie banner. You can change your mind any time with Cookie settings at the bottom of every page.
  • If you comment, I keep your name, comment and (optional) email address.
  • I never sell your data.

On your first visit a banner asks whether you allow advertising cookies and maps & videos. Nothing optional loads before you choose, and “Reject all” is as easy as “Accept all”. Your choice is stored in a small cookie called thg_consent for six months, then I ask again. All cookies are listed in the cookie policy.

Visitor statistics

To see which posts are useful, the site counts page views, clicks on affiliate links, searches on the blog and visits to missing pages. This is done without cookies or any other storage on your device:

  • For each visit the site records the page, the referring website (only its name, such as google.com), your country (from your IP address, which is not stored), and whether you use a phone, tablet or computer.
  • To count visitors without following anyone, your IP address and browser details are combined with a random code that changes every day and turned into a one-way hash. The daily code is deleted, so the hash can’t be traced back to you and can’t link your visits on different days.
  • If your browser sends the Global Privacy Control signal, you are not counted at all.
  • The raw statistics are deleted after 13 months.

I also use Vercel Web Analytics, which works the same cookie-free way and keeps anonymous, aggregated data. The legal basis for both is my legitimate interest in understanding which content helps readers (UK GDPR Article 6(1)(f)). You can object at any time by emailing me or turning on Global Privacy Control in your browser.

Advertising (Google AdSense)

If you allow advertising in the cookie banner, the blog shows ads from Google AdSense. They help keep the blog free. Google and its partners may then use cookies to show ads, measure them, fight fraud and personalise ads based on your interests. If you don’t allow advertising, the ad code isn’t loaded and you won’t see ads. The legal basis is your consent (Article 6(1)(a)), which you can withdraw with Cookie settings. Read how Google uses information from sites that use its services on Google’s partner sites page, and manage personalised ads in your Google ad settings.

Google Maps and YouTube

Many posts have a map or a video. They are shown as a placeholder until you click “Load” or allow maps & videos in the cookie banner. When one loads, your browser connects to Google, which receives your IP address and may set cookies under its own privacy policy. Videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com). The legal basis is your consent.

Comments

When you leave a comment I store the name you give, your comment, and your email address if you add one. Your email address is never published and is only used to reply to you about your comment. To fight spam, I store a one-way scrambled version of your IP address for 30 days. Comments wait for my approval before they appear. The legal basis is my legitimate interest in running a moderated comment section. Please don’t share sensitive personal information in comments.

Some posts contain affiliate links, for example to Amazon, Booking.com or GetYourGuide. If you click one and buy something, I may earn a small commission at no extra cost to you. The site counts the click (without cookies, as above). The shop may set its own cookies on its website to track the referral, under its own privacy policy. Read more in my affiliate disclosure.

Emails

If you email me, I use your email address and message only to reply. I keep the conversation in my inbox for as long as it is useful, and delete it if you ask.

Who helps me run the site

  • Vercel hosts the website (the server code runs in Frankfurt, Germany, and pages are delivered through its worldwide network) and provides the cookie-free analytics.
  • Neon runs the database with comments and statistics (Frankfurt, Germany).
  • Google provides AdSense, Maps and YouTube, only after your consent.

Vercel and Google are US companies. Where data is transferred to the US, it is protected by the UK Extension to the EU-US Data Privacy Framework or the standard contractual clauses these providers offer.

How long data is kept

  • Statistics: deleted after 13 months. The daily code used for counting visitors: deleted after one day.
  • Approved comments: kept on the blog until you ask me to remove them. The scrambled IP address: 30 days.
  • Comments marked as spam or binned: deleted after 30 days.
  • Your cookie choice: six months.

Your rights

Under UK and EU data protection law you can ask to see, correct or delete the personal information I hold about you, ask me to limit how it is used, object to its use, ask for a copy to take elsewhere, and withdraw consent at any time. Just email me. If you are unhappy with my answer, you can complain to the Information Commissioner’s Office in the UK or your local data protection authority.

Children

The blog is written for adults and families planning trips. It isn’t aimed at children under 13, and I don’t knowingly collect their data.

Changes

If anything changes, I will update this page and the date at the top.