Last updated: April 2026

myalbania.online is an independent travel guide. We try to collect as little personal data as possible, and we never sell anything we collect.

Who's responsible

myalbania.online is the controller of your personal data. For any data question, write to privacy@myalbania.online.

What we collect

We only process data we genuinely need:

• Analytics — anonymous visit counts via Google Analytics 4 (IP anonymized). Only if you accept the analytics category.
• Reviews — if you submit a review, we store the text, your chosen display name and a salted hash of your IP for spam control. The hash can't be reversed back to your IP.
• Contact emails — if you write to hello@ or privacy@, we keep your message in our inbox to reply.
• Trip planner — the destinations and listings you bookmark stay in your browser's localStorage. We never see them.

Legal basis (GDPR Art. 6)

• Consent — for analytics and marketing cookies. You can withdraw consent any time from the cookie panel.
• Legitimate interest — for spam control on reviews (hashed IP) and basic security logs.
• Performance of a request — for replying to emails you send us.

Who else sees your data

We use a small number of vetted processors. None of them receive data they don't strictly need:

• Supabase — database hosting (EU region). Stores listings, reviews, articles.
• Google Analytics 4 — Google Ireland — analytics. Only loads if you opt in.
• Stay22 — affiliate attribution for hotel booking links. Only loads if you opt in to marketing.
• Vercel — site hosting and CDN.

How long we keep things

• Analytics: 14 months (Google Analytics default).
• Reviews: as long as the listing exists, unless you ask for removal.
• Email correspondence: up to 2 years, then deleted.
• Planner bookmarks: only on your device — until you clear them.

Your rights under GDPR

You have the right to:

• Access — get a copy of any personal data we hold about you.
• Rectification — fix anything that's wrong.
• Erasure — ask us to delete it (right to be forgotten).
• Restriction — limit how we process it.
• Portability — get your data in a machine-readable format.
• Objection — to processing based on legitimate interest.
• Withdraw consent — at any time, without giving a reason.
• Complain — to your local data protection authority.

To exercise any right, email privacy@myalbania.online. We respond within 30 days.

Cookies

We explain every cookie we use, by category, on our cookie policy page. You control which ones run.

Affiliate disclosure

Some outbound booking links earn us a small commission at no extra cost to you. This never influences which hotels or destinations we recommend.

Children

myalbania.online isn't directed at children under 16. We don't knowingly collect data from anyone in that age group.

Changes to this policy

We'll update this page when our practices change. Material changes will trigger a fresh consent prompt.

Contact

Privacy questions: privacy@myalbania.online. A real human responds within a day.