Privacy Policy
This notice explains the privacy controls used on the public Vacairo landing page, including our optional Google Analytics 4 measurement.
1. Who operates this landing
Controller / operator: Vacairo, the pre-launch Vacairo product project operating the public landing at vacairo.com and dev.vacairo.com.
Privacy contact: support@vacairo.com.
This notice covers the public landing only. The Vacairo application has broader product privacy controls for account, journey and service data.
2. Optional Google Analytics 4
We use Google Analytics 4 (GA4) only after you explicitly accept analytics. The landing remains available if you decline.
The approved purpose is limited to understanding landing visits and validating that the public landing works as expected. We do not enable advertising measurement, remarketing or marketing pixels on this landing.
Production and development use separate GA4 properties supplied through deployment configuration. Local development, CI, preview and test environments do not receive a GA Measurement ID and must remain analytics-disabled.
3. What GA4 may process
After consent, standard GA4 measurement may process limited technical and usage information needed for a page visit, such as page URL and title, referrer, browser/device category, coarse geographic information derived by Google, and pseudonymous first-party cookie identifiers.
Vacairo does not send GA4 your name, email address, phone number, account User-ID, precise GPS trail, raw prompts, travel documents, payment-card data or other custom personal-data parameters.
We do not add custom, enhanced or advertising events for this landing. GA4 may still generate standard automatically collected lifecycle events associated with normal GA4 page/session measurement.
4. Privacy-minimal GA4 configuration
- Google Signals: disabled.
- Ads personalisation and advertising consent signals: disabled / denied.
- User-provided data collection: disabled.
- Enhanced Measurement beyond the approved landing scope: disabled.
- Google products & services data sharing and unnecessary advertising-product links: disabled.
- Granular location/device collection not needed for this landing: disabled.
- User/event retention setting: 2 months.
- Analytics cookies are host-only, are not shared between the development and production hosts, have a maximum 60-day lifetime from the first consented visit, and are not renewed on every page load.
5. Cookies and browser storage
| Storage | When used | Purpose | Maximum lifetime |
|---|---|---|---|
| Consent preference in localStorage | When you make a choice | Remember Accept / Decline so we can respect your choice | Until changed or browser storage is cleared |
_ga | Only after analytics consent | Pseudonymous browser measurement | 60 days |
_ga_<container-id> | Only after analytics consent | Persist GA4 session state | 60 days |
When you withdraw analytics consent, Vacairo disables future GA collection and attempts to remove Vacairo GA cookies from the current host. You can also clear site storage in your browser.
6. Google as analytics provider and international processing
GA4 is provided by Google under the applicable Google Analytics terms and data-protection terms. Google may process analytics information in countries outside your own. Google describes its international transfer safeguards, including applicable adequacy mechanisms and contractual safeguards, in its privacy and data-transfer materials.
Vacairo keeps optional Google product/service sharing and advertising integrations disabled for this landing so the analytics configuration remains limited to the approved measurement purpose.
7. Retention
Vacairo configures the GA4 user/event retention setting to 2 months for this minimal landing use case. The first-party analytics cookie lifetime is separately limited by the landing code to 60 days and is not refreshed on each page load.
Google notes that its user/event retention control does not govern every standard aggregated report. We therefore avoid describing the 2-month setting as a universal deletion deadline for every aggregate maintained by the provider.
8. Your choice and withdrawal
Analytics is optional. Before consent, the landing does not load the GA script or send GA analytics requests. If you decline or do nothing, non-essential analytics stays off.
You can reopen the banner and change your choice at any time:
Open Cookie & Privacy Settings
Where applicable, you may also have data-protection rights such as access, deletion, restriction or objection. Contact support@vacairo.com. Because this landing does not send an account User-ID or direct identifiers to GA4, matching a GA record to a named person may be technically limited.
9. Security and vendor incidents
Google privacy/security notices are routed through the service account contact and Vacairo's internal privacy/security incident process. If an incident materially affects personal data, Vacairo will assess notification obligations under the laws that apply to the affected users.
10. Changes to this notice
We may update this notice when the landing, analytics scope, provider configuration or applicable privacy requirements change. The date at the top identifies the current version.