தனியுரிமைக் கொள்கை

1. Overview

This policy explains what personal data eShriLanka ("we", "us") collects when you use eshrilanka.com, why we collect it, and the choices you have. We collect the minimum we need to run the Site and never sell your personal data.

2. What we collect

• Account data — name, email address and a securely hashed password when you register, or your name, email and profile picture if you sign in with Google.
• Content you submit — reviews, photos, travel stories, hidden gems, saved places, trips and passport stamps, linked to your account.
• Newsletter data — your email address, language and the form you signed up from, stored only after you confirm via the double-opt-in email.
• Preferences — your chosen travel style, language and theme, stored in cookies (and on your account if logged in).
• Usage data — anonymised search queries (to improve content) and standard technical logs (IP address, browser type) used for security and rate limiting.
• Location — the "Near me" feature uses your device position only when you grant it, only in your browser session, and it is never stored.

3. Cookies, analytics and advertising

We use cookies to keep you logged in, remember your language, theme and travel-style preferences, and to protect forms (CSRF). We use Google Analytics 4 to understand how the Site is used, and Google AdSense to fund it — Google may use cookies to show ads based on your visits to this and other sites. You can opt out of personalised advertising at Google Ads Settings and learn more at How Google uses data. The interactive maps (MapTiler, Google Maps embeds) and weather (Open-Meteo) load from their providers, who receive standard request data such as your IP address.

4. How we use your data

• To provide the Site: accounts, saved trips, reviews, personalised suggestions based on your chosen travel style.
• To send the newsletter you asked for — every email includes a one-click unsubscribe link.
• To moderate community content and keep the Site safe (spam and abuse prevention, rate limiting).
• To improve content and translations using aggregated, non-identifying usage patterns.

We do not sell personal data, and we share it only with the service providers named above as needed to run the Site, or where the law requires.

5. Retention and security

Account data is kept while your account is active. Newsletter addresses are kept until you unsubscribe (unsubscribed addresses are retained only as a suppression record). Passwords are stored using modern hashing (Argon2), transport is encrypted (HTTPS), and access to personal data is restricted to Site administrators.

6. Your rights

You can access, correct or delete your data: update your details from your account, unsubscribe from any newsletter email, or contact us to request a copy or full deletion of your account and content. Depending on where you live (including under the GDPR and Sri Lanka's Personal Data Protection Act), you may also have rights to restrict or object to processing and to lodge a complaint with a supervisory authority.

7. Children

The Site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.

8. Changes and contact

We may update this policy as the Site evolves; the date above reflects the current version. For any privacy question or request, use the contact page.