vietnam.com is a travel guide for Vietnam. This policy explains what personal data we process, why, and the choices you have. It was last updated on 16 July 2026. The short version: we only run analytics or location lookups if you opt in, we only email you if you sign up for something, and you can delete your account and all data attached to it yourself, at any time.
If you create an account we store your email address, an encrypted (hashed) password, and optionally your name. If you save AI-generated itineraries we store those itineraries and the trip details you entered (dates, group size, travel type, preferences). If you join the AI-planner waitlist we record that, with the date. If you subscribe to the newsletter we store your email address, when and where you subscribed, and a personal unsubscribe token. If you use the contact form we receive the message and contact details you provide.
We use Google Analytics to understand how the site is used — but only after you accept it in the cookie banner. Until then, no analytics script loads and nothing is sent to Google. If you accept, Google Analytics sets cookies and receives usage data such as pages visited and device type; Google LLC processes this data under the EU–US Data Privacy Framework. Your choice is stored in your browser for 12 months, after which we ask again. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer.
With your consent, we send your IP address once per visit to the geolocation service ipapi.co to estimate your city and country, so we can show your location in the menu and exchange rates in your likely currency. If you decline, no lookup happens and we use a default currency based on your chosen language instead. This choice is also managed via the cookie banner and expires after 12 months.
When you generate or refine a travel itinerary, the trip details you entered (dates, group size, travel type, preferences and the itinerary itself — not your name or email address) are processed by Anthropic PBC (Claude API) to produce the plan. Generated itineraries are stored in your account so you can revisit, share, export or delete them.
We send transactional email (password resets, welcome messages, itineraries you ask us to email you, waitlist confirmations) and — only to newsletter subscribers — occasional newsletters, via Resend, Inc. Every newsletter contains a personal one-click unsubscribe link. The forgot-password form is protected by Cloudflare Turnstile, which verifies you are human without tracking you across sites. Our backend and database are hosted on servers in the European Union; the website itself is served as static files via Cloudflare.
We use your data solely to provide the site's features: signing you in, storing and sharing your itineraries, sending the emails described above, showing localized information you asked for, and improving the site through opt-in analytics. We do not sell personal data, and we do not use it for advertising.
Account data and everything attached to it is kept until you delete your account. Newsletter subscriptions are kept until you unsubscribe, which removes the address entirely. Password-reset links expire within hours and are single-use. Cookie-consent choices expire after 12 months. Server logs are rotated automatically.
Under the GDPR you have the right to access, correct, export, restrict and erase your personal data, and to withdraw any consent as easily as you gave it. Most of this is self-service: your account page lets you change your password, manage your newsletter subscription, and permanently delete your account together with all itineraries, waitlist entries and newsletter data in one action. For anything else — or to complain — contact us; you also have the right to lodge a complaint with your data-protection authority (in the Netherlands: Autoriteit Persoonsgegevens).
vietnam.com is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.
If we change what we process or which providers we use, we will update this page and adjust the consent banner where required, so you are asked again before anything new runs.
Questions or requests about your data: use the contact page, or email us via the address in the site footer. We respond to privacy requests within 30 days.