Legal
Privacy
Short, because the site collects very little.
Last updated 11 October 2026.
Who is responsible
TicketWave HQ Ltd (company no. 17143167, Pudsey LS28 6LE, United Kingdom) publishes Citorah and is the controller of any personal data described here.
What the site collects
- No accounts, no forms, no cookies. You can read everything without telling us who you are.
- Page-view statistics. We count which pages are read and which links out to other sites are used, and a few product events: a search, a place viewed, a save, a trip started, a click through to a partner. The events describe the place or the partner, never you. The counting runs on our own Plausible Community Edition server, the self-hosted version of Plausible Analytics. It sets no cookies, builds no profile of you and reports only in aggregate. We keep the analytics records for 24 months, then delete them.
- Server logs. Our host, Vercel, processes technical details such as your IP address, browser and the page requested, to deliver the site and keep it secure. These logs are kept for a short period.
- Affiliate links. When you follow a link marked as an affiliate link, CJ Affiliate records the click on its own site so that a booking can be credited to Citorah, and the partner you land on applies its own policies. Citorah receives commission reports, not anything that identifies you.
- Email. If you write to us, we keep the correspondence so we can reply, and for our records.
Saved places and trips
When you save a place or build a trip, it’s kept in your browser’s local storage, on your device. It isn’t sent to Citorah or anyone else, and we can’t see it. It isn’t a cookie and nothing reads it but the Saved and Trips pages. Clearing this site’s data in your browser deletes it, and a private window forgets it when you close it.
Why
Our lawful basis is legitimate interests: running and securing the site, understanding which guides people read, and answering the messages we’re sent. We don’t sell personal data or use it for advertising.
Who else handles it
Vercel Inc. hosts the site, which runs in London. As a US company it may process technical data outside the UK, under the safeguards UK data protection law requires. Our analytics server runs on hardware we rent from OVHcloud (OVH Limited) in Gravelines, France, so the page-view statistics stay in the EU. No analytics data goes to Plausible Insights OÜ, the company that makes Plausible.
Your rights
You can ask for a copy of personal data we hold about you, and ask us to correct or delete it, or to stop using it. Email hello@citorah.com. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Other sites
Guides link to venues, operators and other sites. Their own privacy policies apply there.