Who handles your data
Castward operates castward.app. Legal entity name: [owner to confirm]. Mailing address: [owner to confirm]. For privacy requests, email privacy@castward.app. This policy applies to our atlas, browser-local plans, videos, contact form and email correspondence.
Data and purposes
Our hosting provider, Vercel, processes network and request data, such as IP addresses, request times and browser details, to deliver and protect the site. The contact form collects your name, email address, topic, message and consent. We use this information to answer you and handle your request. Do not send payment details, identity documents or sensitive personal information.
Plans stay in your browser
The planner saves your choices in local storage on your device. There is no Castward account or central plan database. Clear site data to remove a saved plan. Shared plan links can contain a snapshot of your choices; anyone who receives that link can read them. Keep private details out of shared plans.
Analytics and cookies
Google Analytics 4 (measurement ID G-4NYGJ2BF32) loads only after you accept analytics. It measures page visits, searches, trip and guide views, plan starts and saves, video plays, accepted contact submissions and outbound booking-link clicks. We do not send search text, contact fields or plan contents as event parameters. Google processes device, browser, approximate location and activity data. Advertising storage, advertising personalization and Google signals are disabled. URLs sent by our event code exclude query strings and fragments.
Your consent choice
Use Cookie settings in the footer to accept or reject non-essential analytics at any time. Rejection stops our analytics events and removes accessible Google Analytics cookies. Essential local storage keeps your plan and consent choice. A Global Privacy Control signal selects rejection when a page opens. We do not separately interpret Do Not Track. The site works without analytics.
Email, providers and transfers
Contact messages go through Resend to the owner’s inbox at contact@mediaatl.as. Messages sent to contact@castward.app, hello@castward.app or privacy@castward.app pass through Forward Email to the owner’s inbox. Vercel, Resend, Forward Email, the inbox provider and Google process data needed for their services. They may process data outside your country, including in the United States. Where applicable, transfers require lawful safeguards. Third-party booking and retailer sites have separate privacy policies.
Legal grounds and retention
Where the GDPR applies, analytics uses consent. Responses to your requests rely on steps you request before a contract or our legitimate interest in communication. Site security relies on legitimate interests and applicable legal duties. We keep correspondence only as long as needed to resolve the request, handle related disputes or meet legal duties. Provider logs and analytics records follow the provider or account retention settings; this site does not promise a fixed account retention period. Local plans remain until you delete them. Consent choices expire after 180 days. Our configured analytics cookie lifetime is 180 days.
Your rights
Depending on your location and applicable law, you may request access, correction, deletion, restriction, a portable copy or an objection to processing. You can withdraw consent without affecting earlier lawful processing. You may complain to your local data protection authority. California residents may have rights to know, access, correct and delete data, opt out of sale or sharing, limit certain sensitive-data uses, and receive equal treatment. Castward does not sell personal information or use it for cross-context behavioral advertising. We do not request sensitive personal information. An authorized agent may submit a request. We may need proportionate identity verification. Email privacy@castward.app; applicable exceptions and response periods apply.
Children and security
Castward is not directed to children under 13. Children should use the site with a parent or guardian and must not submit personal details. Contact us if a child sends us data so we can address it. We use reasonable safeguards, but no internet service or email system guarantees complete security.
Updates and further information
We will publish material policy changes here with a new date. See our cookie policy for storage controls. Official rights guidance: California privacy rights and EU data protection rights.