Privacy & Cookie Policy

1. Who this policy covers

This Privacy & Cookie Policy explains how information is handled in connection with Capsula Expeditions at capsulaexpeditions.com, including its hiking guides, destination pages, reading list, trip-planning worksheet and email correspondence. In this policy, “we”, “us” and “our” refer to the publication operating this website. For privacy enquiries, contact cavallariosteckley@gmail.com.

The policy covers information connected with visiting our pages and contacting the publication. It does not govern an independent park authority, transport provider, advertiser or other website you reach through a link. Those organisations explain their own handling of information in their privacy notices. You do not need an account or an email subscription to read our guides.

2. Website features and advertising

Advertising on this website may be provided through Google AdSense and participating advertising partners. This policy explains the information that those services may process, the purposes for using it and the choices available to visitors. The processing applicable to a particular visit depends on the services involved, your location, browser settings and privacy choices.

Website features include locally processed guide search, filters, a trip worksheet and a browser-based reading list. The site does not provide user accounts, public comments, checkout, newsletter registration or a contact form. Photographs, fonts, styles and site scripts are served locally rather than embedded from a remote photo or font service. Changes to these features or the handling of personal information are reflected in this policy and relevant privacy notices.

Reading this policy or continuing to browse does not, by itself, give consent to advertising cookies or personalised advertising. Where consent is required, it must be requested separately through an appropriate consent mechanism.

3. Information involved when you use the website

Information can arise from a page request, a feature you choose to use, a message you send, or an advertising service. The following categories distinguish information retained on your device from information that can reach a service provider. We do not ask you to upload hiking tracks, provide a precise location, or submit health information to use the planning tools.

Swipe the table horizontally to compare every column.

4. Why information is used

Technical request information helps deliver the requested page, diagnose errors and protect the website against abuse. Reading-list identifiers support the save function you choose to use. Your email address and message allow us to answer an enquiry, investigate a correction or resolve a permissions issue. A published correction can normally be made without publishing the sender’s private contact details.

Advertising information may also be used to select and display ads, measure advertising performance, limit repeated ads, identify invalid activity and apply privacy choices. Personalised advertising is a distinct purpose from simply displaying an ad. We do not send the contents of your private email correspondence or your locally saved reading list to Google as advertising data.

We do not operate a marketplace for personal contact records or use the reading list to create a mailing list. We do not request identity documents for ordinary reading or editorial questions. If a privacy request requires verification, the information requested should be proportionate to the request and the information actually held.

5. Reading list, search and trip worksheet

The reading list stores guide identifiers in local storage using the key capsula-reading-list. It remains in the browser and device where you saved the guides. The site code does not upload that list to a server, attach it to an account or synchronise it between devices. Local storage can remain after closing a tab until you remove saved guides, clear site data or your browser removes the stored information.

Search, destination and subject filters, and worksheet choices are processed on the page. They are not submitted by the site code as a separate analytics event or enquiry. A URL that contains a query can nevertheless appear in browser history, hosting logs or information sent when a link is opened. Avoid placing private information in a search URL. Removing local site data clears the stored reading list but does not erase hosting logs or information already held by an independent provider.

6. Cookies and similar technologies

A cookie is a small value stored by a browser and returned in certain requests. Local storage is a different browser storage mechanism. Advertising systems may also use identifiers, tags or similar technologies. The fact that information is stored in a browser rather than entered in a form does not make it irrelevant to privacy.

The reading-list function uses the browser storage described above. Hosting and security providers may use technical storage for their services. Advertising and consent services may use additional storage for ad delivery, measurement or remembering privacy choices. Relevant consent notices identify the applicable purposes and participating providers.

Cookie names, providers and lifetimes vary with the services, advertising partners and privacy choices applicable to a visit. Consult the relevant provider disclosures and any cookie details presented with the consent choices. We do not describe optional advertising storage as essential merely because advertising helps fund the publication.

7. Google AdSense and advertising partners

Third-party vendors, including Google, may use cookies to serve advertisements based on your previous visits to this website or other websites. Google’s advertising cookies can allow Google and its partners to display ads informed by visits to this site and other sites on the Internet, subject to applicable settings and consent.

Other participating vendors and advertising networks may also serve ads and use their own technologies. The participating provider disclosures must be available through the active advertising consent message or linked vendor information. A description of Google alone does not identify every possible advertising partner.

You can manage Google ad personalisation through My Ad Center. Additional participating-company choices are available through Digital Advertising Alliance choices. These controls have different scopes and may apply to a particular browser, device or signed-in account. They are separate from a website consent choice and do not necessarily remove all advertisements.

8. Information Google may receive and how to learn more

When a page loads Google advertising services, the browser may send Google the page URL and IP address. Depending on the service and settings, Google can also receive browser and device information, cookie identifiers and ad-interaction information. These services may use information for delivery, measurement, service operation, protection against fraud and, where permitted, ad personalisation.

Google explains this processing in How Google uses information from sites or apps that use its services and its Privacy Policy. Its advertising explanation describes advertising technologies and controls. Google’s retention periods, account settings and processing responsibilities are not identical to ours; consult those notices for the information held by Google.

Turning off personalised ads does not mean that every ad-related request or technical storage operation stops. Contextual advertising, measurement or anti-abuse processing may still be relevant, depending on the selected advertising mode, legal requirements and available permissions.

9. Your cookie and advertising choices

You can remove locally saved guides using the reading-list controls and clear local storage through your browser’s site-data settings. Browser settings can also restrict or delete cookies. Blocking storage may affect saved preferences or other features. Deleting cookies can remove an earlier choice, so a participating service may ask you to choose again.

Where a consent message is presented, use its privacy or consent-settings control to review purposes, participating vendors and available choices, and to change or withdraw consent. Choices should be available again after the initial message. Withdrawing consent does not undo processing that lawfully occurred before withdrawal. Google account advertising controls and industry opt-out tools remain additional options rather than replacements for required website consent.

Questions or requests about information under our control can be sent to cavallariosteckley@gmail.com. An email request does not itself change browser cookies, Google account preferences or a choice held by another provider; use the corresponding provider or browser controls for those settings.

10. Visitors in the EEA, United Kingdom and Switzerland

Where applicable, non-essential storage and personalised advertising require appropriate information and consent. Google requires publishers serving personalised ads in the European Economic Area, United Kingdom and Switzerland to use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. Certification does not establish complete compliance with every privacy law.

Where consent is required, the relevant choices need to be communicated to the advertising services. A refusal or withdrawal must be respected in the processing to which it applies. The specific ad mode available after refusal depends on the permissions, configuration and applicable rules. This policy does not itself collect or transmit consent.

11. Grounds for processing where applicable

Where data-protection law requires a lawful basis, processing must be linked to its purpose. Consent is relevant to optional advertising storage and personalisation where required. Legitimate interests may support proportionate security, technical administration and responding to correspondence, subject to the individual’s rights and expectations. Legal obligations may require preservation or disclosure of particular records.

A legitimate-interest ground does not remove a separate legal requirement to obtain consent for device storage. If you ask about a particular activity, we can explain the purpose and basis relevant to information within our control. We do not rely on acceptance of this policy as a blanket authorisation for every future use.

12. Access, correction and other privacy requests

Depending on your location and applicable law, you may have rights to receive information about processing, access personal information, correct inaccuracies, request deletion, restrict processing, object to certain uses, receive portable information, or withdraw consent. Rights can be subject to exceptions, including retention required by law. You may also be entitled to complain to the appropriate data-protection authority.

Send a request to cavallariosteckley@gmail.com, describing the right you wish to exercise and the information involved. We will respond within the period required by applicable law and explain a limitation where relevant. We may need reasonable verification before disclosing or deleting personal records. A browser-only reading list is normally best removed on your own device because the site does not receive a copy of it. Requests concerning information controlled independently by Google may need to be made to Google.

13. California and other United States privacy choices

Where a state privacy law applies to the publication and your information, rights may include access, correction, deletion, and opting out of a sale, sharing for cross-context behavioural advertising, or targeted advertising as defined by that law. Advertising-related disclosures can fall within these definitions even when a publisher does not sell a mailing list. For that reason, advertising-related information is considered according to the relevant legal definitions rather than solely whether money changes hands for a contact list.

Applicable laws may give you the right to communicate an opt-out through an authorised browser preference signal, such as Global Privacy Control, and may require a covered business to respect that signal. Google ad settings, relevant consent choices and browser settings have different functions. Email requests remain available for information we hold, but an email link does not itself change an advertising provider’s settings or replace a required browser-based opt-out. Where applicable, you may use an authorised agent and exercise rights without unlawful discrimination.

Google provides US-state advertising settings, including restricted data processing, described in its publisher guidance for US state privacy laws. The processing supported by these settings depends on the service configuration and the choices applicable to the visitor.

14. Providers and other disclosures

Information may be handled by the hosting and security providers needed to deliver and protect the website, by the email provider used for correspondence, and by advertising or consent providers involved in the relevant interaction. Hosting providers can receive connection information even when there is no analytics script. Our contact address uses Gmail, so email correspondence also involves Google’s email infrastructure.

We may disclose information where necessary to comply with a valid legal requirement, protect rights, investigate abuse or handle a dispute. Disclosures should be limited to what the purpose requires. If operation of the publication changes, any transfer of personal records needs appropriate safeguards and notice where required. Following an external link or clicking an advertisement takes you to another organisation; its collection of information is governed by its own practices.

15. How long information is kept

Different information has different retention criteria. A locally saved reading list remains until you remove it or the browser clears it. Email correspondence is kept for as long as reasonably needed to answer the enquiry, maintain a relevant correction or permissions record, resolve a dispute or satisfy a legal obligation, and should then be deleted or reduced to a record that no longer needs identifying details.

Hosting and security log retention depends on the actual provider and its settings. The retention applicable to a particular log depends on the provider’s settings and the purpose of that record. Advertising identifiers, consent records and Google-held information have their own lifetimes, which depend on the active service and provider notice. We do not promise a universal deletion period that we cannot apply to every provider. Contact us for information about retention relevant to a particular record or request.

16. International processing

The website can be visited internationally, and hosting, email or advertising providers may process information outside your country. Privacy protections can differ between locations. Where applicable law requires safeguards for an international transfer, the relevant transfer must be supported by an appropriate mechanism, such as an applicable adequacy decision or contractual safeguards. The appropriate safeguards depend on the provider, location and type of information involved. Provider notices explain their own international processing arrangements.

17. Security and data minimisation

Our approach is to collect only information needed for the features and correspondence described here, limit access to personal records, and use appropriate security measures for the services we operate. No internet transmission or storage method can be guaranteed completely secure. The website has no account password or payment-card entry function. Please do not send payment credentials or unnecessary identity documents with a routine editorial enquiry. Security incidents involving personal information must be assessed and handled in accordance with applicable notification requirements.

18. Children’s information

The publication is intended for a general travel-planning audience and is not designed to collect personal information from children. Reading a family-hiking article does not require a child’s name, age or profile. We do not knowingly invite children under 13 to submit personal information. If you believe a child has sent us personal information, contact us so that we can review it and take appropriate action. Additional age-related advertising and consent restrictions must be respected where they apply.

19. Changes and contact

We will revise this policy when the actual services, providers or privacy practices materially change. The updated date identifies the current version. Changes that require a new consent choice must be handled through the appropriate mechanism rather than treated as accepted solely because the text was edited.

For privacy questions, requests or concerns about information connected with Capsula Expeditions, email cavallariosteckley@gmail.com. You can also visit our contact page. Please identify the issue clearly so that we can distinguish a local browser setting, information held in correspondence, and information controlled by a third-party provider.