Privacy
The short version: we use what you do on Any Day Out to run the site and suggest places. Never other sites. No ads, and we never sell your data.
What we collect, and why
- A browser id
- The first time your browser sends us something (a star, a comment, or the list of places you looked at), it gets a random account id in a cookie. That’s how your stars and plans stay yours without signing in.
- Your lists
- Places you star or hide, places you’ve been (and how it went), your “would you go back?” taps, plans you make or join and their votes, and Home/Work places you save. We keep them so you can see them again, and to suggest places.
- What you open
- Which places you see in a list and where in the list, which you open, roughly how long you look (capped at 10 minutes), and taps on directions, website, call, share, add to calendar and photo tours. Also the interests you pick when you start. We use these to learn what you like and suggest places. Account → “Your interests” shows what we think you like, and you can reset it.
- Signing in
- Sign-in is handled by Amazon Cognito: an emailed code or a password. We never see your password. We keep your email, your name, and an id from the sign-in service. Signing in on a second device merges what you did as a guest into your account.
- Location
- If you tap “use my location”, your browser shares where you are and we use it to sort places by distance. We don’t save it to your account; your browser remembers the spot you picked. Home/Work addresses you type are looked up with the U.S. Census geocoder and saved until you remove them.
- Comments
- Your name and comment, shown publicly on the place. Guests’ comments, and any with a link or a blocked word, are read by a person before they appear.
- Photos
- Photos you upload are re-saved without their metadata (including GPS location) and checked automatically by Amazon Rekognition. A person approves them before anyone else sees them; a verified owner’s photos go up after the automatic check.
- Business claims
- If you claim a place, the business email you give us (we email it a code), and a scrambled version of your IP address used only for rate limits. Edits an owner makes are logged so they can be undone.
- Requests
- Corrections, removal requests and “add my city” requests: what you write, and the name and email you give us so we can reply.
- Visit counts
- We use Google Analytics to count visits: which pages are viewed, roughly where from (city or region), on what kind of device, and how people found us. It sees your IP address and sets its own cookies. We don’t send it your name, email, lists or searches.
- Request logs
- Like most sites, our firewall and server log each request: your IP address, browser, and the address you asked for. That address can include a search you typed or the area you’re browsing near. We use the logs to block bots and fix problems.
Who sees it
- Everyone
- Your comments (with the name you chose) and photos once approved. Star counts and “would go back” tallies are shown as totals, never who starred.
- Your plans
- Anyone with a plan’s link sees the names of the people in it and the vote totals.
- Us
- Carlos Cabán reviews comments, photos, claims and requests. Some of the work, like the nightly job that learns your interests and the review tools, runs on our own computers.
- Services we use
- Amazon Web Services hosts the site, database and photos, runs the firewall, sign-in (Cognito), photo checks (Rekognition) and email (SES). Google Analytics counts visits (see above). Your browser also loads fonts from Google Fonts, the map library from cdnjs (Cloudflare) and map tiles from OpenFreeMap, so they see your IP address and, for tiles, the map area. Addresses you look up go to the U.S. Census geocoder.
- Nobody else
- We don’t sell or rent your data, don’t show ads, and don’t share it with advertisers.
Cookies and your device
- wk_uid
- Your signed account id. Up to a year.
- wk_oidc
- Keeps sign-in safe while you’re on the sign-in page. 10 minutes.
- _ga, _ga_…
- Google Analytics, to tell new visits from returning ones.
- aws-waf-token
- Our firewall’s check that you’re a person, not a bot.
- On this device
- Your browser’s local storage remembers your last tab, the area you picked, the name you used for comments, and which tips you closed. It’s kept in your browser, not in your account.
How long we keep it
- Your account
- Your lists, history, interests and uploads stay until you delete your account.
- Request logs
- 30 days.
- Photos
- Unfinished uploads are deleted after 7 days; photos that don’t pass review after 30 days.
- Claim codes
- Expire after 30 minutes and are stored only scrambled.
- Everything else
- Comments, requests, business claims and your sign-in record don’t have a set deletion date yet. Email us and we’ll remove yours.
Deleting your account
Go to Account → Delete account and type DELETE. Right away we delete your stars, visits, reviews, Home/Work places, interests and history of what you opened, and take you out of your plans. Your uploaded photos come down within minutes.
- What stays. Comments stay, shown as “Former member”. Plans you started stay for the people in them, without your name. Corrections, removal and city requests you sent are kept, with the name or email you gave in them. Business claims and owner edits are kept as a record of who changed a listing.
- Your sign-in. The sign-in record with Amazon Cognito (your email) isn’t removed automatically yet. Email info@feralcat.xyz and we’ll remove it.
- Browsing as a guest? There’s no delete button without an account. Email info@feralcat.xyz and we’ll help you delete what that browser saved.
Questions?
Want a copy of your data, a correction, or something removed? Write to us. If this page changes, the date at the top changes too.
info@feralcat.xyz