Privacy Policy
Last updated: November 2025
Ultra-short version
- The website itself (this thing you're reading right now): Zero tracking. No tracking cookies, no analytics, no Vercel Insights, no nothing. The only thing Vercel sees is what they need for DDoS protection and basic routing — that's on them, not us. You can read their policy here.
- Actually using the API: We don't log your IP, we don't log which endpoints you call, and we definitely don't care how long you stared at the JSON. Successful requests = nothing stored. Failed/abuse-level requests = temporary IP block (that's it) enforced by Vercel Firewall and DDoS protection.
- We don't use Google Analytics, Vercel Analytics, Plausible, or any of that nonsense. We turned all of it off on purpose.
- Your email and associated name (only when you request an API key): That's the only personal info we ever store. It goes straight into a private Redis instance which is protected. We don't share it, sell it, rent it, or accidentally CC your mom or boss on the newsletter (well, there is no newsletter).
- If you wish to use the buymeacoffee service: We only receive the information you choose to share on Buy Me a Coffee (e.g. display name, message). Payment details are handled by their payment processors and are never shared with us. See Buy Me a Coffee's privacy policy: buymeacoffee.com/privacy-policy.
The boring but legally required bits
This website (https://srilanka-holidays.vercel.app/) AND the API (https://srilanka-holidays.vercel.app/api) are hosted on Vercel. Like any hosting provider, Vercel processes basic server logs (IP address, request time, etc.) for security, performance, and abuse prevention. We have disabled Vercel Analytics and all optional tracking features. For details on what Vercel logs, please see their privacy-policy here: vercel.com/legal/privacy-policy
We only log the minimum required to protect the service from abuse (typically IP address and timestamp in case of excessive requests or attacks). These logs are retained only temporarily and are automatically deleted shortly after.
Use of Cookies
This website does not use cookies for tracking or analytics. The only cookies that may be set are essential for basic functionality, such as session management for the dark mode toggle. These cookies do not track your browsing behavior.
Your Rights
You can ask to view, update, or delete any personal information we have about you at any time by contacting us at halt-pledge-paper[-at-]duck.com.
Will this ever change?
We have no plans to introduce tracking or additional data collection. Should that ever change, we will clearly announce it and update this policy before any new practices take effect.
Questions? Reach out to us: halt-pledge-paper[-at-]duck.com