This privacy policy sets out what Jakarta Tourism Guide collects when you read the site, why it collects it, and what you can do about it.
This policy explains what Jakarta Tourism Guide (www.jakartatourism.org) collects when you read the site, why, and what you can do about it. It is written to describe what the site actually does today rather than what a template says a website might do.
Last reviewed: 30 September 2026.
Who is responsible
Jakarta Tourism Guide is an independently published travel reference. The publisher is the data controller for anything collected through this site and can be reached through the contact page.
What is collected when you simply read the site
You do not need an account to read anything here, and there is nothing to sign up for. Reading a guide involves:
- Server logs. The web host records the standard request data every web server records — IP address, date and time, the page requested, referring page, browser and operating system. These logs exist for security and troubleshooting and are not used to build a profile of you. Cloudflare, which delivers the site, handles each request on its way through, and it can also measure how quickly pages load, without setting a cookie.
- Google Analytics 4. The site uses Google Analytics, connected through the Site Kit plugin, to count visits and see which guides people find useful. Once it is allowed to run, it sets cookies in your browser and reports aggregate information such as page views, approximate location at city level, device type and how you arrived. IP addresses are truncated by Google Analytics 4 before processing and the site’s operator cannot see your full IP address in Analytics or identify you personally from it.
- Caching. A page-caching plugin may set a cookie to decide whether to serve you a cached copy of a page. It carries no personal information.
Advertising
This site is preparing to carry display advertising supplied by Google AdSense; no display advertising is being served at the time this policy was last reviewed. When ads are live, Google and its partners will use cookies and similar technologies to serve and measure them, which may include personalised advertising based on your prior visits to this and other websites. Before advertising cookies are set for visitors in the EEA, the UK or Switzerland, your consent will be asked for and your choice recorded. The booking links described in the next section are a separate arrangement, and they are running now.
You can review and change Google’s advertising personalisation at My Ad Center, and opt out of personalised advertising from participating vendors at optout.aboutads.info or youronlinechoices.com. This policy will be updated when display advertising goes live.
Booking links and commission
Some links on this site earn a commission. Jakarta Tourism Guide works with Travelpayouts, an affiliate network that connects the site to hotel, flight, transfer and activity booking companies. We do not paste tagged links into the guides: Travelpayouts runs a script that turns ordinary links to booking and travel sites into commission-tracking ones as the page loads, and it can add booking boxes and suggestions of its own. If you book after following one of those links, the booking company pays us a commission out of its own margin, and your price is the same either way. Every guide says so at the top, and the affiliate disclosure sets out the arrangement in full.
What that means for your data needs spelling out, because it is more than a cookie notice usually describes. When the script runs it receives your IP address and browser details, as any service your browser connects to does, and it reports to Travelpayouts how the page is used: the page’s address and the one you arrived from, which links you click, how many keys are pressed and in which part of the page (not what is typed), and whether an ad blocker or a private window is in use. Those reports are tied together by a random session identifier kept in a cookie on this site called am_user_session, which lapses 30 minutes after you stop reading, and, if Google Analytics is allowed as well, by the identifier Google Analytics keeps for your browser. The script also fetches typefaces for its booking boxes from Google Fonts, which gives Google your IP address, and keeps a note of the page’s colours in your browser’s local storage so that those boxes match the design.
If you follow one of its links, Travelpayouts and the booking site set identifiers of their own, on their own domains, so that a booking made afterwards can be credited here. We never see your name, your travel dates or your payment details — what comes back is a count of clicks and, sometimes, the fact that a booking happened. Once you are on a booking site you are under its privacy policy, not this one, and Travelpayouts handles what its script collects under its own privacy policy.
The script sits in the Advertising group of this site’s cookie settings and does not load at all until that group is allowed. Refusing it costs you nothing: the links still work, at the same price.
Messages you send us
If you use the contact form, the name, email address and message you type are emailed to the site’s editor and kept only for as long as it takes to answer you and, where a correction results, to keep a record of why a guide was changed. Enquiries are not added to any mailing list, are not used for marketing, and are not sold or shared with anyone.
Comments
Comments are switched off across this site. No comment form appears on any guide, and nothing is collected through one.
Links to other sites
Guides link out to hotels, restaurants, transit operators, museums and booking platforms. Once you follow one of those links you are on someone else’s site under someone else’s privacy policy, and this one no longer applies. Some of these links earn a commission, as described under “Booking links and commission” above, and every guide says so at the top; following one passes a referral identifier to the destination.
Cookies in summary
Cookies currently set are: analytics cookies from Google Analytics 4, once analytics is allowed to run; am_user_session, the booking partner’s session cookie described above, once advertising is allowed; cookie_consent_342796 and cookie_consent_342796_loc, which record your cookie choice and the country you are reading from and are readable by this site alone; and a functional cookie used by the caching layer. No display-advertising cookies are set, because no display advertising runs. The cookie policy lists every cookie and item of browser storage in use, generated from the services actually running here. You can block or delete cookies in your browser settings at any time; blocking analytics cookies has no effect on your ability to read anything here. Google also publishes a browser add-on that opts you out of Google Analytics entirely.
Your choices, and what runs before you make them
What runs before you choose depends on where you are reading from, because the law does. In the European Economic Area and the United Kingdom, and in Brazil, Chile, China, Israel, Nigeria, Saudi Arabia, South Korea, Thailand, Türkiye and Vietnam, nothing beyond the strictly necessary runs until you answer the dialog on your first visit — not analytics, not Travelpayouts — and Reject all sits on that first screen next to Accept all, not behind a second click.
In the United States you are shown a bar rather than a dialog, and it is not only a notice: analytics starts on arrival there, but advertising and booking-partner scripts stay switched off until you answer it. In Switzerland you get the dialog too, but analytics starts on arrival there and only advertising and booking-partner scripts wait for your answer. Readers in Canada, Australia, New Zealand, Japan, Singapore, Hong Kong, Taiwan, India, Malaysia, Indonesia, the Philippines, Mexico, Argentina, South Africa and the United Arab Emirates get a notice instead: everything described on this page starts when they arrive, the notice says so, and the same control switches it off. Everywhere else, and whenever we cannot tell where you are, the strictest setting applies: nothing beyond the necessary runs until you answer.
Your answer is kept on your own device, in a first-party cookie called cookie_consent_342796 that only this site can read, so you are not asked again on every page. An answer lasts up to a year, and a refusal given in the dialog six months, before you are asked again. The Cookie settings link in the footer of every page reopens the choice, and withdrawing is the same two clicks as agreeing: what you switch off stops running, and if that includes analytics, the Google Analytics cookies are cleared. The one cookie Travelpayouts keeps on this site, am_user_session, is no longer renewed once its script stops and lapses within half an hour; anything Travelpayouts or a booking site set on their own domains is cleared in your browser rather than from here.
Refusing costs you nothing. Every guide here is readable in full either way, nothing is paywalled, and no part of Jakarta Tourism Guide is held back from readers who say no.
If you are reading this in the United States
Several US states give you the right to opt out of the “sale” or “sharing” of personal information, and those words are broader than they sound: letting an advertising or affiliate partner receive information about your visit can count as sharing even though no money changes hands for your data and we have never sold anything of the kind. Rather than argue the definition, Jakarta Tourism Guide treats it as covered.
So the bar shown to US readers carries a Do not sell or share button, and for US readers the Cookie settings link at the foot of every page reads Do not sell or share my personal information. The button switches off everything except the strictly necessary — Travelpayouts and any ad partner included — and the link reopens the full choice at any time. Travelpayouts stops running from that point; the session cookie it kept on this site lapses within half an hour, and anything it set on its own domains is cleared in your browser rather than from here.
This site also honours Global Privacy Control. If your browser or an extension sends a GPC signal, it is treated as a valid opt-out on arrival — you do not have to find the control and click it as well, and we do not ask again on later visits. Do Not Track is a different and long-abandoned signal, and to be straight about it: this site does not act on DNT, because nothing agreed what it ought to mean.
The record kept of your choice
Proving that a choice was offered and honoured means keeping a record of it. Each answer is logged with the date and time, the two-letter country the choice was made from, which of the rule sets above applied, a reference to the exact wording you were shown, and the choice itself, against a random identifier generated for your browser.
That record contains no name, no email address and no IP address. It holds a salted hash of your browser’s user-agent string, and the salt changes every day, so two visits on different days cannot be linked back together through it. Records are deleted after 26 months. If you want to see or delete the entries tied to your browser, ask through the contact form.
Your rights
Depending on where you live, you may have the right to ask what personal data is held about you, to have it corrected or deleted, to object to processing, or to have it exported. Because this site holds almost nothing that identifies an individual — realistically, the contents of a contact-form message you chose to send, and the record of your cookie choice described above — most requests are straightforward. Write to us through the contact page and we will respond within a month.
Where the GDPR or UK GDPR applies, analytics and the booking partner rest on your consent, which is why, for readers there, neither runs until you have agreed, and why you can withdraw that agreement at any time from the Cookie settings link. Answering a message you send rests on legitimate interest in replying to correspondence you started, and so does keeping server logs for security. If you are not satisfied with how a request is handled, you can complain to the data protection authority where you live.
Children
This is a travel reference intended for adults planning trips. It is not directed at children and does not knowingly collect information from anyone under 16. If you believe a child has sent us information through the contact form, tell us and it will be deleted.
Changes to this policy
When the site changes what it collects — for instance, when display advertising is switched on — this page is updated and the review date at the top changes with it.
What changed on 30 September 2026. The site now carries booking links through the Travelpayouts affiliate network and runs a consent tool, and this policy describes both. The statements that no advertising was being served and that advertising cookies would only arrive with display advertising were corrected, because the Travelpayouts script is advertising and sets a cookie of its own. No display advertising runs yet.