Privacy Policy

You can browse Galythia without creating an account or directly providing your name or email address. There are no user accounts and no newsletter. You can choose to submit a traveler rating, which does not ask for your name or email, or to send us a message through our contact form, which does.

If you submit a traveler rating, we collect what you enter in that form:

• the ship, and optionally the sailing, month, and year of your cruise
• your traveler type (for example, couple or family), if you select one
• your star ratings for food, service, cabin, entertainment, and value, and optional dining sub-ratings
• an optional short free-text comment

We do not ask for your name, email address, or contact details, and the form has no field for them. Please do not include personal information about yourself or anyone else in the free-text comment — it may be published on the Site.

Ratings are stored in our database, hosted by Supabase, and reviewed by us before publication. When a rating is submitted, an automated notification is sent to our internal inbox through the email provider Resend; that notification contains only the ship and sailing labels, not your rating content.

If you use our contact form, we receive the email address you enter, the topic you select, your message, and your name if you choose to give one. It is sent to us by email through our email provider, Resend, and we keep it only as long as needed to deal with what you wrote to us about.

Please don’t include sensitive personal information in the message — it is ordinary email, not a secure channel.

The form does not ask you for your IP address, browser information, device information or location, and we do not intentionally include any of that in the message it sends us. Our hosting, email, security and infrastructure providers may still process limited technical information as part of operating and securing their own services.

Like virtually all websites, our hosting provider (Vercel) processes the technical information your browser sends in order to deliver pages to you and to keep the service secure and reliable. The Galythia application itself does not log, store, or analyze your IP address.

We do not use browser localStorage or sessionStorage, and we do not build advertising or behavioural profiles of visitors.

The Site is built to support Google Analytics 4 (GA4) for aggregate usage measurement. When it is enabled, GA4 sets its own cookies and receives page views and a small set of structural events — for example that a cruise detail page was viewed, or that a comparison was made — described by identifiers already in our catalogue, such as ship, sailing, region, and departure port.

These events deliberately exclude free text you type and full page URLs that could carry personal details. Where GA4 is active, Google processes that data as described in its own privacy documentation, which may involve processing outside Canada.

Analytics only runs when a measurement ID has been configured for the production site. If none is configured, no analytics script loads and no analytics cookies are set. You can also block analytics using your browser settings or an extension.

The Site itself sets only one cookie:

• An administrator session cookie, set only when a member of our team signs in to the private admin area. It is strictly necessary, is not set for ordinary visitors, and cannot be read by JavaScript.

Cookies may also be set by third parties in these situations:

• Analytics — Google Analytics cookies, only where analytics is enabled (see above).
• Affiliate tracking — when you click a booking or tour link, the affiliate network (for example CJ Affiliate, which operates the CruiseDirect links) may set a cookie on its own domain so that a resulting booking is attributed to us. That happens after you leave our site.
• Embedded content — pages that display third-party sailing search results embed a Widgety frame, and Widgety may set its own cookies within that frame.

We do not use advertising, retargeting, or cross-site profiling technologies. Fonts are served from our own domain, not from a third party.

Some outbound links are affiliate links, and we may earn a commission if you book through them. Following one takes you to the provider’s own site, where their privacy policy applies. We receive commission and aggregate performance reporting from the affiliate network — we do not receive your booking details, payment information, or identity. See our Affiliate Disclosure.

We rely on a small number of providers to operate the Site:

• Vercel — website hosting and delivery
• Supabase — database hosting for traveler ratings and editorial data
• Resend — internal notification email to our own team
• Google Analytics — aggregate usage measurement, where enabled
• Widgety — embedded third-party sailing search results
• CJ Affiliate / CruiseDirect and Viator — affiliate booking and tour links

These providers process information on our behalf or, where they are independent controllers of their own services, under their own policies. Some operate outside Canada, which means information may be processed in other countries and be subject to the laws of those countries.

We keep information only as long as reasonably necessary for the purposes described here, and for any period we are required to keep it for legal or accounting reasons. Published ratings remain available while they are relevant to the ship or sailing they describe. We have not set fixed retention periods for every category; if you want a rating you submitted removed, contact us and we will remove it where we can identify it.

We use access controls appropriate to the sensitivity of the information we hold. The admin area is password-protected with signed, expiring sessions, database credentials are held server-side and never exposed to your browser, and traffic is served over HTTPS. No system can be guaranteed completely secure.

Traveler ratings do not ask for a name, email or account identifier, so most of them cannot be linked back to an individual by us; a message sent through the contact form does include your email address. Where we can identify information relating to you, Canadian privacy law gives you the right to ask for access to it, to ask for corrections, to withdraw consent, and to challenge our handling of it. You can also complain to the Office of the Privacy Commissioner of Canada, or to your provincial commissioner where one applies.

To make a request, contact us using the details below. Please describe the rating clearly enough for us to find it.

The Site is intended for adults planning travel. It is not directed at children, and we do not knowingly collect personal information from them. If you believe a child has submitted information, contact us and we will remove it.

If we add a feature that collects information differently, we will update this page and change the effective date shown at the top.

Privacy questions or requests can be directed to our Privacy Officer:

Privacy Officer
SIENITH MANAGEMENT INC.
privacy@galythia.com