Privacy Policy

Halaman ini belum tersedia dalam bahasa Indonesia — menampilkan versi bahasa Inggris.

Effective date: 24 July 2026.

This Privacy Policy explains what personal data is collected when you visit Shanghai Park Guide (this “Site”), why it is collected, who it is shared with, how long it is kept, and the rights you have over it. We have tried to write it in plain language rather than legal boilerplate.

We are not lawyers, and this policy is provided in good faith for transparency; it is not legal advice.

1. Who is responsible for your data

The Site is an independent, non-commercial fan guide operated under the name Shanghai Park Guide (the “we”, “us” or “operator” in this policy). We act as the data controller for the limited data described below.

For any privacy question, request or complaint, contact us at: hello@shanghaiparkguide.com.

We are not affiliated with The Walt Disney Company or Shanghai Disney Resort; their websites and apps have their own, separate privacy policies that we do not control.

2. The short version

• We run no accounts, no forms, no newsletter and no comments — so we never ask you for your name, email or any contact details.
• We use web analytics to understand, in aggregate, how the Site is used. These tools set cookies and process technical data such as your IP address.
• Our hosting provider and web fonts also process technical data (again, mainly your IP address) purely to deliver the Site.
• We do not sell your personal data, and we do not build advertising profiles about you.
• You can block or delete cookies at any time, and the Site keeps working normally.

The rest of this policy is the detail behind that summary.

3. What data we collect, and why

We do not knowingly collect data that directly identifies you. We do process the following technical and usage data:

3.1 Analytics

To see which pages are read, roughly where visitors come from, and how the Site performs, we use:

• Google Analytics 4 (provided by Google Ireland/LLC) — collects usage events, approximate location (from IP), device and browser type, and referring pages, using cookies.
• Yandex.Metrica (provided by Yandex LLC) — collects similar usage statistics. Note that our Metrica counter has Webvisor and click-map features enabled, which can record anonymised interaction data such as scrolls and clicks on a page. It uses cookies.
• Cloudflare Web Analytics (provided by Cloudflare, Inc.), where enabled — privacy-first, aggregated analytics that does not use cookies and does not track you across other sites.

Analytics data tells us how many people read a page and how the Site is performing — not who you are.

3.2 Hosting and security logs

The Site is hosted on Cloudflare Pages. Like any web host, Cloudflare automatically processes technical request data — including your IP address, user-agent, and the resources requested — to deliver pages, protect the Site against attacks and abuse, and keep it available. Cloudflare may set strictly necessary security cookies (for example bot-management cookies) for this purpose.

3.3 Web fonts

The Site loads display fonts from Google Fonts (Google’s fonts.googleapis.com and fonts.gstatic.com). To serve these fonts, your browser connects to Google’s servers, which means your IP address is disclosed to Google as part of that request.

3.4 Affiliate link data

Some outbound links are affiliate links. When you click one, the destination partner (e.g. Klook, Trip.com, Booking.com) may receive standard referral information (that the click came from this Site) and may set their own cookies. This happens on their site under their own privacy policy, not ours — see section 7.

3.5 What we do not collect

We do not collect names, email addresses, phone numbers, payment details or account credentials, because the Site has no feature that asks for them. If you email us voluntarily, we will of course see your email address and message, and we use them only to reply to you.

4. Cookies

Cookies are small files stored by your browser. The Site itself sets no cookies of its own; the cookies below are set by the third-party tools above.

Cloudflare Web Analytics, where used, sets no cookies.

You are in control. You can refuse or delete cookies in your browser settings at any time, and nothing on this Site depends on them — content reads and works exactly the same with cookies switched off. See section 6 for analytics-specific opt-outs.

5. Legal bases for processing (GDPR / UK GDPR)

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f)) for aggregate analytics, hosting and security — our legitimate interest being to understand, maintain, secure and improve a free guide. You have the right to object to this processing (see section 8).
• Consent (Art. 6(1)(a)), where consent is the required basis for non-essential cookies under applicable e-privacy rules. We do not currently operate a cookie-consent banner; if you do not wish to be measured by cookie-based analytics, please use the opt-outs in section 6 before or while browsing. We keep this policy under review and may add a consent banner.

We are giving you the straightforward description of how the Site behaves today rather than a more comfortable but inaccurate one.

6. How to opt out of analytics

Independently of any browser cookie setting, you can opt out of the analytics tools specifically:

• Block cookies for this Site (or all sites) in your browser settings, or use private/incognito browsing.
• Google Analytics — install Google’s official opt-out browser add-on.
• Yandex.Metrica — use Yandex’s opt-out page.
• Enabling “Do Not Track” or Global Privacy Control in your browser also signals your preference; see section 11.

7. Who we share data with

We do not sell or rent personal data. Technical data is processed by the third-party providers that make the Site work, each under its own privacy policy:

• Google (Analytics, Fonts) — Google Privacy Policy
• Yandex (Metrica) — Yandex Privacy Policy
• Cloudflare (hosting, security, optional analytics) — Cloudflare Privacy Policy
• Affiliate partners you choose to click through to (e.g. Klook, Trip.com, Booking.com) — governed by their own policies once you leave this Site.

We may also disclose data if strictly required by law.

8. International data transfers

The providers above are global and may process data outside your country, including in the United States (Google, Cloudflare) and Russia (Yandex). Where personal data of EU/UK residents is transferred internationally, those providers rely on recognised safeguards such as the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses. Because Yandex.Metrica processes data on servers in Russia, please take that into account if it matters to you, and use the opt-outs in section 6.

9. How long data is kept

• Analytics data is retained according to each provider’s settings — typically up to 14 months for Google Analytics and up to about 1 year for Yandex.Metrica, in aggregated form.
• Hosting and security logs are kept short-term by Cloudflare for delivery and abuse-prevention.
• If you email us, we keep the correspondence only as long as needed to handle your request.

10. Your rights

10.1 EU & UK (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to: access your data; have it rectified or erased; restrict or object to its processing; data portability; and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner’s Office (ICO).

10.2 Russia (Federal Law No. 152-FZ)

If you are in Russia, you have the right to access, correct and request deletion of your personal data, to withdraw any consent, and to complain to the supervisory authority, Roskomnadzor.

10.3 California (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information is collected and how it is used, to request its deletion, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information in the sense those laws define, and we will not discriminate against you for exercising your rights.

10.4 Everyone

Whatever your location, you are welcome to contact us with any privacy request, and we will do our best to help.

11. Do Not Track and Global Privacy Control

Some browsers can send a “Do Not Track” (DNT) or Global Privacy Control (GPC) signal. There is no common industry standard for how sites must respond to DNT. We do not use tracking for advertising, and you can rely on the opt-outs in section 6 to control analytics.

12. Children’s privacy

The Site is a general-audience travel guide and is not directed to children. We do not knowingly collect personal data from children under the age of 16 (or the minimum age set by your local law). If you believe a child has provided personal data, contact us and we will address it.

13. Links to other sites

The Site links to external sites — the official Shanghai Disney Resort site and affiliate partners. We are not responsible for the content or privacy practices of those sites. Once you follow a link away from this Site, this policy no longer applies; read theirs.

14. Changes to this policy

We may update this policy as our tools, the law, or the Site change. When we do, we will revise the “Effective date” at the top. Material changes will be reflected here; please check back from time to time.

15. Contact

For any question or request about this policy or your data, email hello@shanghaiparkguide.com. If you are in the EU/UK and are not satisfied with our response, you may also contact your local data-protection authority.