Privacy Policy

Data we collect

We collect only what we need to operate the service. When you create an account we store your email address, display name and a securely hashed password (we never store passwords in plain text). If you sign in with Google, we receive your name, email address and profile picture from Google.

We also record limited technical and usage data: pages viewed, articles read, points earned, orders placed and your IP address for security and rate limiting.

Cookies and similar technologies

Cookies are small text files stored by your browser. We use them for the following purposes:

• Strictly necessary: a session cookie (tc_session) keeps you logged in, and a locale cookie (NEXT_LOCALE) remembers whether you prefer English or Chinese. These cannot be switched off without breaking core functionality.
• Functional: the admin console stores your preferred interface language, and we may store small preferences such as your last-used itinerary settings.
• Advertising: Google and other third-party vendors use cookies, including the DoubleClick DART cookie, to serve advertisements based on your visits to this and other websites.
• Analytics: if enabled by the site operator, Google Analytics sets cookies to help us understand aggregate traffic patterns. Analytics identifiers are never linked to your account.

Google AdSense and third-party advertising

This site displays advertising served by Google AdSense. Google, as a third-party vendor, uses cookies to serve ads on this site. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.

Third-party vendors and ad networks may also use cookies, web beacons or similar technologies to collect information about your activity on this and other websites in order to provide advertising based on your browsing activity and interests. The information collected does not include your name, address, email address or telephone number.

You may opt out of personalised advertising at any time:

• Opt out of personalised Google advertising at https://www.google.com/settings/ads
• Opt out of many third-party vendors' use of cookies for personalised advertising at https://www.aboutads.info/choices/ or https://www.youronlinechoices.eu/
• Disable cookies entirely in your browser settings (this may affect site functionality)

Legal bases and your rights

Where the GDPR applies, we process account data to perform our contract with you, and process security and analytics data on the basis of our legitimate interest in keeping the service available and improving it. Where China's Personal Information Protection Law (PIPL) applies, we rely on your consent or on the necessity of processing to provide the requested service.

You may request access to, correction of, or deletion of your personal data, and you may object to processing or request portability. Email privacy@gzgis.com and we will respond within 30 days.

Payments

Card and wallet payments are processed by Stripe and PayPal. Your payment details are submitted directly to those providers; we never receive or store your full card number. Their privacy policies govern the data they process.

Data retention and security

Account data is retained while your account is active and for a reasonable period afterwards to meet legal and accounting obligations. Passwords are hashed with bcrypt, sessions use signed HTTP-only cookies, and access to administrative data is restricted by role-based permissions.

Children

This site is not directed at children under 13 (or the minimum age in your jurisdiction) and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. Material changes are announced on this page with a revised last-updated date.

Contact

For any privacy question or request, contact privacy@gzgis.com. You can also reach us through the details on our Contact Us page.