Privacy.

What we collect

• Email — only when you subscribe to the Dispatch. Double opt-in required.
• Passport region — detected from your IP via Vercel's edge headers, used to populate the Visa Compass.
• Anonymous analytics — Vercel Analytics, GDPR-friendly.
• Newsletter clicks — Resend reports which links you clicked in our emails. We use this only to improve content.

What we don't collect

• Your real name, address, phone.
• Payment info — purchases happen on merchant sites, not ours.
• Third-party advertising cookies (none here).

Affiliate links

Some outbound links (clearly tagged) earn us commission when you book. Doesn't change your price. We disclose every link.

Your rights (GDPR/CCPA)

Email hello@loot-on.com — we delete or export your data within 7 days.

Where data lives

Subscriber data: Supabase (Postgres). Emails: Resend (AWS SES backend). Rate limits: Upstash Redis Mumbai. Errors: Sentry.