Privacy Policy

Last updated: September 26, 2026

1. Introduction

Welcome to Visit Iraq. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains exactly what information we collect when you use visit-iraq.com ("the Platform"), how we use it, and your rights regarding that data.

Visit Iraq is a free, personal project run by one person from Austria. There is no company behind it, no advertising and no paid plan, and we never sell your data.

2. Information We Collect

When you use our Platform, we collect specific types of information to provide our services (connecting travelers and guides).

A. Information You Provide

Account Information: When you register, we collect your Name, Email Address, and Password (encrypted).
Visitor Profile: If you create a traveler profile, we may collect your Bio, Age Range, City, Country, Languages spoken, and Interests. You can also upload a Profile Picture.
Guide Profile: If you register as a Guide, we additionally collect your Phone Number, WhatsApp Number, and Regions Served.
Travel Listings: When you post a "Travel Buddy" request or a specific trip plan, we collect details like dates, destinations, budget, and travel style. Note: If you mark a listing as "Public", this information is visible to other users.
Messages: We store the content of private messages sent between users (Travelers and Guides) to facilitate communication securely within the Platform.

B. Automatically Collected Information

Technical Data: IP address, browser type, device information (via our server provider Hostinger, which hosts the website, and our auth provider Supabase) for security and debugging.
Usage Data: Which pages you visit and how you interact with the site.

3. How We Use Your Information

We use your data solely to:

Create and Manage Accounts: verifying your identity.
Connect Users: Displaying your profile to other users (based on your privacy settings) so you can find travel buddies or guides.
Facilitate Communication: Allowing users to message each other.
Platform Safety: Monitoring for spam, harassment, or violations of our Terms.

4. How Information is Shared

Public Profiles: Your name, bio, and profile picture may be visible to other registered users. You can control visibility settings (e.g., hiding your location) in your profile settings.
Public Listings: Any Travel Listings you create and mark as "Public" are visible to the community.
Service Providers: We use trusted third-party services to run the platform:
- Supabase: For database hosting and authentication.
- Hostinger: The website runs on a virtual server (VPS) rented from Hostinger that we manage ourselves.
- TypeSafe (typesafe.ai): Reads the questions you ask the travel assistant so it can find the matching passage on our site (see section 7).

5. Your Privacy Controls

We provide you with control over your data:

Profile Visibility: You can choose whether to show your detailed location (City/Country) on your profile.
Message Settings: You can control who is allowed to send you messages.
Data Deletion: You can request the deletion of your account and all associated data by contacting us.

6. Data Storage & Security

Your data is stored securely in Europe (via Supabase's EU region, if applicable, or their standard secure infrastructure). We implement standard security measures (HTTPS, secure authentication) to protect your data.

7. The Travel Assistant ("Ask Visit Iraq")

The assistant answers your questions by showing passages from our own pages. Using it is optional. Before your first question is sent, you are asked to accept this policy.

What we save

Your question exactly as you typed it.
What you were shown: which of our pages and passages appeared in the answer, and whether you opened one.
Details about the answer: its language, the page you asked from, how long it took and how it was found.
An automatic spam check: a score from the AI model estimating whether the question is spam or abusive. It is kept as a statistic, even after your question text is deleted.
A random chat ID created in your browser. It is not linked to your name, an account, your device or your IP address.

What we don't save

We do not store your IP address, your name, an account, tracking cookies or any device information. To prevent spam, your IP address is used briefly in the server's memory to limit how many questions can be sent (for example 10 per minute and 100 per day). It is never written to the database.

Why we save it

Only to improve the guide: to find questions our search missed and topics we haven't written about yet. We don't use your chats for advertising, we don't build profiles, and we never sell or pass them on.

Anonymous usage counts

We count how the assistant is used with Umami, a privacy-friendly analytics tool that we host ourselves on our own server. It sets no cookies and doesn't identify you. We only count fixed labels, such as "the guide was opened", "a question was sent", "the privacy note was accepted or declined", "an answer was found" or "a source was opened". The text of your questions is never sent to Umami.

Legal basis

Your consent (Art. 6(1)(a) GDPR), which you give before your first question. You can withdraw it at any time by requesting the deletion of your chats (see below).

Who processes your question

To understand your question, its text is sent to TypeSafe (typesafe.ai), which provides the AI model behind the assistant. According to TypeSafe, requests are not used to train their models. Your chats are stored in our Supabase database.

Your chat history

Your chat history is stored only in your own browser (localStorage). If you clear your browser data, it is gone, and we cannot restore it.

Deleting your chats

In the assistant menu, choose "Request deletion from our server", or "Request deletion of all my chats" in the history. We review every request by hand and permanently delete your question texts within 30 days.
We keep anonymous statistics without any text, for example that a question was asked on a certain day and whether it was answered.
If you already cleared your browser, email us at info@visit-iraq.com with your chat ID (menu → "Copy chat ID") and we will delete it within 30 days.

How long we keep it

Question texts are deleted automatically after 6 months. A clean-up runs every week.

Please don't enter personal details such as names, phone numbers or passport numbers into the assistant.

8. Your Rights (GDPR)

Since we operate from Austria, you have full rights under the GDPR:

Access: Request a copy of your data.
Rectification: Correct wrong information.
Erasure: Request "to be forgotten" (account deletion).
Object: Object to processing of your data.
Withdraw consent: Withdraw your consent for the travel assistant at any time by requesting the deletion of your chats.

9. Contact

For privacy concerns or to exercise your rights: Email: info@visit-iraq.com Operator: Mohammed Reschreiter, Austria

Privacy Policy

Last updated: September 26, 2026

1. Introduction

Visit Iraq is a free, personal project run by one person from Austria. There is no company behind it, no advertising and no paid plan, and we never sell your data.

2. Information We Collect

When you use our Platform, we collect specific types of information to provide our services (connecting travelers and guides).

A. Information You Provide

Account Information: When you register, we collect your Name, Email Address, and Password (encrypted).
Visitor Profile: If you create a traveler profile, we may collect your Bio, Age Range, City, Country, Languages spoken, and Interests. You can also upload a Profile Picture.
Guide Profile: If you register as a Guide, we additionally collect your Phone Number, WhatsApp Number, and Regions Served.
Travel Listings: When you post a "Travel Buddy" request or a specific trip plan, we collect details like dates, destinations, budget, and travel style. Note: If you mark a listing as "Public", this information is visible to other users.
Messages: We store the content of private messages sent between users (Travelers and Guides) to facilitate communication securely within the Platform.

B. Automatically Collected Information

Technical Data: IP address, browser type, device information (via our server provider Hostinger, which hosts the website, and our auth provider Supabase) for security and debugging.
Usage Data: Which pages you visit and how you interact with the site.

3. How We Use Your Information

We use your data solely to:

Create and Manage Accounts: verifying your identity.
Connect Users: Displaying your profile to other users (based on your privacy settings) so you can find travel buddies or guides.
Facilitate Communication: Allowing users to message each other.
Platform Safety: Monitoring for spam, harassment, or violations of our Terms.

4. How Information is Shared

Public Profiles: Your name, bio, and profile picture may be visible to other registered users. You can control visibility settings (e.g., hiding your location) in your profile settings.
Public Listings: Any Travel Listings you create and mark as "Public" are visible to the community.
Service Providers: We use trusted third-party services to run the platform:
- Supabase: For database hosting and authentication.
- Hostinger: The website runs on a virtual server (VPS) rented from Hostinger that we manage ourselves.
- TypeSafe (typesafe.ai): Reads the questions you ask the travel assistant so it can find the matching passage on our site (see section 7).

5. Your Privacy Controls

We provide you with control over your data:

Profile Visibility: You can choose whether to show your detailed location (City/Country) on your profile.
Message Settings: You can control who is allowed to send you messages.
Data Deletion: You can request the deletion of your account and all associated data by contacting us.

6. Data Storage & Security

7. The Travel Assistant ("Ask Visit Iraq")

The assistant answers your questions by showing passages from our own pages. Using it is optional. Before your first question is sent, you are asked to accept this policy.

What we save

Your question exactly as you typed it.
What you were shown: which of our pages and passages appeared in the answer, and whether you opened one.
Details about the answer: its language, the page you asked from, how long it took and how it was found.
An automatic spam check: a score from the AI model estimating whether the question is spam or abusive. It is kept as a statistic, even after your question text is deleted.
A random chat ID created in your browser. It is not linked to your name, an account, your device or your IP address.

What we don't save

Why we save it

Anonymous usage counts

Legal basis

Your consent (Art. 6(1)(a) GDPR), which you give before your first question. You can withdraw it at any time by requesting the deletion of your chats (see below).

Who processes your question

Your chat history

Your chat history is stored only in your own browser (localStorage). If you clear your browser data, it is gone, and we cannot restore it.

Deleting your chats

In the assistant menu, choose "Request deletion from our server", or "Request deletion of all my chats" in the history. We review every request by hand and permanently delete your question texts within 30 days.
We keep anonymous statistics without any text, for example that a question was asked on a certain day and whether it was answered.
If you already cleared your browser, email us at info@visit-iraq.com with your chat ID (menu → "Copy chat ID") and we will delete it within 30 days.

How long we keep it

Question texts are deleted automatically after 6 months. A clean-up runs every week.

Please don't enter personal details such as names, phone numbers or passport numbers into the assistant.

8. Your Rights (GDPR)

Since we operate from Austria, you have full rights under the GDPR:

Access: Request a copy of your data.
Rectification: Correct wrong information.
Erasure: Request "to be forgotten" (account deletion).
Object: Object to processing of your data.
Withdraw consent: Withdraw your consent for the travel assistant at any time by requesting the deletion of your chats.

9. Contact

For privacy concerns or to exercise your rights: Email: info@visit-iraq.com Operator: Mohammed Reschreiter, Austria