My Iceland Vacation

Privacy Policy

Last updated: May 2, 2026

My Iceland Vacation (“we,” “us,” or “the site”) operates the website at myicelandvacation.com. This Privacy Policy explains what information we collect when you use the site, how we use it, who we share it with, and the choices you have. We aim to collect as little personal information as possible while still providing a useful travel planning experience.

1. Who we are

My Iceland Vacation is an independent travel guide and trip planning tool focused on Iceland. The site is operated by an individual publisher rather than a corporate entity. If you have questions about this policy or your data, you can reach us at [email protected].

2. Information we collect

We collect information in the following ways:

  • Information you provide. If you create an account, we receive your email address and (where applicable) a display name through Firebase Authentication. If you save trips or favorites, those records are associated with your account. If you upload photos, we store the image and any caption you provide.
  • Information collected automatically. When you browse the site, our servers and analytics tools log standard request information such as IP address, browser type, device type, referring page, pages visited, and timestamps. We also derive an approximate country from your IP for currency and language defaults.
  • Cookies and similar technologies. We and our third-party partners use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure traffic, and (where applicable) deliver advertising.

3. How we use information

We use the information we collect to:

  • Operate, maintain, and improve the site and its features.
  • Save your trips, favorites, and uploaded photos to your account.
  • Moderate user-submitted content such as photos.
  • Understand how visitors use the site through aggregate analytics.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our Terms of Service.
  • Display relevant advertising on certain pages.

4. Third-party services

We rely on a small number of trusted third-party services to run the site. These providers receive only the data they need to perform their function and are bound by their own privacy practices:

  • Google AdSense. If advertising is enabled on a page, Google and its partners may use cookies to serve ads based on a user’s prior visits to this and other websites. You can opt out of personalized advertising by visiting Google’s Ads Settings or aboutads.info.
  • Google Analytics. We use Google Analytics to measure aggregated traffic patterns. IP addresses are truncated where supported. You can opt out using Google’s browser add-on.
  • Firebase Authentication. We use Firebase (operated by Google) to manage user sign-in. Firebase processes your email and authentication tokens.
  • Map and tile providers. The interactive map loads tiles from third-party map providers, which receive your IP address as part of normal HTTP requests in order to deliver imagery.
  • Affiliate and booking partners. Some outbound links to hotels, tours, and car-rental providers (such as Booking.com, GetYourGuide, and Rentalcars.com) are affiliate links. If you click one and make a booking, we may earn a commission at no additional cost to you. These partners may set their own cookies once you leave our site, governed by their own privacy policies. Affiliate relationships never influence which destinations we include or how we describe them.
  • Hosting and infrastructure. The site is served through standard web hosting infrastructure that may log connection metadata for security and reliability.

5. Cookies and your choices

Most browsers let you refuse or delete cookies through your settings. Doing so may break features that depend on them, such as staying signed in. For advertising cookies specifically, you can adjust personalization through Google’s Ads Settings or use the opt-out tools at youronlinechoices.eu (EU) or aboutads.info/choices (US).

6. How we share information

We do not sell your personal information. We share data only in the following limited circumstances:

  • With service providers (listed above) who process data on our behalf.
  • If you make a trip publicly shareable, the trip contents become accessible via the share link.
  • If you submit a photo and it is approved, the photo is displayed publicly with attribution.
  • To comply with legal process, court orders, or lawful government requests.
  • To protect the rights, property, or safety of users or the public.
  • In connection with a merger, acquisition, or transfer of the site, where the new operator agrees to honor this policy.

7. Data retention

We retain account data for as long as your account is active. Trips and favorites are kept until you delete them or close your account. Approved user photos may remain published indefinitely; you can request removal at any time. Server and analytics logs are typically retained for a limited operational period and then aggregated or deleted.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict, or delete personal information we hold about you. Residents of the European Economic Area, the United Kingdom, and California have specific rights under the GDPR, UK GDPR, and CCPA respectively, including the right to lodge a complaint with a supervisory authority. To exercise any of these rights, email [email protected]. We will respond within a reasonable timeframe and may need to verify your identity before acting on the request.

9. International transfers

The services we use, including Google and Firebase, may process information in the United States and other countries. Where required by law, transfers from the EEA, UK, or Switzerland rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. Children’s privacy

The site is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

11. Security

We use reasonable technical and organizational measures to protect data, including TLS in transit and access controls on our systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be highlighted on the site. Your continued use of the site after a change becomes effective means you accept the updated policy.

13. Contact

Questions, requests, or complaints about this policy can be sent to [email protected].