Privacy notice

Aviso de privacidad. Last updated October 6, 2026.

What we collect

If you sign up for the rundown we keep your email address and, if you give it, your WhatsApp number. If you submit an event we keep what you typed into the form, including your email. We don’t use advertising cookies.

If you sign in with Google we keep your name, email address and profile picture, the trip you save (dates, where you’re staying, saved places) and whatever you post. Your email is never shown on the site. Two cookies keep you signed in: one we can read on our servers to check it’s you, and one the page reads to show your name and picture. Without signing in, your trip is kept only in this browser. “Forget this device”, in the trip panel behind the heart, clears all of it from this browser.

If you keep your trip with an email link instead, we keep your email address privately to sign you in (it’s never shown on the site or shared), your trip, and a first name if you give one. Each link works once, for 20 minutes, and no password is ever made. The email is sent by our mail service, Resend, and nothing else is sent to it.

How we count visits

To learn what’s useful we keep anonymous daily counts: how many visits came from around the bay, elsewhere in Mexico or abroad (worked out from your network address, which we don’t keep), your phone’s time zone and language, and things like how many people opened a guide or scanned a printed card. We count; we never record who did what, and none of it uses cookies. Our host’s analytics (Vercel) works the same way, without cookies.

We also count which site sent each visit (a search engine, a social app, a link from another site) and the page it landed on. Your browser remembers that on your device, without a cookie. If you make an account, that line goes with it, so we can see how people who post or claim a business found us; it’s the name of the site, never the address of the page you were on.

What you post

Reviews, photos and checks are public, under your first name and last initial. Before a photo leaves your device we resize it and drop its hidden details (location, camera and time), and our servers strip anything left. You can delete anything you posted from Your trip, and we remove posts that break the community guidelines.

What we use it for

To send the weekly email and any WhatsApp alerts you asked for, to contact you about an event you submitted, and to run your account and show what you post. We don’t sell or share your details with anyone, except the service providers that host this site and send our messages.

Your rights

You can ask to see, correct or delete your data, or withdraw consent, at any time (your ARCO rights under Mexico’s federal data protection law). Every email has an unsubscribe link, or write to hola@sayulita.co and we’ll act on it within 20 days.

Who is responsible

sayulita.co is responsible for your personal data. Questions go to hola@sayulita.co.