Privacy Policy
Effective date: September 30, 2026
1. Who we are
Thailand Fun Experiences is operated by Daniel Fuchs. We provide activity recommendations for travelers in Phuket, Thailand, available as a ChatGPT app and at thailandfunexperiences.com.
Contact: support@thailandfunexperiences.com
2. Using the app in ChatGPT
When ChatGPT calls our tools on your behalf, we receive only the parameters listed below — not your conversation, name, or OpenAI account.
What we receive and how we use it
| Field | Purpose | Stored? | Retention |
|---|---|---|---|
| destination | Route to the right catalog | Zone name in anonymous log | 12 months |
| date | Weather and season lookup | In anonymous log | 12 months |
| staying (zone) | Transfer time calculation | Zone name in anonymous log | 12 months |
| party roles and ages | Age-floor and booking checks | Party size only (not individual ages or roles) | 12 months |
| non_swimmer, pregnant, mobility, motion_comfort | Exclude unsuitable activities | Not stored. Only a yes/no flag that any safety filter was applied. | — |
| energy, time slot, budget, duration, return_by | Ranking preferences | Not stored | — |
| exclude, seen | Fresh results on follow-up | Not stored | — |
| experience_id (detail lookup) | Return details for one activity | In anonymous log | 12 months |
What our responses contain
Responses contain only activity information: names, categories, durations, prices, fit assessments, reason codes, weather and sea conditions, and booking links. Responses contain no personal data, no session identifiers, and no echo of your input parameters.
3. Booking links
Each activity result includes a booking link. When you click it:
- Your browser is redirected through our server to the Viator booking page.
- We record that a click occurred (which activity, not who clicked) using an anonymous random reference.
- A random reference is passed to Viator for affiliate attribution. Viator cannot link this reference to your identity through us.
- The booking itself is completed on Viator's platform under Viator's privacy policy.
- We earn a commission on completed bookings. Viator's commission report contains only the random reference, product code, date, and commission amount — no buyer identity.
4. Website accounts
If you create an account on our website (optional — the ChatGPT app works without one):
Google sign-in
We use Google OAuth for authentication. We receive and store your email address, display name, and Google account ID. We do not store your Google profile picture or access any other Google data.
Profile
You may optionally save travel preferences: party members (roles and ages), staying zone, trip dates, interests, and budget. We never store pregnancy status, mobility level, motion comfort preferences, or any health information in your profile.
Cookies
We set one httpOnly session cookie to keep you logged in. It contains an opaque account identifier and expires after 30 days. We set no tracking cookies, advertising cookies, or third-party cookies.
Pre-login activity
If you searched before signing in, those anonymous searches are linked to your account at sign-in so your results history is complete. The underlying data remains the same — destination, zone, date, and party size.
5. Who receives data
Services that receive personal data
| Recipient | Data | Purpose |
|---|---|---|
| Hetzner Online (Falkenstein, Germany) | All stored data (hosted on their servers) | Server hosting |
| Google (via OAuth) | Email, name, account ID | Website authentication only |
| Viator / Tripadvisor | Random reference on booking click | Affiliate attribution |
Services that receive no personal data
These services receive only geographic coordinates, product codes, or catalog content — never anything linked to you:
- Open-Meteo (weather and sea forecasts) — zone coordinates only
- OpenRouteService / HeiGIT (travel time matrix) — fixed zone center coordinates only
- Anthropic (activity enrichment) — product descriptions only, processed in batch, no user data
We do not sell, rent, or share personal data with any party not listed above.
6. How long we keep data
| Data | Retention |
|---|---|
| Anonymous event logs (searches, clicks) | 12 months, then replaced with aggregate counts only |
| Server access logs (IP addresses, URLs) | 14 days |
| Website accounts | Until you delete your account, or automatically after 24 months of inactivity |
| Booking click references | 12 months |
7. Your controls
ChatGPT app
- All constraint fields (non-swimmer, pregnant, mobility, motion comfort) are optional. Omit them and you still get results — just without safety filtering.
- You can disconnect the app from ChatGPT at any time in your ChatGPT settings.
- Requests are anonymous — there is no account to delete on our side.
Website
- View and edit your profile at any time when logged in.
- Delete your account in-app (Settings → Delete account). This deletes your profile and unlinks all associated activity from your identity.
- Request data export or deletion by emailing support@thailandfunexperiences.com. We respond within 30 days.
8. Children
This service is not directed at children under 13. When a parent or guardian enters children's ages as part of a travel party, those ages are used only to check activity suitability and booking requirements for that request. Individual ages are not stored in event logs.
9. Security and processing
Data is encrypted in transit (TLS). The server is hosted at Hetzner Online's Falkenstein data center in Germany. Access is restricted to the operator.
10. Changes to this policy
If we make material changes, we will update the effective date above. For website account holders, we will notify by email before changes take effect.