Privacy Policy

Last updated: October 20, 2026. BoardingNotes respects your privacy. This Privacy Policy explains how we collect, use, protect, and share information when you visit our website.

This Privacy Policy explains our data practices; visiting this website does not, by itself, constitute consent to optional cookies or other processing that requires your consent.

Who We Are

BoardingNotes is an independent travel website owned and operated by Aziz Köylü, an individual based in Simav, Kütahya, Türkiye. Aziz Köylü is the data controller responsible for the personal information processed in operating this website. BoardingNotes publishes travel guides, travel tips, destination content, hotel information, packing advice, travel resources, and affiliate-related recommendations.

You can contact us at:

hello@boardingnotes.com

Information We May Collect

We may collect information in the following ways:

Information you provide directly, such as your name, email address, or message when you contact us.

Technical information, such as your IP address, browser type, device type, pages visited, referring pages, and general usage data.

Cookie and analytics information, which helps us understand how visitors use the website and improve the user experience.

Affiliate tracking information, which may be used when you click affiliate links on our website.

How We Use Information

We may use collected information to:

Operate and maintain BoardingNotes
Respond to messages and inquiries
Improve website content and user experience
Understand how visitors use the website
Monitor website performance and security
Prevent spam, abuse, and unauthorized activity
Measure the performance of content and affiliate links
Comply with legal, technical, and security obligations

Cookies and Similar Technologies

BoardingNotes may use cookies and similar technologies to improve website functionality, understand visitor behavior, remember preferences, measure traffic, and support affiliate tracking.

Cookies are small files stored on your device by your browser.

Some cookies are necessary for the website to function properly. Others may help us analyze traffic, improve content, or understand how visitors interact with the site.

You can accept or reject optional cookies in our consent banner, or reopen Cookie Settings to change your choice. Essential cookies remember your consent choices and support site functions. See our Cookie Policy for cookie names, purposes, durations and consent controls. You can also delete stored cookies through your browser settings.

Analytics

We use Google Analytics to understand how visitors use BoardingNotes, but only after you allow Analytics cookies. You can decline optional cookies and continue browsing the website.

Analytics tools may collect information such as pages visited, time spent on pages, device type, browser type, general location, and referral sources.

This information helps us improve our content, website structure, and user experience.

Cloudflare Web Analytics

We use Cloudflare Web Analytics (RUM) to measure page views and loading performance. Cloudflare states that this service does not read or write cookies or browser storage. It receives the source IP address to handle requests, then discards it without storing it in RUM databases or logs.

Our setting is “Enable, excluding visitor data in the EU.” Cloudflare applies the exclusion by the data center serving the connection. See Cloudflare’s RUM documentation for details. The Analytics cookie choice above applies to Google Analytics.

Affiliate Links

Some pages and articles on BoardingNotes may include affiliate links.

If you click an affiliate link and make a booking, purchase, sign-up, or other qualifying action, we may earn a commission at no additional cost to you.

Affiliate tracking may involve cookies or similar technologies used by third-party affiliate networks or partner websites.

For more information, please read our Affiliate Disclosure.

Mini Kit PDFs and Optional Email

Your Mini Kit checklist and PDF are free, with no email required, including on your first visit. PDFs open or download directly in your browser. PDF requests do not collect or save an email address. Travel emails are available through a separate, optional newsletter form.

Travel emails are a separate, optional choice. If you enter your email, select the unchecked travel-tips checkbox and submit the newsletter form, we keep your email address, the wording, version and date of your request and, when completed, its confirmation time. Leaving that form blank or unchecked does not affect your PDF. Downloading a PDF never subscribes you. Your packing choices and checked items are not stored with your email address. Saved checklist progress stays in your browser.

PDF access no longer uses or requires a remembered-email cookie. Legacy cookies may remain until their original expiry but are not read or renewed for PDF access. A security cookie lasts up to 2 hours. Optional saved progress remains until you use “Delete saved progress,” clear the tool’s browser storage, or your browser removes it. See the Mini Kit browser-storage section of our Cookie Policy for names, purposes and controls.

We use Resend to deliver a confirmation email when you explicitly request travel emails. Confirmation links expire after 48 hours; opening a link alone does not confirm the request. You must select the confirmation button. An unconfirmed request is not a subscription. After you confirm, we add your address to our travel-email list in Resend and send one welcome email. Confirmed subscribers may also receive occasional travel tips and guides. We record delivery events, subscription status and opt-out requests to prevent unwanted messages.

You can unsubscribe through an email’s preference link or contact hello@boardingnotes.com. Unsubscribing does not affect PDF access. A later PDF download does not restore a withdrawn request. See the Mini Kit PDF and email privacy explanation (also available at the previous Mini Kit address) for details.

Optional Mini Kit analytics

The Travel Ready Mini Kit runs on a separate domain and asks for its own analytics choice. Allowing analytics on the main website does not give permission on the Mini Kit. Your PDF access and optional travel-email choice work independently of analytics.

If you allow analytics, we use Google Analytics to understand visits and button use. Our Mini Kit events do not include your email address, packing choices, checked items or email confirmation links. Google also processes technical browser, device and connection information as described in Google’s Privacy Policy. The Mini Kit does not load Google Analytics on its email confirmation or email preferences pages.

When you allow analytics on both sites, a short-lived Google link parameter may connect a visit from the main website to the Mini Kit. The five Mini Kit Pinterest campaign codes may identify which Pin brought an allowed visit. This does not automatically attribute a later email confirmation to that visit.

Separately, the Mini Kit records daily totals of successfully prepared PDF responses, distinguishing download/open and anonymous access. Historical totals may also distinguish new/remembered access and documented test traffic. Anonymous responses are unclassified because email is no longer collected to separate known tests from visitors. These totals contain no email address, IP address, browser token or packing choices. They do not prove that a file was saved or read.

Mini Kit and Newsletter Record Retention

Historical PDF requests: Earlier versions collected email addresses and request dates for PDF access. New PDF requests no longer collect these details or update historical records. The earlier 30-day browser-cookie lifetime was not a record-deletion deadline. Historical records remain subject to manual review for support, security and applicable record-keeping needs, including whether a related support request or security issue remains unresolved. PDF-only addresses are not added to the newsletter list.

Unconfirmed email requests: A confirmation link stops working after 48 hours. The request, consent wording and delivery status remain in our records; expiry does not delete them or make you a subscriber. Retention decisions depend on any pending confirmation, delivery problem, abuse report or dispute about the request.

Confirmed subscribers: We keep your address and subscription status while you remain subscribed. Unsubscribing stops future marketing messages but does not automatically erase any historical PDF record, consent history, delivery history or the record that prevents a second welcome email.

Consent, opt-out and delivery records: These records help us demonstrate your choices, investigate delivery problems, prevent duplicate messages and avoid adding an opted-out address again. We assess continued retention against those purposes and any applicable legal obligation or unresolved dispute. An opt-out record may need to remain for as long as it is needed to prevent unwanted email.

Manual deletion: The application currently has no scheduled deletion of email, consent, subscription or delivery records. They remain until manually reviewed and deleted. To request access, correction or deletion, email hello@boardingnotes.com. We will assess the request, explain any records that still need to be retained and coordinate deletion with our service providers where needed. Clearing browser storage or unsubscribing is not the same as requesting deletion of server records.

Email and Mini Kit Service Providers

The Mini Kit and standalone newsletter form use OpenAI’s ChatGPT Sites and Cloudflare infrastructure to host contact and consent records. OpenAI processes published Site visitor data on our behalf under the ChatGPT Sites Data Processing Addendum. Resend processes recipient addresses, message content and delivery information under its Data Processing Addendum.

Resend states that stored customer data is held in the United States; choosing a European sending region does not change that storage location. Its DPA describes Standard Contractual Clauses and other arrangements for relevant international transfers. The Sites DPA separately describes safeguards for relevant EEA, Swiss and UK data. These provider arrangements do not replace any other transfer requirements that apply to us. You may contact hello@boardingnotes.com for information about the arrangements relevant to your data.

Resend’s published retention information describes 30-day email and log retention on its Free, Pro and Scale plans, with separate rules for backups and account closure. That period does not automatically delete the subscriber list or the Mini Kit’s own database records. We do not represent a cookie lifetime or an email-log period as a universal deletion deadline.

Contact Forms and Email

If you contact us by email or through a contact form, we may collect your name, email address, and the content of your message.

We use this information only to respond to your inquiry, manage communication, and keep appropriate records.

We do not sell your contact information.

Comments

If comments are enabled on BoardingNotes, we may collect the information shown in the comment form, along with the visitor’s IP address and browser user agent string to help detect spam.

Comments may be reviewed before publication.

Security

We take reasonable steps to protect BoardingNotes and visitor information from unauthorized access, misuse, loss, or alteration.

We may use security tools, firewalls, spam protection, and monitoring services to help protect the website.

However, no website or online transmission is completely secure, and we cannot guarantee absolute security.

Third-Party Services

BoardingNotes may use third-party services to operate, secure, analyze, and improve the website.

Our current services include Hostinger for website hosting and outgoing website email, UpdraftPlus for website backups with remote copies stored in Google Drive, Cloudflare for content delivery, protection against abusive traffic, and cookie-free website performance measurement, Wordfence for website security, Complianz for cookie consent management and cookie information, and Google Analytics for visitor statistics after you allow Analytics cookies. Contact forms are provided through WPForms. The information involved depends on the service: for example, email correspondence, security-related technical data, consent preferences, or analytics identifiers and website usage data.

Third-party services may collect or process information according to their own privacy policies.

External Links

BoardingNotes may link to external websites, including travel platforms, booking services, affiliate partners, tools, and other third-party resources.

We are not responsible for the privacy practices, content, policies, or security of external websites.

Please review the privacy policies of any third-party websites you visit.

How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. For inquiries and email correspondence, the relevant criteria include the time needed to respond, resolve follow-up questions or disputes, and meet any applicable legal recordkeeping requirements.

Security traffic records: Wordfence Live Traffic is configured to record security-related traffic, with a maximum record age of 30 days and a limit of 2,000 records. This setting applies to Live Traffic records; it is not a blanket deletion period for all security records, hosting logs, email or backups.

Cookies and analytics: Cookie lifetimes are listed in our Cookie Policy. A cookie lifetime is different from the retention period for data held by Google Analytics. Our Google Analytics property is configured to retain event-level data for 2 months and user-level data for 14 months. Reset on new user activity is enabled, so a new event from a user restarts the retention period for that user’s identifier. Data that reaches the end of the applicable retention period is deleted through Google’s monthly deletion process. Standard aggregated reports are not governed by that same setting.

This may include responding to inquiries, maintaining records, improving the website, preventing abuse, complying with legal obligations, and protecting our rights.

Your Rights

Depending on your location, you may have rights regarding your personal information.

These rights may include the right to access, correct, delete, restrict, or object to the use of your personal data.

You may also have the right to withdraw consent where consent is the legal basis for processing.

To make a privacy-related request, please contact us at:

hello@boardingnotes.com

Children’s Privacy

BoardingNotes is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13.

If you believe that a child has provided personal information to us, please contact us so we can take appropriate action.

International Visitors

BoardingNotes may be accessed by visitors from different countries.

We operate this website from Türkiye. Services used for hosting, email, security and optional analytics may process personal information outside Türkiye or outside your country of residence, depending on the provider and its infrastructure. Privacy laws in those countries may differ from the laws where you live.

Simply visiting this website does not constitute consent to an international transfer. Your cookie choices control Google Analytics, but do not replace any separate legal requirements that apply to international transfers. For information about the providers involved in processing your data and the transfer arrangements applicable to your request, contact hello@boardingnotes.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

We will post changes on this page and update the date above. Updating this notice does not replace consent where it is required; we will request a new choice when necessary.

Contact

If you have any questions about this Privacy Policy or how we handle personal information, you can contact us at:

hello@boardingnotes.com