Privacy
Privacy
Last updated November 1, 2026.
Who we are
BanVoyage is a family travel blog run by Brooke and Laurence Banville in Delaware County, Pennsylvania, USA. We are the controllers of personal information collected on banvoyage.com. Email hello@banvoyage.com.
What we collect
- Google Analytics 4 (measurement ID G-VTL1F656LZ), loaded through Google Tag Manager (container GTM-KVR2RPBJ). It records pages you view, how you found us, an approximate location, and the device and browser. Google Analytics 4 does not log or store IP addresses. If you reject analytics, it does not set a cookie. Google’s consent mode can still send a cookieless, aggregated ping so traffic can be estimated. That ping is not used to build an advertising profile.
- PostHog, loaded from our own domain at
/ingestand then processed by PostHog in the United States. We use it for the same kind of counts, plus session recording. Recordings mask anything typed into a form, and the newsletter form is left out of recordings. In the EEA, the UK, and Switzerland, PostHog keeps data in memory only, sets no cookie, and does not record a session unless you accept analytics. - Affiliate and marketing cookies. We are joining affiliate programs. A script from Travelpayouts can load through Google Tag Manager, and only when marketing cookies are allowed. If you follow an affiliate link, the network or the merchant may set its own cookie to credit a booking, a purchase, or an approved card application. The programs are Travelpayouts, Amazon Associates, CJ Affiliate, Impact.com, FlexOffers (Turo), Bankrate, CreditCards.com, CardRatings.
- Newsletter. If you sign up, we collect your first name and email address to send the newsletter. You can unsubscribe from any email.
- Hosting logs. Our host, Vercel, processes technical logs so the site can load and so abuse can be spotted. A log line can include the IP address, the browser type, the URL requested, and the time. We do not use those logs for marketing, and we do not keep a separate copy of them.
We do not sell personal information for money. Some marketing cookies can count as “sharing” under California law. That choice is covered below.
Cookies
Necessary cookies remember your choice and the country used to pick the default. Analytics and marketing cookies are optional. Where the ePrivacy rules apply (the EEA, the UK, and Switzerland), those optional cookies stay off until you accept. Elsewhere they are on until you reject them. Details and the provider list are also on the cookie policy.
| Name | Provider | Purpose | Category | How long |
|---|---|---|---|---|
| bv_consent | BanVoyage | Stores your analytics and marketing choice | Necessary | 12 months |
| bv_cc | BanVoyage | Holds the country code from our host so the right consent default applies | Necessary | 24 hours |
| bv_notice | BanVoyage | Remembers that you closed the cookie notice where a choice is not required | Necessary | 12 months |
| _ga | Google Analytics 4 | Tells browsers apart so we can count readers | Analytics | 2 years |
| _ga_VTL1F656LZ | Google Analytics 4 | Keeps track of a visit | Analytics | 2 years |
| ph_*_posthog | PostHog | Tells browsers apart and supports session recording when analytics is allowed | Analytics | 1 year |
| Travelpayouts cookies | Travelpayouts | Measures which affiliate link was used. The script loads through Google Tag Manager only when marketing cookies are allowed | Marketing | Set by Travelpayouts while marketing is allowed |
| Amazon cookies | Amazon Associates | Credits a qualifying purchase after you click a product link. Set on Amazon, not by us on first load | Marketing | About 24 hours |
| CJ cookies | CJ Affiliate | Credits a commission after you click a CJ link. Set by CJ after the click | Marketing | Varies by advertiser |
| Impact cookies | Impact.com | Credits a commission after you click an Impact link. Set by Impact after the click | Marketing | Varies by advertiser |
| FlexOffers cookies | FlexOffers (Turo) | Credits a Turo booking after you click. Set by FlexOffers after the click | Marketing | Varies by offer |
| Card-offer cookies | Bankrate, CreditCards.com, CardRatings | Credits a card application after you click an offer. Set by the card site or its network after the click | Marketing | Varies by issuer and network |
Legal bases, where the GDPR or UK GDPR applies
- Consent (Article 6(1)(a), and the ePrivacy rules for cookies): analytics cookies, marketing and affiliate cookies, and the newsletter. You can refuse without losing access to the site, and you can withdraw consent at any time.
- Legitimate interests (Article 6(1)(f)): strictly necessary cookies, and Vercel’s short-lived hosting logs used to run and secure the site. Those interests are keeping the site working and safe. They are not used to advertise to you.
Outside the EEA, the UK, and Switzerland, analytics and marketing cookies run until you reject them. That is an opt-out, not consent.
How long we keep it
- Your cookie choice: 12 months, or until you change it or clear cookies.
- The country cookie used for the consent default: 24 hours, refreshed on the next visit.
- Google Analytics: no longer than 14 months.
- PostHog events: no longer than 12 months. Session recordings: no longer than 90 days.
- Newsletter details: until you unsubscribe.
- Vercel hosting logs: for a short operational period set by Vercel. We do not keep our own copy.
Your rights in the EEA, the UK, and Switzerland
You can ask us to:
- Access the personal information we hold about you.
- Delete it.
- Correct it if it is wrong.
- Object to processing based on legitimate interests.
- Restrict how we use it in the cases the law allows.
- Withdraw consent at any time. Use or email us. Withdrawing consent does not affect processing that already happened.
Email hello@banvoyage.com. We will reply within 30 days. You can also complain to your local data protection authority. In the UK, that is the Information Commissioner’s Office.
California: Do Not Sell or Share My Personal Information
We do not sell personal information for money. If you allow marketing cookies, affiliate networks may receive an identifier and the fact that you clicked a link. Under the California Consumer Privacy Act, as amended by the CPRA, that can be “sharing” for cross-context advertising.
You can opt out by choosing Reject all, or by turning Marketing off, in . We store that choice in a first-party cookie for 12 months. We will not discriminate against you for opting out.
If your browser sends the Global Privacy Control signal, we treat it as an opt-out of sale or sharing, and marketing cookies stay off unless you later choose Accept all or turn Marketing on.
California residents can also ask to know, delete, or correct personal information. We do not knowingly sell or share the personal information of anyone under 16. Email hello@banvoyage.com. You may use an authorized agent if you provide proof that they represent you.
Children
BanVoyage is written for adults who are planning trips. We do not knowingly collect personal information from children under 16, or under 13 where that is the legal age. The newsletter is for adults. If you believe a child has given us personal information, email hello@banvoyage.com and we will delete it.
YouTube
Some pages can play a video from our YouTube channel. Nothing from YouTube loads until you press play. Playback then comes from YouTube’s privacy-enhanced mode (youtube-nocookie.com). After that, YouTube’s own privacy policy applies, and YouTube may set cookies.
Where data is processed
Google, PostHog, Vercel, and the affiliate networks may process data in the United States and in other countries where they operate. For transfers from Europe, those companies rely on the EU-US Data Privacy Framework, the UK extension where they are certified, and standard contractual clauses.
Affiliate links
Some links may earn us a commission at no extra cost to you. Our opinions are our own. Read the affiliate disclosure and the terms of use.