Privacy Policy

1. Information we collect

• Account details — your name, email address and a securely hashed password when you register.
• Subscription and payment records — which Country, Region or World Passes you hold, their status and renewal dates. Card details are entered on and processed by Stripe; we never see or store your full card number.
• Your activity on the site — countries you add to your wishlist, and basic technical data such as IP address, browser type and pages visited, used for security, fraud and abuse prevention.
• Cookies and similar technologies — described in section 4.

2. How we use information

• To create and secure your account and keep you signed in.
• To process subscriptions, renewals, cancellations and billing through Stripe.
• To provide country content, maps and directions, and remember your wishlist.
• To show advertising (see section 5), and to measure and improve the site.
• To prevent fraud and abuse, enforce our Terms, and meet legal obligations.

Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (account and passes), legitimate interests (security, service improvement), consent (advertising cookies) and legal obligation (tax and accounting records).

3. Service providers we share data with

We do not sell your personal information. We share only what is needed with providers acting on our behalf:

• Stripe — payment processing, subscriptions, tax and invoices (Stripe Privacy Policy).
• Google — embedded Google Maps and directions, and Google AdSense advertising (Google Privacy Policy).
• AI provider — country names are sent to an AI model to draft local link suggestions. No personal information is included in these requests.
• Hosting providers — servers and databases that run the site.

We may also disclose information if required by law, or to protect our rights, users or the public.

4. Cookies

• Essential — a secure sign-in session cookie and your saved cookie choice. These are required for the site to work.
• Advertising (optional) — set by Google and its partners to serve, personalise and measure ads. We only allow personalised advertising cookies after you consent.
• Embedded content — Google Maps embeds may set cookies governed by Google's policies.

You can change your choice at any time: open cookie settings. You can also block or delete cookies in your browser settings.

5. Advertising and Google AdSense

We use Google AdSense to display ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

• You may opt out of personalised advertising by visiting Google Ads Settings.
• You can opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info (US) or www.youronlinechoices.eu (EU).
• Learn how Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.

If you decline advertising cookies, you may still see non-personalised ads based on the page you are viewing.

6. Affiliate links

Some outbound links may be affiliate links. If you buy through them we may earn a commission. Affiliate partners may use cookies to attribute purchases. See our Affiliate Disclosure.

7. Data retention

We keep account data while your account is active. Payment and tax records are kept as long as the law requires (typically up to 7 years). You can ask us to delete your account at any time; we will delete or anonymise your data unless we must keep it by law.

8. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA), you may have the right to:

• access, correct, or delete your personal information, and receive a copy of it;
• object to or restrict certain processing, and withdraw consent at any time;
• opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising — you can do this by rejecting advertising cookies in our cookie settings;
• complain to your local data protection authority.

To exercise these rights, email info@country.direct. We will respond within the time required by law and will not discriminate against you for using your rights.

9. International transfers

Our providers may process data in countries other than your own, including the United States. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Security

Passwords are hashed, connections are encrypted (HTTPS), and sign-in uses secure, HttpOnly cookies. No system is perfectly secure, but we work to protect your information.

11. Children

Atlas Pass is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. The "Last updated" date above shows the latest version; significant changes will be highlighted on the site.

13. Contact

Franklin Asare — Atlas Pass
Email: info@country.direct