Privacy Policy
Last updated: November 9, 2026
This Privacy Policy explains what data the Prague Wonders website (the "Site") collects and why. It's operated by [Prague Wonders — legal entity name, TBD] ("we", "us"), registered in the Czech Republic under company registration number (IČO) [TBD], registered seat [registered seat address, TBD].
1. The short version
This Site collects very little: a language cookie and a day/night cookie (each only if you make that choice) and cookie-free, aggregated analytics that don't identify you. There are no forms and no accounts. If you email us, we use your message only to reply. Fonts are self-hosted, so nothing is sent to Google when you load a page. Tour listings and their photos come from Viator, and "Open in Maps" links open Google Maps. Section 4 explains what that does and doesn't share.
2. What we collect today
| What | Purpose | Legal basis |
|---|---|---|
locale cookie (1 year) | Set only when you pick a language. Remembers that choice (EN/CS/ES/RU) between visits. | Strictly necessary for the Site to function — no consent required. |
theme cookie (1 year) | Set only when you use the sun/moon switch. Remembers whether you prefer the day or night look. | Strictly necessary for the Site to function — no consent required. |
| Cloudflare Web Analytics | Aggregated page-view and performance metrics (page URL, referrer, approximate country-level location, device/browser type). If you arrived through a hotel's QR code, the page address (for example /h/hotel-name) shows which hotel the visit came from, in aggregate. It sets no cookies and doesn't build a profile of you or follow you across sites. | Legitimate interest in understanding aggregate Site usage. |
See our Cookie Policy for more detail on the cookies above.
3. If you email us
The Site has no forms. If you email us, we receive your email address and whatever you write, and use it only to reply to you (legal basis: our legitimate interest in answering your message). We keep the conversation only as long as we need it to deal with your request, and never sell it or use it for marketing. Our email provider processes these messages on our behalf.
4. Who we share data with
Cloudflare hosts this Site and provides the analytics above, acting as our data processor. We don't use advertising networks, social media pixels, or sell data to third parties. As a global infrastructure provider, Cloudflare may process data outside the country you're browsing from; see Cloudflare's own GDPR documentation for how they handle international transfers.
Tours on the Site are affiliate listings pulled from the Viator Partner API. We don't send Viator any personal data about you when we display a listing or when you click through — the link only carries a non-personal affiliate tracking ID that credits any resulting booking to us. Once you're on Viator's site, anything you do there (browsing, booking, paying) is governed entirely by Viator's own privacy policy, not ours.
Unlike the rest of the Site's photography (self-hosted, see our Terms), tour photos on the "Tours" page and in the homepage's tours section are loaded directly from Viator's own image servers, because they come live from the API rather than being ours to host. Loading them sends your browser's IP address to Viator's infrastructure the same way it would for any embedded third-party image — no cookie is set, but this is a data exposure worth knowing about.
"Open in Maps" links on attraction and event pages open Google Maps. Nothing is sent to Google when a page loads; only if you tap the link does Google receive the request, under Google's own privacy policy.
5. How long we keep data
The locale and theme cookies expire after one year or when you clear your browser data. Analytics data is aggregated by Cloudflare and isn't tied to an identifiable individual. Emails are kept only as long as needed to deal with your message (see Section 3).
6. Your rights
If you're in the EU/EEA, GDPR gives you the right to access, correct, delete, restrict, or export data we hold about you, and to object to our processing of it. Since this Site barely processes any personal data, most of these rights have little to act on, but you can always ask by emailing hello@praguewonders.cz. You can also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz) or your own country's supervisory authority.
7. Children
This Site isn't directed at children and we don't knowingly collect data from them.
8. Changes to this policy
We'll update this page whenever the Site's data practices change (for example if bookings or a newsletter are added) and change the "Last updated" date above.
9. Contact
Questions about this policy? Reach us at hello@praguewonders.cz.