Privacy Policy
Last updated: 2 October 2026
The short version: Greece 365 sets no cookies of its own. Every booking link on the site is an already-tracked tpx.lu link, so following one tells the booking company and not us. The flight search on the homepage loads straight away from one advertising partner — Travelpayouts — and may set its own cookies; the cookie notice does not gate it. Accepting the notice lets Greece 365 use aggregate analytics. If you use the contact form, the message you write is stored so it can be read and answered.
Who runs this site
Greece 365 is run by the Greece 365 team as a personal project. It is not a company, travel agency or booking service, and it is not run on anyone's behalf. There is no organisation behind it. It is funded by a commission earned when a reader books through one of its links — no advertisements are sold, and no page is paid for.
Anything you send can be reached at greece365@proton.me. The Greece 365 team is the data controller for the information described on this page. If you want to know what is held about you, have it corrected, or have it deleted, write to that address or use the contact form — either reaches the same person.
What this site stores about your visit
Nothing personal. There is no login, no account, and no user profile for ordinary visitors.
When you open a page, the site increments a counter. That counter is a number and a date. It does not include your IP address, your browser, the page you came from, or anything else that identifies you.
Cookies
The site sets no cookies of its own. Verified: the server sends no Set-Cookie header. The one exception is the flight search widget described in section 3, which sets its own cookies and loads for everyone, whether or not you accept the notice.
Two small values are kept in your browser's local storage. These are not cookies, are never transmitted automatically, and stay on your device:
| Name | Purpose | Removed when |
|---|---|---|
greece365-consent | Remembers your choice on the cookie notice | You clear site data |
adminKey | Keeps the site owner signed in to the admin panel | You sign out, or clear site data |
See the Cookies page for the third-party services involved.
What you send us voluntarily
If you use the contact form, the name, email address and message you type are stored so the message can be read and answered. That information is used for no other purpose, is not sold, and is not passed to anyone else.
If you subscribe, your email address is stored so we can tell you about new guides. Nothing is currently sent automatically: there is no mailing system connected to this site. Nothing is sold or passed to anyone else, and every message you send us, and every subscription, can be deleted on request.
Third parties with access to your visit
These services receive a request when you open a page, and each one therefore sees your IP address at that moment. Travelpayouts is the one that also sets its own cookies: the flight search loads immediately, whatever you answer on the cookie notice.
| Service | What it does | When |
|---|---|---|
| Cloudflare | Hosting, security and aggregate page analytics. Bot-filtered; no cookies, no cross-site tracking. | Every request |
| Travelpayouts | Affiliate partner. Every booking link on this site — the homepage cards and the cards on the destination pages alike — is a pre-made tpx.lu link carrying this site's identifier, so Travelpayouts is told about the click only by the company you land on. On the homepage, the flight search is a Travelpayouts widget loaded from trpwdg.com, which sets its own cookies and can set cookies on the booking sites you are sent to. It loads immediately, without waiting for any answer on the cookie notice. | Booking links: only when you follow one, anywhere on the site. Flight search: on every homepage view, for every visitor. |
| YouTube | The music player is an embedded YouTube player. YouTube's own privacy policy applies and it does set its own cookies. | Player in view |
| OpenStreetMap | Serves map tiles and the attribution required by its licence. | Map in use |
| Unsplash | Serves some destination photographs, under the Unsplash License. | Images in view |
| Wikimedia Commons | Serves the majority of destination photographs, each file under its own licence. | Images in view |
| Open-Meteo | Supplies the current temperature, humidity and wind shown on each page. The request is made by this site’s own server, not by your browser. | Every page view |
Photographs are loaded directly from those two image hosts rather than stored on this site, so loading an image discloses your IP address to them as well. If that concerns you, a browser extension that blocks third-party requests will stop it.
The flight search also tries to contact a few services of its own — an airport-name suggestion service, an approximate-location look-up that pre-fills the departure field, and two error-reporting services — which are not Travelpayouts and are not listed above. The first two are allowed so the form works: the type-ahead completes as you type, and the look-up usually suggests Athens for readers in Greece; you can always type a different airport. The two error-reporting services are refused, in the Content Security Policy that every page is served with, so those companies are never contacted; the search form works exactly the same without them. Blocking them is why two harmless errors about a failed request appear in the browser console if you have the console open.
The current temperature, humidity and wind shown on the homepage and at the top of each destination page come from Open-Meteo. The difference from the flight search is deliberate: that code runs in your browser and would hand your IP address to three outside companies on every page view, which is why this site blocks it. The weather request instead runs on this site’s own server, so your address is never given to Open-Meteo — the only thing that leaves here is the latitude and longitude of the destination, which are printed on the page anyway. Nothing about you is sent, nothing is stored, and no cookie or consent prompt is involved. The reading is cached for fifteen minutes so that the service is not called once per visitor. If you would rather it were not fetched at all, blocking scripts in your browser stops it and every page reads exactly as before.
Our own click counter is not a third party and identifies nobody. When you follow a booking link, we record which destination page and which link was followed. If you have not accepted the cookie notice, we do not record it. The Cookie Policy lists every address these requests go to.
Legal basis
This site is read by people in the European Economic Area, so the GDPR applies. Aggregate counters are kept on the legitimate-interest basis for understanding whether the guides are useful. Anything you submit is kept on the basis of your consent, given by sending it. The Travelpayouts flight search is part of the page itself and loads without a consent step; the analytics the cookie notice governs run only if you accept, and never if your browser sends Global Privacy Control or Do Not Track.
Your rights
You may ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Because no profile is kept, there is normally nothing to disclose — but if you have contacted us, your message can be found and deleted on request. Use the contact form to make any such request.
Retention
Aggregate counters are kept indefinitely because they cannot identify anyone. Messages you send are kept until they are answered and then deleted, unless keeping them briefly helps resolve a follow-up question.
Changes
If this policy changes, the date at the top changes with it. This page is the current version.