Prague Daybook
Privacy, in plain language
Last reviewed: 4 October 2026
This notice describes personal data and device storage used by Prague Daybook, an editorial discovery website linking to experience providers. There is currently no account, checkout, payment processing or newsletter on this website.
Operator and contact
Google Analytics is configured; it loads only after analytics consent.
Who is responsible
The operator identified below is the data controller. Use the contact email for privacy requests. The Prague Daybook brand and its district location alone do not identify the legal controller.
Operating the website and responding to you
Hosting may process IP addresses, timestamps, requested pages and device/browser information to deliver and secure the service. The intended basis is legitimate interests in reliable operation and abuse prevention (Article 6(1)(f) GDPR). If you email us, we process your address and message to respond, under legitimate interests or Article 6(1)(b) for a request preceding a contract, as applicable. Do not send unnecessary sensitive information. Log access, recipients and retention must be confirmed with the actual host before launch. When you use the contact form, your name, email address and message are sent through Resend to info@prague-daybook.cz so we can respond. Form content is not sent to analytics.
Local storage you request
prague-daybook:saved:v1 stores the identifiers of experiences you choose to save, on this device until you remove them or clear browser data. prague-daybook:consent:v1 stores your analytics choice, policy version and date for up to 180 days. These functional entries are not used for advertising or shared as a visitor profile. Clearing site data removes them; blocking storage keeps choices only in memory for the current page session.
Optional Google Analytics
If configured, Google Analytics 4 runs only after you choose “Allow analytics”. The purpose is audience measurement, based on consent (Article 6(1)(a) GDPR and applicable device-storage rules). Page paths, interaction events, device and browser information and cookie identifiers may be processed; no search query, email address or form content is deliberately sent. Google receives network information when the service loads. Advertising storage, advertising user data, personalisation and Google signals are disabled in this integration.
Analytics cookies and withdrawal
Only after consent, _ga and _ga_* identify visits for analytics, with a configured lifetime of up to 180 days without automatic renewal. Set GA4 event-data retention to 2 months in the property before enabling it; aggregate reports may have different retention. “Cookie settings” lets you reject or change your choice; “Withdraw analytics consent” stops collection and removes accessible analytics cookies. Withdrawal does not affect the lawfulness of earlier processing. Rejection leaves browsing and saved experiences available.
Recipients and international processing
The hosting provider and email provider may process data to operate the service and answer messages; their identities, countries and contractual safeguards must be verified before launch. If enabled, Google Ireland Limited provides Analytics and Google group processing may involve the USA or other countries. Before activation, confirm the processing agreement, applicable transfer mechanism and safeguards, and describe them here. Provider privacy information is linked below. Partner and review websites apply their own notices after you follow their links; no review widget is loaded here.
Retention and your rights
Keep correspondence only while needed to answer and resolve the request; any longer retention must have a documented legal reason. The operator must set actual email and server-log retention before launch. You may request access, rectification, erasure, restriction and, where applicable, portability; you may object to legitimate-interest processing and withdraw consent. Requests are normally answered within one month, subject to GDPR exceptions. You may complain to the Czech supervisory authority, ÚOOÚ, or your competent authority. There is no automated decision-making producing legal or similarly significant effects.
Changes
We update this notice when functionality or providers change. A materially different analytics purpose requires a new consent version. The review date identifies this text, not confirmation that missing operator fields have been verified.