Privacy policy

Who we are

TopInMorocco is a Morocco trip-planning website with travel guides, a trip planner and a directory of local businesses. You can reach us at the email address at the bottom of this page for any question about your data.

What we collect

Depending on how you use the site:

• Visit statistics: a random visitor ID stored in a first-party cookie (atg_vid, up to 400 days), the page you viewed, the page that referred you and your browser's user-agent text. None of it identifies you by name; it is used to count visitors.
• Account data, only if you create an account: your email address, a password (stored only in scrambled, hashed form), an optional display name and the travel preferences, saved places and trips you choose to keep.
• What you type to us: your search and trip-planner requests, and, if you use the contact or business forms, your name, email address and message.
• Technical data: your IP address and request details, which appear in our web server and Cloudflare security logs. We do not store your IP address in the site's own visit statistics.

Cookies and similar storage

We use the following. The analytics cookie and Google's advertising cookies are only set after you accept them in the cookie banner; you can change your choice at any time with the “Cookie settings” link in the footer.

• atg_vid (cookie, first-party): anonymous visitor counting, up to 400 days.
• NEXT_LOCALE (cookie, first-party): remembers whether you read the site in English or French.
• atg-theme (browser storage): remembers light or dark mode.
• A secure sign-in cookie, set by our API only when you sign in, so you stay signed in.
• Cloudflare security cookies (for example __cf_bm): bot protection and traffic management.
• Google AdSense cookies: used to show and measure ads (see Advertising below).

Advertising (Google AdSense)

We show ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.

You can opt out of personalised advertising at https://adssettings.google.com, and learn more about how Google uses data from sites that use its services at https://policies.google.com/technologies/partner-sites. You can also opt out of some third-party vendors' use of cookies for personalised advertising at https://www.aboutads.info. You can change your consent choice at any time with the “Cookie settings” link in the footer.

Why we use your data

We use data to run the site and trip planner, create and secure accounts, understand how many people visit and which guides help them, answer your messages, show ads that fund the site, and prevent abuse.

• Your consent: the analytics cookie and advertising cookies, only after you accept them.
• A contract with you: running your account and saved trips.
• Our legitimate interests: security, fraud and abuse prevention, and basic traffic statistics.

Who we share it with

We do not sell your personal data. We use service providers who process it for us: our hosting provider (OVH, in France), Cloudflare (network security and delivery), Google (advertising, and the Gemini AI service that reads the text of your search and trip-planner requests to understand them and write plans), and FormSubmit (which delivers contact-form messages to our inbox). They may only use the data to provide their service to us, except Google, which acts under its own privacy policy for advertising.

We may disclose data if the law requires it.

How long we keep it

Visit statistics and the visitor cookie: up to 400 days. Account data: until you delete your account or ask us to. Server and security logs: kept for a limited period needed for security and troubleshooting. Messages you send us: as long as needed to answer you.

Your rights

Depending on where you live (including the EU, UK and Morocco's data protection law), you can ask to access, correct or delete your data, object to or restrict some processing, withdraw consent at any time, and receive a copy of the data you gave us. To use any of these, email us. You can also complain to your local data protection authority.

Children

The site is for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.

International transfers and changes

Our providers may process data outside your country, including outside the EEA. Where required, we rely on appropriate safeguards such as standard contractual clauses.

If we change this policy we will update the date above, and tell you on the site when the change is significant.