Privacy policy

Holbox Nowcast uses Umami Analytics, a privacy-first analytics platform. Umami does not use cookies, does not track individual users across sites, does not build behavioral profiles, and does not export data to third parties for advertising. The data we collect consists of aggregate page views and click events, with no ability to identify you personally.

To be explicit: we do not collect your email, your name, your full IP address (Umami processes it locally without storing it), your device fingerprint, your browsing history, or any other personal data in the sense of the GDPR or the Mexican LFPDPPP. No server anywhere holds a row with your identity tied to what you did on our site.

Holbox Nowcast sets no first-party cookies. There is no cookie consent banner because there are no cookies to consent to. If you use a cookie blocker or have maximum privacy enabled in your browser, the site will work exactly the same.

However, if you click a link to one of our affiliate partners (Booking.com, GetYourGuide, Skyscanner), that partner may set its own cookies once you reach its domain. Those cookies are governed exclusively by each partner's privacy policy:

— Booking.com: https://www.booking.com/content/privacy.html
— GetYourGuide: https://www.getyourguide.com/privacy-policy/
— Skyscanner: https://www.skyscanner.net/privacy

To display the site's typography we use Google Fonts, which loads files from fonts.googleapis.com and fonts.gstatic.com. When loading these files, Google may temporarily log the request IP address. We have no control over those logs; they are Google's responsibility. If you want to avoid this, you can block third-party requests in your browser or use an extension such as uBlock Origin. The site will remain readable with a system font.

We run no ads, use no ad networks, integrate no tracking pixels from Meta, Google Ads, TikTok, or any other advertiser. We do not sell traffic data, we do not share audiences, we do not feed data to re-marketing platforms. Our monetization model is limited to the affiliate links described in our affiliate disclosure.

If you reside in the European Union, the United Kingdom, or the European Economic Area, the General Data Protection Regulation (GDPR) grants you rights over your personal data: access, rectification, erasure, portability, objection to processing, and restriction of processing. Because we do not collect identifiable personal data, most of these rights are automatically respected: there is nothing to access, correct, or erase, because nothing is stored under your name.

If you reside in Mexico, the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) grants you ARCO rights (access, rectification, cancellation, objection), which are respected on the same reasoning. If you reside in California, the CCPA grants similar rights that likewise apply by default.

For any request related to privacy, data protection, or the exercise of GDPR / ARCO / CCPA rights, write to us at privacidad@nowcast.day. We respond within the applicable legal deadlines (30 days under GDPR, 20 business days under LFPDPPP).

If we update this policy, we will change the article:modified_time date in the metadata of this page and briefly note the change. Substantive changes (for example, the addition of a new third-party service) will be highlighted at the top of the affected section for at least thirty days.

This policy complies with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), the European Union General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). Any dispute is governed by Mexican law, without prejudice to the rights granted to you under your own jurisdiction of residence.