What we do not collect
No account, no email address, no password, no name. Itineraries are not stored against a person: a plan is encoded in its own URL, and if you do not keep the URL, nothing remains on our side that identifies you.
- No sign-up, so no credentials and no password database.
- No cross-site tracking pixel of our own.
- No sale of personal data, under any definition, to anyone.
What is collected
We use consent-based analytics to understand which cities people want and advertising data collected by the Yandex Advertising Network, the site’s only revenue source.
- Analytics (GA4)
- Page views, referrer, approximate region from IP, device class. IP addresses are truncated by Google before storage. Retention 14 months.
- Advertising (Yandex)
- The Yandex Advertising Network may set cookies or read device identifiers to select and measure ads. Governed by Yandex’s own policies, not ours.
- Search box
- Your recent searches are kept in your own browser’s local storage. They never reach a server and clearing them removes them.
- Server logs
- Standard request logs, retained 30 days, used for abuse and error investigation only.
- Active presence
- After analytics consent, a random browser identifier shared by tabs for up to 24 hours sends visible, recently active heartbeats. Tab presence is kept for up to two minutes and aggregate 15-second counts for 30 days. This measure retains no IP address, full referrer or user-agent history.
Your choices
In the European Economic Area, the United Kingdom and Switzerland a consent dialogue appears before any non-essential cookie is set, and declining is a single click that is remembered.
- Use the consent link in the footer to change your choice at any time.
- Yandex’s own privacy and personalisation controls apply across every site that uses the Yandex Advertising Network.
- Browser-level tracking protection and blockers are not worked around in any way.
- Opening an ssmtour.com page with #analytics_exclude=1 disables GA4 and active-presence measurement in that browser until its site data is cleared.
Your rights
Under the GDPR and the Turkish KVKK you may ask what is held about you, ask for it to be corrected or erased, and complain to a supervisory authority. Because nothing here identifies you by name, an access request is usually answered by explaining precisely this: there is no record to hand over.
Requests go to [email protected] and are answered within 30 days.
Children
The site is not directed at children under 13 and no age-gated content is served.