Privacy Policy

Effective date: 2026-11-10

You can check entry requirements without an account or giving us your name, email or passport number. Advertising, affiliate tracking, newsletter signup and audience analytics are disabled in this version.

Who is responsible

TripColour is operated by Akin8, an individual business registered in Quebec, Canada. See the legal notice for publisher details.

Privacy-officer role: owner of Akin8, responsible for the protection of personal information. The designated privacy contact is contact@tripcolour.com.

The operator's service/postal address is Longueuil, Quebec, Canada. See the contact page for contact guidance.

Your entry check stays on the page

The checker uses the one or two passport countries and destination you select to look up bundled information in your browser. We do not send those selections to an analytics service or save them in cookies or local storage.

The result puts country codes after the # in the address, so you can reopen or share that check. This part is called a URL fragment: browsers do not include it in the normal HTTP request to the host. It is still visible to you, may remain in browser history, and is included if you copy or share the link. Anyone receiving the link can see those countries and any active-passport override. Do not share it if that would reveal something you want to keep private.

Reloading or reopening a link with that fragment can restore its selections. "Start over" removes the fragment from the current address and clears the tool selections; it does not erase previously copied links or your browser's earlier history.

Sharing is optional. When you choose Share, the browser may open your device's share sheet with the displayed entry summary and result link, or copy that summary and link to your clipboard when native sharing is unavailable. This includes selected passport countries, the destination and displayed entry information. Your browser, operating system and any app or service you choose may process, retain or forward that content under their own settings and notices. Check the recipient and destination before confirming; do not share information you want to keep private. We do not send the shared content or recipients to an analytics collector.

Shared text is a snapshot, not an automatically updated answer. Reopening its result link runs the check again. Clearing the checker does not erase clipboard contents, device clipboard history or copies already shared through another service. The separate Copy result link action copies only the link. A native hand-off is not confirmation of delivery.

Country names alone do not identify you. They could become personal information if linked to an IP address, email or other identifying context, which is why we avoid making that link. Do not enter or send passport numbers, document scans, dates of birth, booking references or detailed itineraries.

Information used to deliver the website

The hosting provider receives ordinary network information, such as your IP address, requested page, browser information and request time, to deliver and secure the site. This is different from tracking your entry-check selections.

Netlify hosts the website. Cloudflare supplies domain registration and DNS only; website HTTP/HTTPS traffic is not reverse-proxied through Cloudflare. DNS lookups are separate processing and do not include the result fragment.

Netlify determines retention of necessary hosting/security logs under its service and retention policies; we do not set a separate hosting-log deletion period or export traffic logs. Its published Data Processing Agreement describes service-component security logging retained online for 90 days and offline for one year; this is not a confirmed uniform deletion period for every visitor-request log. Request details available through Netlify's Observability dashboard have shorter, plan-dependent viewing windows, not a guarantee of deletion from all provider systems.

Netlify delivers content through a global network and uses subprocessors, including in the United States; hosting information may be processed outside Quebec and Canada. Its published processing agreement provides for applicable Data Privacy Framework transfers, with standard contractual clauses and the UK addendum as applicable alternatives, and describes security measures. Netlify's security documentation describes access controls, encryption in transit and at rest, and automated network protection. These published safeguards are not a promise of Canadian-only processing or perfect security. See Netlify's privacy information and subprocessor information.

If you email us

We receive your email address and whatever you choose to send, to reply, investigate a correction, handle a privacy request or protect the service. A correction-email link may prepare selected countries and result text in your own email application; you can review, edit or remove that text before sending. Clicking the link does not itself send an email.

Our email provider is Microsoft 365 (Exchange Online). Routine support messages are deleted after 90 days. Active investigations, legal obligations or disputes may require longer retention; we limit that retention to what is needed. We may retain a correction record after removing reporter details. We do not publish your identity without your permission.

Support is not a marketing list. Sending a question or using the checker does not subscribe you to a newsletter.

No advertising or newsletter tracking at launch

We do not sell personal information or share it for cross-context behavioural advertising in this version. We do not load advertising networks, affiliate scripts, analytics tags or newsletter embeds. We do not use fingerprinting. There is no optional tracking to accept or reject.

If we enable a newsletter later, signup will open a separately hosted Kit page, not an embedded form. Before that happens, we will update this notice and explain the information collected, consent, retention, providers and international transfers. Following an external link lets that provider process information under its own applicable notice. A hosted signup is not automatically free of cookies or tracking.

Purposes, safeguards and international processing

We use necessary hosting/security information to deliver and protect the website, and messages to answer your request. Where the EU or UK GDPR applies, these activities rely on our legitimate interests in operating a safe information service and responding to you; legal obligations apply to required records and rights requests. Any future newsletter marketing will require your separate consent. We do not treat visiting this page as consent to marketing.

Providers may process information outside Quebec and Canada, including in the United States. The hosting safeguards are described above. Email is processed by the provider named in the email section under its service terms and privacy notice; we do not promise that email stays in Quebec or Canada. Access is limited to the operator and necessary service providers, subject to appropriate agreements. We may disclose information when legally required or necessary to address a security incident. No internet service can promise perfect security.

Governance and confidentiality incidents

The owner is responsible for our collection limits, access controls, retention and destruction practices, and privacy-complaint handling. Access is limited to what is needed for those purposes.

We assess suspected confidentiality incidents, take steps to limit harm, keep the records required by law, and notify regulators and affected people when required. Routine support's 90-day deletion period does not shorten a statutory incident-record duty or a necessary legal hold.

Your choices and rights

Use contact@tripcolour.com to ask the privacy officer what personal information we hold about you, request access, correction, deletion or a portable copy where applicable, withdraw consent, object to or request restriction of processing, or make a complaint. Some rights and retention exceptions depend on the law that applies. We will verify a request proportionately without asking for your passport, and respond within the applicable legal period.

You can complain to the Commission d'acces a l'information du Quebec, the Office of the Privacy Commissioner of Canada, or your applicable local privacy regulator, including an EEA supervisory authority or the UK Information Commissioner's Office.

The site is general travel information, not directed to children. Please do not send a child's personal documents or details.

Changes

We update the effective date when this policy changes. Material changes to collection or optional features will be explained before the new processing begins; we will seek consent when required. See the cookie and storage notice for the current technical design.