Privacy policy

1. Who publishes this site

YaFandem. For anything to do with data: ya.fandem.eg@gmail.com.

No postal address is published during the pilot phase; it will be once the legal entity exists.

2. What this site does not collect

This is the important part, and it fits in one sentence: there are no accounts on this site. No sign-up, no password, no email address asked for, no telephone number, no identity documents.

Nor is there any booking, messaging, review to write, payment, or profile to fill in. Nothing you read here asks you to say who you are.

No advertising trackers, no embedded social networks, no third-party analytics. The typefaces are served from this domain rather than from Google: they are downloaded once when the site is built, so your browser contacts nobody else to display them.

Whatever you set aside while browsing the guide stays in your browser and is not sent to the server.

The “near me” button in the search asks your browser for your position, and nothing more: the nearest region is worked out INSIDE your browser, and no coordinates are ever sent to the server or stored. You can refuse — the rest of the search works without it.

The trip planner is the same: the name you give a trip, its dates, the addresses you place in it and the notes you write there stay in your browser, and are sent to no one. One consequence worth knowing: this plan does not follow you from one device to another, and it goes if you clear this site's data.

3. Measuring visits

The site counts its visits, using a tool written for it and hosted with it. For each page view it records: the path of the page without any search string, the language shown, the kind of device (desktop, mobile, tablet), the DOMAIN NAME of the site that sent you here when there is one — never the full address —, the response code, the load time as measured by your browser, and the time spent on the page.

Your IP address is not kept. It is used, together with your browser and a secret held by the server, to work out a 32-character fingerprint that allows distinct visitors to be counted WITHOUT knowing who they are. That fingerprint includes THE DAY'S DATE: it therefore changes every night, which makes it impossible to follow one person from one day to the next, and impossible to work back to an IP address from what is stored.

The consequence is deliberate: we know how many distinct people came today, never how many came back this week. The internal dashboard says so plainly, so that nobody mistakes the figure for something it is not.

This measurement needs JavaScript and is happily blocked by blocking extensions: if you use one, you are not counted.

4. Suggested addresses

If you suggest an address, the site keeps what you wrote in the form: the name of the place, the category and city you chose, the address as free text, your comment, the language you wrote in, and the photograph if you send one.

The form asks for NEITHER your name, NOR your email, NOR your telephone. A suggestion is therefore anonymous, and we have no way of replying to you — that is the price of asking you for nothing.

The box reading “by sending this photograph I confirm I have the right to publish it” is kept, with the time of sending. It is the record of your statement, and it is precisely what a copyright claim would ask for.

A suggestion that is taken up becomes an entry in the guide. One that is turned down is kept with an internal note explaining why, so the same address is not reviewed twice.

We do not check where submitted photographs come from, and we cannot: nothing in an image says who took it. We rely on the declaration of the person sending it — kept with its timestamp — and we publish the author's name they give. A photograph published here is therefore not one whose provenance we have established.

If you took a photograph published on this site without your agreement, write to ya.fandem.eg@gmail.com and name the page: we will take it down, without argument and without delay. That is the only undertaking with any real value — a clause claiming to absolve us of all responsibility would have none, whereas a prompt removal does.

5. Cookies

Three cookies in all, none for advertising, none shared with anyone.

A session cookie for measuring visits, which groups the pages of one visit together. It lasts thirty minutes of inactivity and holds nothing but a random identifier, unconnected to you.

A language cookie, which remembers the language you chose so you are not asked again. It lasts a year.

An administration cookie, set only for the site's operator when signing in to the back office. It lasts eight hours.

Two further cookies existed until 11 August 2026, inherited from the marketplace: one tracked printed leaflets, the other referrals. Neither had any purpose left on a site without accounts, and both have been removed.

6. The Google map on each entry

Every address entry shows a map supplied by Google Maps, embedded in the page. To display it your browser contacts Google directly: Google therefore receives your IP address and the page you are on, and may set its own cookies under its own rules, over which we have no say.

It is the only third party this site brings into its pages, and we say so here rather than leave you to find out. The “Directions” button, by contrast, only fires if you click it.

Photographs come from Wikimedia Commons, Pexels and Unsplash, but they are downloaded and served from this domain: displaying them sends nothing to those sites.

7. Hosting and how long things are kept

A dedicated server in Europe, run by YaFandem. The database and any uploaded files live on it; no third-party storage service is involved, and no data goes to an analytics or messaging processor.

Visit measurements: kept so that traffic can be followed over time. The visitor fingerprints themselves are useless beyond their own day, by construction.

Suggested addresses: kept while under review, then as a record of the decision. You may ask for yours to be deleted by email — give us enough to find it, since we do not have your name.

Rate limiting: to stop one device flooding the form or the measurement, the server briefly keeps a counter against your IP address. That is the only place an IP address is written; it is cleared at the next window, after a few minutes.

Backups: the database and the files are backed up nightly and kept for a few weeks, long enough to recover from an incident.

8. Your rights

You may ask for access to your data, its correction, its erasure, a restriction on its processing, or object to that processing. Write to ya.fandem.eg@gmail.com; we answer within 30 days.

One limit worth knowing, and it follows from our choices: because the site does not identify you, we CANNOT find “your” browsing data. The visitor fingerprint cannot be reversed, not even by us. Only a suggested address can be found again, and only if you tell us which one.

You may complain to the Egyptian Personal Data Protection Centre if you believe your rights are not being respected.

9. Security and young people

Encrypted connections (HTTPS), strict security headers, the back-office session signed in a cookie no script can read, rate limiting on the form and on the measurement, uploaded files served from this domain.

No system is proof against everything: in the event of a breach likely to harm you, we would tell you and alert the competent authority. The exposure is, however, limited by what the site does not keep — with no accounts, no passwords and no identity documents, there is nothing of that kind to lose.

The guide can be read at any age and asks for nothing that identifies a person, young or otherwise. If you are under age, put nothing identifiable in the comment of a suggestion or in a photograph.