Skip to main content

Privacy policy

Last updated: May 2026. Malta Spirit is a static editorial website. We do not run a user account system, we do not have a newsletter database, and we do not sell personal data. This policy explains the small amount of analytics we do collect, how to opt out, and your rights under GDPR.

Who we are

The data controller for this website is Agence Xen, Switzerland. Contact: agencexen@gmail.com. Hosting provider: Infomaniak Network SA, Geneva.

What we collect

We collect two limited categories of data:

  1. Anonymous analytics via Google Analytics 4 (GA4). Page views, country (city level), browser, device, language and session duration. IP addresses are anonymized by GA4 before storage. We use this to understand which pages are useful and which are not.
  2. Server logs at our hosting provider. Standard web logs (timestamp, IP, page, status code, user agent). Retained 30 days, used only for security and debugging.

We do not use any first-party tracking cookies, retargeting pixels, fingerprinting, A/B testing tools, heatmaps, session replay or any other behavioral analytics beyond GA4.

Cookies

The only cookies set by this site are those set by GA4 (_ga, _ga_*) for visitor identification. They are anonymous and do not contain personal information. They expire 13 months after your last visit.

When you click an affiliate link to GetYourGuide, GYG sets its own cookies on its own domain. That is governed by the GetYourGuide privacy policy, not ours.

How to opt out of GA4

  • Install the Google Analytics opt-out browser add-on.
  • Use any browser-level tracking blocker (uBlock Origin, Brave Shields, Firefox ETP, Safari ITP).
  • Use a "do not track" browser setting — we honor DNT signals when received.

Data we do NOT keep

  • No email addresses (no newsletter form on the site).
  • No comments / user-generated content (commenting is disabled).
  • No purchases or bookings (GYG handles that on its own platform).
  • No login system, no user accounts, no profiles.

Data sharing

We share aggregated GA4 data only with Google (the GA4 vendor). We do not sell, transfer or rent any data to third parties.

Your rights (GDPR)

Under the EU General Data Protection Regulation, you have the right to:

  • Access the data we hold on you.
  • Request its correction or deletion.
  • Object to processing.
  • Lodge a complaint with your national data-protection authority.

Since we do not collect personal identifiers, the practical scope of these rights on our side is limited — but for any concern, write to agencexen@gmail.com and we will respond within 30 days.

Changes to this policy

We will update this page if our practices change. The "last updated" date at the top reflects the most recent revision.