Privacy Policy

This page says what we collect when you read Wisata Hits, why, who else holds a copy, and how to make us stop. The site is free and paid for by advertising, so other companies are involved in the ads you see. We would rather describe that plainly than bury it under a definitions section.

Last updated: August 2026.

What we collect, and what we never ask for

You need no account to read anything here, so most readers pass through without telling us their name. What we collect falls into groups. Analytics data: pages opened, what referred you, roughly where you were at city or country level, and the device used. Log data: our hosting provider and the network in front of it record the requesting IP address, the browser string, the time and the page asked for. Newsletter data: your address, when you gave it, and whether a send bounced or was opened. Comment data, where comments are open: the name you pick, your email address and the address you posted from. Advertising data: cookie and device identifiers, approximate location, and the interest categories vendors build from browsing, which is the part we hold least of and control least.

Then there is the mail, sitting in our inbox with whatever you put in it. We ask for no identity document numbers, take no payments from readers, and collect no precise location, contacts or camera data. If a form here asks for more than it needs, that is a fault and we want to hear about it.

Why we process it, and what we rely on

The purposes are ordinary. We deliver pages, defend the site against abuse and scraping, measure what gets read because a desk this size needs to know whether three days on a fuel subsidy piece reached anybody, send the newsletter to people who asked, answer the mail, and sell and report on advertising.

Under the GDPR and the laws written after it, we rely on your consent for advertising and analytics cookies and for newsletter sign-up, on legitimate interest for server logs, security, aggregate reporting and replying to your mail, and on legal obligation where a rule requires us to hold something. Consent can be taken back whenever you like.

Who else sees it

Four kinds of company, plus the occasional professional. The programmatic exchanges and ad networks that fill display inventory we have not sold directly, along with the partners they pass requests to, which is the longest and least visible part of the chain. Our analytics provider. The email service that sends the newsletter. The hosting and delivery providers whose machines serve these pages. Beyond those, an accountant or a lawyer where a matter needs one, and a court where we are legally compelled.

We do not name individual advertising vendors here, because that list changes without our involvement and a stale one would mislead you more than a category does. The live list is in the consent notice, each vendor shown with its purposes. We do not sell reader lists, and our advertising terms say what buying space here does not buy.

Cookies, and the notice you saw first

Cookies, local storage and pixels are how the site remembers a preference, how analytics counts a visit as one visit, and how advertising vendors recognise a browser they have seen before. The consent notice sorts them by category, lets you refuse all but what is needed to serve a page, and reopens from the site footer at any time.

Refusing advertising cookies puts no wall in front of the articles. You still see ads, chosen by the subject of the page instead of by you. Who sets what, and how long each kind lasts, is in our cookie policy.

Your rights if European or UK law covers you

If you are in the European Union, the United Kingdom, or a country whose law works the same way, you have rights over what we hold about you and need no reason to use them.

• Access: ask what we hold and get a copy
• Rectification: have something wrong about you corrected
• Erasure: have it deleted, where no legal obligation makes us keep it
• Restriction: have processing paused while a dispute is settled
• Portability: receive what you gave us in a machine-readable form
• Objection: to legitimate-interest processing, and to direct marketing and profiling, which we stop on request
• Withdrawal of consent: at any time, in the notice or by writing to us
• Complaint: go to your data protection authority without asking us first

Write to support@wisatahits.blog with PRIVACY at the front of the subject line. We ask enough to be reasonably sure the data is yours, usually the newsletter address or the address a comment came from. We answer inside one month, at no fee, and editors handle these themselves, so plain words beat a legal template.

Your rights in California

Under California law you can ask which categories and specific pieces of personal information we collected, where they came from and who we disclosed them to, have them corrected or deleted, opt out of the sale or sharing of them, limit the use of sensitive information, and appoint an agent to do any of it.

We do not exchange reader data for money. Personalised advertising still counts as sharing under that law, so the advertising toggle in our consent notice is our Do Not Sell or Share My Personal Information mechanism, and switching it off is the quickest way to use the right. We honour a Global Privacy Control signal too, and nothing you can read here changes either way.

How long we keep things

Nothing is kept forever by default, and the periods below are our own settings rather than a vendor’s maximum.

• Analytics: aggregated reporting for up to 14 months, then rolled up into totals
• Server and delivery logs: about 30 days, longer while a security or abuse case is open
• Newsletter: until you unsubscribe, plus a suppression record so we never add you back by accident
• Comments: while the comment is published, and the details behind it while it stands
• Mail to our inbox: while the matter is live
• Advertising cookies: for the lifespans the vendors set, listed in the consent notice

Correction correspondence is the one exception, because it stays with our correction record, where the point is the pattern it shows over years. A deletion request can shorten any of the rest.

Children

This is a general news site written for adults. It is not directed at children and we do not knowingly collect personal information from anyone under 13, or under 16 where local law draws the line there. We also mark the site to our advertising partners as not child-directed, which stops child-targeted ad segments being built on our pages.

If you are a parent or guardian and think a child gave us an address or posted a comment, write to us. We delete the address, the comment and anything behind it, without asking you to prove something elaborate first.

Data crossing borders

Our readers are in Indonesia, Singapore, Malaysia, Europe, Australia and elsewhere, and the companies we use run machines in several countries, so data about your visit routinely leaves the country it started in. That is how a content delivery network works, not a decision we take request by request.

Where a transfer leaves the European Economic Area or the United Kingdom we rely on the contractual protections the law provides, including standard contractual clauses in our provider agreements. We will not claim that data sent across the internet is perfectly safe anywhere, because it is not.

Changes, and how to reach us

When we change this page we change the date at the top. Where a change actually matters to you, a new category of data or a new purpose, we say so in a note on the page and in the newsletter rather than swapping the text out quietly.

All of it routes to one address, support@wisatahits.blog, read and sorted by editors themselves. Our contact page explains what to put in a subject line, and our terms of service cover the rules for using the site.