Who to contact and the scope of this notice
DN Lead Media UAB publishes RipsAdvisor. Email info@dnleadmedia.com about personal-data processing or a rights request. The About page provides the sourced Lithuanian company record and legal address. This notice concerns our publication, not an operator website reached through a link; those services have their own notices and responsibilities.
The site has no visitor accounts, purchases or contact form. Sending email shares your address, message and anything you include with our mailbox service. Please send only what is needed for your enquiry.
Site delivery, preferences and contact
| Interaction | Data and purpose | Retention |
|---|---|---|
| Hosting and security | Google Firebase App Hosting delivers this first-party website. Request/error logs may include IP address, URL including query, referrer, time, browser and technical request details for delivery and security. | The project’s global _Default Cloud Logging bucket retains logs for 30 days; the separate global _Required administrative/system audit bucket retains its categories for 400 days. Log routing/exports have not been audited, so these are not universal deletion deadlines. |
| Cookie choices | A host-local browser record stores the notice schema version, category choices, save time and expiry. It has no visitor identifier. | Six calendar months unless changed or removed earlier. A temporary persistence check is removed immediately. |
| Email contact | Your address and message are used to respond to the enquiry and maintain an appropriate record. | We have not established a mailbox retention schedule for this notice. Contact us about the handling or deletion of a particular enquiry; do not assume immediate deletion. |
Google Analytics 4 — separate optional consent
With your GA4 opt-in on our verified production site, Google Analytics measures page views and defined research actions, such as comparison use and outbound platform links. Our events use published page paths and allowlisted platform/action labels; we do not send free-form text, URL queries/fragments or User-ID. Google also receives technical connection/browser information and may use pseudonymous browser identifiers.
After your GA4 opt-in, we may use a usable external HTTPS referral domain to understand where readers came from. We reduce it to the domain origin and discard the referring path, query and fragment. It applies to the first measured page; later navigation does not resend it. We do not save referral-source data or a pre-consent browsing history in browser storage. Missing or browser-suppressed referrers and navigation before consent limit attribution. This does not establish complete organic-search or channel classification.
Our GA4 property has event and user retention set to two months, with reset on new activity off. This setting does not limit standard aggregated reports to two months; deletion is processed monthly rather than at a universal 60-day cutoff. Enhanced measurement, Google Signals, user-provided data collection and advertising personalization are off. Advertising consent remains denied.
Microsoft Clarity — interactions and session replay
With your separate Clarity opt-in on our verified production site, Microsoft Clarity records interactions such as clicks and scrolling and reconstructs session replays to help us understand usability. It processes page/interaction data, pseudonymous identifiers and technical device/connection information. It is a separate choice from GA4.
Strict masking is selected for this project. It masks page content for new recordings, including text; element-level rules can override masking and updates can take up to an hour. It does not make session replay anonymous or remove all technical metadata, URLs or interaction information. Microsoft documents limitations, including content in style sheets/style tags. We do not claim that masking prevents every personal-data disclosure.
Microsoft documents 30-day playback retention, with labeled/favorited sessions and click/heatmap data retained for nine months. These vendor periods differ from our six-month browser preference and GA4 retention settings. Advertising storage is denied by this integration.
Choices and withdrawal
Both optional categories default off. Rejecting them does not restrict reading. Neither service loads before its own valid opt-in, and collection is restricted to our verified HTTPS production site.
Use Cookie preferences in any footer to change or withdraw permission. Withdrawal is saved before the site attempts provider revocation, removes accessible vendor cookies/scripts and reloads. This stops future collection; it does not automatically erase information already held by a provider. A failed preference save blocks both tools; a necessary host-only denial cookie can persist that block for six calendar months. If cookies also fail, the URL fragment #ripsadvisor-privacy-denied preserves denial across reload. It contains no visitor identifier and is removed only after denial or a fresh explicit choice has been saved successfully.
This notice uses consent schema version 3. Earlier version-1 and version-2 choices are not accepted as permission after this referral-domain notice update: a fresh opt-in is required before either tool can load.
Legal bases, recipients and international processing
We rely on consent for optional analytics and session replay. We use essential hosting/security data to deliver and protect the publication and contact information to handle enquiries, on the applicable legitimate-interest or other appropriate basis for the interaction. Recipients include Google for Firebase hosting and GA4, Microsoft for Clarity, and the mailbox service handling your email. Microsoft describes Clarity as operating as a data controller under its privacy statement; these services do not all have an identical role.
Google and Microsoft may process information internationally, including in the US. The Firebase backend region does not guarantee EU-only storage: the project’s logging buckets are global. Google publishes processing terms and transfer safeguards for Analytics. Clarity’s FAQ describes EU customers contracting with Microsoft Ireland Operations Limited and standard contractual clauses involving Microsoft Corporation in the US. Microsoft’s privacy statement describes international processing and safeguards. We have not verified a separate Clarity-specific DPA, transfer assessment or every applicable account contract.
Our mailbox provider arrangements and retention schedule still need confirmation. No processor-compliance certification, EU-only processing or legal approval is claimed by this notice.
Your rights
Under the GDPR, applicable rights can include access, correction, erasure, restriction, objection and portability, subject to each right’s conditions. You may withdraw consent and complain to a competent data-protection authority. The European Commission explains these rights and their limits.
Email info@dnleadmedia.com with enough detail to identify the relevant interaction. We do not need an operator password or full identity document as a starting point; if verification is necessary, we will ask for proportionate information.
Sources and checks
These links are documentation references, not commercial recommendations. Terms can change; source checks do not establish hands-on testing or EU eligibility.
- European Commission: individual data-protection rights Checked 2026-11-14
- Google Analytics: data retention Checked 2026-11-14
- Microsoft Clarity: data retention Checked 2026-11-14
- Microsoft Clarity: masking content Checked 2026-11-14
- Google: international data-transfer frameworks Checked 2026-11-14
- Microsoft Privacy Statement Checked 2026-11-14