Privacy

Last updated: 25 August 2026.

The short version

• There are no ads and no advertising networks, so you are not profiled to sell you anything.
• There is nothing to sign up for: no user accounts are requested or stored.
• Traffic is measured in aggregate, to see which pages help and which do not.
• Whatever you save to «My trip» never leaves your browser.
• No data is sold or handed to anyone for commercial purposes.

Who is responsible

santiago.es is a personal editorial project by Cesar Rodriguez, based in Santiago de Compostela (Galicia, Spain). For anything to do with this policy or with your data: rasekrodriguez9@gmail.com.

Usage analytics

The site uses PostHog to count visits and see which pages get read. Events are sent through a subdomain of this site (e.santiago.es) and processed on PostHog servers in the United States. What is collected is browsing data: page visited, referrer, language, device type and browser, approximate country and city derived from the IP address, and a few specific interactions —a search, a page saved to «My trip», a shared plan, a Camino calculator used. JavaScript errors that happen on the page are also recorded, so they can be fixed.

PostHog stores an anonymous identifier in your browser (a cookie and local storage) for the sole purpose of not counting the same visit twice. It is not linked to any account and is not used for advertising. Analytics only loads after the page has finished loading, and if you block it the site works exactly the same.

What stays in your browser

Pages you keep with the «Save» button, and the «My trip» list, are stored in your browser's localStorage. They are never sent to a server: clear your browser data or switch device and they are gone. Interface preferences work the same way.

The Camino planner

The stage planner can be used two ways, and they don't do the same thing with what you tell it. The field form — starting point, days, pace, month — works out the split right here, without going through any AI. The only things sent off the site are the analytics events described below.

The free-text field does leave the site. Whatever you write there is sent as you wrote it (up to 400 characters) to OpenRouter, which routes the request to whichever provider sits behind the model doing the reading — today, OpenAI — and that is the AI that reads it and returns a starting point, days, pace, month and a few tags from a closed list — «knee», «with children», «gluten free», «reduced mobility»… — and those tags are what decide which warnings your plan shows you. The text is all that is sent: no IP address, no identifier of yours, because the request goes out from our server rather than from your browser. What OpenRouter and the model's provider then do with that text is governed by their own terms, not ours, and it isn't something we can guarantee from here: if your sentence is going to include something you'd rather not send off the site, use the field form instead.

On our side that text passes through a temporary in-memory cache: the sentence itself, lowercased and with spare spaces collapsed, is the key that stops us asking the same question twice. There is no database or file behind it, it isn't tied to anyone, and it really is short-lived: it holds 500 sentences at most, empties completely when it reaches that ceiling, and is lost in full every time the server process is recycled, which on hosting like ours happens often.

Analytics are sent the result, never the text: origin, days, pace, month, and whether the plan came from the form or the free-text field. The health and mobility tags are not part of that event.

Where they do go is into the plan's address. So that you can save the plan or send it to someone, the link carries your answers encoded inside it, tags included: if the plan knows your knee is bad or that you're walking with children, it's because that travels in the URL. It is encoded, not encrypted, so anyone with the link can read it; and since analytics record the address of every page viewed, it ends up there too. Worth a second's thought before you paste it into a group chat.

Newsletter

The newsletter form sends your email address to Buttondown, the provider that handles the mailings (servers in the United States). It is used only to send you the weekly email, and every issue carries an unsubscribe link that works first time. It is not shared with anyone else.

Correction suggestions

At the foot of every page there is a button to report that something is wrong. What you send is the text you write and the path of the page; if you leave your email address —the field is optional— it travels too, and is used only to reply to you or to ask where the information comes from. The report arrives in the same inbox as the rest of the mail, delivered by Resend. It is not stored in any database on this site, nor added to the newsletter.

Third parties involved

• Vercel — hosting. Like any web server, it processes requests and logs technical data, including the IP address, in order to serve pages and protect them from abuse.
• PostHog — analytics, as described above.
• CARTO and OpenStreetMap — only on pages with a map (the Camino map): your browser requests the map tiles from them, and those requests include your IP address.
• Buttondown — only if you submit the newsletter form.
• Resend — only if you send a correction suggestion: it delivers that email, with your text and, if you left it, your address.
• OpenRouter — only if you use the free-text field in the planner: it receives that sentence, routes it to whichever provider sits behind the model doing the reading — today, OpenAI — and returns a starting point, days, pace, month and tags. Both operate under their own terms of use.

The site's typefaces are served from this domain: there are no requests to Google Fonts or any other font network. Outbound links to official sites, businesses or webcams lead to places with their own policies, over which santiago.es has no control.

Emails you send

If you write to the contact address, your message and address stay in that inbox (Gmail) for as long as it takes to reply and to keep a record of the correction you suggested. Your address is not added to any mailing list unless you ask.

Your rights

You can request access to, correction of or deletion of your data, and object to its processing, by writing to rasekrodriguez9@gmail.com. In the case of analytics the data is anonymous and aggregated, so the most effective way to stay out of it is to block the script in your browser or with an extension. If you believe your data has been handled improperly, you can complain to the Spanish Data Protection Agency (aepd.es).