Privacy policy

What we collect

Mundevo collects two kinds of data: anonymous analytics about how visitors use the site, and event data about affiliate-link clicks and ad-slot impressions needed to operate the recommendation engine.

• Session identifier. An anonymous cookie (lde_sid) is set on the first request. It is HttpOnly, SameSite=Lax, 30-day TTL, contains no name, email, or identifier traceable back to you, and is used only to deduplicate affiliate clicks and ad impressions per session.
• Hashed IP address. When you click an affiliate link or trigger an ad impression beacon, your IP address is SHA-256 hashed with a server-side salt and truncated to 32 characters before storage. The raw IP is never written to disk. The hash cannot be reversed to recover the original IP.
• User agent and referrer. Standard browser-supplied strings, stored alongside the hashed IP, used to filter out bots from analytics.
• Page path + slot identifier. Which page you were on and which ad slot or affiliate slot you interacted with. No personal content from the page is stored — only the URL path (e.g. /cost-of-living/madrid).

We do not collect: names, emails, phone numbers, payment information, precise location, device fingerprints, or contact lists. We do not run server-side rendered personalization based on reader identity.

Third-party services

Mundevo uses the following third-party services, each subject to its own privacy policy:

• Google AdSense — displays advertisements. AdSense uses cookies to personalize ads based on your browsing history. Google's ad-policy page covers what they collect and how to opt out.
• Google Analytics 4 — anonymous traffic analytics. We pass GA4 only the standard pageview and event data; no custom user identifiers. Google privacy policy.
• Anthropic (Claude API) — generates the editorial commentary shown on each page at build time. Your browsing of the site never hits the Anthropic API directly; only our build process sends structured page data to generate insights, with no reader-identifying information.
• Affiliate partners — Wise, Revolut, SafetyWing, Holafly, MoveHub. When you click one of their links, you leave Mundevo and they apply their own tracking. Each partner has its own privacy policy linked from their sign-up flow.
• Vercel — hosts the site. Receives standard server access logs.
• Turso (libSQL) — stores the click and impression events described above. No reader-identifying data is written.

Your rights

Because we don't collect identifying information, there is generally nothing tied to "you" specifically to delete. The session cookie can be cleared from your browser at any time. The hashed IP cannot be reversed, so even we couldn't look up your individual records.

If you live in the EU/UK and want confirmation that no identifying data is held about you, or if you want bulk deletion of all events from a specific IP range during a specific window, email mundevocom@gmail.com and we will action it within 30 days.

Cookies

Mundevo's own code sets exactly one cookie: lde_sid (session identifier, described above). It is essential to operate the affiliate-rotation and impression-deduplication systems and is not used for advertising personalization.

Google AdSense and Google Analytics may set additional cookies. You can disable these via your browser's "third-party cookies" setting without affecting the site's core functionality.