At VisaRadar we try to collect as little personal data as possible. This page explains, clearly, what is collected, for what purpose, and what rights you have over that data under the General Data Protection Regulation (GDPR).
1. Data controller
WyrnLabs, a project operated by an independent developer based in Spain. Contact: contact page.
We don't publish a postal address or an individual tax ID number here; for any request related to your GDPR rights, the contact channel above is the valid way to reach us.
2. What data we collect and why
2.1 Analytics (Cloudflare Web Analytics)
We use Cloudflare Web Analytics to measure visits and popular pages. It's a cookieless tool that doesn't collect personally identifiable data or track you across websites. It doesn't require prior consent because it stores no information on your device.
2.2 Advertising (Google AdSense)
VisaRadar displays ads through Google AdSense. Google and its advertising partners may use third-party cookies and local storage to show ads based on your visits to this and other sites. These cookies are only activated with your prior consent, managed through the preference panel shown on your first visit (see section 4).
You can review how Google handles this data in its privacy policy, and manage your personalized ad preferences at adssettings.google.com.
2.3 Affiliate links
Some links (for example, to travel insurance) are affiliate links. The relevant affiliate network may place a tracking cookie to attribute a sale to us if you purchase through that link. We don't share your personal data with these programmes: they only record that the click came from VisaRadar and from which page (its address and title). More detail in our affiliate disclosure.
Insurance links first go through an address of ours (/go/iati) that counts
the click: which page, which country of residence you chose and in which language. That
count doesn't store your IP, uses no cookies and can't identify you.
In the travel insurance guides we show IATI Seguros's quote form. Its script belongs to IATI and only loads if you accept advertising cookies, like the GetYourGuide block. Once loaded, IATI may read the Google Analytics identifier and store data in your browser's storage to work out the quote and attribute the sale to us. Without that consent you see plain links to IATI's website instead. Whatever you type into the form goes to IATI, not to VisaRadar.
2.4 GetYourGuide activities
On country pages and on each passport-destination page we show a block of GetYourGuide activities, which is also an affiliate programme. Its script belongs to GetYourGuide and only loads if you accept advertising cookies; once loaded, GetYourGuide may use its own cookies to show you activities and attribute bookings to us. Without that consent you see a plain link to GetYourGuide instead, which loads nothing of theirs on this page. How GetYourGuide handles that data is explained in its privacy policy.
2.5 Change alerts by email (discontinued)
Until October 2026 we offered email alerts about visa changes, sent through Buttondown. They are no longer sent and new subscriptions are not accepted. If you subscribed and want your address deleted, ask us through the contact page.
2.6 Email contact
If you write to us via the contact page, we'll process your email address and message content solely to reply to you. We don't use it for marketing or share it with third parties.
3. Legal basis for processing
- Cookieless analytics: legitimate interest (improving the service); no consent required since no identifiable personal data is involved.
- Personalized advertising, affiliates, the GetYourGuide block and IATI's quote form: your explicit consent, given through the preference panel.
- Counting clicks on affiliate links: legitimate interest (knowing which pages are useful), with no personal data.
- Responding to contact requests: performance of a pre-contractual relationship or legitimate interest in handling your request.
4. Cookies and consent management
On your first visit we show a cookie preference panel (managed via Google Consent Mode) where you can accept, reject, or customize which cookie categories you allow. You can change your choice at any time by reopening that panel from the link in the footer.
| Category | Purpose | Consent required? |
|---|---|---|
| Necessary | Basic site functionality | No |
| Cookieless analytics | Aggregate usage statistics | No |
| Advertising (AdSense) | Personalized ads | Yes |
| Affiliates (including GetYourGuide) | Referred-sale attribution and activities block | Yes |
5. International transfers
Google (AdSense, Consent Mode) and Cloudflare (hosting, analytics) may process data outside the European Economic Area. Both providers rely on transfer mechanisms recognised under European law (standard contractual clauses and/or EU-US Data Privacy Framework certification).
6. Your rights
Under the GDPR, you have the right to:
- Access: know what data we hold about you.
- Rectification: correct inaccurate data.
- Erasure: request that we delete your data.
- Objection: object to a specific processing activity.
- Restriction: restrict processing in certain cases.
- Portability: receive your data in a reusable format.
To exercise any of these rights, write to us via our contact page. You also have the right to lodge a complaint with your national data protection authority, or with Spain's AEPD.
7. Children
VisaRadar is not specifically directed at children under 14 and we do not knowingly collect personal data from children under that age.
8. Changes to this policy
We may update this policy as our practices or applicable law change. The last-updated date appears at the bottom of this page.
Last updated: 20 October 2026