1. Who is responsible
CastleScotland is the data controller for this independent project operated in Scotland. Use the Contact page for privacy enquiries.
CastleScotland
2. Information handled
The website does not require an account. Standard technical data helps deliver and secure the site. The contact form processes your email address, message and technical form data.
3. Why information is used
Contact messages are used to answer questions, handle corrections, consider castle suggestions and discuss collaboration. Processing relies on steps at your request or our legitimate interest in operating and protecting the project.
4. Local preferences
Your chosen language, colour theme and light or dark mode may be stored in your browser's local storage. These preferences remain on your device and are not used to identify you.
5. External services
Cloudflare Turnstile protects the contact form and a private Cloudflare Worker delivers its messages. Links to Buy Me a Coffee, PDF files and external maps lead to independent services. Personal data is not sold.
6. Cookies and analytics
With your consent, CastleScotland’s own analytics measure page views, visits, countries, referrals, UTM campaigns, searches, PDF clicks, hotel recommendations and PWA use. IP addresses and browser headers are processed briefly to create a daily rotating identifier; they are not stored in the analytics database. Country and visitor counts are estimates. We store paths without URL parameters, referring domains and limited UTM fields. Search terms resembling email addresses, phone numbers or URLs are dropped; do not enter personal information in search. Detailed events are accessible only to DG. Events older than 365 days are gradually deleted on subsequent activity. Collection and storage run on Cloudflare infrastructure through Sites. Consent is stored locally; current visit attribution is kept in browser session storage. Decline or withdraw consent using “Change analytics consent” at the bottom of the privacy policy page. Declining does not limit features; withdrawal stops future detailed event collection. Separate aggregate measurement is explained below. We respect DNT and GPC. Offline activity is not uploaded later.
7. Retention and security
Contact messages are kept as long as needed for correspondence, corrections, abuse prevention or legal obligations. Reasonable safeguards are used.
8. Your rights
Depending on the circumstances, you may request access, correction, erasure or restriction of processing, or object to processing. You may also complain to the UK Information Commissioner's Office.
9. Updates
This notice is reviewed when site features or data practices change. Last reviewed: 16 October 2026.
Aggregate server traffic measurement
Separately from optional detailed analytics, we count successful online HTML page requests and approximate countries to understand demand and improve CastleScotland, relying on our legitimate interest in improving this service. This runs on Cloudflare through Sites, including when the analytics script does not run or you decline detailed analytics. The IP address is processed briefly to update a daily statistical estimate; we retain only aggregate counters and statistical registers, not IP addresses, visitor identifiers, browser fingerprints, paths or browsing histories in this measurement. Aggregate statistics are retained to compare long-term trends and are accessible only to the owner. The estimate represents unique network addresses per day, not exact people. Shared networks, VPNs, bots, changing addresses and offline use affect accuracy. We respect DNT, GPC and your server-measurement opt-out. You can object below without losing any site features. Your choice is remembered with a necessary preference cookie for one year; clearing cookies removes the choice.
Explore Scotland
Find Scottish castles by region, landscape or the stories that bring them to life.