Last updated: 25 September 2026.
This policy explains what personal information this website collects, how it is used, and what rights you have. It is written in plain language and describes what the site actually does today. It will be updated before any new data collection is introduced.
1. Who is responsible
Elsewhere, Mostly (elsewheremostly.com) is a personal, non-commercial blog operated by an individual resident in Québec, Canada. For the purposes of privacy law, the operator is the person responsible for the protection of personal information and the data controller. Contact for all privacy matters: janppuri+contact@gmail.com.
2. What is collected, and why
Server logs
The hosting provider (Namecheap, Inc., servers located in the United States) automatically records technical data when you visit: IP address, browser and device type, pages requested, referring page, and time of access. This is standard for any website and is used only for security, abuse prevention and troubleshooting. Legal basis (where one is required): legitimate interest in running a secure website. Retention: logs are kept by the host for a limited period in line with its own policy and are not consulted unless a problem occurs.
If you email me, I receive your address and whatever you write. I use it only to reply and to follow up on your message. I do not add you to any list or share your address. Legal basis: your request (contract/legitimate interest). Retention: correspondence is kept for up to two years, then deleted, unless you ask for earlier deletion.
Cookies
This site itself sets only the strictly necessary cookies WordPress uses to function (for example, to remember a logged-in administrator). It does not set analytics, advertising or profiling cookies. Because no non-essential cookies are set, no cookie consent banner is shown. If analytics are ever added, a consent mechanism will be added first and this section updated.
3. What is not collected
There are no comments, no user registration, no newsletter, no contact forms, no analytics tools and no advertising networks on this site. I do not sell, rent or trade personal information, and I have not done so in the past twelve months.
4. Affiliate links and third-party sites
Some links lead to booking or shopping sites through affiliate programs (see the affiliate disclosure). When you click such a link, the destination site and the affiliate network (for example Amazon, Travelpayouts, Impact) may set their own cookies to attribute a purchase. This happens on their domains, under their privacy policies, after you leave this site. I receive only aggregated reports (clicks, sales, commission) and no personal details about you.
5. Embedded content
Posts may occasionally embed content from other services, such as a map or a video. Embedded content behaves as if you had visited that service directly and may collect data according to that service’s policy.
6. Where your data is stored and international transfers
The website is hosted in the United States. Email is handled by Google (Gmail), whose servers may be located outside your country. If you are in the European Economic Area, the United Kingdom, Switzerland or Québec, this means your data may be transferred outside your jurisdiction. Such transfers rely on the service providers’ standard contractual safeguards. Given the minimal data involved (server logs and voluntary email), the privacy impact of these transfers is assessed as low.
7. Your rights
Depending on where you live, you may have some or all of the following rights, and I honour them for everyone regardless of location:
- Access — ask what personal information I hold about you.
- Correction — ask me to fix inaccurate information.
- Deletion — ask me to delete your email correspondence.
- Portability — receive a copy of information you provided, in a usable format.
- Objection / withdrawal — object to processing based on legitimate interest, or withdraw consent where consent was the basis.
- Complaint — lodge a complaint with a supervisory authority: in Québec, the Commission d’accès à l’information; elsewhere in Canada, the Office of the Privacy Commissioner; in the EU/EEA, your national data protection authority; in the UK, the ICO.
To exercise any of these, email the address in section 1. I will respond within 30 days. There is no charge.
8. Children
This site is not directed at children under 13 (or the applicable age in your jurisdiction) and does not knowingly collect information from them. If you believe a child has sent me personal information, contact me and I will delete it.
9. Security
The site is served over HTTPS. Administrative access is protected by a unique strong password, and the site is backed up regularly. No method of transmission over the internet is completely secure, but the data involved is limited to what is described above.
10. Changes to this policy
When this policy changes, the date at the top is updated and, for significant changes (such as adding analytics), a note is added to the top of the page for at least 30 days.
11. Jurisdiction-specific notes
- Québec (Law 25) and Canada (PIPEDA): the operator is the designated person responsible for the protection of personal information; contact details are in section 1. No personal information is used for automated decision-making or profiling.
- EU/EEA, UK and Switzerland (GDPR / UK GDPR / FADP): the legal bases for processing are set out in section 2; your rights are in section 7. No representative has been appointed, as processing is occasional and low-risk.
- California (CCPA/CPRA): this site does not sell or share personal information as those terms are defined, and does not use sensitive personal information.
- Korea (PIPA): this site does not collect resident registration numbers or other unique identifiers, and personal information is not provided to third parties.