Last updated: 7 May 2026
Who runs this site
Scirocco Guide is operated as an independent personal project by RoyalKiwi, based in New Zealand. Contact for privacy queries: contact@royalkiwi.app.
Data collected automatically
Page-level analytics via Cloudflare Web Analytics. Aggregate counts of page views, referring sites, country, browser, and device type. No cookies are set. No individual visitor is identified or tracked across visits.
Server logs are retained by Cloudflare (the hosting and CDN provider). These contain IP addresses, request URLs, user agents, and timestamps. They are used for security, abuse prevention, and operational debugging. Retention is governed by Cloudflare's policies (typically days, not months).
Data you submit
Contact form / direct email — when you email contact@royalkiwi.app or use a future contact form, the message and any details you include (name, email address, vehicle details, the content of your message) are received in a personal inbox and used only to reply or to improve site content. Email contents are not added to a marketing list, sold, or shared with third parties.
Comments — when comment functionality is added, it will use Giscus, which stores comment threads in GitHub Discussions. Posting a comment requires a GitHub account; what you post and the GitHub username it appears under are governed by GitHub's privacy statement.
Third parties
The site uses the following third-party services. Each has its own privacy policy governing data handled on their side.
- Cloudflare — hosting (Cloudflare Pages), CDN, analytics, DNS for the subdomain.
- Google Fonts — webfont delivery (Fraunces, JetBrains Mono, Inter Tight). Loading a font sends Google a request that includes your IP.
- GitHub — source repository for the site; Giscus comments (when enabled).
- Affiliate retailers — Amazon (NZ/AU), FCP Euro, ECS Tuning and similar. When you click an affiliate link, the destination retailer may set its own cookies. See the affiliate disclosure for details.
What is not collected
- No advertising cookies, no tracking pixels, no fingerprinting scripts.
- No social-media tracking widgets that load when you arrive.
- No third-party advertising network is integrated with this site.
- No data is sold, shared with data brokers, or used for cross-site profiling.
Cookies
The site itself sets no tracking cookies. A future preference-based feature (e.g. remembering a chosen unit system) may store small values in your browser's localStorage, which is not the same as a cookie and is not transmitted to the server. If cookies are ever introduced, this section will be updated and a notice shown on first visit.
Children
The site is not directed at children under 16. If you are under 16 and have submitted anything via email, contact contact@royalkiwi.app and it will be removed.
Your rights
Under the New Zealand Privacy Act 2020, you can request:
- Access to any personal information held about you.
- Correction of personal information that is inaccurate.
- Deletion of personal information that is no longer needed.
Requests are handled within 20 working days, in line with the Act. EU and UK readers are covered by equivalent rights under GDPR / UK GDPR — same address, same response time. Send requests to contact@royalkiwi.app.
Complaints about how privacy is handled here can be escalated to the Office of the Privacy Commissioner: privacy.org.nz.
Data retention
Email correspondence is retained as long as it remains relevant — typically until the thread is resolved, with longer retention for material useful for editing articles. Server logs are retained per Cloudflare's defaults.
Security
The site is HTTPS-only (enforced by the .app TLD). Source code is in a private GitHub repository. Email for the site is forwarded through Porkbun and Cloudflare to a personal inbox protected by a strong password and two-factor authentication.
Changes to this policy
Material changes will be flagged and the "Last updated" date above will move. Old versions of this policy can be requested if needed.