Privacy centre · notice 2026-09-04.v5
Its precise application depends on the organisations responsible and the actual collection, use, disclosure and transfer of personal data. GDPR is not ‘Singapore GDPR’. Brazil’s LGPD and the European GDPR remain separate regimes that may apply in particular circumstances.
The site stores the visitor’s consent choice on their device. Experience, analytics and commercial attribution remain optional. If Analytics is enabled, Culture Quest records only daily aggregate milestones—such as a companion chosen, map opened, route completed or event saved. It does not store an analytics identifier, IP address, GPS trail, question, reflection or companion transcript. After a verified Second Look payment, one strictly necessary, random access token is stored in an HttpOnly cookie for no longer than the 60-day access term.
Use “Privacy choices” on the edge of the screenBefore launch: minimum necessary fields, private-by-default submissions, separate public-display permission, retention period, withdrawal and deletion routes, processor records, age-appropriate flow and a named contact.
The free first route is visible without third-party map tiles. Opening the interactive map enables the optional Experience choice: Leaflet is then loaded from unpkg and tiles are requested directly from OneMap, provided by the Singapore Land Authority. The provider receives ordinary connection information such as IP address and browser request details. The choice can be withdrawn from Privacy choices.
When a Second Look visitor asks a companion a free-form question, the site matches it against Culture Quest’s own thematic branches and approved source links. The visible exchange remains in the current page session; Culture Quest does not write a conversation archive or send the question to a generative-AI provider.
A verified checkout record contains an internal order ID, chosen access product, Stripe transaction references, amount, currency, status and timestamps. Culture Quest does not store card numbers or copy the customer email into its order table. Access is presently tied to the browser that completes the verified return; cross-device recovery by email is not active. Public sales remain disabled whenever live Stripe delivery cannot be verified.
The operational product must identify its responsible organisation and publish a practical data-protection contact. The current public product does not accept participant accounts or Culture Quest photo uploads.