Last updated 9 September 2026. This policy describes what torontotourism.org collects, what runs on the site, and who else receives data when you read a guide. It is written to describe the site as it actually is.
Who runs this site
torontotourism.org is an independently published travel guide. It is the data controller for the information described below. There is no corporate parent, and we do not sell reader data to anyone — see Advertising below for what the advertising system on the site does and how to opt out of it. To reach us about anything on this page, use the contact form.
What we collect
When you just read a guide
Nothing that identifies you personally is collected by us directly. The site is a set of articles; you do not need an account, and there is nothing to log in to. Our web host keeps standard server logs (IP address, timestamp, page requested, browser user agent) for security and troubleshooting, which is ordinary for any website. Separately, the analytics and advertising services described below run in your browser and collect data of their own.
When you use the contact form
The form asks for your name, email address, a subject and your message. Those fields are sent to us by email so that we can reply. We keep the correspondence only for as long as it takes to deal with what you wrote about, and we do not add you to any mailing list — there is no newsletter on this site.
Comments
Comments are closed on every article and no comment form is displayed anywhere on the site, so no commenter data is collected or stored.
Analytics
The site uses Google Analytics 4, connected through the Site Kit by Google plugin, to see which guides are read and where visitors arrive from. This sets Google Analytics cookies and reports aggregated measurement data to Google. We use it to decide what to write and what to update; we do not use it to identify individual readers, and we do not combine it with any other data. Google’s own handling of that data is described in its Privacy Policy, and its use of data from sites that use its services is described at How Google uses information from sites or apps that use our services.
You can opt out of Google Analytics entirely using Google’s browser add-on.
Advertising
This site carries display advertising, and that advertising is what pays for it. The ads are sold and served by Journey by Mediavine, a service of Mediavine, Inc. This site does not use Google AdSense. Mediavine decides which advertisement fills each slot by running an auction across its own demand partners and Google’s ad exchange, so we do not choose the individual ads you are shown and cannot see them in advance.
What advertising does not change: no business has paid to be included in a guide, no recommendation can be bought, and nothing on this site is a sponsored post. Advertising is sold against the site as a whole, never against a particular restaurant, hotel or attraction, and it has no bearing on what we recommend or how we describe it.
Mediavine also runs a Comscore audience-measurement tag on the site, which counts and classifies traffic for the advertising market. It measures audiences in aggregate rather than identifying readers.
Mediavine adds its own privacy notice to the foot of this page automatically, and it is always the current version. One clarification about it. It mentions collecting an email address, in hashed form, because Mediavine uses the same wording on every site it serves. This site has no login, no accounts and no newsletter, so we never supply an email address to the advertising system. The only email address we ever hold is one you type into the contact form yourself, and it is used to reply to you and for nothing else.
Your choices about advertising
In the EEA, the UK and Switzerland. A consent management platform runs before any advertising or measurement cookie is set and asks for your consent under the IAB Transparency and Consent Framework. You can refuse, and you can change your answer at any time through the Manage Preferences link the consent tool places in the footer. Refusing means you are shown non-personalised advertising rather than no advertising.
In California and other US states with comparable laws. A Do Not Sell or Share My Personal Information button appears at the foot of the site for readers in the states where that right applies, which is why you may not see it from elsewhere. Clicking it opens the opt-out for the sale or sharing of your personal information for targeted advertising. The advertising framework also detects the Global Privacy Control signal, so if your browser or an extension sends GPC, that is treated as an opt-out without your having to click anything.
Anywhere. The industry opt-out pages linked in the section above — the Network Advertising Initiative and the Digital Advertising Alliance — let you opt out of interest-based advertising across many vendors at once, and blocking third-party cookies in your browser settings stops most of this at source.
Cookies
Cookies and similar storage on this site come from four places: Google Analytics, as described above; the advertising framework and its partners, as described above; the consent tool, which has to store what you chose so that it can stop asking; and the caching layer our host uses to serve pages quickly. You can block or delete cookies in your browser settings, and the guides will still read normally without them.
Third-party links
Guides link out constantly — to the TTC, to restaurant and attraction websites, to festival organisers, to Parks Canada and the City of Toronto. Those sites have their own privacy policies and we have no control over what they collect. This policy covers only torontotourism.org.
Your rights
If you are in the EEA or the UK, you have the right to ask what personal data we hold about you, to have it corrected or erased, to object to processing, and to complain to your national data protection authority.
If you are in California, you have the right to know what personal information is collected, to ask that it be deleted, and to opt out of its sale or sharing. A word on that phrase: we do not sell reader data for money, and we have never handed anyone a list of our readers. But California’s law, and several written after it, define sale and sharing broadly enough to cover passing advertising identifiers to ad partners for targeted advertising, which is what the advertising system does unless you opt out. The footer button and the GPC signal described above are how you stop it.
The only personal data we ourselves hold is contact-form correspondence, and we will delete it on request — write via the contact form. Data held by advertising partners is held by them, and the Mediavine partner list linked above is where to find each company’s own policy and contact route.
Children
This site is written for adults planning travel and is not directed at children under 13. We do not knowingly collect personal information from children.
Changes to this policy
When something material changes — a new analytics or advertising system, or a new category of data — this page is updated and the date at the top changes with it. This revision records the site moving from carrying no advertising to carrying advertising served by Journey by Mediavine.