What we capture without consent
When you load any page on touron.app, our servers record the IP address, the user-agent string sent by your browser, and any geographic hint provided by our CDN. This is the minimum required to keep the service running, respond to lawful access requests, and detect abuse. Capture is permitted without consent under the ePrivacy carve-out for service operation.
What we capture only with consent
If you accept the audit banner, we additionally capture a browser fingerprint — canvas, WebGL, audio, timezone, screen, navigator, and user-agent characteristics. We never bundle a third-party tracker; everything is collected directly by TourOn and stored on our own servers.
Revoking consent
Clear the storage key touron:consent:v1 in your browser, or use the site settings menu, and the banner will re-appear. Past audit records cannot be deleted because they form a chain-of-custody log.