Privacy

• We use no tracking, advertising or analytics cookies.
• Your saved places and "My list" are stored only in your browser, on your device. We do not receive them.
• Like any website, the server logs technical data for each visit (IP address, page, date) for operation and security. Separately, the site has its own visit counter, explained below.
• The map loads images from OpenStreetMap, which receives your IP address when showing them.

To know how many people use the guide and from which countries, the site records each page view without cookies:

• It stores the day, the page, the country, the language, whether it's a phone or a computer and where the visit came from (a search engine, a social network or direct).
• Your IP address is only used at that moment to work out the country and an anonymous identifier for that day. The IP is not stored. The key used for the identifier is deleted the next day, so nobody can tell who you are or follow you from one day to the next.
• Figures are shown in aggregate (total visits and countries). Records are deleted after 400 days.
• The country comes from the free database IP Geolocation by DB-IP, licensed CC BY 4.0.

What you send through the suggestion form (type, page, message, link, date and, if you give it, your name) is stored on HeyArenal's server only to review the guide. It is reviewed by the artificial intelligence assistant described below, which looks for sources before changing anything; your text is not published as is. It is deleted 90 days after review. We also store an encrypted fingerprint of the connection, used only to stop abusive submissions.

When a guide or business lists itself, HeyArenal collects its details in a directory database.

• Purpose: to publish the listing in the directory and contact whoever submitted it to verify it or let them know it has been published.
• Who sees the details: fields marked Public on the form (name, description, area, public contacts, credentials) can be seen by anyone on heyarenal.com once published. Fields marked Private (name, email and phone of the contact person) are seen only by the person responsible for HeyArenal and, partly, by the review assistant described below. They are not sold, rented or passed on to third parties.
• Required or optional: required fields are needed to review the listing. If they are not given, the listing cannot be published; that is the only consequence. All other fields are optional.
• Processing: details are stored on HeyArenal's server and published only after being checked. We email you when it is published or, if it is rejected, why. If a listing is rejected, its details are deleted within 90 days. We also store the date of consent and an encrypted fingerprint of the connection, used only to stop abusive submissions.
• Consent: it is given by ticking the boxes on the form and can be withdrawn at any time; withdrawal does not affect what was done before.

HeyArenal is maintained with the help of an artificial intelligence assistant (Claude, by the company Anthropic) working on behalf of the person responsible for the site. Every day it reviews directory listings and suggestions, and checks the details against public sources, such as the ICT's official list of tour guides.

• What data it receives: from the directory, the listing's public details, the contact person's name and the domain of their email (for example, "gmail.com"), never the full email address or the phone number. From suggestions, what you wrote on the form.
• What it decides: it publishes a listing only if it could verify it, and rejects it if it does not qualify, emailing you the reason. When in doubt, it asks the person responsible.
• Your rights stay the same: you can ask for a person to review a decision by writing to the address in the next section.

Anthropic processes that data under its own terms of service.

You can ask to see, correct or delete your details, or withdraw your consent, by writing to hola@heyarenal.com. We answer free of charge within five business days, as required by Costa Rica's Law 8968.