Privacy Policy

What this policy covers

SanCrisGo is a local information and discovery service for San Cristóbal de las Casas. It provides Events, Places, Guides, practical information, and private account features such as Saved items.

This policy applies to information processed through sancrisgo.com. It does not replace the privacy policies of independent websites, services, or platforms that you may visit through a link from SanCrisGo.

Google sign-in and Google user data

SanCrisGo uses Google OAuth only to authenticate an account. The requested Google scopes are openid, userinfo.email, and userinfo.profile. These scopes provide the basic identity information needed to sign in, such as an account identifier, email address, and basic profile information.

SanCrisGo does not request or access Gmail, Google Drive, Google Calendar, Google Contacts, or other Google products. Google account data is used only to provide authentication and private account functionality, including associating Saved Events, Places, and Guides with your account.

SanCrisGo does not sell Google user data, use it for advertising, or use Google data for purposes unrelated to authentication and account functionality.

Information SanCrisGo may process

Depending on how you use the site, this can include a Supabase authentication user identifier; email address; display name or other basic profile information; preferred language; account status and role used internally for authorization; and the Events, Places, and Guides you save privately.

If you voluntarily contact SanCrisGo through a contribution or correction WhatsApp link, your message and any information you choose to send may be reviewed by staff to consider an update or contribution. Please do not send information that is unnecessary for that purpose.

How information is accessed, used, stored, and shared

Google identity information is received through the sign-in flow after you choose to authenticate with Google. SanCrisGo uses it to create or recognize your private account, maintain the session, protect account features, and associate your Saved items with the correct account.

SanCrisGo uses Supabase for authentication and database infrastructure, where account and Saved-item data are stored. Vercel hosts the website and application. These providers process information as infrastructure providers so the service can operate.

Authentication relies on necessary session cookies or equivalent browser session mechanisms. SanCrisGo does not share Google user data with advertisers, does not use it for advertising, and does not sell Google user data.

Your choices and requests

You can choose not to sign in with Google; the public Events, Places, Guides, Taxi, and contribution pages remain available without a public account. Saved items require an authenticated account.

For a privacy or account-data request, including a deletion request, contact SanCrisGo through the public WhatsApp channel at the number below and clearly identify the request. SanCrisGo does not currently provide a self-service account-deletion button.

WhatsApp: 967 192 2636. See the SanCrisGo public contact channel

Security, retention, and changes

SanCrisGo uses access controls and hosted infrastructure intended to protect private account information. No online service can guarantee absolute security. SanCrisGo does not currently publish a fixed account-data retention period; privacy and deletion requests can be sent through the contact channel described above.

SanCrisGo may update this policy as the service changes. The date at the top of this page shows when it was last updated.