Privacy Policy

What this policy covers

SanCrisGo is a local information and discovery service for San Cristóbal de las Casas. It provides Events, Places, Guides, practical information, and private account features such as Saved items.

This policy applies to information processed through sancrisgo.com and its public read-only MCP endpoint. It does not replace the privacy policies of independent websites, services, or platforms that you may visit through a link from SanCrisGo.

Public MCP access

The public MCP endpoint is anonymous and read-only. No SanCrisGo account is required. It can search or return only published public Events, Places, and Guides for San Cristóbal de las Casas; it cannot change content or access private Saved items, accounts, or staff data.

The endpoint temporarily processes the structured arguments needed for a requested search or detail lookup, such as a query, date intent, locale, topic, or public content slug. SanCrisGo does not store raw ChatGPT conversations, raw prompts, MCP tool arguments, or returned tool results in its database or in a dedicated analytics table. ChatGPT and its provider process the conversation and tool results under their own terms and privacy policy.

Google sign-in and Google user data

SanCrisGo uses Google OAuth only to authenticate an account. The requested Google scopes are openid, userinfo.email, and userinfo.profile. These scopes provide the basic identity information needed to sign in, such as an account identifier, email address, and basic profile information.

SanCrisGo does not request or access Gmail, Google Drive, Google Calendar, Google Contacts, or other Google products. Google account data is used only to provide authentication and private account functionality, including associating Saved Events, Places, and Guides with your account.

SanCrisGo does not sell Google user data, use it for advertising, or use Google data for purposes unrelated to authentication and account functionality.

Information SanCrisGo may process

Depending on how you use the site, this can include a Supabase authentication user identifier; email address; display name or other basic profile information; preferred language; account status and role used internally for authorization; the Events, Places, and Guides you save privately; analytics choices; and technical information processed by hosting and performance services.

If you voluntarily contact SanCrisGo through a contribution or correction WhatsApp link, your message and any information you choose to send may be reviewed by staff to consider an update or contribution. Please do not send information that is unnecessary for that purpose.

How information is accessed, used, stored, and shared

Google identity information is received through the sign-in flow after you choose to authenticate with Google. SanCrisGo uses it to create or recognize your private account, maintain the session, protect account features, and associate your Saved items with the correct account.

SanCrisGo uses Supabase for authentication and database infrastructure, where account and Saved-item data are stored. Vercel hosts the website and application and provides analytics, performance measurement, and operational runtime logs. Google provides sign-in and, only after consent, Google Analytics. If you choose to contact SanCrisGo through WhatsApp, Meta processes that message under its own terms. These providers receive information needed for their respective services.

Authentication relies on necessary session cookies or equivalent browser session mechanisms. The site also uses a first-party sancrisgo_locale cookie only when you explicitly choose English or Spanish; it stores that language preference for approximately one year and is not used for advertising or analytics consent. SanCrisGo does not share Google user data with advertisers, does not use it for advertising, and does not sell Google user data.

Optional analytics

Google Analytics is optional and loads only after you choose Allow analytics. The site sends page paths and titles, a sanitized referrer, locale, search result counts, and public content type and slug for selected Maps, WhatsApp, and source-link clicks. It does not send the text of a site search query. Your accept or decline choice is stored in browser local storage. If you decline, Google Analytics is not initialized; you can change your choice through Analytics settings in the footer. Google Analytics event-data retention follows the retention setting configured for SanCrisGo's Google Analytics property.

Vercel Web Analytics and Vercel Speed Insights are loaded by the site independently of the Google Analytics choice. Vercel Web Analytics records aggregate page-view information such as URL and filtered query parameters, dynamic route, referrer, timestamp, country, and browser or device characteristics. Speed Insights records page-performance and Web Vitals measurements with technical visit context. The information processed and its retention or reporting periods depend on the applicable Vercel services, project settings, and plan.

Vercel also processes hosting and function request logs for operations. The application no longer writes temporary MCP protocol diagnostics and does not deliberately log MCP prompts, tool arguments, or returned content. Runtime-log availability and retention follow the applicable Vercel service and project settings.

Vercel Analytics privacy information

Your choices and requests

You can choose not to sign in with Google; the public Events, Places, Guides, Taxi, and contribution pages remain available without a public account. Saved items require an authenticated account.

For a privacy or account-data request, including a deletion request, contact SanCrisGo through the public WhatsApp support channel at the number below and clearly identify the request. SanCrisGo does not currently provide a self-service account-deletion button.

WhatsApp: 967 192 2636. Contact SanCrisGo support

Security, retention, and changes

SanCrisGo uses access controls and hosted infrastructure intended to protect private account information. No online service can guarantee absolute security. SanCrisGo does not currently publish a fixed account-data retention period; privacy and deletion requests can be sent through the support channel described above. Google Analytics retention is controlled by the current property setting, and Vercel runtime-log availability follows the project's plan.

SanCrisGo may update this policy as the service changes. The date at the top of this page shows when it was last updated.