Effective 19 October 2026 · Applies to the website thetenlist.com and The Ten List app for iPhone and Android · Change your privacy choice

In one paragraph

The site sets no cookies and loads nothing from advertising or social networks. Pages, fonts and scripts are delivered by Vercel from the data centre nearest to you; the visit counter, the question form and sign-in run on our own server in the European Union. The only thing that runs before you decide is what the page needs to work. Our visit counter starts only after you tap "Allow" in the bar at the bottom of the page, and you can change that at any time. The app has no accounts, no analytics and no tracking.

Who we are

The Ten List is published by PT Gravity Stretching Canggu (Bali, Indonesia), the data controller for this site and app. Contact for privacy requests: thetenlist.com/support. Static pages are hosted by Vercel Inc. (USA) on its global edge network (since 23 October 2026); the API, accounts and the visit counter run on our own server operated by Contabo GmbH in France (European Union).

The website

• No cookies unless you sign in. We set no tracking or advertising cookies of any kind, first-party or third-party. The only cookies on this site belong to the optional sign-in described under "Accounts and sign-in" below.
• Visit counter, only with your consent. We use umami, an open-source counter installed on our own server. It records the page viewed, the referrer, the country (from the IP address, which umami does not store), browser type and screen size, and turns them into daily aggregate counts. It sets no cookies and stores nothing in your browser. It loads only after you tap "Allow" in the bar at the bottom of the page. "Decline" is one tap and leaves the site fully usable. If your browser sends Global Privacy Control or Do Not Track, we treat it as "Decline" and do not ask. Your answer is kept in your browser's local storage under the key ttl_consent for up to 12 months; after that we ask again. You can change it at any time via "Privacy choices" in the footer of every page or the button below.
• Your city. When you choose a city from the city pill, open a city's pages or tap "Use my location", the city's name is kept in your browser's local storage under the key ttl_city so the site opens on your city next time. This is a preference you set; it is not sent to us and you can change it from the city pill. If you do not choose, the site suggests a city from your device's time zone, read in your browser and sent nowhere.
• "Use my location". This button in the city list asks your browser for coordinates only when you tap it. Your browser shows its own permission prompt. The nearest city is computed in your browser; the coordinates are not sent to us or to anyone.
• Fonts and scripts are served from thetenlist.com. No request goes to Google Fonts or any content delivery network.
• Forms. If you send a question through the form, we store the text and, if you give it, your email, only to answer you. If you request a booking with a partner venue, we store the details you enter (name, contact, date, venue) and pass them to that venue so it can reply; the venue's own privacy policy applies to what it does next. Business owners who accept our partner offer: we store the time, IP address, browser string and offer version as the record of the agreement. Legal basis: taking the steps you asked for (contract) and our legitimate interest in keeping a record of agreements. Retention: questions and booking requests up to 12 months after the last message, agreement records for the life of the partnership plus 5 years.
• Server logs. Our servers (Vercel for pages, our own server for the API) keep standard access logs (IP address, time, page requested, browser string) for security and troubleshooting. Legal basis: legitimate interest in keeping the site running and secure. Logs rotate automatically and are kept for a limited time only, never used for profiling or advertising.

Accounts and sign-in

Signing in is optional: without it the site works exactly the same. You sign in only to keep your saved places on every device and to book with a confirmed contact.

• Three ways in, one account. Apple, Google, or a code sent to your WhatsApp number. From Apple or Google we receive only what their sign-in screen shows you: a technical user id, your email (Apple may give you a private relay address, which works the same) and, if you allow it, your name. From the WhatsApp sign-in we keep the number you confirmed. We never see your Apple, Google or WhatsApp password, and we never post or message anyone on your behalf. Two sign-ins with the same email or number lead to the same account.
• The WhatsApp code. A two-digit code goes to your number through the WhatsApp Business Platform (Meta) from The Ten List's own number; Meta handles the delivery under its own terms. The code lives ten minutes. We keep a log of codes sent and confirmed (number, time, outcome) for a limited time to stop abuse.
• What we store. Your account record: an id, email and/or phone number, your name if given, the sign-in method, creation and last sign-in dates, and the list of places you saved. It lives on our own server, is shared with nobody and is never used for advertising. A partner venue sees your name and contact only when you send it a booking request.
• Sign-in cookies. ttl_session keeps you signed in on this browser for up to 400 days (renewed while you use the site); ttl_oauth lives ten minutes during an Apple or Google sign-in to protect it from forgery. Both are essential to what you asked for, so they need no consent bar. "Sign out" removes the session cookie.
• Delete your account. Email info@thetenlist.com from the address on the account, or from the WhatsApp number you confirmed, and we delete the record and the saved list within 30 days. Legal basis: performance of the service you asked for (sign-in, saved places, bookings) and legitimate interest in preventing abuse (rate limits, the code log).

The app: accounts are optional

The Ten List app (version 1.2.0 and later) has the same optional sign-in as the site: Apple, Google, or a code sent to your WhatsApp number. Without an account the app works exactly the same and the places you save stay on your phone only. When you sign in, your saved list is kept on our own server under the account described above, so it follows you across devices and to the site; what we receive and store, the sign-in cookies, the WhatsApp code and account deletion are exactly as in "Accounts and sign-in". The app has no analytics and no tracking SDKs, and it does not ask for your location, contacts, camera or photos. On launch the app checks our update channel (Expo EAS Update) for new content; that request carries the app version and platform, no identifier that we keep. When you open a place's website, a booking platform, Google Maps or thetenlist.com from the app, you leave the app and that site's privacy policy applies. In app-store terms the app collects, only if you sign in, a user id, email address, phone number and name, all linked to your account and used for app functionality alone; nothing is sold, shared or used for advertising. Versions before 1.2.0 had no accounts and collected no data at all.

Third parties

Links to venues, Google Maps, Klook and GetYourGuide open their own sites. We do not control them and receive no personal data from them. We use no advertising networks, no social plugins, no embedded maps and no third-party analytics.

Your rights

Wherever you are, you can ask what we hold about you, have it corrected or deleted, object to processing based on legitimate interest, or withdraw a consent. Write to thetenlist.com/support; we answer within 30 days. Residents of the European Economic Area, the United Kingdom and Switzerland may also complain to their data protection authority. Residents of US states with privacy laws (including California and Texas): we do not sell or share personal data and do not use it for targeted advertising; we honor Global Privacy Control. Residents of Thailand, Vietnam, Indonesia, Turkey, Brazil, Mexico, South Africa, the United Arab Emirates and Australia have the same rights listed above under their local laws.

Children

The app and the site are general travel content and are not directed at children under 16. We knowingly collect no data from children.

Your privacy choice

Visit counter: Change my choice. You can also clear the keys ttl_consent and ttl_city in your browser's site data at any time.

Changes

If this policy changes, the new date appears at the top of this page. Previous version: 15 October 2026.