Privacy Policy
Last updated: September 27, 2026.
Vibistic Visa (visa.vibistic.com) is an independent information service. This page explains what data it collects, what it doesn't, and the choices you have.
There's no account, and nothing is sold
You don't sign up or log in to use this site. We don't sell your data or share it with advertisers or data brokers, and there's no advertising tracking of any kind. This site does count visits in two ways: a small, first-party visitor counter shared across Vibistic's own apps, and Cloudflare Web Analytics. See "What the visitor counter does" and "Cloudflare Web Analytics" below for exactly what each is and isn't.
What cookies do
This site uses cookies to remember your passport country and your progress through a checklist, so you don't have to start over on a return visit. Your passport country and checklist progress aren't remembered until you accept: the only thing recorded either way is the choice itself, so we don't ask again. See Cookie settings to change your choice at any time.
| Cookie | Purpose |
|---|---|
cookie_consent | Your accept/decline choice itself. |
consent_mirror | The same accept/decline value, in a second, non-technical copy so the page can read it without an extra round-trip to the server. |
passport_country | The passport country you last searched with, so it's pre-filled next time. |
checklist_progress | Which checklist steps you've checked off. |
document_progress | Which documents you've marked ready. |
travelers | If you're tracking more than one traveler, which ones exist and which is currently selected. |
None of these cookies are used for advertising or cross-site tracking, and none identify you personally: between them they hold your consent choice, your passport country, which checklist steps and documents you've marked done (plus small bookkeeping so progress against outdated content doesn't look done), and a small traveler roster. Declining consent keeps only your choice itself (cookie_consent/consent_mirror, so we remember not to ask again) and immediately deletes the rest: your passport country and any checklist/document/traveler progress. Accepted cookies last up to a year, or until you clear them yourself (your browser, or the cookie settings page above).
Theme preference
Clicking the light/dark/system icon in the header saves your choice in a small cookie namedvibistic-theme. It's separate from the accept/decline choice above and isn't gated by it: it stores only which of those three you picked, nothing else, is set only when you click the icon yourself (or once, automatically, to carry an existing preference forward from an earlier version of this feature), and is shared across every Vibistic subdomain (learn., classroom., circuits., visa., passport., and vibistic.com itself), so your choice looks the same everywhere in the portfolio rather than resetting each time you move between apps. It's never used for tracking or analytics, and never linked to anything else you do here.
What the visitor counter does
The small "visitors / online" badge in the footer is a first-party counter shared across Vibistic's own apps, not a third-party analytics service. Your browser sends a request directly to vibistic.com (a separate app in the same Vibistic family), which computes a one-way cryptographic hash of your IP address and browser type combined with a secret value it holds (never the raw IP address itself) and keeps a running count of distinct hashes it has seen. That hash can't practically be reversed back into your IP address or used to identify you; it isn't linked to any account (there are none), isn't shared with or sold to anyone, and is never read back to show what any individual visitor did. This app's own backend never sees, computes, or stores that hash at all: the counting happens entirely on vibistic.com's side. We're precise here rather than claiming "no data at all" for this one feature: a persisted, salted hash of your IP is a pseudonymous identifier, not a truly anonymous one in the strictest technical sense, even though it can't be tied back to you in practice. This is separate from, and doesn't add to or change, the cookies described above.
Cloudflare Web Analytics
To see how many people visit and which pages they read, we use Cloudflare Web Analytics. Cloudflare already hosts this site, and adds its small analytics script to each page. That script uses no cookies or local storage, doesn't fingerprint your browser, and doesn't follow you across other sites. It sends Cloudflare things like the page you viewed, the site that linked you here, your browser and device type, your country, and how fast the page loaded, and we only ever see those as totals, never as a record of you. It's never used for advertising. Cloudflare describes it here.
What we don't collect
- No name, email address, or account of any kind.
- No IP address is logged or stored by this app's own backend. On rate-limited routes (the public API and a handful of pages with real backend cost) the app reads your IP only to check it against a request limit (so one visitor can't overload the site); it's never written to a log or a database here. (The visitor counter above is the one place an IP-derived value is persisted at all, and that happens on a different app's backend, as a one-way hash: see above.)
- No advertising pixels or ad-tracking scripts of any kind. Every script on this site, including its interactive checklist/comparison/coverage tools and the visitor counter described above, is first-party code we wrote ourselves, with one exception: Cloudflare Web Analytics' cookieless script, described above.
If you use the "Report a problem" or "Request a destination" forms, we never automatically capture your IP address, cookies, or any other identifying metadata alongside what you submit: that's enforced in the database schema itself, not just a policy we're promising to follow. The "Report a problem" form does include an optional free-text note, though: please don't put your name, email, or other personal details in it, since anything you type there is stored as written.
Where data is stored
This site runs on Cloudflare's infrastructure (Workers and a D1 database). The content served (visa criteria, steps, and document requirements) comes from official government sources and is public information, not personal data. See Supported visas for the full list of what's covered and its sourcing.
Changes to this policy
If what this site collects or how it's used ever changes, this page will be updated to reflect it: the "Last updated" date above always reflects the current, real practice, not a static document that drifts out of sync with the code.