Langsung ke konten

Kategori

Jelajahi Bali per area

Semua 34 area
@namiatik

Privacy

Who is responsible

Nami Shams, hello@smartbali.com. SmartBali is a private, non-commercial website. We collect as little as we can and never sell or share data for advertising.

If you write to us on WhatsApp, WhatsApp (Meta) processes your number and messages under its own privacy policy. We only use them to answer you.

Visiting the site

  • Server logs. Our server (a rented server at Hostinger) records technical data of each request: IP address, time, page, browser. They are kept for at most 14 days to keep the site running and secure.
  • Analytics, only with your consent. If you press Accept in the banner, Google Analytics 4 (Google Ireland Limited, Dublin, and Google LLC, USA) counts visits: the pages you open, the type of device and browser, an approximate location and how you came to the site. It sets cookies starting with _ga for up to two years and does not store your full IP address. We use the numbers only to see which pages help people. Without your consent Google Analytics is never loaded. You can change your choice at any time under Cookie settings at the bottom of every page.
  • Nothing else. No advertising tools, no social media plug-ins. Fonts are served from our own server. Without signing in or accepting analytics, the site sets no cookies (your consent choice itself is remembered in your browser's local storage).
  • View counter. When you open a place or guide, the page tells our server once. To count each visitor only once every six hours, we keep a keyed hash of your IP address for six hours. The address itself is not stored.
  • Map. Maps load tiles from OpenStreetMap (OpenStreetMap Foundation, UK), which receives your IP address.
  • Instagram content. Posts of @namiatik are fetched through Behold (behold.so) and copied to our server; stories are uploaded by us. Viewing them on SmartBali sends nothing to Instagram. Stories are deleted after 24 hours.
  • Radio. The SmartBali Radio plays music from SoundCloud (SoundCloud Global Limited & Co. KG, Berlin). Nothing is loaded from SoundCloud until you press play; then SoundCloud receives your IP address and may set cookies under its own privacy policy.
  • External links. Links to Google Maps, Apple Maps, Waze, WhatsApp, Instagram or places' websites lead to those services. Their privacy policies apply once you open them.

Member accounts

  • What we store. Username, e-mail address, password (only as a scrypt hash, never readable), optionally your full name and Instagram handle. Your username, comments and recommendations are public; your e-mail address and full name are never shown to others.
  • Why. To run your account, let you recommend places and comment, and send the mails the account needs: e-mail confirmation, password links and security notices.
  • Sign-in cookie. Signing in sets one strictly necessary cookie that keeps you signed in for up to 30 days. We store only a hash of it, and you can end every session in your account.
  • "Not for me". If you press it, only the SmartBali team sees it. It is never shown or counted publicly.
  • Security log. Sign-ins, failed attempts and account changes are logged with a keyed hash of the IP address, to stop break-in attempts. Entries are deleted after 12 months.
  • Breach check. When you choose a password, the first five characters of its SHA-1 hash are compared with the Have I Been Pwned database. Your password and e-mail address never leave our server.
  • Mail. Account mails are sent through our mailbox at Titan (titan.email), the mail service of our domain provider Hostinger.
  • Age. Accounts are for people aged 16 and over.
  • Comments. Before an editor reads a comment, its text is checked automatically against a word list and by OpenAI's moderation service. Only the comment text is sent, without your name or e-mail address.
  • Deleting. You can delete your account in your account settings at any time. Your recommendations and comments are deleted with it.

Authors and writing tools

People who write for SmartBali have an author account. Their notes and photos are turned into drafts with the help of AI writing tools (Anthropic, OpenAI), and Telegram can be used to send notes. Visitor and member data is not sent to these services.

Suggestions

If you suggest a place on the suggestion page, we store your name, the place and the link you send, and, only if you choose to be contacted, your e-mail address or WhatsApp number. We use them to check the suggestion and, if you asked for it, to answer you. We delete the contact details once the suggestion is handled. A keyed hash of your IP address is kept for a short time to stop mass submissions.

Events, guestlists and table requests

If you tap "I'm going", we store that your account goes to that night, and show your name among the members going. Guestlist, table and contact requests to a venue or a business are written on your device and sent from your own WhatsApp, Instagram or e-mail: SmartBali does not receive or store them.

Rentals and jobs you post

When you post a rental or a job, we store what you write, your photos (with location data removed) and the contact details you give. The post is public once an editor approves it; your WhatsApp number and e-mail are shown only to signed-in members. Posts expire after 60 days (rentals) or 45 days (jobs), and you can delete them at any time in your account; they are deleted with your account.

Claims and corrections from businesses

If you claim an entry or send a correction, we store your name, role, contact details, the changes and any proof you send, to check that you belong to the business and to answer you. We keep them while the entry exists and delete them on request.

How long we keep data

Server logs 14 days, view hashes 6 hours, security log 12 months, accounts until you delete them, sign-in sessions at most 180 days.

Your rights

You can ask what we store about you, have it corrected or deleted, restrict or object to its use, and receive a copy. Write to hello@smartbali.com. These rights apply under the EU General Data Protection Regulation and Indonesia's Personal Data Protection Law (Law No. 27 of 2022). You can also complain to a data protection authority.

Changes

If this page changes, the new version applies from the day it is published here.