🔒 Privacy Policy

Last updated: 23 August 2026

Longweekend.my is a small, no-login tool. We collect the minimum data needed to operate and improve it. Holiday data is sourced from the Government of Malaysia's official gazette and verified annually.

What we collect

• Email address — only if you submit the form on the main page. Used to send you long-weekend reminders (when the feature ships) and the occasional product update.
• Anonymous usage data — page views, filter selections, and outbound link clicks. We use this to understand which features are used and which long weekends are popular.
• Cookies set by us — a single first-party session cookie for basic load-balancing and rate-limiting. We do not run fingerprinting, cross-site tracking, or "third-party analytics" on you.
• Cookies set by advertising partners — see the advertising section below.

What we don't collect

• Your name, phone number, address, employer, or any other personal information.
• Your IP address is processed by our hosting provider for routing and rate-limiting only and is not stored against your submission.
• Your browsing history before or after leaving this site.

How email addresses are stored and sent

Advertising

To keep this site free, we may display ads supplied by third-party advertising partners. These partners may set or read cookies, web storage, or similar identifiers on your browser to deliver ads, measure their performance, and (in some cases) personalise what you see on other sites you visit.

Specifically for Google AdSense: Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site or other sites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet. You can opt out of personalised advertising by visiting Google Ads Settings (adssettings.google.com) or aboutads.info/choices.

What this means in practice:

• Ads are non-personalised by default where our partners support it. We do not share any data we hold about you (e.g. your waitlist email) with our advertising partners.
• Our advertising partners handle ad measurement and targeting themselves. Their use of cookies is governed by their own privacy policies, not this one.
• You can opt out of personalised advertising at any time — see the choices section below.

We will never sell, rent, or trade any personal information you have provided to us. The waitlist email list is yours to leave at any time and is never shared with any third party, advertising or otherwise.

Your choices: opting out

• Block advertising cookies at the browser level — Chrome, Firefox, Safari, and Edge all let you block third-party cookies in their settings.
• Use a "do not track" or global privacy control signal — we honour these as a request to disable non-essential advertising cookies where our partners support it.
• Email us via the main page if you want a hard-out from any future advertising-related storage on this site. We will add your browser to a local opt-out list.

Affiliate links

Some outbound links (e.g. hotel and flight searches) are affiliate links. When you click one, the affiliate partner may set a cookie in your browser to attribute any booking to us. We have no access to what you do on those sites after clicking — only that a click occurred.

Affiliate cookies typically expire within 30 days. You can clear them at any time via your browser settings.

Your rights

You can request to view, correct, or delete any data we hold on you at any time via the form on the main page. We will action all such requests promptly.

Changes to this policy

If we make material changes (e.g. adding a new analytics provider or email service), we will update this page and, for significant changes, show a notice on the homepage for at least 30 days.

Google API access (gog CLI)

To operate the waitlist, send reminder emails, and manage affiliate tracking spreadsheets, the site operator uses the gog command-line tool with a personal Google account. This tool accesses the following Google APIs on the operator's own account only — not on any visitor's account:

• Gmail — to send transactional waitlist confirmation emails and (in future) long-weekend reminder emails.
• Google Calendar — to create calendar events for major Malaysian public holidays so they can be linked from the year pages.
• Google Drive + Sheets — to read and write the affiliate-click tracking spreadsheet, the holiday gazette data, and the waitlist subscriber list. No visitor data is stored in these sheets beyond what is submitted through the main page form.

Data accessed through the gog CLI is stored on the operator's local machine and in the same database / spreadsheets that power this site. It is never shared with any third party. The OAuth credentials used by gog are stored in the macOS Keychain and never leave the operator's machine.

The gog CLI does not access any visitor's Google account — it is used only to automate the operator's own workflow. Visitors are never asked to sign in with Google, and the site does not request Google account permissions from any visitor.

Contact

For privacy questions, data access requests, or to report a concern, use the contact method on the main page. We respond to all privacy enquiries within 7 days.