Last updated: 20/09/2026
Mediterranean Match (mediterraneanmatch.com) is run by Gustav Nilsson as a private individual — there is currently no registered company behind this site. "We"/"us" below refers to that individual as the data controller for personal data processed through this website. This policy explains what we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).
Contact for privacy questions: [email protected]
If you use "Send Itinerary" to email yourself your quiz results, we collect the email address you enter. It is used only to send that single message through our email delivery provider, Resend. We do not store this email address for the itinerary email itself — it exists only for the moment it takes to send the message, and it is not added to any mailing list, newsletter, or sold or shared with anyone else.
Legal basis: your consent (you actively check the consent box before we send anything).
Next to the itinerary consent box is a separate, unticked checkbox: "Yes, I'd also like occasional travel inspiration and partner offers by email." If — and only if — you actively tick that box, we store your email address so we can send you occasional marketing emails later.
What we store: your email address, the exact date and time you consented, the exact wording of the consent text you saw, and where you signed up (the itinerary form). We keep nothing else about you in this list — no quiz answers, no browsing behavior.
You can withdraw this consent at any time, free of charge, in two ways: (1) the "unsubscribe" link included in every marketing email we send, or (2) the "Manage my marketing data" section below, without needing to give a reason. Withdrawing consent is as easy as giving it.
Legal basis: your explicit, freely given consent (GDPR Art. 6(1)(a)), separate from and not a condition of receiving your itinerary. Sending marketing emails is also subject to Swedish marketing law (marknadsföringslagen), which requires prior consent for electronic direct marketing and a working unsubscribe option in every message.
Retention: until you unsubscribe or request deletion, or until 36 months have passed since you gave consent, unless you've re-confirmed your interest in the meantime (for example by retaking the quiz and opting in again), whichever comes first.
Your answers to the quiz (vibe, activity level, food preferences, budget, and any free text you write) are processed to calculate your destination matches. Free text is sent to Anthropic's Claude API for automated analysis (to detect preferences such as "I like nightlife" or "not Ibiza"). This text is sent for one-off processing and is not stored by us afterward. Anthropic processes it under their own API terms; we do not control how briefly or long Anthropic itself retains it for abuse-monitoring purposes — see Anthropic's privacy policy for details.
Legal basis: legitimate interest (providing the core matching feature you asked for) / consent for the free text field specifically.
Like most websites, our server may log basic technical information (IP address, browser type, request timestamps) for security and debugging purposes. These logs are not cross-referenced with your quiz answers or email address.
We do not use tracking, advertising, or analytics cookies. Your browser's local storage is used only to remember that you've dismissed the cookie notice, and (transiently, in memory) to run the quiz itself. See our Cookie Policy for details.
We do not currently use any analytics or advertising services. If that changes, this policy and our cookie consent banner will be updated first.
Under GDPR, you have the right to:
To exercise any of these rights, contact us at [email protected], or use the self-service tool below for the marketing list specifically.
If you've opted into marketing emails, enter your address below. We'll email you a secure, one-time link (valid 30 minutes) to download a copy of the data we hold, or to permanently delete it. We reply the same way whether or not your address is on the list, so this tool can't be used to check if someone else signed up.
Email addresses and quiz text submitted for the itinerary feature are processed transiently and are not retained afterward. Server access logs are kept for up to 7 days (the default retention period on our hosting provider Railway's Hobby plan) for security purposes.
If you opted into marketing emails, your email address is stored until you unsubscribe, use the self-service deletion tool above, or contact us — see the marketing section above for details.
The marketing list is the only personal data we store between visits, and we keep it deliberately minimal: just the email address, consent record, and nothing else. Technical and organizational measures include:
If you later move to a larger marketing list, consider a dedicated database with encryption at rest and a proper backup/retention policy instead of the current file-based storage.
We may update this policy as the site evolves (for example, if we add analytics or new features). Material changes will be reflected in the "Last updated" date above.