Privacy policy for JFK Airport Info

This is jfkairport-info.com, an independent guide to John F. Kennedy International Airport, run separately from the airport and its owners (see the legal notice). For a privacy question, a data request, or anything else covered by this policy, use the channels on the contact page. The site operator is the data controller for the small amount of personal data described below.

Three sources of data, each tied to a specific system the site relies on.

Google Analytics 4. The site uses Google Analytics 4 (GA4) to count visits and see which pages are used, so it knows what to improve. GA4 does not log or store your IP address: it is used briefly to derive a coarse location and then discarded. That is how the product works rather than a setting this site chose, so it is not something the site could switch off. What GA4 records is aggregate measurements: the pages you view, the site or search that referred you, an approximate location no more precise than region, and your device and browser type. It sets two first-party cookies, _ga and _ga_<id>, to tell a returning visit from a new one and to hold session state. It does not learn your name, and the site does not use it to identify you personally. Google's advertising features and cross-site signals are switched off, so this is measurement, not ad targeting. The cookies themselves are listed on the cookies policy.

Cloudflare hosting and security. The site is served through Cloudflare, which runs it on the Cloudflare Workers platform. Every request passes through Cloudflare's edge network, which records standard server-log fields (the requesting IP address, the page requested, the browser's User-Agent string, the status code and response size) and sets one strictly-necessary cookie, __cf_bm, plus a conditional challenge cookie, cf_clearance, for bot protection. Cloudflare acts as the site's processor for security, abuse detection and reliability. These cookies carry no marketing data and are covered in full on the cookies policy.

Messages you send. If you email the contact address, your message, the email address you send it from, and anything you choose to include arrive in the operator's inbox. Nothing more. The site runs no newsletter and no marketing list, and it does not add you to one.

Each source is used only for the purpose beside it. GA4 measurement is used to count visits and judge which pages need work; the region-level and device granularity is what the product reports, not an attempt to identify you. Cloudflare's logs are used for security and reliability, catching abusive traffic and diagnosing errors. A message you send is used only to reply to you and, if it is a correction, to fix the page. The site does not profile readers, does not target advertising, does not sell or share data beyond the two processors named below, and does not combine any of this with outside sources.

The United States has no single federal privacy statute covering a site like this one. What applies instead is a set of state laws, the most developed of which is California's Consumer Privacy Act as amended by the Privacy Rights Act (together, the CCPA). Virginia, Colorado, Connecticut, Utah, Texas, Oregon and a growing list of other states have passed comparable statutes.

Almost all of them apply only above a size threshold, and this site is below it. California's law reaches businesses with more than $25 million in annual revenue, or that buy or sell the personal information of 100,000 or more consumers a year, or that make half their revenue from selling personal information. This site is a small independent guide with no advertising and no data sales, so it meets none of those tests, and the other states' thresholds work much the same way.

That is a statement about which laws compel the site, not a reason to give you less. The rights set out below are granted voluntarily and honored the same way whether or not a statute requires it, and the same narrow data footprint applies to every visitor regardless of where you are.

Data is kept only as long as it is useful. GA4 event data is retained for the period set on the property, up to Google's maximum of 14 months, after which only aggregated reporting remains. Cloudflare's logs follow Cloudflare's own retention for the hosting product. A contact message is kept only as long as needed to deal with the inquiry and any reasonable follow-up, then deleted. The site keeps no long-term archive of analytics or messages of its own beyond what these service providers hold.

The site shares data with two service providers, and no one else. Google processes the GA4 analytics data; Cloudflare processes the hosting and security data. Both act under their own terms as service providers rather than as independent recipients, meaning they are contractually limited to processing the data for the purposes the site asks of them. Google's privacy information is at policies.google.com/privacy and Cloudflare's at cloudflare.com/privacypolicy.

The site shares data with no advertising network, data broker, marketing-list service or social-media tracker. There are no embedded YouTube, Facebook, X or other social plug-ins loading third-party scripts on the page.

Both providers are US companies operating global infrastructure, so data may be processed on servers outside the state or country you are in. That is a property of how any large hosting and analytics platform works, and it does not change what is collected or who may use it.

The site does not sell your personal information, and never has. It also does not "share" it in the specific sense the California statute uses, which covers disclosing personal information for cross-context behavioral advertising. No such disclosure happens here: the site runs no advertising, and Google's advertising features and cross-site signals are switched off on the analytics property.

Because there is no sale and no sharing, the site is not required to carry a "Do Not Sell or Share My Personal Information" link, and you will not find one. If that ever changes, the link will appear in the footer of every page and this section will be rewritten before it does.

Some browsers and extensions send a Global Privacy Control signal, which a site must treat as an opt-out of sale and sharing. There is nothing here for it to opt you out of, but the signal costs you nothing to send and the site will not override it.

You have the following rights over any personal data the site holds about you. These mirror the rights California's law grants, and the site extends them to every reader:

• The right to know what personal information is collected, where it comes from, why, and who it is disclosed to. This page is the standing answer; ask if you want it applied to your own data.
• The right to access a copy of the personal information held about you, in a portable form where that is technically possible.
• The right to delete personal information the site holds about you.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. As set out above, there is none.
• The right to limit the use of sensitive personal information. The site collects none.
• The right to non-discrimination: exercising any of these rights will never mean a worse experience on the site. Every page is free and identical for every reader either way.

To exercise any of these, contact the operator through the contact page. The response window is 45 days from the request, extendable once by a further 45 days for a complex request, with notice given inside the first 45.

An authorized agent may make a request on your behalf. The operator may ask for proof that you gave them permission, and may ask you to verify your own identity, before acting on it.

The site is a travel reference written for adults, and it is not directed at children. It does not knowingly collect personal information from anyone under 13, which is the threshold set by the Children's Online Privacy Protection Act, and it has no account system, no comments, no uploads and no other route by which a child could submit information. If you believe a child has sent a message to the contact address, use the contact page to say so and the message will be deleted.

You can stop Google Analytics counting your visit in a few ways. The Google Analytics Opt-out Browser Add-on blocks GA on every site you visit. Blocking or deleting cookies in your browser settings removes the _ga cookies and stops GA4 recognizing a return visit, and many browsers and privacy extensions block analytics scripts outright. None of these affects the site's own working: the pages load and behave the same either way.

Cloudflare's __cf_bm and cf_clearance cookies are strictly necessary for serving the site safely and cannot be opted out of without affecting delivery, though blocking them may simply mean you see a Cloudflare verification step on some visits. The full detail is on the cookies policy.

Raise it with the operator first, through the contact page. Most things are a misunderstanding or a mistake, and both are quicker to fix directly.

If that does not resolve it, the route depends on where you live. California residents can complain to the California Privacy Protection Agency at cppa.ca.gov or to the California Attorney General at oag.ca.gov. Residents of other states with a privacy statute complain to their own state Attorney General, who enforces it. Anywhere in the United States, the Federal Trade Commission takes complaints about deceptive privacy practices at reportfraud.ftc.gov.

The date at the foot of this page is the effective date of the current version. A material change to what the site collects or shares is made by revising the relevant section and updating that date. This policy sits alongside the cookies policy and the legal notice.